$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.mft File: KB6VPa5xcoChbkvFbkE1LoR2PLw.mft (raw, json) Hash identifier: 0swpqry9U9/y4a7MD7/mOzGMBw2JdgD/DV4E3+gjlcw= Subject key identifier: 2A:0B:06:38:60:AE:62:DA:3C:56:45:A8:1C:C1:07:D1:18:BB:7B:A9 Authority key identifier: 28:1E:95:3D:AE:71:72:80:A1:6E:4B:C5:6E:41:35:2E:84:76:3C:BC Certificate issuer: /CN=A91EEA4D/serialNumber=281E953DAE717280A16E4BC56E41352E84763CBC Certificate serial: 0843 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB6VPa5xcoChbkvFbkE1LoR2PLw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.mft Manifest number: 1346 Signing time: Fri 04 Jul 2025 19:42:13 +0000 Manifest this update: Fri 04 Jul 2025 19:42:12 +0000 Manifest next update: Fri 11 Jul 2025 19:42:12 +0000 Files and hashes: 1: KB6VPa5xcoChbkvFbkE1LoR2PLw.crl (hash: flgM4rF92c4n3qJMyebTvTSP4T3OQl/zTyS7awq3nqI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.crl rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB6VPa5xcoChbkvFbkE1LoR2PLw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2115 (0x843) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEA4D, serialNumber=281E953DAE717280A16E4BC56E41352E84763CBC Validity Not Before: Jul 4 19:42:12 2025 GMT Not After : Jul 11 19:42:12 2025 GMT Subject: CN=68682e95-7bd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:df:c9:29:31:a8:bf:ac:7c:34:85:80:30:d9: 73:6f:5c:49:07:6a:d0:e5:c0:84:44:52:ba:3d:e3: f1:20:e0:a2:ca:a3:97:a9:98:16:ac:8f:55:35:ea: ba:ee:59:53:14:25:51:2a:f4:12:ea:ca:4e:33:5a: 20:4f:5b:01:73:ee:bc:7c:9b:b8:f7:fc:7f:bf:69: 60:7b:55:8b:42:ee:da:20:e5:0e:89:f7:3d:9e:4d: 19:c0:23:db:87:6d:29:fb:8f:e6:07:b8:0e:b8:d3: 13:d2:90:de:58:b4:51:e5:f9:bb:5e:58:80:ee:fd: 8f:f8:0a:fb:8f:ce:3f:d1:c2:fb:0a:31:01:cc:cf: 40:d7:b2:aa:4b:f7:51:b1:23:29:ef:7b:40:21:8a: 49:10:5c:64:f4:c8:90:c5:cb:54:a0:5e:56:6b:91: 63:f7:94:87:31:0b:e9:84:71:d3:c4:ca:4c:27:6d: ad:51:f7:ec:36:fe:16:ce:aa:51:0c:58:25:04:08: f2:3b:fa:f4:70:33:f4:7f:f7:bd:0f:4a:5d:85:f2: 5a:87:98:30:1c:d4:8f:2e:b6:a4:31:fa:c9:e7:bf: a0:b8:0e:ab:d8:a6:e3:16:62:1d:fe:96:88:ad:39: f6:ab:63:2a:a8:03:b0:6d:fb:cb:11:89:25:a5:1d: 0b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:0B:06:38:60:AE:62:DA:3C:56:45:A8:1C:C1:07:D1:18:BB:7B:A9 X509v3 Authority Key Identifier: keyid:28:1E:95:3D:AE:71:72:80:A1:6E:4B:C5:6E:41:35:2E:84:76:3C:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB6VPa5xcoChbkvFbkE1LoR2PLw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:f6:32:3d:e2:83:4f:f9:43:88:a4:34:07:63:c4:88:3a:3b: 1f:0e:b7:8d:99:78:09:d2:2e:6f:53:06:f1:4c:a2:eb:9d:22: 56:4c:cd:04:fc:e4:72:9c:6a:74:69:c6:a1:ed:36:46:fd:05: 35:1b:f4:db:32:06:0e:82:85:7f:36:0b:3d:51:f2:1b:e5:d7: 82:0b:f8:5d:34:6a:48:68:cf:2d:bf:8e:fa:b9:ab:19:bb:63: 4e:db:15:02:2c:ca:01:26:37:9d:06:51:b5:1c:1d:b7:bf:01: b1:54:22:6d:0b:b0:db:d4:4d:ba:88:f3:89:64:cd:a4:39:c2: 13:6a:f0:b5:55:98:b0:a8:3f:38:80:73:32:ef:16:96:fe:2f: f6:01:70:87:30:56:08:e5:bc:ce:9a:64:0c:37:50:9a:d1:04: 2f:f3:62:1c:71:22:3d:57:f8:e7:ca:4f:dd:e1:33:e0:18:f4: e4:8a:05:1f:fd:6c:7f:a9:25:a8:29:cc:28:4c:da:98:0c:dc: ed:08:93:d1:e7:87:22:bc:4a:dd:26:c0:f2:c2:82:5d:53:0a: b8:47:c3:01:83:2b:57:24:24:f0:bf:22:27:15:58:25:dd:0d: 0e:63:94:65:34:de:8f:a0:2c:d7:b4:2a:d1:7e:4a:a5:91:c5: d9:67:83:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCEMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVBNEQxMTAvBgNVBAUTKDI4MUU5NTNEQUU3MTcyODBBMTZFNEJDNTZFNDEzNTJF ODQ3NjNDQkMwHhcNMjUwNzA0MTk0MjEyWhcNMjUwNzExMTk0MjEyWjAYMRYwFAYD VQQDEw02ODY4MmU5NS03YmQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyN/JKTGov6x8NIWAMNlzb1xJB2rQ5cCERFK6PePxIOCiyqOXqZgWrI9VNeq6 7llTFCVRKvQS6spOM1ogT1sBc+68fJu49/x/v2lge1WLQu7aIOUOifc9nk0ZwCPb h20p+4/mB7gOuNMT0pDeWLRR5fm7XliA7v2P+Ar7j84/0cL7CjEBzM9A17KqS/dR sSMp73tAIYpJEFxk9MiQxctUoF5Wa5Fj95SHMQvphHHTxMpMJ22tUffsNv4WzqpR DFglBAjyO/r0cDP0f/e9D0pdhfJah5gwHNSPLrakMfrJ57+guA6r2KbjFmId/paI rTn2q2MqqAOwbfvLEYklpR0LVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCoLBjhg rmLaPFZFqBzBB9EYu3upMB8GA1UdIwQYMBaAFCgelT2ucXKAoW5LxW5BNS6Edjy8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUE0RC82NjFGNzNFQzQ3 MzcxMUVBQUIxNkJCNTBDNEY5QUUwMi9LQjZWUGE1eGNvQ2hia3ZGYmtFMUxvUjJQ THcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tCNlZQYTV4Y29DaGJrdkZia0UxTG9SMlBMdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUE0RC82NjFGNzNFQzQ3MzcxMUVBQUIxNkJCNTBDNEY5QUUwMi9LQjZWUGE1eGNv Q2hia3ZGYmtFMUxvUjJQTHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBq9jI94oNP+UOIpDQHY8SIOjsfDreNmXgJ0i5vUwbxTKLrnSJWTM0E /ORynGp0acah7TZG/QU1G/TbMgYOgoV/Ngs9UfIb5deCC/hdNGpIaM8tv476uasZ u2NO2xUCLMoBJjedBlG1HB23vwGxVCJtC7Db1E26iPOJZM2kOcITavC1VZiwqD84 gHMy7xaW/i/2AXCHMFYI5bzOmmQMN1Ca0QQv82IccSI9V/jnyk/d4TPgGPTkigUf /Wx/qSWoKcwoTNqYDNztCJPR54civErdJsDywoJdUwq4R8MBgytXJCTwvyInFVgl 3Q0OY5RlNN6PoCzXtCrRfkqlkcXZZ4N8 -----END CERTIFICATE-----Generated at Fri Jul 4 21:59:08 2025 by rpki-client