$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9CCC/758C80A22FD711F0862A6385C4F9AE02/kwduLLXgmVQqshD-tIYBkMVFxDY.mft File: kwduLLXgmVQqshD-tIYBkMVFxDY.mft (raw, json) Hash identifier: ei9aP9qa449Hqvssn+8XQ2V8eohtaGMcb3TdXpVFBXs= Subject key identifier: A1:8D:B4:49:7C:D8:95:00:93:94:8B:BE:B0:B0:EB:EC:90:83:BC:C3 Authority key identifier: 93:07:6E:2C:B5:E0:99:54:2A:B2:10:FE:B4:86:01:90:C5:45:C4:36 Certificate issuer: /CN=A91E9CCC/serialNumber=93076E2CB5E099542AB210FEB4860190C545C436 Certificate serial: 22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kwduLLXgmVQqshD-tIYBkMVFxDY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9CCC/758C80A22FD711F0862A6385C4F9AE02/kwduLLXgmVQqshD-tIYBkMVFxDY.mft Manifest number: 1E Signing time: Thu 03 Jul 2025 08:11:08 +0000 Manifest this update: Thu 03 Jul 2025 08:11:07 +0000 Manifest next update: Thu 10 Jul 2025 08:11:07 +0000 Files and hashes: 1: kwduLLXgmVQqshD-tIYBkMVFxDY.crl (hash: 6rggXj1xEv/hY0k6a+D7uVXBb8MShpjG/WA6AM3cN5I=) 2: 5A8BA4982FDE11F0A4AB5D57C4F9AE02.roa (hash: AMD2GEEFiF8rkGOwYs1r+qxOyHQFwJJUEW+dwUt3a3s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9CCC/758C80A22FD711F0862A6385C4F9AE02/kwduLLXgmVQqshD-tIYBkMVFxDY.crl rsync://rpki.apnic.net/member_repository/A91E9CCC/758C80A22FD711F0862A6385C4F9AE02/kwduLLXgmVQqshD-tIYBkMVFxDY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kwduLLXgmVQqshD-tIYBkMVFxDY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9CCC, serialNumber=93076E2CB5E099542AB210FEB4860190C545C436 Validity Not Before: Jul 3 08:11:07 2025 GMT Not After : Jul 10 08:11:07 2025 GMT Subject: CN=68663b1c-295c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:45:05:37:bd:16:7b:dc:ad:d8:17:d5:6b:ec: 3c:26:c3:35:b3:ff:f1:cf:f7:d3:11:17:71:2a:6e: 7a:3a:65:25:d8:93:9d:de:5d:dd:77:a4:d3:35:a2: fb:01:9c:6f:f5:0e:d9:6c:87:72:31:6b:bc:5f:a8: f1:3f:30:25:12:83:df:d3:ce:ec:ab:da:18:05:79: 8e:50:0e:3f:37:86:4b:f1:b8:c0:6c:3c:73:51:62: 60:03:83:0f:41:51:9a:ea:5a:5c:8c:cf:3f:7c:4d: 69:63:35:1c:ee:cb:e5:0e:e9:96:79:1e:6e:2c:48: 30:79:aa:f4:6a:2e:e0:0b:92:9e:08:3b:55:a5:61: 31:85:09:b1:9e:cb:f6:c0:2b:a5:36:fa:75:c1:d3: d6:75:9d:f5:56:70:5a:3a:48:c2:ad:28:45:13:13: d3:4b:3b:ca:bc:83:4c:5f:ce:24:8c:37:32:e8:45: 2d:54:e6:19:c1:27:7c:5a:73:b3:fd:ae:4e:6f:36: 9e:68:44:74:6d:70:3d:21:0c:bf:dc:8d:2c:60:26: 75:fe:39:f1:fd:f5:69:f9:9b:8a:f5:d5:aa:94:37: f6:29:49:66:af:76:ab:c1:d3:6e:5b:68:9e:37:f2: 14:36:a2:99:39:03:8b:36:c6:4d:35:0e:08:e7:cf: 3a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:8D:B4:49:7C:D8:95:00:93:94:8B:BE:B0:B0:EB:EC:90:83:BC:C3 X509v3 Authority Key Identifier: keyid:93:07:6E:2C:B5:E0:99:54:2A:B2:10:FE:B4:86:01:90:C5:45:C4:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9CCC/758C80A22FD711F0862A6385C4F9AE02/kwduLLXgmVQqshD-tIYBkMVFxDY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kwduLLXgmVQqshD-tIYBkMVFxDY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9CCC/758C80A22FD711F0862A6385C4F9AE02/kwduLLXgmVQqshD-tIYBkMVFxDY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:dc:36:54:32:0b:30:b0:0c:42:31:ca:1d:32:2e:5d:13:5e: cb:97:4c:7d:ee:eb:7a:34:05:03:d1:1c:b8:a6:35:68:45:6a: e2:cf:c6:4d:8d:04:94:8e:5c:d0:41:6b:76:eb:a8:08:5e:e3: 64:49:83:8b:63:eb:ff:d5:ef:10:f7:47:25:7c:4e:6e:21:f7: bb:0d:9a:9e:4a:51:78:8d:c6:31:55:81:c9:72:7d:8f:7f:69: 97:62:ff:03:db:67:4e:4c:d2:d4:09:e2:9a:16:19:c9:3a:ad: 4d:9f:d3:b4:e5:46:aa:90:ce:ad:91:59:46:68:22:0e:85:68: 52:79:00:6d:e2:fb:be:d9:b5:80:7d:12:61:c0:2a:ba:71:16: 06:6a:aa:f2:c2:4a:1f:d1:24:e5:ae:62:02:8f:5f:3b:40:28: 6b:91:d6:b2:93:00:84:4f:be:d3:ed:f9:f5:34:68:a5:1c:3d: 18:9e:7a:67:37:8e:f9:75:dd:61:7d:cb:63:8a:0f:c8:29:66: d7:35:0a:1b:4b:77:34:b6:5d:40:6b:62:51:db:8e:2a:57:1b: 4a:52:4d:35:c9:d9:ce:86:24:23:41:d9:68:9d:92:60:5a:fc: 35:65:a1:46:06:1b:a8:c4:ab:09:b7:e6:59:02:30:a6:39:cf: c5:79:b6:f0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF OUNDQzExMC8GA1UEBRMoOTMwNzZFMkNCNUUwOTk1NDJBQjIxMEZFQjQ4NjAxOTBD NTQ1QzQzNjAeFw0yNTA3MDMwODExMDdaFw0yNTA3MTAwODExMDdaMBgxFjAUBgNV BAMTDTY4NjYzYjFjLTI5NWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsRQU3vRZ73K3YF9Vr7DwmwzWz//HP99MRF3Eqbno6ZSXYk53eXd13pNM1ovsB nG/1Dtlsh3Ixa7xfqPE/MCUSg9/Tzuyr2hgFeY5QDj83hkvxuMBsPHNRYmADgw9B UZrqWlyMzz98TWljNRzuy+UO6ZZ5Hm4sSDB5qvRqLuALkp4IO1WlYTGFCbGey/bA K6U2+nXB09Z1nfVWcFo6SMKtKEUTE9NLO8q8g0xfziSMNzLoRS1U5hnBJ3xac7P9 rk5vNp5oRHRtcD0hDL/cjSxgJnX+OfH99Wn5m4r11aqUN/YpSWavdqvB025baJ43 8hQ2opk5A4s2xk01DgjnzzrlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUoY20SXzY lQCTlIu+sLDr7JCDvMMwHwYDVR0jBBgwFoAUkwduLLXgmVQqshD+tIYBkMVFxDYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5Q0NDLzc1OEM4MEEyMkZE NzExRjA4NjJBNjM4NUM0RjlBRTAyL2t3ZHVMTFhnbVZRcXNoRC10SVlCa01WRnhE WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva3dkdUxMWGdtVlFxc2hELXRJWUJrTVZGeERZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5 Q0NDLzc1OEM4MEEyMkZENzExRjA4NjJBNjM4NUM0RjlBRTAyL2t3ZHVMTFhnbVZR cXNoRC10SVlCa01WRnhEWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIjcNlQyCzCwDEIxyh0yLl0TXsuXTH3u63o0BQPRHLimNWhFauLPxk2N BJSOXNBBa3brqAhe42RJg4tj6//V7xD3RyV8Tm4h97sNmp5KUXiNxjFVgclyfY9/ aZdi/wPbZ05M0tQJ4poWGck6rU2f07TlRqqQzq2RWUZoIg6FaFJ5AG3i+77ZtYB9 EmHAKrpxFgZqqvLCSh/RJOWuYgKPXztAKGuR1rKTAIRPvtPt+fU0aKUcPRieemc3 jvl13WF9y2OKD8gpZtc1ChtLdzS2XUBrYlHbjipXG0pSTTXJ2c6GJCNB2WidkmBa /DVloUYGG6jEqwm35lkCMKY5z8V5tvA= -----END CERTIFICATE-----Generated at Thu Jul 3 23:54:26 2025 by rpki-client