$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.mft File: kpiJu1006GCsv3CJQzekYsHWrC4.mft (raw, json) Hash identifier: bzbc9o6VJVeQq+XpxxMzX7IIznRHE6Elkj2sIIN6cF0= Subject key identifier: 17:BB:2C:56:9B:11:D1:A7:8B:BF:75:B5:D1:9A:46:D3:8F:2E:C7:60 Authority key identifier: 92:98:89:BB:5D:34:E8:60:AC:BF:70:89:43:37:A4:62:C1:D6:AC:2E Certificate issuer: /CN=A91CF83F/serialNumber=929889BB5D34E860ACBF70894337A462C1D6AC2E Certificate serial: 0CCA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpiJu1006GCsv3CJQzekYsHWrC4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.mft Manifest number: 0CB9 Signing time: Sat 10 May 2025 17:58:49 +0000 Manifest this update: Sat 10 May 2025 17:58:48 +0000 Manifest next update: Sat 17 May 2025 17:58:48 +0000 Files and hashes: 1: kpiJu1006GCsv3CJQzekYsHWrC4.crl (hash: McOw1D+jjrizCAxfL9gevjJ5HNlXQzfsBuL4Pj68GGs=) 2: B579952EEBB311EEAF9E7718C4F9AE02.roa (hash: cQvewbJ40h6EgOgsAFnDbtknSxNEUHRWVYRLfKeQf+8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.crl rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpiJu1006GCsv3CJQzekYsHWrC4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 17:58:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3274 (0xcca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF83F, serialNumber=929889BB5D34E860ACBF70894337A462C1D6AC2E Validity Not Before: May 10 17:58:48 2025 GMT Not After : May 17 17:58:48 2025 GMT Subject: CN=681f93d8-403b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ce:dd:4d:98:94:32:6c:ad:36:4d:6a:92:68: 42:03:ce:54:e0:0f:ad:d6:3c:99:7e:93:c2:bb:44: 05:73:8b:72:24:c6:b5:e5:17:f8:30:8b:6c:38:aa: e6:dc:2e:a7:da:8b:3a:4f:99:3e:2a:8c:5e:f2:38: 66:01:d6:a7:e8:0c:0c:d7:6d:cc:0a:80:d7:15:e8: 81:be:1c:20:a8:86:2f:40:c9:33:a5:5a:7f:88:32: 14:1d:91:0e:32:05:c8:79:a8:96:aa:83:93:a7:2a: 0b:3c:a0:ea:fa:9d:e9:c3:21:65:37:fe:81:6d:e9: 41:9a:2c:8a:e3:e7:d1:cb:7c:68:1b:44:a3:58:d1: a3:35:b9:14:ed:2a:88:43:fd:1c:66:24:12:f4:cf: 22:30:e1:00:3e:0e:31:ae:f9:41:25:56:f4:68:6d: d6:d5:84:e4:ae:66:ad:4a:20:de:e0:bd:4e:05:e6: 2f:18:bd:60:86:a8:00:95:0c:8f:e1:12:43:cf:1e: 74:5b:10:16:13:8f:ca:7a:c1:f4:13:fb:3f:8e:61: 61:c4:d5:34:2a:25:f3:c4:5a:4c:0b:4d:44:23:7c: ef:90:7d:e2:63:c9:6b:59:a3:a2:7f:01:c6:18:ff: 52:f2:7d:29:f2:e9:a5:15:f7:e9:95:f5:f0:83:1f: 34:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:BB:2C:56:9B:11:D1:A7:8B:BF:75:B5:D1:9A:46:D3:8F:2E:C7:60 X509v3 Authority Key Identifier: keyid:92:98:89:BB:5D:34:E8:60:AC:BF:70:89:43:37:A4:62:C1:D6:AC:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpiJu1006GCsv3CJQzekYsHWrC4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:68:f2:89:73:bd:8a:da:00:73:43:ef:6a:8c:34:8a:1e:bd: 8b:f4:8c:0f:79:41:d0:a8:67:09:69:07:3e:b3:69:7c:00:98: ba:87:82:46:79:ed:32:d9:86:a1:02:56:dc:7a:36:3d:87:12: 5a:8b:10:5a:5a:aa:6c:07:d7:46:75:bf:fe:c3:87:ab:a3:e4: 35:e3:2f:ab:61:2c:9d:99:bf:9a:df:fe:19:d1:6a:94:cf:5c: 96:fa:e0:3f:eb:e4:9a:0d:9c:c3:a8:ae:72:3f:09:f5:36:67: fb:c3:39:f4:71:75:41:5f:72:57:9d:8e:b3:de:14:c1:8c:ac: 2e:86:5a:b8:6c:8e:9f:01:09:dc:12:6b:52:bc:c6:5e:99:f4: 09:c3:31:df:28:ba:38:e8:b1:fe:93:e9:cb:55:ef:3f:d5:0b: 7b:8c:55:e3:7a:78:0b:1e:fd:7a:f1:16:b6:66:6d:cb:ce:70: b7:f0:94:b3:ee:d1:78:c2:59:92:5a:49:4d:83:56:3b:8f:6c: ac:8a:28:ae:9f:43:db:0e:ac:e4:91:c7:59:e7:be:f3:68:48: 7e:37:3a:d2:04:44:66:2e:c5:d7:1d:4a:5d:86:d7:76:5f:29: ea:7d:8b:ad:27:b9:c9:06:00:8f:53:15:34:aa:18:dd:dc:ed: ff:7d:df:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y4M0YxMTAvBgNVBAUTKDkyOTg4OUJCNUQzNEU4NjBBQ0JGNzA4OTQzMzdBNDYy QzFENkFDMkUwHhcNMjUwNTEwMTc1ODQ4WhcNMjUwNTE3MTc1ODQ4WjAYMRYwFAYD VQQDEw02ODFmOTNkOC00MDNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuc7dTZiUMmytNk1qkmhCA85U4A+t1jyZfpPCu0QFc4tyJMa15Rf4MItsOKrm 3C6n2os6T5k+Koxe8jhmAdan6AwM123MCoDXFeiBvhwgqIYvQMkzpVp/iDIUHZEO MgXIeaiWqoOTpyoLPKDq+p3pwyFlN/6BbelBmiyK4+fRy3xoG0SjWNGjNbkU7SqI Q/0cZiQS9M8iMOEAPg4xrvlBJVb0aG3W1YTkrmatSiDe4L1OBeYvGL1ghqgAlQyP 4RJDzx50WxAWE4/KesH0E/s/jmFhxNU0KiXzxFpMC01EI3zvkH3iY8lrWaOifwHG GP9S8n0p8umlFffplfXwgx803wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBe7LFab EdGni791tdGaRtOPLsdgMB8GA1UdIwQYMBaAFJKYibtdNOhgrL9wiUM3pGLB1qwu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjgzRi84OTIzOEVDQ0VG NEYxMUU5OURFNDdGMENDNEY5QUUwMi9rcGlKdTEwMDZHQ3N2M0NKUXpla1lzSFdy QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2twaUp1MTAwNkdDc3YzQ0pRemVrWXNIV3JDNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjgzRi84OTIzOEVDQ0VGNEYxMUU5OURFNDdGMENDNEY5QUUwMi9rcGlKdTEwMDZH Q3N2M0NKUXpla1lzSFdyQzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkaPKJc72K2gBzQ+9qjDSKHr2L9IwPeUHQqGcJaQc+s2l8AJi6h4JG ee0y2YahAlbcejY9hxJaixBaWqpsB9dGdb/+w4ero+Q14y+rYSydmb+a3/4Z0WqU z1yW+uA/6+SaDZzDqK5yPwn1Nmf7wzn0cXVBX3JXnY6z3hTBjKwuhlq4bI6fAQnc EmtSvMZemfQJwzHfKLo46LH+k+nLVe8/1Qt7jFXjengLHv168Ra2Zm3LznC38JSz 7tF4wlmSWklNg1Y7j2ysiiiun0PbDqzkkcdZ577zaEh+NzrSBERmLsXXHUpdhtd2 XynqfYutJ7nJBgCPUxU0qhjd3O3/fd9L -----END CERTIFICATE-----Generated at Sun May 11 19:07:43 2025 by rpki-client