$ rpki-client -vvf rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.mft File: kl2pi04IXWgNFte6GD8OpUJqGgM.mft (raw, json) Hash identifier: Gis5w4xFy2P/9F27e17aP9T+wMtjOuzUueiRssa2a+0= Subject key identifier: 1C:69:34:A9:DE:51:BE:2F:1E:B2:41:31:0D:C5:42:A8:10:00:1C:40 Authority key identifier: 92:5D:A9:8B:4E:08:5D:68:0D:16:D7:BA:18:3F:0E:A5:42:6A:1A:03 Certificate issuer: /CN=A9112320/serialNumber=925DA98B4E085D680D16D7BA183F0EA5426A1A03 Certificate serial: 0531 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kl2pi04IXWgNFte6GD8OpUJqGgM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.mft Manifest number: 0521 Signing time: Thu 24 Apr 2025 23:22:17 +0000 Manifest this update: Thu 24 Apr 2025 23:22:16 +0000 Manifest next update: Thu 01 May 2025 23:22:16 +0000 Files and hashes: 1: kl2pi04IXWgNFte6GD8OpUJqGgM.crl (hash: IJ3g7nqOxDj9XUAVQ1MLFdr9YfvCWN+annzxnfPHmGg=) 2: C7B754BEF85311ED8D59CA87C4F9AE02.roa (hash: FKFKH5eFofFRTvqGy9vDB52V4WqF8Uh4JVrswNbtjMM=) 3: A87AE518D2E011EDA1EF340FC4F9AE02.roa (hash: C85Ln946y9Tr5r2XkfYdY+5M9KTyQRGliz2lUS9dRFA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.crl rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kl2pi04IXWgNFte6GD8OpUJqGgM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:22:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1329 (0x531) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112320, serialNumber=925DA98B4E085D680D16D7BA183F0EA5426A1A03 Validity Not Before: Apr 24 23:22:16 2025 GMT Not After : May 1 23:22:16 2025 GMT Subject: CN=680ac7a9-7722 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:4f:d7:7d:e2:ea:06:94:da:f7:60:f4:31:18: 9e:fc:e9:a9:f6:75:4b:6b:65:0a:7f:53:eb:1c:86: b6:45:80:fb:5d:22:ae:e9:31:22:91:0e:f7:c3:d6: b4:e1:40:d2:fe:32:a9:ab:6e:1c:fe:c1:af:fc:c0: ff:74:4b:ba:6c:1f:e7:21:36:ea:6c:b9:9a:52:ae: 1a:08:9c:5b:de:c6:df:50:e6:17:64:21:98:56:f0: 6c:02:df:ad:9d:80:cc:d9:4e:7e:df:a4:a8:ca:a9: cf:16:f6:1b:1e:f6:5a:f1:3e:ea:9b:2d:e2:74:ab: 23:8a:9c:6e:11:f7:74:ee:aa:98:04:58:2f:95:0e: da:55:c9:98:50:72:af:90:f1:5e:48:0b:64:7f:01: a6:1a:a7:a7:9b:5d:98:39:47:22:18:b4:74:b1:d8: 7f:79:e0:d3:01:97:45:e0:ee:11:18:4f:a0:ba:f7: 26:21:be:30:7d:a7:29:85:e3:6a:f8:77:57:81:c4: 43:1b:32:b5:dd:ef:a5:49:e8:bc:37:39:88:62:27: 63:ac:ea:7b:ae:1a:40:f7:10:a1:2b:2f:de:d2:d4: 4c:72:21:83:48:a8:f9:fb:94:12:b9:96:46:e4:b3: 84:30:c3:85:26:15:56:aa:d9:ed:e6:33:75:fa:9a: 1c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:69:34:A9:DE:51:BE:2F:1E:B2:41:31:0D:C5:42:A8:10:00:1C:40 X509v3 Authority Key Identifier: keyid:92:5D:A9:8B:4E:08:5D:68:0D:16:D7:BA:18:3F:0E:A5:42:6A:1A:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kl2pi04IXWgNFte6GD8OpUJqGgM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cf:57:88:d7:da:00:d3:e8:df:d5:2e:3b:f2:9c:f6:a2:69:a5: 98:c4:47:71:b0:7d:9e:73:88:64:08:de:36:2b:61:5d:29:6d: c4:4a:86:fe:57:8b:b2:8b:d4:c4:98:a6:8e:a7:67:f3:27:b6: f3:9f:b5:c9:12:39:66:97:c4:38:08:a8:1f:b1:82:b8:e8:10: 3a:65:35:4d:98:71:69:62:ba:f0:70:16:6e:8e:f7:47:98:39: 06:dd:fc:d4:94:d3:ec:47:e5:34:2a:49:28:1c:96:43:30:55: 57:56:6f:be:a9:2a:4a:3f:3c:09:ee:26:0a:5d:14:57:b2:85: cd:f5:09:69:fa:2b:75:94:ce:50:08:5e:36:1a:16:23:65:aa: 00:f2:cd:ec:70:8f:ce:05:cf:fb:63:ef:d7:c7:de:48:c6:d5: 3b:08:50:c4:ec:26:f7:e3:b5:65:ff:26:c9:e4:49:02:e2:e0: 41:00:9c:81:3f:7e:93:ad:55:d8:5c:22:04:ee:af:86:f3:96: a3:e4:84:6d:63:a5:40:5a:31:c8:44:ca:b7:bb:7e:f6:65:2a: 22:e4:19:7c:4b:e0:26:ab:c1:5c:e6:08:c9:6b:a5:98:19:e0: 2a:68:f6:e3:7d:71:57:f6:1d:36:16:b4:d8:be:c3:26:8a:8c: a5:95:22:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTIzMjAxMTAvBgNVBAUTKDkyNURBOThCNEUwODVENjgwRDE2RDdCQTE4M0YwRUE1 NDI2QTFBMDMwHhcNMjUwNDI0MjMyMjE2WhcNMjUwNTAxMjMyMjE2WjAYMRYwFAYD VQQDEw02ODBhYzdhOS03NzIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA80/XfeLqBpTa92D0MRie/Omp9nVLa2UKf1PrHIa2RYD7XSKu6TEikQ73w9a0 4UDS/jKpq24c/sGv/MD/dEu6bB/nITbqbLmaUq4aCJxb3sbfUOYXZCGYVvBsAt+t nYDM2U5+36SoyqnPFvYbHvZa8T7qmy3idKsjipxuEfd07qqYBFgvlQ7aVcmYUHKv kPFeSAtkfwGmGqenm12YOUciGLR0sdh/eeDTAZdF4O4RGE+guvcmIb4wfacpheNq +HdXgcRDGzK13e+lSei8NzmIYidjrOp7rhpA9xChKy/e0tRMciGDSKj5+5QSuZZG 5LOEMMOFJhVWqtnt5jN1+pochwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBxpNKne Ub4vHrJBMQ3FQqgQABxAMB8GA1UdIwQYMBaAFJJdqYtOCF1oDRbXuhg/DqVCahoD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjMyMC82RDcwNUJDRUZF NzAxMUVCOUNGQjkwMjlDNEY5QUUwMi9rbDJwaTA0SVhXZ05GdGU2R0Q4T3BVSnFH Z00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tsMnBpMDRJWFdnTkZ0ZTZHRDhPcFVKcUdnTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjMyMC82RDcwNUJDRUZFNzAxMUVCOUNGQjkwMjlDNEY5QUUwMi9rbDJwaTA0SVhX Z05GdGU2R0Q4T3BVSnFHZ00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDPV4jX2gDT6N/VLjvynPaiaaWYxEdxsH2ec4hkCN42K2FdKW3ESob+ V4uyi9TEmKaOp2fzJ7bzn7XJEjlml8Q4CKgfsYK46BA6ZTVNmHFpYrrwcBZujvdH mDkG3fzUlNPsR+U0KkkoHJZDMFVXVm++qSpKPzwJ7iYKXRRXsoXN9Qlp+it1lM5Q CF42GhYjZaoA8s3scI/OBc/7Y+/Xx95IxtU7CFDE7Cb347Vl/ybJ5EkC4uBBAJyB P36TrVXYXCIE7q+G85aj5IRtY6VAWjHIRMq3u372ZSoi5Bl8S+Amq8Fc5gjJa6WY GeAqaPbjfXFX9h02FrTYvsMmioyllSLk -----END CERTIFICATE-----Generated at Sat Apr 26 03:37:21 2025 by rpki-client