$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.mft File: kpiJu1006GCsv3CJQzekYsHWrC4.mft (raw, json) Hash identifier: ofJHncyqB6k/B/eWMXt+vEp44U8UKmx2Lu8mRYw8qNg= Subject key identifier: 59:6E:D1:10:7E:E1:2E:DC:34:94:60:05:46:E5:F2:A6:E8:26:09:D6 Authority key identifier: 92:98:89:BB:5D:34:E8:60:AC:BF:70:89:43:37:A4:62:C1:D6:AC:2E Certificate issuer: /CN=A91CF83F/serialNumber=929889BB5D34E860ACBF70894337A462C1D6AC2E Certificate serial: 0CE4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpiJu1006GCsv3CJQzekYsHWrC4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.mft Manifest number: 0CD3 Signing time: Mon 30 Jun 2025 18:18:48 +0000 Manifest this update: Mon 30 Jun 2025 18:18:47 +0000 Manifest next update: Mon 07 Jul 2025 18:18:47 +0000 Files and hashes: 1: kpiJu1006GCsv3CJQzekYsHWrC4.crl (hash: lgMyCZDTH4R8T0/CHRsJbp3w4alDGVpHBEAUg/9rARs=) 2: B579952EEBB311EEAF9E7718C4F9AE02.roa (hash: cQvewbJ40h6EgOgsAFnDbtknSxNEUHRWVYRLfKeQf+8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.crl rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpiJu1006GCsv3CJQzekYsHWrC4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 18:18:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3300 (0xce4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF83F, serialNumber=929889BB5D34E860ACBF70894337A462C1D6AC2E Validity Not Before: Jun 30 18:18:47 2025 GMT Not After : Jul 7 18:18:47 2025 GMT Subject: CN=6862d507-0715 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:20:9a:aa:a0:20:7d:34:d8:fb:84:b2:be:ed: 15:d3:b9:2c:47:ea:8b:5f:18:8d:c8:4d:ab:b4:a1: f4:ae:d1:1e:dd:b7:e4:cc:40:f9:8c:4c:9d:24:56: 0a:ff:38:53:e7:bd:28:f9:9d:23:59:47:72:8a:e5: a8:b4:cf:24:69:e3:cf:e3:74:73:33:82:4b:36:d7: 06:91:63:e2:a3:2c:81:be:e7:26:b0:f0:88:17:69: 73:99:86:de:32:51:3d:b4:0c:aa:d7:3e:cb:77:f0: 59:b9:94:a4:1d:c9:08:a7:e3:69:fb:5a:3d:6e:a2: 7b:bd:46:de:4c:56:0f:71:89:69:4d:a7:ef:c8:bc: 48:31:cd:a4:44:4e:d0:b7:4b:dd:73:a6:85:e6:c7: f1:29:34:f0:9a:31:5f:1b:cd:1e:73:d0:7a:bd:07: 3b:d5:f1:8a:c8:04:a9:26:80:52:fd:17:bc:70:f0: ac:c6:df:37:66:04:e2:4d:5a:4f:4b:3f:3a:c9:77: fa:08:01:d1:e8:c8:25:9d:86:65:0f:9f:d5:75:87: ef:76:91:7b:fc:53:2d:0b:fd:e7:a7:7c:79:17:a6: fd:5e:1c:54:77:d5:ae:ec:63:f3:bd:8f:ce:f6:53: b3:cb:4b:ca:d1:10:0f:f0:7b:7f:61:d4:35:9e:bc: cc:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:6E:D1:10:7E:E1:2E:DC:34:94:60:05:46:E5:F2:A6:E8:26:09:D6 X509v3 Authority Key Identifier: keyid:92:98:89:BB:5D:34:E8:60:AC:BF:70:89:43:37:A4:62:C1:D6:AC:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpiJu1006GCsv3CJQzekYsHWrC4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:b4:08:f9:6a:10:74:3d:46:21:59:3e:03:0c:1c:c7:ca:eb: 13:4f:9f:a0:90:4e:4b:25:c0:69:5c:16:3d:21:3f:fc:81:a0: 36:56:53:6f:6f:5f:66:49:c0:1a:2f:40:6d:22:98:fd:96:45: 86:8c:7d:8f:2e:2e:4f:0e:ca:e8:85:c3:94:01:43:77:f8:ff: 0d:ce:4a:5d:6f:69:bf:1c:f7:8b:26:36:31:d2:5f:ff:d0:b8: 12:57:18:3d:7a:87:44:f9:19:d7:fa:db:7b:9e:b5:b8:38:0f: e2:ee:b5:ab:47:fd:21:03:95:2f:76:c2:93:09:dc:16:54:bb: c0:55:b4:ab:29:5c:8e:21:e9:ae:d4:b7:78:5f:2e:36:c2:b5: 88:ff:8b:3b:59:fd:ad:85:4b:b3:ca:c0:f2:08:b8:e8:8f:c7: 90:a0:b2:58:11:fb:b2:7b:9d:4a:36:b3:aa:c8:73:c8:48:1a: 87:2f:74:19:eb:6e:3a:ce:96:10:7b:69:57:df:60:2f:0f:4d: 0d:c0:f6:8f:b2:e6:e7:98:c1:86:3b:0f:34:1c:4c:07:3f:19: 96:0f:fb:8f:78:c6:5f:63:b8:64:d2:28:ee:70:ed:20:d3:e7: 9c:f3:4f:0f:4e:38:5e:e2:42:cc:e5:4d:1c:f6:d1:ef:7c:78: 9a:6c:31:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y4M0YxMTAvBgNVBAUTKDkyOTg4OUJCNUQzNEU4NjBBQ0JGNzA4OTQzMzdBNDYy QzFENkFDMkUwHhcNMjUwNjMwMTgxODQ3WhcNMjUwNzA3MTgxODQ3WjAYMRYwFAYD VQQDEw02ODYyZDUwNy0wNzE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxSCaqqAgfTTY+4Syvu0V07ksR+qLXxiNyE2rtKH0rtEe3bfkzED5jEydJFYK /zhT570o+Z0jWUdyiuWotM8kaePP43RzM4JLNtcGkWPioyyBvucmsPCIF2lzmYbe MlE9tAyq1z7Ld/BZuZSkHckIp+Np+1o9bqJ7vUbeTFYPcYlpTafvyLxIMc2kRE7Q t0vdc6aF5sfxKTTwmjFfG80ec9B6vQc71fGKyASpJoBS/Re8cPCsxt83ZgTiTVpP Sz86yXf6CAHR6MglnYZlD5/VdYfvdpF7/FMtC/3np3x5F6b9XhxUd9Wu7GPzvY/O 9lOzy0vK0RAP8Ht/YdQ1nrzMPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFlu0RB+ 4S7cNJRgBUbl8qboJgnWMB8GA1UdIwQYMBaAFJKYibtdNOhgrL9wiUM3pGLB1qwu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjgzRi84OTIzOEVDQ0VG NEYxMUU5OURFNDdGMENDNEY5QUUwMi9rcGlKdTEwMDZHQ3N2M0NKUXpla1lzSFdy QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2twaUp1MTAwNkdDc3YzQ0pRemVrWXNIV3JDNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjgzRi84OTIzOEVDQ0VGNEYxMUU5OURFNDdGMENDNEY5QUUwMi9rcGlKdTEwMDZH Q3N2M0NKUXpla1lzSFdyQzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2tAj5ahB0PUYhWT4DDBzHyusTT5+gkE5LJcBpXBY9IT/8gaA2VlNv b19mScAaL0BtIpj9lkWGjH2PLi5PDsrohcOUAUN3+P8Nzkpdb2m/HPeLJjYx0l// 0LgSVxg9eodE+RnX+tt7nrW4OA/i7rWrR/0hA5UvdsKTCdwWVLvAVbSrKVyOIemu 1Ld4Xy42wrWI/4s7Wf2thUuzysDyCLjoj8eQoLJYEfuye51KNrOqyHPISBqHL3QZ 6246zpYQe2lX32AvD00NwPaPsubnmMGGOw80HEwHPxmWD/uPeMZfY7hk0ijucO0g 0+ec808PTjhe4kLM5U0c9tHvfHiabDHl -----END CERTIFICATE-----Generated at Wed Jul 2 15:21:12 2025 by rpki-client