$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.mft File: KB6VPa5xcoChbkvFbkE1LoR2PLw.mft (raw, json) Hash identifier: GiD0E0xTDMM0SxGb+vzuNBbcOCVeOUjAh/WGR8PXH9I= Subject key identifier: 4E:FA:31:00:36:AC:73:F3:C0:3D:54:ED:39:3A:E9:06:B1:8A:CE:36 Authority key identifier: 28:1E:95:3D:AE:71:72:80:A1:6E:4B:C5:6E:41:35:2E:84:76:3C:BC Certificate issuer: /CN=A91EEA4D/serialNumber=281E953DAE717280A16E4BC56E41352E84763CBC Certificate serial: 0826 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB6VPa5xcoChbkvFbkE1LoR2PLw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.mft Manifest number: 12FF Signing time: Mon 12 May 2025 19:14:53 +0000 Manifest this update: Mon 12 May 2025 19:14:52 +0000 Manifest next update: Mon 19 May 2025 19:14:52 +0000 Files and hashes: 1: KB6VPa5xcoChbkvFbkE1LoR2PLw.crl (hash: MuMNq7TzwqwUto9azCZuiMx74uD27jBib5U1waA2qWo=) 2: 08ADD496B19E11EC86ADF246C4F9AE02.roa (hash: 6mQI7tPzFyvqQ3noJg2+jNlZObqFlofmOKhY46d73Xo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.crl rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB6VPa5xcoChbkvFbkE1LoR2PLw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 19:14:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2086 (0x826) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEA4D, serialNumber=281E953DAE717280A16E4BC56E41352E84763CBC Validity Not Before: May 12 19:14:52 2025 GMT Not After : May 19 19:14:52 2025 GMT Subject: CN=682248ac-bc86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:80:83:67:a9:92:dd:2a:8e:f8:b4:a4:69:3b: 0e:da:55:7c:8d:08:c6:6b:2f:8c:e1:01:5c:cf:f1: 4c:b7:e5:eb:ff:e3:25:36:84:ef:68:89:bd:4e:92: 1e:32:34:f8:08:76:6e:77:83:b1:11:0f:d8:a3:f7: d5:a3:2c:ee:e9:7b:a0:bc:a6:0f:78:4b:c6:59:52: 95:f8:02:39:f1:42:d2:11:38:85:32:c8:68:62:06: bf:b3:9a:6a:cb:96:0c:37:f5:0b:9a:f6:08:05:f2: eb:27:bb:54:31:ea:38:49:8c:8e:39:22:56:45:a5: c7:b9:4d:03:8a:d2:1a:23:31:15:dc:6e:e4:bb:7b: 67:2f:6a:21:0a:da:e9:8b:2b:1b:d6:d5:ce:49:41: 86:84:e7:a9:bf:ca:8f:2f:68:2f:d0:64:e9:69:de: 9f:d9:26:7e:e2:1f:d7:46:de:fc:0c:c8:72:13:e8: 57:fd:08:b8:7d:9f:d1:22:4c:f8:18:94:83:4e:ee: df:2d:d8:5e:ee:b4:a8:e7:5d:ca:a8:92:d2:68:a1: 2a:50:53:fb:f9:7e:c5:d0:bb:66:93:42:8b:7c:8d: dd:2b:c9:0e:ce:72:23:e0:03:08:80:42:04:14:85: b3:62:ee:21:07:24:40:f4:5f:89:b2:28:80:a6:3e: 9f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:FA:31:00:36:AC:73:F3:C0:3D:54:ED:39:3A:E9:06:B1:8A:CE:36 X509v3 Authority Key Identifier: keyid:28:1E:95:3D:AE:71:72:80:A1:6E:4B:C5:6E:41:35:2E:84:76:3C:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB6VPa5xcoChbkvFbkE1LoR2PLw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:32:11:8a:c2:55:ca:f0:f1:9b:9b:2d:06:20:9b:48:32:47: 4d:6e:e9:51:6e:61:8e:97:d5:65:dd:9a:7a:77:28:8e:9a:62: fb:2b:7a:9e:b1:3c:ea:ac:bc:fe:29:ec:0d:18:36:58:29:e4: 76:c5:f6:dd:d3:75:bb:a5:bc:55:f8:aa:db:cd:a9:6a:9f:d3: 0c:d7:dc:8b:4d:af:0b:f2:12:82:14:96:34:33:30:e9:11:df: cd:cc:c1:a0:30:0e:ed:b7:8a:6a:08:62:57:b0:4b:2a:46:95: 62:91:fb:56:e8:ae:79:06:7d:60:7e:1a:25:b4:e2:5d:95:cf: 41:88:31:82:57:2a:5d:58:a1:91:e5:6b:39:cc:55:c7:6b:7c: 01:e4:7b:6b:32:00:d0:b5:6e:31:97:db:4c:a4:4b:7c:8e:c1: b3:52:eb:b8:16:0c:2c:c3:cd:e7:a1:8d:00:7d:e5:75:64:6a: 1f:68:35:2c:1d:90:00:82:e6:70:a0:9e:22:3a:89:06:2c:43: d5:60:ae:99:80:88:4d:58:4f:5b:91:1c:a9:81:93:ef:07:9e: c8:cd:36:81:68:99:02:ae:3f:e3:3a:e6:75:f0:8f:b4:7e:b8: 8c:19:62:77:b4:6c:a0:c9:07:72:d2:58:04:46:d1:ff:9c:99: b1:b3:28:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVBNEQxMTAvBgNVBAUTKDI4MUU5NTNEQUU3MTcyODBBMTZFNEJDNTZFNDEzNTJF ODQ3NjNDQkMwHhcNMjUwNTEyMTkxNDUyWhcNMjUwNTE5MTkxNDUyWjAYMRYwFAYD VQQDEw02ODIyNDhhYy1iYzg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArICDZ6mS3SqO+LSkaTsO2lV8jQjGay+M4QFcz/FMt+Xr/+MlNoTvaIm9TpIe MjT4CHZud4OxEQ/Yo/fVoyzu6XugvKYPeEvGWVKV+AI58ULSETiFMshoYga/s5pq y5YMN/ULmvYIBfLrJ7tUMeo4SYyOOSJWRaXHuU0DitIaIzEV3G7ku3tnL2ohCtrp iysb1tXOSUGGhOepv8qPL2gv0GTpad6f2SZ+4h/XRt78DMhyE+hX/Qi4fZ/RIkz4 GJSDTu7fLdhe7rSo513KqJLSaKEqUFP7+X7F0Ltmk0KLfI3dK8kOznIj4AMIgEIE FIWzYu4hByRA9F+JsiiApj6fqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE76MQA2 rHPzwD1U7Tk66Qaxis42MB8GA1UdIwQYMBaAFCgelT2ucXKAoW5LxW5BNS6Edjy8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUE0RC82NjFGNzNFQzQ3 MzcxMUVBQUIxNkJCNTBDNEY5QUUwMi9LQjZWUGE1eGNvQ2hia3ZGYmtFMUxvUjJQ THcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tCNlZQYTV4Y29DaGJrdkZia0UxTG9SMlBMdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUE0RC82NjFGNzNFQzQ3MzcxMUVBQUIxNkJCNTBDNEY5QUUwMi9LQjZWUGE1eGNv Q2hia3ZGYmtFMUxvUjJQTHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBMhGKwlXK8PGbmy0GIJtIMkdNbulRbmGOl9Vl3Zp6dyiOmmL7K3qe sTzqrLz+KewNGDZYKeR2xfbd03W7pbxV+Krbzalqn9MM19yLTa8L8hKCFJY0MzDp Ed/NzMGgMA7tt4pqCGJXsEsqRpVikftW6K55Bn1gfholtOJdlc9BiDGCVypdWKGR 5Ws5zFXHa3wB5HtrMgDQtW4xl9tMpEt8jsGzUuu4Fgwsw83noY0AfeV1ZGofaDUs HZAAguZwoJ4iOokGLEPVYK6ZgIhNWE9bkRypgZPvB57IzTaBaJkCrj/jOuZ18I+0 friMGWJ3tGygyQdy0lgERtH/nJmxsyhz -----END CERTIFICATE-----Generated at Tue May 13 04:46:29 2025 by rpki-client