$ rpki-client -vvf rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft File: kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft (raw, json) Hash identifier: vV9cVYng4F83GKtRVzcGFpF+68xZ88jb7ESiElmBGBw= Subject key identifier: 66:F7:B1:85:4A:DC:39:2E:BF:D9:B0:B8:2B:76:89:FC:E3:82:4F:0F Authority key identifier: 92:29:19:95:35:EB:EE:44:72:A2:2F:C5:19:5B:0A:7E:FF:CB:66:84 Certificate issuer: /CN=A91B952E/serialNumber=9229199535EBEE4472A22FC5195B0A7EFFCB6684 Certificate serial: 044A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kikZlTXr7kRyoi_FGVsKfv_LZoQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft Manifest number: 0445 Signing time: Thu 03 Jul 2025 00:37:38 +0000 Manifest this update: Thu 03 Jul 2025 00:37:38 +0000 Manifest next update: Thu 10 Jul 2025 00:37:38 +0000 Files and hashes: 1: kikZlTXr7kRyoi_FGVsKfv_LZoQ.crl (hash: /z/Qf5Q7y69bXLmjf2fK+OhVYOxUpHIX7LIsYLq4k8M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.crl rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kikZlTXr7kRyoi_FGVsKfv_LZoQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:37:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1098 (0x44a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B952E, serialNumber=9229199535EBEE4472A22FC5195B0A7EFFCB6684 Validity Not Before: Jul 3 00:37:38 2025 GMT Not After : Jul 10 00:37:38 2025 GMT Subject: CN=6865d0d2-8361 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3d:ec:4f:87:53:b8:5e:80:5f:79:0a:e9:42: d4:91:2e:03:44:9d:05:3e:fe:c2:d3:2f:97:e1:ca: 4d:0b:3d:44:55:99:97:34:d2:6c:b6:1c:1d:4e:02: 74:f7:56:7b:d0:7f:53:5e:91:81:d8:cf:27:95:c3: 63:cb:cb:93:b3:29:00:70:8c:3f:86:30:7a:24:11: 06:e4:a9:a4:61:07:e7:00:46:0c:e5:fe:bd:d1:8e: 0e:58:5a:c9:af:ee:c3:ea:58:57:d2:d7:6a:58:67: 89:ce:9b:89:0e:d5:9c:74:01:3c:6d:18:d7:59:0e: 2a:80:aa:99:8a:1e:c1:eb:8c:0a:33:5e:72:14:c2: 0e:46:69:3b:d3:49:a6:c1:a6:1b:ff:37:8d:1a:9e: e1:2b:a5:1c:d6:b5:73:d0:46:1b:ef:f4:2e:54:79: 73:ea:f7:18:4c:7a:97:32:14:55:ce:eb:cd:20:17: b4:24:1d:e7:85:55:ec:b0:93:96:06:f7:d0:53:31: 29:8b:93:9b:a1:09:f2:47:86:47:1b:d8:7b:fa:3c: 36:5e:c4:f9:66:fa:f8:a4:e9:bb:00:5b:2a:10:0d: b4:ef:ff:84:34:18:88:67:c6:a7:53:c1:50:d0:69: fe:a2:21:33:93:8c:14:c6:66:27:b3:07:54:9b:e3: 21:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:F7:B1:85:4A:DC:39:2E:BF:D9:B0:B8:2B:76:89:FC:E3:82:4F:0F X509v3 Authority Key Identifier: keyid:92:29:19:95:35:EB:EE:44:72:A2:2F:C5:19:5B:0A:7E:FF:CB:66:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kikZlTXr7kRyoi_FGVsKfv_LZoQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:69:7e:dc:8b:c4:ad:2a:04:df:10:25:53:77:7a:a3:0e:ae: c9:5d:a3:53:83:f5:c6:3c:85:00:33:4e:b5:06:f9:70:9d:e4: 06:7d:26:60:76:c0:1d:8b:11:dd:35:45:00:3e:c7:04:d0:99: b1:07:9a:bb:d1:bb:9b:fb:bb:11:92:5d:2b:1b:ee:cc:30:35: 6f:02:5f:08:e0:f1:19:4b:29:95:bb:fd:0c:48:5b:d6:22:c3: 95:8e:7f:7b:6b:7f:67:d5:ac:21:70:b1:f8:5e:03:98:7d:e4: fd:9f:6f:10:c9:37:d6:19:90:94:90:5a:57:ba:84:aa:23:fe: 57:b2:ed:37:68:29:41:61:0b:a6:a5:36:8a:ed:53:17:e9:c9: 9a:ba:17:20:dc:cb:d3:b8:ac:db:bf:07:be:99:78:03:fe:b7: e9:b4:93:6c:39:bf:90:00:81:e6:96:be:ef:e4:58:1c:9f:8e: 12:4c:56:83:5f:8b:2a:04:5b:51:11:7b:82:02:fb:f6:b2:bd: e0:2e:1e:c5:b6:c2:d3:16:f5:71:8f:b2:f9:05:f2:3e:e5:9b: fe:5d:ab:ca:1e:ee:e1:20:22:09:f0:00:64:90:3d:6c:95:cd: 54:1f:00:97:ae:6c:c2:ae:e6:2b:b5:99:14:d2:ed:33:47:af: dc:95:b1:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjk1MkUxMTAvBgNVBAUTKDkyMjkxOTk1MzVFQkVFNDQ3MkEyMkZDNTE5NUIwQTdF RkZDQjY2ODQwHhcNMjUwNzAzMDAzNzM4WhcNMjUwNzEwMDAzNzM4WjAYMRYwFAYD VQQDEw02ODY1ZDBkMi04MzYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsz3sT4dTuF6AX3kK6ULUkS4DRJ0FPv7C0y+X4cpNCz1EVZmXNNJsthwdTgJ0 91Z70H9TXpGB2M8nlcNjy8uTsykAcIw/hjB6JBEG5KmkYQfnAEYM5f690Y4OWFrJ r+7D6lhX0tdqWGeJzpuJDtWcdAE8bRjXWQ4qgKqZih7B64wKM15yFMIORmk700mm waYb/zeNGp7hK6Uc1rVz0EYb7/QuVHlz6vcYTHqXMhRVzuvNIBe0JB3nhVXssJOW BvfQUzEpi5OboQnyR4ZHG9h7+jw2XsT5Zvr4pOm7AFsqEA207/+ENBiIZ8anU8FQ 0Gn+oiEzk4wUxmYnswdUm+MhDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGb3sYVK 3Dkuv9mwuCt2ifzjgk8PMB8GA1UdIwQYMBaAFJIpGZU16+5EcqIvxRlbCn7/y2aE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTUyRS84M0NGODExNjYw RTQxMUVDQUQxODhEMzRDNEY5QUUwMi9raWtabFRYcjdrUnlvaV9GR1ZzS2Z2X0xa b1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tpa1psVFhyN2tSeW9pX0ZHVnNLZnZfTFpvUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTUyRS84M0NGODExNjYwRTQxMUVDQUQxODhEMzRDNEY5QUUwMi9raWtabFRYcjdr UnlvaV9GR1ZzS2Z2X0xab1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOaX7ci8StKgTfECVTd3qjDq7JXaNTg/XGPIUAM061BvlwneQGfSZg dsAdixHdNUUAPscE0JmxB5q70bub+7sRkl0rG+7MMDVvAl8I4PEZSymVu/0MSFvW IsOVjn97a39n1awhcLH4XgOYfeT9n28QyTfWGZCUkFpXuoSqI/5Xsu03aClBYQum pTaK7VMX6cmauhcg3MvTuKzbvwe+mXgD/rfptJNsOb+QAIHmlr7v5Fgcn44STFaD X4sqBFtREXuCAvv2sr3gLh7FtsLTFvVxj7L5BfI+5Zv+XavKHu7hICIJ8ABkkD1s lc1UHwCXrmzCruYrtZkU0u0zR6/clbEK -----END CERTIFICATE-----Generated at Thu Jul 3 18:29:52 2025 by rpki-client