$ rpki-client -vvf rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft File: kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft (raw, json) Hash identifier: 65sWMRNjaSgyMNoWCBzpvzSifyXujB4k2pCILBPQPL4= Subject key identifier: A3:83:6F:A4:34:75:07:28:66:07:01:D9:E0:39:02:01:EE:D4:22:65 Authority key identifier: 91:2F:B5:F7:35:1C:F9:8F:B9:67:45:1F:EE:DA:F4:9F:14:8E:1A:3A Certificate issuer: /CN=A91C779D/serialNumber=912FB5F7351CF98FB967451FEEDAF49F148E1A3A Certificate serial: F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft Manifest number: F1 Signing time: Tue 01 Jul 2025 05:47:05 +0000 Manifest this update: Tue 01 Jul 2025 05:47:05 +0000 Manifest next update: Tue 08 Jul 2025 05:47:05 +0000 Files and hashes: 1: kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.crl (hash: vcAm/tU2yWQLou3ljrFkT1ciqRtw/6RnehroFP0BvRg=) 2: 1BC8D5FCE2B211EE946C6541C4F9AE02.roa (hash: iCp30dussETMXyoeph6Ol3mQ5L5KpmSd4EZLSV4J5eE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.crl rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 05:47:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 243 (0xf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C779D, serialNumber=912FB5F7351CF98FB967451FEEDAF49F148E1A3A Validity Not Before: Jul 1 05:47:05 2025 GMT Not After : Jul 8 05:47:05 2025 GMT Subject: CN=68637659-405d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:43:0b:57:59:58:c1:52:47:1a:51:0f:55:c3: 63:a9:f5:a4:b5:60:ad:7c:d9:2e:07:8b:27:c5:c4: 46:40:fc:e8:54:d5:fe:bd:da:be:e2:bf:2a:c2:8a: 87:63:bb:5c:85:21:c7:bc:5a:31:70:85:67:d2:67: 8c:3a:d3:c2:6f:ff:8d:14:49:34:56:4f:53:ae:26: 80:c9:12:e5:02:ea:7f:16:66:8d:26:5c:0b:7d:a7: f2:0c:54:98:d1:d8:54:3b:34:4c:a6:e3:53:94:ae: e8:3c:98:eb:2f:c7:98:d6:e7:ba:92:18:7b:8f:e8: fb:7a:2a:f5:0b:b3:24:a7:d2:d8:59:6b:38:79:fd: ff:46:16:78:b8:88:15:4d:26:4d:02:20:87:25:0f: 99:51:16:4d:cb:1e:8c:d4:8e:de:09:05:99:9d:07: 26:d6:d1:4e:a3:cc:23:8f:b6:fc:89:99:d6:de:7a: da:bb:e2:6e:3a:f2:a0:bb:b2:75:4f:93:cf:61:9b: 84:d4:a8:3a:38:08:02:0a:16:0a:e8:b2:75:8f:43: 69:bd:bb:8d:ad:a6:9f:91:fe:bd:3e:00:b3:01:90: 41:0c:25:7b:b0:07:d1:28:8f:ab:b4:70:8b:9a:01: 7c:70:b7:97:45:ef:7a:ed:8c:99:34:e8:5e:eb:a7: b3:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:83:6F:A4:34:75:07:28:66:07:01:D9:E0:39:02:01:EE:D4:22:65 X509v3 Authority Key Identifier: keyid:91:2F:B5:F7:35:1C:F9:8F:B9:67:45:1F:EE:DA:F4:9F:14:8E:1A:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:1c:1c:23:ff:56:c6:5a:ac:72:92:54:ab:2c:f4:83:5e:99: 84:e8:98:94:18:af:4e:40:f2:72:82:54:df:53:b8:d8:bd:8b: 3c:8c:79:cf:71:61:82:79:4b:11:e9:df:2f:2f:c0:4a:34:ca: 52:7c:26:8e:c2:84:57:74:6e:f0:9c:c2:83:4b:e1:c1:5c:eb: 5e:46:48:7e:90:11:0f:8d:bd:e5:46:3a:58:30:f3:26:ef:32: bb:97:ca:74:c8:f6:f3:d4:51:f3:2a:36:a5:13:5b:82:26:51: 66:c2:d1:f8:f1:06:7d:90:2f:2a:9a:c9:93:c1:3c:18:3c:1d: 0a:76:ad:98:d4:8f:5c:27:cb:72:4a:56:8d:c6:93:e3:f8:00: a7:ff:4c:a5:e1:bb:b3:b7:55:95:4b:43:2e:38:d8:b6:d2:ab: 16:32:ca:d8:67:ac:ef:b4:98:52:49:2f:df:e2:29:e6:1f:62: 9d:98:f5:72:8c:89:81:5b:f1:d9:a2:97:e8:b8:7c:d7:d8:5f: 59:77:29:af:21:65:1a:46:83:fb:11:17:64:fc:67:0d:b3:53: 70:2c:46:96:c9:92:86:6b:5e:57:5b:37:23:9f:f4:8d:03:61: 19:69:2e:b3:9e:10:34:2a:78:9e:05:1f:27:ed:ec:13:ee:02: ab:e7:f1:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc3OUQxMTAvBgNVBAUTKDkxMkZCNUY3MzUxQ0Y5OEZCOTY3NDUxRkVFREFGNDlG MTQ4RTFBM0EwHhcNMjUwNzAxMDU0NzA1WhcNMjUwNzA4MDU0NzA1WjAYMRYwFAYD VQQDEw02ODYzNzY1OS00MDVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA40MLV1lYwVJHGlEPVcNjqfWktWCtfNkuB4snxcRGQPzoVNX+vdq+4r8qwoqH Y7tchSHHvFoxcIVn0meMOtPCb/+NFEk0Vk9TriaAyRLlAup/FmaNJlwLfafyDFSY 0dhUOzRMpuNTlK7oPJjrL8eY1ue6khh7j+j7eir1C7Mkp9LYWWs4ef3/RhZ4uIgV TSZNAiCHJQ+ZURZNyx6M1I7eCQWZnQcm1tFOo8wjj7b8iZnW3nrau+JuOvKgu7J1 T5PPYZuE1Kg6OAgCChYK6LJ1j0NpvbuNraafkf69PgCzAZBBDCV7sAfRKI+rtHCL mgF8cLeXRe967YyZNOhe66eznQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKODb6Q0 dQcoZgcB2eA5AgHu1CJlMB8GA1UdIwQYMBaAFJEvtfc1HPmPuWdFH+7a9J8Ujho6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzc5RC80RkQ1OTQyNEUy QUUxMUVFODZGMzNDMUVDNEY5QUUwMi9rUy0xOXpVYy1ZLTVaMFVmN3RyMG54U09H am8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tTLTE5elVjLVktNVowVWY3dHIwbnhTT0dqby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Nzc5RC80RkQ1OTQyNEUyQUUxMUVFODZGMzNDMUVDNEY5QUUwMi9rUy0xOXpVYy1Z LTVaMFVmN3RyMG54U09Ham8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeHBwj/1bGWqxyklSrLPSDXpmE6JiUGK9OQPJyglTfU7jYvYs8jHnP cWGCeUsR6d8vL8BKNMpSfCaOwoRXdG7wnMKDS+HBXOteRkh+kBEPjb3lRjpYMPMm 7zK7l8p0yPbz1FHzKjalE1uCJlFmwtH48QZ9kC8qmsmTwTwYPB0Kdq2Y1I9cJ8ty SlaNxpPj+ACn/0yl4buzt1WVS0MuONi20qsWMsrYZ6zvtJhSSS/f4inmH2KdmPVy jImBW/HZopfouHzX2F9ZdymvIWUaRoP7ERdk/GcNs1NwLEaWyZKGa15XWzcjn/SN A2EZaS6znhA0KnieBR8n7ewT7gKr5/GH -----END CERTIFICATE-----Generated at Wed Jul 2 00:38:51 2025 by rpki-client