$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/Ktu3GxFSPKM5Ll832dx2shHb4IM.mft File: Ktu3GxFSPKM5Ll832dx2shHb4IM.mft (raw, json) Hash identifier: h4Wo4O+3WEF9AEeLe7qKdXpbBvvwPOsAcyxYiZ8UlrQ= Subject key identifier: 3E:7D:6F:A8:66:6E:AA:C4:E3:EB:E1:9F:84:61:A7:77:73:20:A8:E5 Authority key identifier: 2A:DB:B7:1B:11:52:3C:A3:39:2E:5F:37:D9:DC:76:B2:11:DB:E0:83 Certificate issuer: /CN=A91C8347/serialNumber=2ADBB71B11523CA3392E5F37D9DC76B211DBE083 Certificate serial: 010E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ktu3GxFSPKM5Ll832dx2shHb4IM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/Ktu3GxFSPKM5Ll832dx2shHb4IM.mft Manifest number: FA Signing time: Sun 29 Jun 2025 04:31:01 +0000 Manifest this update: Sun 29 Jun 2025 04:31:01 +0000 Manifest next update: Sun 06 Jul 2025 04:31:01 +0000 Files and hashes: 1: Ktu3GxFSPKM5Ll832dx2shHb4IM.crl (hash: FArUtewYXnG7H4C7Nn2R1A+BGlknPD1Hn8kRvur7emk=) 2: 34C7EB4010F411EFB4CD9614C4F9AE02.roa (hash: 5QVyPmB1PRFpCtk6BRZ20HLOXQ8hVyEmcdVKPIlpB7E=) 3: F4777FBEEDDA11EF9731160CC4F9AE02.roa (hash: RlIbmp0Lo/M48Q8XdgnjXEwJZ7614fl+AY4B8ug41tA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/Ktu3GxFSPKM5Ll832dx2shHb4IM.crl rsync://rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/Ktu3GxFSPKM5Ll832dx2shHb4IM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ktu3GxFSPKM5Ll832dx2shHb4IM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 04:31:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 270 (0x10e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8347, serialNumber=2ADBB71B11523CA3392E5F37D9DC76B211DBE083 Validity Not Before: Jun 29 04:31:01 2025 GMT Not After : Jul 6 04:31:01 2025 GMT Subject: CN=6860c185-13fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a8:b0:7b:9b:b1:c6:a0:aa:ad:7a:5d:65:51: c3:41:ae:09:96:8d:be:a4:e9:87:87:ea:51:2d:91: f8:43:5e:7d:a0:65:38:6c:93:dd:b3:bb:0d:92:84: 84:06:f2:76:cc:2d:3e:81:ea:24:14:e7:1f:78:9c: 47:f0:49:79:1e:d9:18:a8:3a:2d:bd:47:5a:00:c1: d5:35:d7:d8:7b:35:e4:9e:a1:cd:35:42:73:87:ca: 71:ce:2b:29:18:72:64:33:53:3f:f5:38:d0:5b:0b: eb:1d:6f:2f:41:18:e0:90:e8:bf:cc:64:91:96:3b: c8:c2:53:b0:2f:91:19:cd:5e:32:8e:6e:36:35:0c: 30:2e:7b:c5:ca:d4:4d:f0:cb:2b:68:63:1d:dd:a4: 9d:bf:f4:16:bb:a5:bd:5b:bf:8d:4d:e6:d3:52:9a: 2b:2b:3e:bc:9b:c2:51:36:8d:ac:f0:54:3b:05:76: 02:26:ca:a1:15:45:11:0b:77:76:fd:e8:c3:c2:24: 92:e6:d5:45:8f:46:84:73:30:38:ed:66:29:09:36: ce:a7:38:f2:0c:dd:98:ec:b8:3b:be:cd:5e:f7:b2: 4c:70:28:58:50:77:2d:9c:55:62:9c:4f:7a:be:af: e2:cf:a3:a2:64:43:07:ed:b7:77:cc:37:66:22:d2: db:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:7D:6F:A8:66:6E:AA:C4:E3:EB:E1:9F:84:61:A7:77:73:20:A8:E5 X509v3 Authority Key Identifier: keyid:2A:DB:B7:1B:11:52:3C:A3:39:2E:5F:37:D9:DC:76:B2:11:DB:E0:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/Ktu3GxFSPKM5Ll832dx2shHb4IM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ktu3GxFSPKM5Ll832dx2shHb4IM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/Ktu3GxFSPKM5Ll832dx2shHb4IM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:07:67:2d:78:74:d9:a6:0b:73:3f:5a:8b:f4:a5:12:6d:d7: 9b:f2:71:a2:6e:69:f9:78:10:ac:2a:af:ba:77:6b:7c:3b:96: 47:ed:d4:72:e6:63:c5:83:b0:f8:ca:b2:7d:5d:0b:c4:21:57: 32:46:4c:79:6c:66:76:6b:9f:d8:83:7f:2d:4b:77:49:33:c9: a8:e8:69:0a:89:c4:90:8b:d9:69:12:40:01:34:4a:65:34:1d: 4a:c6:b8:c2:04:88:d6:ae:fe:99:3e:d8:0b:5e:ca:29:4c:79: 83:3b:a7:10:27:5a:70:40:11:db:44:42:57:f1:bd:6b:74:67: 38:3a:3a:e8:b8:ae:88:de:84:64:7c:4e:84:35:36:19:e0:72: 2e:ee:e0:07:72:bb:5d:13:17:ef:3c:fc:06:7b:0d:cd:9f:f6: 72:5f:2a:1b:18:50:1c:51:f1:32:02:42:7e:bd:68:84:74:6b: 68:b1:82:30:18:5b:6a:91:9b:7e:28:c0:66:fd:ee:d1:38:e6: d1:bc:ae:9a:19:0e:dc:9b:0e:86:54:a7:fe:12:6f:70:03:f8: 6c:43:d9:04:61:ff:4a:e9:a9:60:0d:90:8e:3a:11:da:30:28: c5:1b:dc:8a:02:fb:77:6a:1f:8b:5c:9a:cf:80:2c:cc:03:46: 79:20:e3:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzgzNDcxMTAvBgNVBAUTKDJBREJCNzFCMTE1MjNDQTMzOTJFNUYzN0Q5REM3NkIy MTFEQkUwODMwHhcNMjUwNjI5MDQzMTAxWhcNMjUwNzA2MDQzMTAxWjAYMRYwFAYD VQQDEw02ODYwYzE4NS0xM2ZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArKiwe5uxxqCqrXpdZVHDQa4Jlo2+pOmHh+pRLZH4Q159oGU4bJPds7sNkoSE BvJ2zC0+geokFOcfeJxH8El5HtkYqDotvUdaAMHVNdfYezXknqHNNUJzh8pxzisp GHJkM1M/9TjQWwvrHW8vQRjgkOi/zGSRljvIwlOwL5EZzV4yjm42NQwwLnvFytRN 8MsraGMd3aSdv/QWu6W9W7+NTebTUporKz68m8JRNo2s8FQ7BXYCJsqhFUURC3d2 /ejDwiSS5tVFj0aEczA47WYpCTbOpzjyDN2Y7Lg7vs1e97JMcChYUHctnFVinE96 vq/iz6OiZEMH7bd3zDdmItLbGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD59b6hm bqrE4+vhn4Rhp3dzIKjlMB8GA1UdIwQYMBaAFCrbtxsRUjyjOS5fN9ncdrIR2+CD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODM0Ny9DM0U3MjE5MEY5 QTkxMUVFQTgyQTc5MUFDNEY5QUUwMi9LdHUzR3hGU1BLTTVMbDgzMmR4MnNoSGI0 SU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0t0dTNHeEZTUEtNNUxsODMyZHgyc2hIYjRJTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODM0Ny9DM0U3MjE5MEY5QTkxMUVFQTgyQTc5MUFDNEY5QUUwMi9LdHUzR3hGU1BL TTVMbDgzMmR4MnNoSGI0SU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5B2cteHTZpgtzP1qL9KUSbdeb8nGibmn5eBCsKq+6d2t8O5ZH7dRy 5mPFg7D4yrJ9XQvEIVcyRkx5bGZ2a5/Yg38tS3dJM8mo6GkKicSQi9lpEkABNEpl NB1KxrjCBIjWrv6ZPtgLXsopTHmDO6cQJ1pwQBHbREJX8b1rdGc4OjrouK6I3oRk fE6ENTYZ4HIu7uAHcrtdExfvPPwGew3Nn/ZyXyobGFAcUfEyAkJ+vWiEdGtosYIw GFtqkZt+KMBm/e7ROObRvK6aGQ7cmw6GVKf+Em9wA/hsQ9kEYf9K6algDZCOOhHa MCjFG9yKAvt3ah+LXJrPgCzMA0Z5IONP -----END CERTIFICATE-----Generated at Mon Jun 30 05:37:52 2025 by rpki-client