$ rpki-client -vvf rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft File: kcSXberT3od45cDc_yYDlxrC1Ns.mft (raw, json) Hash identifier: ZujT1qZhJfZ518cNgJE4jfbVd4Hl3YcFwXPn1U/cvzw= Subject key identifier: C4:77:F1:D0:C5:89:90:A7:A1:9E:C0:E1:4A:A8:AE:AD:50:82:6C:4D Authority key identifier: 91:C4:97:6D:EA:D3:DE:87:78:E5:C0:DC:FF:26:03:97:1A:C2:D4:DB Certificate issuer: /CN=A9123F84/serialNumber=91C4976DEAD3DE8778E5C0DCFF2603971AC2D4DB Certificate serial: 01CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft Manifest number: 01C4 Signing time: Fri 25 Apr 2025 02:09:35 +0000 Manifest this update: Fri 25 Apr 2025 02:09:34 +0000 Manifest next update: Fri 02 May 2025 02:09:34 +0000 Files and hashes: 1: kcSXberT3od45cDc_yYDlxrC1Ns.crl (hash: 8W4acONuKV2f+jMXPJkTakKtpzExcy3qszzZKuepnXQ=) 2: 24783DA46F3211EDA3DCF033C4F9AE02.roa (hash: qtI3PzkdqX+ax/bSegc1SLzhSYkSDBIGZPjolcu7R3M=) 3: 24FDC2446F3211EDA3DCF033C4F9AE02.roa (hash: d2+un5XTDgzJbWROr+IzD11y+bXi6HVh7GN60G2Vs5w=) 4: 25DD10F26F3211EDA3DCF033C4F9AE02.roa (hash: sj2URhxZjW3y0qKioZtUw0R7cEojajRcOxadk4cHwRY=) 5: D29F544CFCD711EEB654B271C4F9AE02.roa (hash: IcwXnPB2ehwiVEdMK3NN6Y5gPNM9uX8Kc+jyAk4uAcM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.crl rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:09:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 463 (0x1cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123F84, serialNumber=91C4976DEAD3DE8778E5C0DCFF2603971AC2D4DB Validity Not Before: Apr 25 02:09:34 2025 GMT Not After : May 2 02:09:34 2025 GMT Subject: CN=680aeede-a3ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:75:08:d7:f2:23:fa:23:84:62:8e:25:53:9f: e4:61:f3:2b:e3:04:a6:50:6d:04:76:39:1a:76:96: 78:98:98:3e:be:4e:f4:63:5a:66:28:8d:64:e8:70: a7:1a:0b:c1:4c:20:a9:06:f5:84:e2:ad:94:97:f2: 93:11:dc:78:f5:cc:fd:49:0e:bf:92:28:d4:6a:bc: 9a:10:61:8c:3a:bc:fa:6b:02:98:d3:c4:20:e8:5c: d5:f4:ca:df:d2:a4:46:71:56:31:38:fb:6b:95:6f: f6:78:06:0f:fb:00:5c:cb:e3:77:ba:82:5f:27:c8: a9:78:46:c7:cc:de:4d:66:9d:0f:bc:cb:b4:92:ad: 4a:0d:36:68:d0:43:dd:84:10:3c:92:b7:2b:2f:9e: 0b:8d:b2:eb:e4:6c:88:3e:5d:b9:50:e7:5a:6d:2e: da:f9:9c:fd:34:1e:e6:b5:7b:4a:1c:f3:06:42:09: 3e:9f:e5:47:44:be:65:e0:17:1d:db:f6:67:59:d4: d3:e9:03:ef:48:da:03:28:0c:4d:b7:32:05:ba:40: 5e:1e:d2:b3:28:8e:ef:a3:d2:80:4e:17:03:bb:87: f9:62:04:57:84:5e:97:b1:ed:15:15:81:02:7f:5e: a7:c3:c9:37:7c:e5:9d:3d:6c:35:5d:bf:0d:e5:59: 5b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:77:F1:D0:C5:89:90:A7:A1:9E:C0:E1:4A:A8:AE:AD:50:82:6C:4D X509v3 Authority Key Identifier: keyid:91:C4:97:6D:EA:D3:DE:87:78:E5:C0:DC:FF:26:03:97:1A:C2:D4:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:c5:b7:ff:ed:ce:67:fb:f2:37:26:c6:96:4a:b3:c2:09:74: ed:f3:92:3c:1c:02:64:67:a2:2a:14:8f:a8:c6:33:b4:2e:69: 85:7a:54:7f:20:7d:69:cb:dd:41:05:9a:03:ac:71:ca:c5:db: 2a:8b:d9:57:57:c5:3d:2f:62:6f:b4:4f:52:73:fe:5e:82:41: bc:68:f4:05:91:07:b5:4f:2d:7c:85:36:8a:4e:4e:67:cd:be: cc:e8:1c:b9:de:74:6c:07:c6:4a:53:5f:4e:d3:e8:60:4c:36: 02:0d:d9:82:dc:95:8c:7e:e6:2a:95:36:86:82:40:06:30:69: a1:ca:45:40:5e:8e:c5:8a:c4:9f:73:44:24:ed:b6:f4:26:0e: e6:98:39:22:c7:b2:31:fd:c8:94:81:fc:f6:3c:12:22:56:c1: eb:c9:32:67:ab:69:d2:28:c3:98:42:88:09:f2:8a:7d:12:ce: 04:a1:a3:94:3a:2c:02:dd:ed:fa:8c:5c:07:56:2c:22:8b:56: a6:89:99:30:fc:25:45:56:ce:e1:15:dc:f4:10:d8:07:d5:1b: 02:80:63:6e:9d:8a:9f:f9:61:4d:52:7b:f7:fd:96:04:bf:17: c9:85:58:2a:a9:dd:b4:2d:5b:60:94:04:04:1a:cd:44:d6:df: d6:8b:c1:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAc8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNGODQxMTAvBgNVBAUTKDkxQzQ5NzZERUFEM0RFODc3OEU1QzBEQ0ZGMjYwMzk3 MUFDMkQ0REIwHhcNMjUwNDI1MDIwOTM0WhcNMjUwNTAyMDIwOTM0WjAYMRYwFAYD VQQDEw02ODBhZWVkZS1hM2JhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmHUI1/Ij+iOEYo4lU5/kYfMr4wSmUG0EdjkadpZ4mJg+vk70Y1pmKI1k6HCn GgvBTCCpBvWE4q2Ul/KTEdx49cz9SQ6/kijUaryaEGGMOrz6awKY08Qg6FzV9Mrf 0qRGcVYxOPtrlW/2eAYP+wBcy+N3uoJfJ8ipeEbHzN5NZp0PvMu0kq1KDTZo0EPd hBA8krcrL54LjbLr5GyIPl25UOdabS7a+Zz9NB7mtXtKHPMGQgk+n+VHRL5l4Bcd 2/ZnWdTT6QPvSNoDKAxNtzIFukBeHtKzKI7vo9KAThcDu4f5YgRXhF6Xse0VFYEC f16nw8k3fOWdPWw1Xb8N5VlbXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMR38dDF iZCnoZ7A4Uqorq1QgmxNMB8GA1UdIwQYMBaAFJHEl23q096HeOXA3P8mA5cawtTb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0Y4NC9GNDNBM0YwNDZG MkYxMUVEQTg0QTY5MzNDNEY5QUUwMi9rY1NYYmVyVDNvZDQ1Y0RjX3lZRGx4ckMx TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tjU1hiZXJUM29kNDVjRGNfeVlEbHhyQzFOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0Y4NC9GNDNBM0YwNDZGMkYxMUVEQTg0QTY5MzNDNEY5QUUwMi9rY1NYYmVyVDNv ZDQ1Y0RjX3lZRGx4ckMxTnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOxbf/7c5n+/I3JsaWSrPCCXTt85I8HAJkZ6IqFI+oxjO0LmmFelR/ IH1py91BBZoDrHHKxdsqi9lXV8U9L2JvtE9Sc/5egkG8aPQFkQe1Ty18hTaKTk5n zb7M6By53nRsB8ZKU19O0+hgTDYCDdmC3JWMfuYqlTaGgkAGMGmhykVAXo7FisSf c0Qk7bb0Jg7mmDkix7Ix/ciUgfz2PBIiVsHryTJnq2nSKMOYQogJ8op9Es4EoaOU OiwC3e36jFwHViwii1amiZkw/CVFVs7hFdz0ENgH1RsCgGNunYqf+WFNUnv3/ZYE vxfJhVgqqd20LVtglAQEGs1E1t/Wi8GH -----END CERTIFICATE-----Generated at Sat Apr 26 05:54:59 2025 by rpki-client