$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.mft File: kN_cE0DUTo_iVh19jeSe71QGEII.mft (raw, json) Hash identifier: Se4OoV+Vtq+AaVKJgt7ARQwo+cLcktk/oUhWhNX8tv0= Subject key identifier: 54:BC:62:17:B2:5D:EE:56:78:3A:72:DE:16:22:DB:75:58:9F:BE:87 Authority key identifier: 90:DF:DC:13:40:D4:4E:8F:E2:56:1D:7D:8D:E4:9E:EF:54:06:10:82 Certificate issuer: /CN=A91C9C05/serialNumber=90DFDC1340D44E8FE2561D7D8DE49EEF54061082 Certificate serial: 3495 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kN_cE0DUTo_iVh19jeSe71QGEII.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.mft Manifest number: 3493 Signing time: Wed 02 Jul 2025 15:23:22 +0000 Manifest this update: Wed 02 Jul 2025 15:23:22 +0000 Manifest next update: Wed 09 Jul 2025 15:23:22 +0000 Files and hashes: 1: kN_cE0DUTo_iVh19jeSe71QGEII.crl (hash: RTA8HWINu52zgjdp9VGAiH0XSiJuwYiVQcfun/sr2Hc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.crl rsync://rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kN_cE0DUTo_iVh19jeSe71QGEII.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 15:23:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13461 (0x3495) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9C05, serialNumber=90DFDC1340D44E8FE2561D7D8DE49EEF54061082 Validity Not Before: Jul 2 15:23:22 2025 GMT Not After : Jul 9 15:23:22 2025 GMT Subject: CN=68654eea-22f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:b9:41:ea:08:9b:e0:47:25:b2:f8:15:9e:8d: f1:a2:b0:ef:9c:29:bb:02:9b:be:35:02:13:05:be: 8b:e1:0b:17:df:06:90:6f:91:13:c7:6b:64:75:fd: 0e:70:7b:51:fa:7c:73:65:5e:f7:60:c8:e2:f3:79: 0a:c5:ed:77:fc:e9:20:40:fa:68:00:44:83:1a:5b: aa:c6:4d:b3:ad:ca:30:1f:6e:9f:8e:0c:32:67:66: df:d6:89:f4:a1:c2:0e:40:ba:de:70:57:b6:d8:57: d3:00:28:57:9d:a5:b3:77:92:f6:71:5b:c8:b5:57: e1:d4:0d:49:c1:2a:a3:5c:c2:89:53:66:26:93:1c: a1:a9:a4:17:01:f5:a3:56:aa:f0:c0:6f:63:00:b5: 8f:44:8c:f4:65:36:ff:92:cb:0a:88:28:0a:91:c9: 8f:8b:ca:58:d9:8f:ca:33:a4:de:19:48:6a:5d:df: 0f:24:1c:20:9d:04:5e:0f:d9:cc:f1:83:f2:86:cb: d7:6e:a6:a7:aa:f4:33:ca:6b:f6:a1:8e:44:5c:cd: 3b:97:eb:52:28:ac:49:05:c2:7c:02:10:a7:8e:4f: ca:6d:03:26:99:72:91:64:84:2e:81:2b:8b:61:9c: ff:05:f4:4f:45:6c:5d:0f:3a:b5:e9:f7:f1:70:65: a8:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:BC:62:17:B2:5D:EE:56:78:3A:72:DE:16:22:DB:75:58:9F:BE:87 X509v3 Authority Key Identifier: keyid:90:DF:DC:13:40:D4:4E:8F:E2:56:1D:7D:8D:E4:9E:EF:54:06:10:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kN_cE0DUTo_iVh19jeSe71QGEII.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:1b:61:33:40:ab:73:1c:19:04:80:5d:75:fe:f7:f6:d1:8b: 8a:10:e7:82:80:84:ab:f5:63:e6:1b:5e:8a:64:b8:26:a9:39: 20:c5:71:eb:6b:9e:b6:ba:11:8a:6f:5d:19:6b:9b:13:5c:87: 1d:1a:dc:07:a8:71:38:58:3b:8c:39:bf:9b:7e:fa:67:d2:a6: 70:35:57:0c:12:4b:c5:d5:f2:a5:66:76:a1:00:98:36:de:a4: 14:a7:8d:9c:cb:ca:d9:4a:89:38:a3:24:10:0f:18:f1:cf:6d: 78:31:e5:a2:b2:5a:cc:3d:89:1e:77:1f:c7:2a:08:0c:f6:c0: b1:51:e4:e8:41:12:4d:6e:ef:be:ef:82:6b:97:6a:d1:21:c9: 74:6a:6a:27:91:ee:97:03:f7:9b:c2:18:d6:d7:5d:f4:e6:e9: ed:ce:65:60:94:cb:ec:53:bf:49:46:a4:7a:8a:93:9a:c1:ad: bd:a3:af:b3:9b:40:d3:e2:2f:2b:62:a4:50:4d:88:4e:3d:1d: ae:51:b1:67:c7:c4:e7:59:5e:80:5c:45:a6:a8:4d:3c:87:78: cb:d4:ed:c9:3c:38:f8:c3:7b:0b:ed:3f:90:21:44:83:02:b0: df:47:b0:ae:c6:e7:93:06:35:0d:82:a4:1a:dc:72:76:8b:7c: d7:c9:df:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlDMDUxMTAvBgNVBAUTKDkwREZEQzEzNDBENDRFOEZFMjU2MUQ3RDhERTQ5RUVG NTQwNjEwODIwHhcNMjUwNzAyMTUyMzIyWhcNMjUwNzA5MTUyMzIyWjAYMRYwFAYD VQQDEw02ODY1NGVlYS0yMmY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5LlB6gib4EclsvgVno3xorDvnCm7Apu+NQITBb6L4QsX3waQb5ETx2tkdf0O cHtR+nxzZV73YMji83kKxe13/OkgQPpoAESDGluqxk2zrcowH26fjgwyZ2bf1on0 ocIOQLrecFe22FfTAChXnaWzd5L2cVvItVfh1A1JwSqjXMKJU2YmkxyhqaQXAfWj VqrwwG9jALWPRIz0ZTb/kssKiCgKkcmPi8pY2Y/KM6TeGUhqXd8PJBwgnQReD9nM 8YPyhsvXbqanqvQzymv2oY5EXM07l+tSKKxJBcJ8AhCnjk/KbQMmmXKRZIQugSuL YZz/BfRPRWxdDzq16ffxcGWoIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFS8Yhey Xe5WeDpy3hYi23VYn76HMB8GA1UdIwQYMBaAFJDf3BNA1E6P4lYdfY3knu9UBhCC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUMwNS9FOUQ5QTAyMjFE QUExMUUyOEM5OERCQTYwOEIwMkNEMi9rTl9jRTBEVVRvX2lWaDE5amVTZTcxUUdF SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tOX2NFMERVVG9faVZoMTlqZVNlNzFRR0VJSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OUMwNS9FOUQ5QTAyMjFEQUExMUUyOEM5OERCQTYwOEIwMkNEMi9rTl9jRTBEVVRv X2lWaDE5amVTZTcxUUdFSUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpG2EzQKtzHBkEgF11/vf20YuKEOeCgISr9WPmG16KZLgmqTkgxXHr a562uhGKb10Za5sTXIcdGtwHqHE4WDuMOb+bfvpn0qZwNVcMEkvF1fKlZnahAJg2 3qQUp42cy8rZSok4oyQQDxjxz214MeWislrMPYkedx/HKggM9sCxUeToQRJNbu++ 74Jrl2rRIcl0amonke6XA/ebwhjW11305untzmVglMvsU79JRqR6ipOawa29o6+z m0DT4i8rYqRQTYhOPR2uUbFnx8TnWV6AXEWmqE08h3jL1O3JPDj4w3sL7T+QIUSD ArDfR7CuxueTBjUNgqQa3HJ2i3zXyd8v -----END CERTIFICATE-----Generated at Thu Jul 3 06:51:16 2025 by rpki-client