$ rpki-client -vvf rpki.apnic.net/member_repository/A91C744F/B7F9385E22B711EB8C37033CC4F9AE02/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.mft File: KJ6yPyjJzyP6W5GKZQy4QoBQMHs.mft (raw, json) Hash identifier: OtCRgPyPQwRky++MuKvOn8GWc9y96QBvOKDh+arMcug= Subject key identifier: 48:40:B7:22:E8:6D:A5:47:94:11:87:D2:CF:29:8D:3F:41:D3:E9:64 Authority key identifier: 28:9E:B2:3F:28:C9:CF:23:FA:5B:91:8A:65:0C:B8:42:80:50:30:7B Certificate issuer: /CN=A91C744F/serialNumber=289EB23F28C9CF23FA5B918A650CB8428050307B Certificate serial: 078B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C744F/B7F9385E22B711EB8C37033CC4F9AE02/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.mft Manifest number: 0776 Signing time: Sat 28 Jun 2025 21:13:19 +0000 Manifest this update: Sat 28 Jun 2025 21:13:18 +0000 Manifest next update: Sat 05 Jul 2025 21:13:18 +0000 Files and hashes: 1: KJ6yPyjJzyP6W5GKZQy4QoBQMHs.crl (hash: zlxc4bKxq2TF5v7zdcoLtcHTpk5ZHi3DH2wVQ4zae1A=) 2: E7EFEDC07C1F11EB95B6492DC4F9AE02.roa (hash: PfwMudypLXBG0l/8zURzPSjDmL/lqt08xsdYYn3A5t8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C744F/B7F9385E22B711EB8C37033CC4F9AE02/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.crl rsync://rpki.apnic.net/member_repository/A91C744F/B7F9385E22B711EB8C37033CC4F9AE02/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 21:13:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1931 (0x78b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C744F, serialNumber=289EB23F28C9CF23FA5B918A650CB8428050307B Validity Not Before: Jun 28 21:13:18 2025 GMT Not After : Jul 5 21:13:18 2025 GMT Subject: CN=68605aef-433c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:35:78:00:86:a1:a6:a1:6f:a7:a4:4d:29:ce: cc:be:b5:b9:ba:48:91:f8:b6:47:17:49:d8:1f:f0: 9c:7c:d7:81:d0:e7:0f:3d:27:1d:b3:18:1c:95:e6: fe:aa:75:d3:e2:47:d9:07:ba:1d:dd:cc:c4:89:b6: 36:9d:92:3c:59:37:7b:cb:2c:6f:b9:8e:12:fb:28: 9b:5e:71:0f:51:b4:3e:5a:69:ad:a8:4d:d1:9a:68: f2:16:27:f1:b6:3e:51:29:88:9b:5a:d7:5d:02:51: e2:ad:58:45:5e:e0:01:4d:f7:16:3d:9c:52:40:e6: 65:0a:65:b7:99:f2:fe:d0:56:d5:e4:b3:93:1b:9c: e6:45:8a:2c:ac:5e:16:12:b7:0c:64:ee:ad:ad:29: 0d:69:88:ac:fa:54:2c:be:f2:be:87:93:47:c3:ed: e8:95:06:0a:91:29:17:be:21:05:5d:20:f1:95:7b: 80:89:22:67:6b:45:65:51:bb:7e:45:7d:e4:ad:40: d5:f1:af:9e:94:46:a5:f3:ba:07:1b:29:51:70:03: 22:4c:7a:6a:73:35:21:94:90:23:b0:7e:fe:d5:d5: 0f:ea:57:ec:a7:ab:fe:ff:3b:ac:ac:58:4c:a9:88: 8c:e8:1b:bd:fd:81:1f:f4:76:8a:06:04:32:64:19: b3:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:40:B7:22:E8:6D:A5:47:94:11:87:D2:CF:29:8D:3F:41:D3:E9:64 X509v3 Authority Key Identifier: keyid:28:9E:B2:3F:28:C9:CF:23:FA:5B:91:8A:65:0C:B8:42:80:50:30:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C744F/B7F9385E22B711EB8C37033CC4F9AE02/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C744F/B7F9385E22B711EB8C37033CC4F9AE02/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:09:31:c2:32:21:a3:91:1d:85:83:66:b8:4f:6a:7d:ca:18: 24:39:19:9d:a2:c4:3e:e0:fa:f5:c6:32:d5:37:ad:b4:c2:39: ed:60:c2:92:fb:dd:1e:39:af:65:c5:13:7e:ca:d9:1c:18:bd: f1:21:6f:47:cf:42:e0:98:d8:83:94:5d:58:3e:4b:c7:de:16: c0:06:4c:4c:a4:85:43:08:0f:ad:5d:a4:73:4a:db:fd:4b:6c: 91:22:63:7b:7a:4b:c3:e2:04:81:79:6f:07:4a:fe:45:73:f6: 19:f4:ba:4b:ce:81:e3:00:60:27:d3:e9:7a:ff:ae:44:7d:53: 02:90:7a:10:0a:29:b5:39:36:27:c7:07:e5:88:64:e1:dd:a3: 75:f4:c0:71:7b:eb:26:0d:47:25:28:4d:14:1e:12:d2:22:ec: 59:95:a6:82:bd:78:4e:1b:56:67:3e:7b:65:31:90:fe:f6:21: f9:a2:fd:f2:65:d8:da:48:b2:91:cb:d2:69:2f:24:59:b8:75: 9b:fd:0b:eb:35:9f:18:5d:98:9a:4e:cf:76:83:94:27:d5:83: 02:af:a1:2b:f4:df:51:ab:4c:5a:95:ef:b4:5d:16:fc:e1:6a: 41:5e:3d:47:8d:c9:d5:67:99:6e:2c:84:3b:76:33:d6:f6:b7: ab:49:bb:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc0NEYxMTAvBgNVBAUTKDI4OUVCMjNGMjhDOUNGMjNGQTVCOTE4QTY1MENCODQy ODA1MDMwN0IwHhcNMjUwNjI4MjExMzE4WhcNMjUwNzA1MjExMzE4WjAYMRYwFAYD VQQDEw02ODYwNWFlZi00MzNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzjV4AIahpqFvp6RNKc7MvrW5ukiR+LZHF0nYH/CcfNeB0OcPPScdsxgcleb+ qnXT4kfZB7od3czEibY2nZI8WTd7yyxvuY4S+yibXnEPUbQ+WmmtqE3RmmjyFifx tj5RKYibWtddAlHirVhFXuABTfcWPZxSQOZlCmW3mfL+0FbV5LOTG5zmRYosrF4W ErcMZO6trSkNaYis+lQsvvK+h5NHw+3olQYKkSkXviEFXSDxlXuAiSJna0VlUbt+ RX3krUDV8a+elEal87oHGylRcAMiTHpqczUhlJAjsH7+1dUP6lfsp6v+/zusrFhM qYiM6Bu9/YEf9HaKBgQyZBmzgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEhAtyLo baVHlBGH0s8pjT9B0+lkMB8GA1UdIwQYMBaAFCiesj8oyc8j+luRimUMuEKAUDB7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzQ0Ri9CN0Y5Mzg1RTIy QjcxMUVCOEMzNzAzM0NDNEY5QUUwMi9LSjZ5UHlqSnp5UDZXNUdLWlF5NFFvQlFN SHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tKNnlQeWpKenlQNlc1R0taUXk0UW9CUU1Icy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzQ0Ri9CN0Y5Mzg1RTIyQjcxMUVCOEMzNzAzM0NDNEY5QUUwMi9LSjZ5UHlqSnp5 UDZXNUdLWlF5NFFvQlFNSHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWCTHCMiGjkR2Fg2a4T2p9yhgkORmdosQ+4Pr1xjLVN620wjntYMKS +90eOa9lxRN+ytkcGL3xIW9Hz0LgmNiDlF1YPkvH3hbABkxMpIVDCA+tXaRzStv9 S2yRImN7ekvD4gSBeW8HSv5Fc/YZ9LpLzoHjAGAn0+l6/65EfVMCkHoQCim1OTYn xwfliGTh3aN19MBxe+smDUclKE0UHhLSIuxZlaaCvXhOG1ZnPntlMZD+9iH5ov3y ZdjaSLKRy9JpLyRZuHWb/QvrNZ8YXZiaTs92g5Qn1YMCr6Er9N9Rq0xale+0XRb8 4WpBXj1HjcnVZ5luLIQ7djPW9rerSbtf -----END CERTIFICATE-----Generated at Sun Jun 29 15:52:54 2025 by rpki-client