$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.mft File: K1N18tBgdUbVH2UR9hvEoYl0_eI.mft (raw, json) Hash identifier: py4hku6DsFnCyOeVdy4FcN2eCV2iR8mR0F3+KMw2RoI= Subject key identifier: BB:61:72:D1:DD:FC:37:6A:3F:6C:0B:08:21:63:E5:FF:BA:58:58:CA Authority key identifier: 2B:53:75:F2:D0:60:75:46:D5:1F:65:11:F6:1B:C4:A1:89:74:FD:E2 Certificate issuer: /CN=A91EF19E/serialNumber=2B5375F2D0607546D51F6511F61BC4A18974FDE2 Certificate serial: 34CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1N18tBgdUbVH2UR9hvEoYl0_eI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.mft Manifest number: 34BE Signing time: Wed 02 Jul 2025 14:23:37 +0000 Manifest this update: Wed 02 Jul 2025 14:23:36 +0000 Manifest next update: Wed 09 Jul 2025 14:23:36 +0000 Files and hashes: 1: K1N18tBgdUbVH2UR9hvEoYl0_eI.crl (hash: SnydmMJjaaOmtHNJgeeNSzmWMSo8hk216JPK++HHhxw=) 2: FACC58F855C411E9A0FEF781C4F9AE02.roa (hash: 393XehekPeHbrV2Jp2q+bd44TtCVra3Kkby1+LNFgLs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.crl rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1N18tBgdUbVH2UR9hvEoYl0_eI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 14:23:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13519 (0x34cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF19E, serialNumber=2B5375F2D0607546D51F6511F61BC4A18974FDE2 Validity Not Before: Jul 2 14:23:36 2025 GMT Not After : Jul 9 14:23:36 2025 GMT Subject: CN=686540e8-2d98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:af:79:e1:3f:f2:1d:f7:90:1b:30:c3:a8:1e: d8:45:75:f3:ec:60:7e:d9:c0:3f:f1:90:5c:55:26: a7:20:5f:8b:14:a6:57:f5:b0:db:03:ec:57:22:1f: da:79:a4:cb:2e:46:0b:7e:2d:df:01:84:b3:6d:b3: b1:69:e2:57:ab:5f:4a:42:37:b3:a1:4c:47:eb:e2: 28:e8:fa:d6:9c:d2:be:65:fa:83:0b:5f:f7:17:d3: fb:3b:b7:5c:4f:80:b3:fd:99:e9:17:9c:7c:65:41: 65:83:7d:50:43:4c:2b:da:64:04:a2:2d:d5:cb:31: f9:11:af:6a:cc:18:ae:df:c1:6a:3b:ff:55:a8:aa: d4:61:7a:8b:95:b0:fe:8e:0d:8b:ce:b8:7c:90:88: fe:0d:7c:a9:03:16:78:42:19:6d:e1:0a:f4:8c:21: 3c:1a:9f:d0:cc:ee:af:d7:26:17:0e:af:dc:cc:e9: 74:0d:ad:ab:f9:bc:2f:77:67:2a:3e:87:62:0e:6b: 9a:71:69:20:cb:05:d0:4d:f9:bf:79:2b:70:89:ef: 17:bb:76:6f:40:c5:cb:dc:b3:dd:15:6c:31:06:d9: 11:0d:3e:e2:2d:ec:a8:f4:c2:fb:c0:21:0d:25:fb: 5e:ad:f3:2c:c5:34:1a:b5:ab:9c:24:63:72:50:ee: 3e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:61:72:D1:DD:FC:37:6A:3F:6C:0B:08:21:63:E5:FF:BA:58:58:CA X509v3 Authority Key Identifier: keyid:2B:53:75:F2:D0:60:75:46:D5:1F:65:11:F6:1B:C4:A1:89:74:FD:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1N18tBgdUbVH2UR9hvEoYl0_eI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:b2:7f:ac:e1:03:ed:90:77:33:76:6d:d7:51:f7:9c:45:a6: bf:a8:d1:12:87:68:7f:60:94:e1:4b:1f:5a:d0:cc:c1:ca:9e: 34:d6:a3:68:e0:22:34:de:00:8f:52:78:5e:72:97:bd:41:2e: e0:ae:3b:8a:64:66:a6:6d:04:02:a6:6b:a6:f5:a5:90:80:f7: c7:76:02:ec:5c:ea:e9:42:0c:b6:2f:7e:6e:5d:3e:9b:95:bb: d1:1d:d8:88:30:f7:ce:8a:78:5a:af:09:06:c9:6b:98:fe:45: 57:ff:dc:ad:50:9d:fc:24:94:54:42:3f:9a:d3:15:32:be:93: 97:bc:bd:e6:1f:bd:63:81:95:b3:78:65:24:39:78:f1:95:59: 22:2d:64:87:4d:da:45:c7:7f:48:b6:f0:c6:e8:e3:82:f1:a0: 66:54:dc:26:05:4c:d7:59:32:44:dd:34:8c:b7:e7:b2:51:aa: 79:c7:f3:ab:f9:44:8b:d9:f9:72:f8:1a:79:e8:fe:4a:f9:6d: 62:26:9f:08:d7:8a:71:b9:e0:4f:cb:1d:f6:27:34:63:8e:81: 3b:82:60:11:02:84:8a:02:29:44:70:ee:88:3b:57:4d:e2:32: 6b:e6:db:9b:be:31:06:72:0a:7a:28:16:f8:9d:72:81:af:4b: f7:16:82:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYxOUUxMTAvBgNVBAUTKDJCNTM3NUYyRDA2MDc1NDZENTFGNjUxMUY2MUJDNEEx ODk3NEZERTIwHhcNMjUwNzAyMTQyMzM2WhcNMjUwNzA5MTQyMzM2WjAYMRYwFAYD VQQDEw02ODY1NDBlOC0yZDk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2K954T/yHfeQGzDDqB7YRXXz7GB+2cA/8ZBcVSanIF+LFKZX9bDbA+xXIh/a eaTLLkYLfi3fAYSzbbOxaeJXq19KQjezoUxH6+Io6PrWnNK+ZfqDC1/3F9P7O7dc T4Cz/ZnpF5x8ZUFlg31QQ0wr2mQEoi3VyzH5Ea9qzBiu38FqO/9VqKrUYXqLlbD+ jg2Lzrh8kIj+DXypAxZ4Qhlt4Qr0jCE8Gp/QzO6v1yYXDq/czOl0Da2r+bwvd2cq PodiDmuacWkgywXQTfm/eStwie8Xu3ZvQMXL3LPdFWwxBtkRDT7iLeyo9ML7wCEN JfterfMsxTQataucJGNyUO4+KQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLthctHd /DdqP2wLCCFj5f+6WFjKMB8GA1UdIwQYMBaAFCtTdfLQYHVG1R9lEfYbxKGJdP3i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjE5RS8wNUM0QzBBNDFE ODQxMUUyQjBDNUEzRDkwOEIwMkNEMi9LMU4xOHRCZ2RVYlZIMlVSOWh2RW9ZbDBf ZUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0sxTjE4dEJnZFViVkgyVVI5aHZFb1lsMF9lSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjE5RS8wNUM0QzBBNDFEODQxMUUyQjBDNUEzRDkwOEIwMkNEMi9LMU4xOHRCZ2RV YlZIMlVSOWh2RW9ZbDBfZUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKsn+s4QPtkHczdm3XUfecRaa/qNESh2h/YJThSx9a0MzByp401qNo 4CI03gCPUnhecpe9QS7grjuKZGambQQCpmum9aWQgPfHdgLsXOrpQgy2L35uXT6b lbvRHdiIMPfOinharwkGyWuY/kVX/9ytUJ38JJRUQj+a0xUyvpOXvL3mH71jgZWz eGUkOXjxlVkiLWSHTdpFx39ItvDG6OOC8aBmVNwmBUzXWTJE3TSMt+eyUap5x/Or +USL2fly+Bp56P5K+W1iJp8I14pxueBPyx32JzRjjoE7gmARAoSKAilEcO6IO1dN 4jJr5tubvjEGcgp6KBb4nXKBr0v3FoJX -----END CERTIFICATE-----Generated at Wed Jul 2 19:35:43 2025 by rpki-client