$ rpki-client -vvf rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.mft File: kSlbu3W_quuVMbObNux1Id3jDWM.mft (raw, json) Hash identifier: MVvAt3GzmuXK/X60FaoPPk9ozaydFDkDW0v1//fvmVw= Subject key identifier: BF:19:C4:23:FD:ED:2B:A7:68:16:5F:FC:1D:B3:E0:96:79:97:BF:6A Authority key identifier: 91:29:5B:BB:75:BF:AA:EB:95:31:B3:9B:36:EC:75:21:DD:E3:0D:63 Certificate issuer: /CN=A911D9B2/serialNumber=91295BBB75BFAAEB9531B39B36EC7521DDE30D63 Certificate serial: 0138 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSlbu3W_quuVMbObNux1Id3jDWM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.mft Manifest number: 0126 Signing time: Fri 25 Apr 2025 04:06:22 +0000 Manifest this update: Fri 25 Apr 2025 04:06:22 +0000 Manifest next update: Fri 02 May 2025 04:06:22 +0000 Files and hashes: 1: kSlbu3W_quuVMbObNux1Id3jDWM.crl (hash: o4AxgTD+s4F/evg6p3Ve3r1SQJZZwQjLF9DXLrIwWWE=) 2: 11A28878915611EE83F61C41C4F9AE02.roa (hash: wRjDxSYF9ME/+w7UeeO+MKXvgDC5w3qNX+JKTSzXhtw=) 3: 59962840D01911EE96596B16C4F9AE02.roa (hash: jM6outMgdpJ44HUHhOOUfnOx+r280G0rdmU4B0AEX90=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.crl rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSlbu3W_quuVMbObNux1Id3jDWM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:06:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 312 (0x138) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D9B2, serialNumber=91295BBB75BFAAEB9531B39B36EC7521DDE30D63 Validity Not Before: Apr 25 04:06:22 2025 GMT Not After : May 2 04:06:22 2025 GMT Subject: CN=680b0a3e-aa74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:06:86:ca:5a:d7:86:04:44:83:8b:36:f5:2c: 7e:a3:37:11:19:f6:43:7a:80:7d:a3:f8:27:7c:1f: e5:85:fd:a6:5d:0a:6c:8c:57:db:0b:fb:81:c0:18: 48:db:89:af:eb:7c:d3:6d:aa:40:69:c6:01:da:80: ac:ec:d1:59:67:8b:04:67:43:cf:b5:05:54:d7:b3: 87:73:cb:10:dc:af:34:53:05:17:94:6d:43:81:be: c0:48:60:d2:3d:59:c1:43:09:63:ad:3c:d9:ce:d2: 73:cb:30:71:95:ab:48:cd:c6:eb:f2:9b:6e:37:ba: fc:6b:e1:f7:0f:96:98:11:cb:91:50:77:98:ce:a7: 0d:5d:f5:46:20:3b:de:49:46:f1:97:fd:7e:cd:c6: 01:6e:c5:19:d7:b7:e4:f8:7c:85:f7:f6:69:a1:89: aa:b8:51:22:ba:27:c3:ab:02:cf:df:55:ad:cc:01: 10:7d:ab:98:17:8e:51:6e:12:68:8d:82:bd:a5:ff: 68:a7:d6:f2:72:f0:fa:fa:d0:87:b0:fe:76:22:b9: 18:31:3b:62:ea:5c:a1:6a:d9:7e:40:ab:60:bc:ab: 5b:6f:fb:d3:1e:e2:74:cd:7d:2d:f4:11:a2:7d:b6: 22:9a:7a:b1:dd:65:67:f5:8a:ae:e4:88:06:a7:ea: 12:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:19:C4:23:FD:ED:2B:A7:68:16:5F:FC:1D:B3:E0:96:79:97:BF:6A X509v3 Authority Key Identifier: keyid:91:29:5B:BB:75:BF:AA:EB:95:31:B3:9B:36:EC:75:21:DD:E3:0D:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSlbu3W_quuVMbObNux1Id3jDWM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:90:b0:12:a0:6a:28:cb:9c:7b:77:48:a5:59:dc:ee:4b:3e: ee:f3:28:67:b3:bc:27:2a:34:64:03:36:d1:fa:cb:bf:b4:7e: c9:dd:37:9b:50:59:fc:55:80:d0:5b:a8:50:c7:47:0d:64:ae: 4a:c8:4b:a8:1f:5f:22:01:33:e1:b8:d0:ea:c0:7e:58:40:65: 3e:8d:87:78:77:c2:cd:a6:ea:15:0e:ea:e3:dd:d0:00:2c:9c: a6:67:da:f5:a3:f3:e1:6e:17:c5:e8:5e:21:47:3f:ff:9c:24: a2:a1:f3:b8:6b:7a:6f:7a:5c:89:7c:79:d8:27:c7:2b:04:9d: 26:41:91:43:66:7c:33:5e:f5:f0:44:4a:85:8e:35:c3:1e:7f: a6:32:50:2b:b3:b0:c2:5c:c9:fd:ca:e2:e0:e5:3c:3a:ae:26: 7d:42:6e:dd:57:c6:76:72:72:6d:34:39:9c:e8:d3:1d:c3:cc: 3a:83:2d:e0:99:18:35:86:87:38:a7:20:3b:39:b0:26:7d:73: 0e:1f:f1:94:49:6d:6e:6e:09:f6:e4:02:c7:54:bc:a0:07:b6: ec:fe:fd:f6:14:f4:37:14:e7:cc:e3:af:ec:3a:e6:2a:0a:33: fa:4a:86:50:2a:a4:27:00:a4:a3:a6:3b:b0:69:a7:6f:b8:93: 1b:d7:88:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ5QjIxMTAvBgNVBAUTKDkxMjk1QkJCNzVCRkFBRUI5NTMxQjM5QjM2RUM3NTIx RERFMzBENjMwHhcNMjUwNDI1MDQwNjIyWhcNMjUwNTAyMDQwNjIyWjAYMRYwFAYD VQQDEw02ODBiMGEzZS1hYTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwgaGylrXhgREg4s29Sx+ozcRGfZDeoB9o/gnfB/lhf2mXQpsjFfbC/uBwBhI 24mv63zTbapAacYB2oCs7NFZZ4sEZ0PPtQVU17OHc8sQ3K80UwUXlG1Dgb7ASGDS PVnBQwljrTzZztJzyzBxlatIzcbr8ptuN7r8a+H3D5aYEcuRUHeYzqcNXfVGIDve SUbxl/1+zcYBbsUZ17fk+HyF9/ZpoYmquFEiuifDqwLP31WtzAEQfauYF45RbhJo jYK9pf9op9bycvD6+tCHsP52IrkYMTti6lyhatl+QKtgvKtbb/vTHuJ0zX0t9BGi fbYimnqx3WVn9Yqu5IgGp+oSIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL8ZxCP9 7SunaBZf/B2z4JZ5l79qMB8GA1UdIwQYMBaAFJEpW7t1v6rrlTGzmzbsdSHd4w1j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDlCMi8wQTZGM0I0Mjkx NTUxMUVFQTRDMEY2NjhDNEY5QUUwMi9rU2xidTNXX3F1dVZNYk9iTnV4MUlkM2pE V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tTbGJ1M1dfcXV1Vk1iT2JOdXgxSWQzakRXTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDlCMi8wQTZGM0I0MjkxNTUxMUVFQTRDMEY2NjhDNEY5QUUwMi9rU2xidTNXX3F1 dVZNYk9iTnV4MUlkM2pEV00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBokLASoGooy5x7d0ilWdzuSz7u8yhns7wnKjRkAzbR+su/tH7J3Teb UFn8VYDQW6hQx0cNZK5KyEuoH18iATPhuNDqwH5YQGU+jYd4d8LNpuoVDurj3dAA LJymZ9r1o/PhbhfF6F4hRz//nCSiofO4a3pvelyJfHnYJ8crBJ0mQZFDZnwzXvXw REqFjjXDHn+mMlArs7DCXMn9yuLg5Tw6riZ9Qm7dV8Z2cnJtNDmc6NMdw8w6gy3g mRg1hoc4pyA7ObAmfXMOH/GUSW1ubgn25ALHVLygB7bs/v32FPQ3FOfM46/sOuYq CjP6SoZQKqQnAKSjpjuwaadvuJMb14h8 -----END CERTIFICATE-----Generated at Sat Apr 26 04:23:06 2025 by rpki-client