$ rpki-client -vvf rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.mft File: KIN0Gw9bynZPTTyD0-1qDyfNIpg.mft (raw, json) Hash identifier: AAOCEg+lVtanACfT9BHR7Ta7m+ieYpXzQU3apwUd70w= Subject key identifier: 1D:78:37:7F:BD:D4:30:72:92:6F:4C:33:2A:85:3C:30:B4:D7:ED:F3 Authority key identifier: 28:83:74:1B:0F:5B:CA:76:4F:4D:3C:83:D3:ED:6A:0F:27:CD:22:98 Certificate issuer: /CN=A91E04FE/serialNumber=2883741B0F5BCA764F4D3C83D3ED6A0F27CD2298 Certificate serial: FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KIN0Gw9bynZPTTyD0-1qDyfNIpg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.mft Manifest number: F9 Signing time: Sun 11 May 2025 04:04:03 +0000 Manifest this update: Sun 11 May 2025 04:04:03 +0000 Manifest next update: Sun 18 May 2025 04:04:03 +0000 Files and hashes: 1: KIN0Gw9bynZPTTyD0-1qDyfNIpg.crl (hash: Fv6Fm6Uu9ryIfoXx4BV3qFtZIov2dKFke0nMv+sUSDg=) 2: 5EE215CCC33D11EE97B67979C4F9AE02.roa (hash: qIW59Vu75lotEAXz2XFEI0+6mfrqPvKAPSHChiVChpE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.crl rsync://rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KIN0Gw9bynZPTTyD0-1qDyfNIpg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 04:04:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 253 (0xfd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E04FE, serialNumber=2883741B0F5BCA764F4D3C83D3ED6A0F27CD2298 Validity Not Before: May 11 04:04:03 2025 GMT Not After : May 18 04:04:03 2025 GMT Subject: CN=682021b3-5321 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:f6:41:6a:ea:fe:08:e3:75:1e:f3:f3:3d:4b: d9:0b:06:88:26:20:ee:e0:2a:b7:59:f3:00:28:4f: e8:9c:cc:a8:67:79:59:38:7d:5f:08:a7:b5:76:a6: ab:7c:7a:61:89:4c:99:7a:03:b1:b8:26:2d:b1:a6: d1:5f:2c:d0:5f:a4:c0:11:0b:ea:38:01:8d:78:84: cf:ed:76:97:2d:75:f9:f4:89:65:6a:9a:bc:6a:08: ac:78:38:50:3c:72:f2:03:d6:bb:36:f4:eb:3f:65: 58:43:3f:ee:ed:13:94:c0:d1:6c:f5:84:9b:11:87: 17:69:c5:6a:d2:4d:3a:cd:62:6a:91:82:21:6d:42: 37:80:7e:96:78:47:25:f5:df:4c:be:77:4b:3c:f2: 48:e5:b2:21:f2:81:f5:45:48:34:00:10:cf:5c:d5: 35:6f:ca:b3:1b:2f:43:53:84:a8:7d:d2:d2:e9:4e: d2:19:af:fa:85:cc:c2:09:10:2d:5e:9c:26:53:08: 32:41:2a:60:1d:28:43:75:45:1f:36:97:a5:f6:f5: 54:a1:65:aa:e5:bf:a9:a2:8b:00:66:44:19:79:75: 9a:ee:33:8d:05:c1:df:58:b0:71:11:99:bc:ff:51: a6:8c:df:ee:28:0f:63:44:b3:47:fb:c2:d1:fb:c3: 0c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:78:37:7F:BD:D4:30:72:92:6F:4C:33:2A:85:3C:30:B4:D7:ED:F3 X509v3 Authority Key Identifier: keyid:28:83:74:1B:0F:5B:CA:76:4F:4D:3C:83:D3:ED:6A:0F:27:CD:22:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KIN0Gw9bynZPTTyD0-1qDyfNIpg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:f5:84:df:3e:51:77:27:e5:a3:5a:ca:ea:c3:10:30:8f:54: fb:44:be:ba:94:1d:a9:01:3a:6d:5b:75:3b:6a:a5:00:d3:1d: d8:e5:09:a5:02:67:16:1e:2b:0f:24:44:68:a5:e8:e2:44:93: 02:26:af:72:84:e8:04:d2:dd:76:29:0c:58:79:5a:e4:1c:94: f6:a6:af:8f:c8:26:ca:09:85:6e:01:ae:fc:7a:15:85:4f:58: 42:75:5c:10:b7:90:c2:12:26:96:93:d4:33:f3:ec:de:71:c2: 60:74:f3:4f:be:30:8c:47:39:69:4d:be:cc:3f:e4:c1:47:a7: af:fb:cb:5a:42:35:ae:38:33:8c:90:c1:e1:8f:59:74:1c:b1: 22:a2:d1:4a:fc:8f:d0:4a:6b:0b:6b:3e:4b:05:08:5d:49:fc: e5:d7:c8:7f:c6:97:35:bf:49:60:d4:d0:81:03:af:99:bf:a0: 38:bc:b5:b9:04:cf:67:99:ef:e8:c6:4e:42:41:1e:b9:65:6a: 7c:06:64:e4:54:e5:a4:3f:61:7c:45:fc:c4:0c:a3:f1:27:0e: 87:fa:e6:8a:66:da:a0:80:61:9c:fd:bf:6b:37:8d:19:82:b7: 2e:4e:e9:74:13:f2:48:8f:53:a6:d4:a3:53:b8:02:41:4d:02: 4b:76:25:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTA0RkUxMTAvBgNVBAUTKDI4ODM3NDFCMEY1QkNBNzY0RjREM0M4M0QzRUQ2QTBG MjdDRDIyOTgwHhcNMjUwNTExMDQwNDAzWhcNMjUwNTE4MDQwNDAzWjAYMRYwFAYD VQQDEw02ODIwMjFiMy01MzIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7PZBaur+CON1HvPzPUvZCwaIJiDu4Cq3WfMAKE/onMyoZ3lZOH1fCKe1dqar fHphiUyZegOxuCYtsabRXyzQX6TAEQvqOAGNeITP7XaXLXX59Illapq8agiseDhQ PHLyA9a7NvTrP2VYQz/u7ROUwNFs9YSbEYcXacVq0k06zWJqkYIhbUI3gH6WeEcl 9d9MvndLPPJI5bIh8oH1RUg0ABDPXNU1b8qzGy9DU4SofdLS6U7SGa/6hczCCRAt XpwmUwgyQSpgHShDdUUfNpel9vVUoWWq5b+poosAZkQZeXWa7jONBcHfWLBxEZm8 /1GmjN/uKA9jRLNH+8LR+8MMGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB14N3+9 1DBykm9MMyqFPDC01+3zMB8GA1UdIwQYMBaAFCiDdBsPW8p2T008g9Ptag8nzSKY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDRGRS84NkE2RjY1NEI3 M0YxMUVFQUYxMkI4N0JDNEY5QUUwMi9LSU4wR3c5YnluWlBUVHlEMC0xcUR5Zk5J cGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tJTjBHdzlieW5aUFRUeUQwLTFxRHlmTklwZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDRGRS84NkE2RjY1NEI3M0YxMUVFQUYxMkI4N0JDNEY5QUUwMi9LSU4wR3c5Ynlu WlBUVHlEMC0xcUR5Zk5JcGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCf9YTfPlF3J+WjWsrqwxAwj1T7RL66lB2pATptW3U7aqUA0x3Y5Qml AmcWHisPJERopejiRJMCJq9yhOgE0t12KQxYeVrkHJT2pq+PyCbKCYVuAa78ehWF T1hCdVwQt5DCEiaWk9Qz8+zeccJgdPNPvjCMRzlpTb7MP+TBR6ev+8taQjWuODOM kMHhj1l0HLEiotFK/I/QSmsLaz5LBQhdSfzl18h/xpc1v0lg1NCBA6+Zv6A4vLW5 BM9nme/oxk5CQR65ZWp8BmTkVOWkP2F8RfzEDKPxJw6H+uaKZtqggGGc/b9rN40Z grcuTul0E/JIj1Om1KNTuAJBTQJLdiX2 -----END CERTIFICATE-----Generated at Sun May 11 16:58:50 2025 by rpki-client