$ rpki-client -vvf rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.mft File: KIN0Gw9bynZPTTyD0-1qDyfNIpg.mft (raw, json) Hash identifier: zmNtt7i1t2O8dk3yzNAnM7gZwd8i9HzAIozkBexlfIk= Subject key identifier: 66:8B:40:67:4E:EA:47:6F:9D:F3:6D:34:7D:E6:53:2D:11:5C:F0:46 Authority key identifier: 28:83:74:1B:0F:5B:CA:76:4F:4D:3C:83:D3:ED:6A:0F:27:CD:22:98 Certificate issuer: /CN=A91E04FE/serialNumber=2883741B0F5BCA764F4D3C83D3ED6A0F27CD2298 Certificate serial: 0116 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KIN0Gw9bynZPTTyD0-1qDyfNIpg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.mft Manifest number: 0112 Signing time: Tue 01 Jul 2025 05:25:58 +0000 Manifest this update: Tue 01 Jul 2025 05:25:57 +0000 Manifest next update: Tue 08 Jul 2025 05:25:57 +0000 Files and hashes: 1: KIN0Gw9bynZPTTyD0-1qDyfNIpg.crl (hash: PvKfYb4Gj7AG/n0RmHiz2oiKXmDRV/CEecAW1eAtx3E=) 2: 5EE215CCC33D11EE97B67979C4F9AE02.roa (hash: qIW59Vu75lotEAXz2XFEI0+6mfrqPvKAPSHChiVChpE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.crl rsync://rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KIN0Gw9bynZPTTyD0-1qDyfNIpg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 05:25:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 278 (0x116) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E04FE, serialNumber=2883741B0F5BCA764F4D3C83D3ED6A0F27CD2298 Validity Not Before: Jul 1 05:25:57 2025 GMT Not After : Jul 8 05:25:57 2025 GMT Subject: CN=68637165-d04f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b6:6c:31:dc:ee:a6:25:84:3b:ab:c8:6f:46: a4:4b:a2:6a:d1:59:d6:dc:dc:96:96:d8:86:c5:41: f5:77:f4:54:d0:6a:af:f2:3d:ca:43:2d:d8:46:16: 38:4d:ba:29:bd:fe:18:7c:02:5a:b5:b1:17:1f:a0: b9:c9:58:03:07:7e:56:c7:d2:87:52:ed:7c:64:7a: 95:df:a0:bb:17:42:1f:c1:c7:c9:ee:a3:b8:02:9e: 60:c4:8d:1b:61:e7:3a:c8:40:c2:ae:47:d7:d5:5c: c8:0d:6a:42:e4:fe:86:f0:95:54:aa:94:52:29:ea: ef:8c:64:bd:3a:1b:c6:99:29:f7:82:72:98:f5:4a: 47:e5:c2:2e:2f:90:4f:ee:e2:c6:09:c8:7d:35:6f: 62:b4:81:a6:84:50:a6:fc:8e:19:97:64:15:5e:d9: 02:d9:32:c5:b9:aa:2f:3f:45:46:51:69:01:77:6f: a1:b4:e4:ed:5a:74:eb:d7:5d:79:aa:f7:f5:46:90: f3:a9:1d:74:15:2f:21:0d:64:e0:d6:a3:59:c4:03: 91:e2:55:1e:cc:f1:16:73:91:46:55:81:cc:25:32: 19:ee:4b:d6:8b:9d:6c:0e:58:75:88:18:60:64:8d: 27:67:aa:70:5c:03:c7:ea:14:5d:d4:1f:5b:83:32: a0:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:8B:40:67:4E:EA:47:6F:9D:F3:6D:34:7D:E6:53:2D:11:5C:F0:46 X509v3 Authority Key Identifier: keyid:28:83:74:1B:0F:5B:CA:76:4F:4D:3C:83:D3:ED:6A:0F:27:CD:22:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KIN0Gw9bynZPTTyD0-1qDyfNIpg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:23:fa:9b:ba:da:15:ad:73:d6:00:98:50:1e:c9:77:83:c3: a0:4a:5a:d2:84:41:38:e5:11:b0:b3:1c:74:83:07:08:fe:71: 21:72:0d:4c:ee:ec:2c:97:13:6d:1c:be:fb:3f:ea:bd:20:cf: c5:d8:91:37:65:58:58:5f:9c:e7:7a:eb:28:e7:be:0d:cf:bb: b7:26:1e:fb:4d:1f:66:6f:da:78:53:a1:ad:d0:e2:2c:f7:00: 65:ea:e8:49:fa:65:af:00:6c:11:07:fa:c9:e4:75:9d:34:ff: e5:32:42:26:f1:66:a6:ba:a8:11:36:48:30:32:67:bc:4a:83: 48:17:5a:48:10:fe:0d:6b:86:24:01:4f:f9:7a:44:6e:9e:8c: 70:e3:7a:70:84:c8:94:da:10:d3:74:ab:91:a6:99:04:04:5e: 1c:8b:95:da:4a:a4:ee:89:0e:f3:d9:d2:80:05:c1:99:25:ac: 38:98:f6:19:55:2f:98:2b:8b:61:5a:ad:13:32:f3:db:78:25: af:bc:91:4d:10:30:75:f6:ec:66:3b:c2:5e:11:44:71:ca:20: db:34:78:47:a2:83:f1:64:a7:bc:46:e6:d2:9e:e6:66:f3:15: 24:0b:15:cb:ab:c7:3d:aa:c0:aa:0d:7d:ad:9f:53:2f:fe:8e: a7:2c:01:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTA0RkUxMTAvBgNVBAUTKDI4ODM3NDFCMEY1QkNBNzY0RjREM0M4M0QzRUQ2QTBG MjdDRDIyOTgwHhcNMjUwNzAxMDUyNTU3WhcNMjUwNzA4MDUyNTU3WjAYMRYwFAYD VQQDEw02ODYzNzE2NS1kMDRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArrZsMdzupiWEO6vIb0akS6Jq0VnW3NyWltiGxUH1d/RU0Gqv8j3KQy3YRhY4 Tbopvf4YfAJatbEXH6C5yVgDB35Wx9KHUu18ZHqV36C7F0IfwcfJ7qO4Ap5gxI0b Yec6yEDCrkfX1VzIDWpC5P6G8JVUqpRSKervjGS9OhvGmSn3gnKY9UpH5cIuL5BP 7uLGCch9NW9itIGmhFCm/I4Zl2QVXtkC2TLFuaovP0VGUWkBd2+htOTtWnTr1115 qvf1RpDzqR10FS8hDWTg1qNZxAOR4lUezPEWc5FGVYHMJTIZ7kvWi51sDlh1iBhg ZI0nZ6pwXAPH6hRd1B9bgzKggQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGaLQGdO 6kdvnfNtNH3mUy0RXPBGMB8GA1UdIwQYMBaAFCiDdBsPW8p2T008g9Ptag8nzSKY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDRGRS84NkE2RjY1NEI3 M0YxMUVFQUYxMkI4N0JDNEY5QUUwMi9LSU4wR3c5YnluWlBUVHlEMC0xcUR5Zk5J cGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tJTjBHdzlieW5aUFRUeUQwLTFxRHlmTklwZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDRGRS84NkE2RjY1NEI3M0YxMUVFQUYxMkI4N0JDNEY5QUUwMi9LSU4wR3c5Ynlu WlBUVHlEMC0xcUR5Zk5JcGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUI/qbutoVrXPWAJhQHsl3g8OgSlrShEE45RGwsxx0gwcI/nEhcg1M 7uwslxNtHL77P+q9IM/F2JE3ZVhYX5zneuso574Nz7u3Jh77TR9mb9p4U6Gt0OIs 9wBl6uhJ+mWvAGwRB/rJ5HWdNP/lMkIm8WamuqgRNkgwMme8SoNIF1pIEP4Na4Yk AU/5ekRunoxw43pwhMiU2hDTdKuRppkEBF4ci5XaSqTuiQ7z2dKABcGZJaw4mPYZ VS+YK4thWq0TMvPbeCWvvJFNEDB19uxmO8JeEURxyiDbNHhHooPxZKe8RubSnuZm 8xUkCxXLq8c9qsCqDX2tn1Mv/o6nLAHr -----END CERTIFICATE-----Generated at Wed Jul 2 15:35:27 2025 by rpki-client