$ rpki-client -vvf rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/KsCrS187tbDveb0hpknK_-f5wgo.mft File: KsCrS187tbDveb0hpknK_-f5wgo.mft (raw, json) Hash identifier: +f6KZTULO+PLki5byQHf5+LDzK7qhe8VoNJRwqlccUw= Subject key identifier: 88:4F:3A:E1:31:12:4E:AF:62:81:0E:FD:A8:03:57:73:D0:56:78:BE Authority key identifier: 2A:C0:AB:4B:5F:3B:B5:B0:EF:79:BD:21:A6:49:CA:FF:E7:F9:C2:0A Certificate issuer: /CN=A91B927E/serialNumber=2AC0AB4B5F3BB5B0EF79BD21A649CAFFE7F9C20A Certificate serial: 0712 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsCrS187tbDveb0hpknK_-f5wgo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/KsCrS187tbDveb0hpknK_-f5wgo.mft Manifest number: 1150 Signing time: Sun 06 Jul 2025 19:45:14 +0000 Manifest this update: Sun 06 Jul 2025 19:45:14 +0000 Manifest next update: Sun 13 Jul 2025 19:45:14 +0000 Files and hashes: 1: KsCrS187tbDveb0hpknK_-f5wgo.crl (hash: /HNmxSXFkM0a1AQhmtST0QCTz2ecdmqguK6QNjN+INA=) 2: 6243075E653411EB98060C17C4F9AE02.roa (hash: NDLfyb46b0G5U2WbOhSmMW5qTZe1rxLw2rEopJT9V6w=) 3: 37868F90574711EBB6BA4183C4F9AE02.roa (hash: lo283iVsMsLHbJbz5lAswnspLjcjQrX9MFqmCe7E2UU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/KsCrS187tbDveb0hpknK_-f5wgo.crl rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/KsCrS187tbDveb0hpknK_-f5wgo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsCrS187tbDveb0hpknK_-f5wgo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1810 (0x712) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B927E, serialNumber=2AC0AB4B5F3BB5B0EF79BD21A649CAFFE7F9C20A Validity Not Before: Jul 6 19:45:14 2025 GMT Not After : Jul 13 19:45:14 2025 GMT Subject: CN=686ad24a-61af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:bc:b4:35:3d:5d:5e:d6:f2:e0:29:82:d8:a7: 7e:eb:49:ed:38:8c:42:5b:7e:63:68:83:6b:07:62: df:ba:58:98:fb:d3:4e:2d:26:84:53:47:d9:07:ec: 3e:11:7a:56:bf:2b:36:f4:c4:a2:aa:34:86:ad:25: 06:75:f2:61:b6:53:f0:ba:94:1c:12:03:a7:1f:74: 9a:5b:17:8e:80:89:80:b6:9f:02:8a:0b:6c:e8:0a: b4:7c:d1:67:e6:f2:a4:0c:7f:16:73:15:8c:d5:d6: cc:87:fb:62:9c:70:04:29:7c:ff:79:3f:9b:73:38: 4a:c2:62:98:e0:34:cf:ab:38:fa:69:e9:83:7d:98: dd:1c:07:31:da:35:48:0d:07:04:0c:e4:e2:46:f8: c8:30:5c:00:9c:44:08:f6:bd:e9:4f:26:22:8b:cb: 6d:2e:3f:84:e5:88:98:d6:a8:f5:94:b5:f1:4b:eb: a4:d6:9f:5f:b1:64:f9:d7:f4:61:ba:54:fe:02:16: 5c:99:96:25:0e:0a:b4:b8:a1:12:d1:a4:27:35:e8: 3b:86:65:52:8b:e4:b7:29:5c:d7:a9:ed:57:82:2b: ee:a1:fe:96:b3:5e:ba:a2:01:18:41:c0:78:83:a3: 41:60:b5:23:79:87:82:46:5a:35:ef:b3:ae:cd:a4: 00:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:4F:3A:E1:31:12:4E:AF:62:81:0E:FD:A8:03:57:73:D0:56:78:BE X509v3 Authority Key Identifier: keyid:2A:C0:AB:4B:5F:3B:B5:B0:EF:79:BD:21:A6:49:CA:FF:E7:F9:C2:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/KsCrS187tbDveb0hpknK_-f5wgo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsCrS187tbDveb0hpknK_-f5wgo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/KsCrS187tbDveb0hpknK_-f5wgo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:30:e3:ca:08:a7:cf:eb:73:4e:3e:5c:91:d8:b1:32:8a:b7: ab:8f:6d:04:e0:4b:52:6d:84:1b:ba:92:3f:6e:8c:55:12:06: c3:09:f7:2f:05:73:c8:ea:0c:9c:da:13:3e:d4:ab:f2:4e:ac: d5:bb:90:c2:ec:e3:c1:23:ca:55:b5:50:2e:6b:b4:55:ef:5c: 65:97:2b:f8:8a:4e:e5:01:e1:06:f4:0a:c4:2f:43:51:59:09: 3e:a0:36:ea:2d:56:f3:bb:44:ea:83:4c:f2:ad:b2:ff:7c:fa: 79:34:a6:33:ea:35:44:16:fc:24:52:b7:06:77:7f:82:52:be: 48:49:e6:64:a8:0f:d3:bb:59:57:b5:9b:ed:e9:50:8e:7c:d4: 38:4e:51:fc:e9:8f:aa:b1:aa:bb:ce:7b:a4:df:04:e3:b8:d6: f2:27:19:5c:41:59:73:a2:47:d8:e5:cb:d3:b6:05:92:d9:33: 37:01:f6:b5:ca:3e:0d:15:92:7f:28:c4:ef:00:e1:0d:7b:cd: 43:d1:5d:74:6a:8c:93:24:d1:58:52:ad:f3:d4:e0:2c:51:0e: 12:eb:2d:e2:cc:9a:f5:73:52:d7:38:cf:4c:66:fe:2a:d6:66: dd:f8:16:3e:ea:1f:f3:ac:b1:56:6e:c8:84:aa:03:d8:f3:9b: 73:6d:d2:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkyN0UxMTAvBgNVBAUTKDJBQzBBQjRCNUYzQkI1QjBFRjc5QkQyMUE2NDlDQUZG RTdGOUMyMEEwHhcNMjUwNzA2MTk0NTE0WhcNMjUwNzEzMTk0NTE0WjAYMRYwFAYD VQQDEw02ODZhZDI0YS02MWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ry0NT1dXtby4CmC2Kd+60ntOIxCW35jaINrB2LfuliY+9NOLSaEU0fZB+w+ EXpWvys29MSiqjSGrSUGdfJhtlPwupQcEgOnH3SaWxeOgImAtp8Cigts6Aq0fNFn 5vKkDH8WcxWM1dbMh/tinHAEKXz/eT+bczhKwmKY4DTPqzj6aemDfZjdHAcx2jVI DQcEDOTiRvjIMFwAnEQI9r3pTyYii8ttLj+E5YiY1qj1lLXxS+uk1p9fsWT51/Rh ulT+AhZcmZYlDgq0uKES0aQnNeg7hmVSi+S3KVzXqe1Xgivuof6Ws166ogEYQcB4 g6NBYLUjeYeCRlo177OuzaQAUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIhPOuEx Ek6vYoEO/agDV3PQVni+MB8GA1UdIwQYMBaAFCrAq0tfO7Ww73m9IaZJyv/n+cIK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTI3RS9DQ0Q2RUQxQzY4 REYxMUVBOTdCMTU1MjRDNEY5QUUwMi9Lc0NyUzE4N3RiRHZlYjBocGtuS18tZjV3 Z28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tzQ3JTMTg3dGJEdmViMGhwa25LXy1mNXdnby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTI3RS9DQ0Q2RUQxQzY4REYxMUVBOTdCMTU1MjRDNEY5QUUwMi9Lc0NyUzE4N3Ri RHZlYjBocGtuS18tZjV3Z28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApMOPKCKfP63NOPlyR2LEyirerj20E4EtSbYQbupI/boxVEgbDCfcv BXPI6gyc2hM+1KvyTqzVu5DC7OPBI8pVtVAua7RV71xllyv4ik7lAeEG9ArEL0NR WQk+oDbqLVbzu0Tqg0zyrbL/fPp5NKYz6jVEFvwkUrcGd3+CUr5ISeZkqA/Tu1lX tZvt6VCOfNQ4TlH86Y+qsaq7znuk3wTjuNbyJxlcQVlzokfY5cvTtgWS2TM3Afa1 yj4NFZJ/KMTvAOENe81D0V10aoyTJNFYUq3z1OAsUQ4S6y3izJr1c1LXOM9MZv4q 1mbd+BY+6h/zrLFWbsiEqgPY85tzbdLm -----END CERTIFICATE-----Generated at Mon Jul 7 03:34:49 2025 by rpki-client