$ rpki-client -vvf rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.mft File: kxWcm2Ez9IBvuyjGIl6UOWOmsAE.mft (raw, json) Hash identifier: K9s2jGgDR6BGJTZlDbPxiX7cRJHPiAIscgEJyF0QIeY= Subject key identifier: A7:EC:32:F3:F7:56:ED:CC:7F:99:10:21:DA:97:A3:91:A3:FD:1C:02 Authority key identifier: 93:15:9C:9B:61:33:F4:80:6F:BB:28:C6:22:5E:94:39:63:A6:B0:01 Certificate issuer: /CN=A912EDB7/serialNumber=93159C9B6133F4806FBB28C6225E943963A6B001 Certificate serial: 0C5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.mft Manifest number: 0C52 Signing time: Thu 24 Apr 2025 18:14:55 +0000 Manifest this update: Thu 24 Apr 2025 18:14:54 +0000 Manifest next update: Thu 01 May 2025 18:14:53 +0000 Files and hashes: 1: kxWcm2Ez9IBvuyjGIl6UOWOmsAE.crl (hash: wUu8wkUgU0bvn6egvTMBXK4BOVFi1GFKwKZNW6rauhA=) 2: 18CA7386E35511EDA63D5182C4F9AE02.roa (hash: dvi0NiJsfBapKtj0ISklbEMBQ4R3yCT+QGTIlcMVI/A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.crl rsync://rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:14:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3163 (0xc5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912EDB7, serialNumber=93159C9B6133F4806FBB28C6225E943963A6B001 Validity Not Before: Apr 24 18:14:54 2025 GMT Not After : May 1 18:14:53 2025 GMT Subject: CN=680a7f9e-9c88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:3a:b4:bc:b0:26:0f:fb:00:9e:14:21:fa:bb: 47:22:2d:66:a2:98:3d:5b:ac:db:1a:d0:bb:9b:71: c2:c9:97:1c:ba:46:ef:45:d9:9d:47:94:0f:8b:da: c8:e4:fa:3a:08:df:6b:09:2f:14:17:50:f8:60:f9: a5:2c:af:bf:88:38:cd:45:5d:f1:4a:d1:95:97:02: 42:6a:97:e2:57:5f:95:3f:21:9a:10:d1:ae:a1:e3: 45:f4:83:45:35:80:c2:1d:42:58:9f:7d:87:96:e7: 56:53:4d:21:1b:55:e7:56:d2:79:07:32:21:d7:b1: 36:06:6e:98:3d:37:38:b7:24:1f:fc:63:8c:e4:69: 32:4a:a4:ed:7b:df:55:f9:2e:18:63:3e:35:8d:0f: f6:cf:de:3c:d5:27:36:58:63:d2:d6:ee:cc:56:77: 66:a8:52:7f:d6:02:c7:e9:fe:9a:6c:61:09:ab:32: a0:ed:8c:b3:da:af:f1:7f:bc:da:da:13:f1:35:be: 70:74:7d:86:36:d9:5b:e1:7c:39:4d:32:df:65:8d: 5a:0e:f1:dc:7a:36:8b:3d:f6:2f:80:aa:b3:cb:67: 9b:1c:f0:91:13:e5:a6:c9:5c:e9:34:0a:9a:0a:a5: 44:92:8d:b1:62:99:42:ea:22:e4:24:38:ab:c3:49: 5a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:EC:32:F3:F7:56:ED:CC:7F:99:10:21:DA:97:A3:91:A3:FD:1C:02 X509v3 Authority Key Identifier: keyid:93:15:9C:9B:61:33:F4:80:6F:BB:28:C6:22:5E:94:39:63:A6:B0:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:67:12:80:ce:b0:d2:56:e1:d6:c6:cd:e0:63:33:8b:21:c8: 28:ee:34:5c:28:32:e7:89:96:0d:20:a4:5f:47:57:e6:94:f6: 86:c4:41:2d:1c:c2:4b:ec:33:21:8b:c6:a2:ef:7f:5c:94:7a: 88:14:ae:ae:49:42:ac:45:78:2c:4f:65:47:81:df:78:33:18: aa:81:ed:83:3a:e2:d2:5a:c0:db:98:b7:e1:15:08:a9:0c:a7: 5a:41:1d:32:2d:cb:ff:0c:45:1b:3d:16:fc:92:57:b7:7c:33: 5f:fc:e4:5c:cc:eb:7f:ba:7c:e9:bc:9e:2c:f5:bb:92:bc:39: e7:19:6c:e7:a2:e3:0b:03:ad:19:dc:d9:15:61:7e:24:d4:79: 0e:97:97:5d:50:f9:da:1d:ce:bd:c9:19:d4:84:1e:1b:f5:0b: 2a:2e:e5:f8:4b:47:28:4e:eb:d2:5c:7a:03:43:64:97:36:9b: 5b:fe:6b:44:d4:54:25:7d:95:65:63:62:5f:01:12:42:82:62: 66:e7:02:56:2e:1f:9e:35:fb:f3:cf:76:c6:06:68:9c:82:4d: 32:a8:62:0c:5d:ec:bd:ae:6d:e5:40:b2:c8:da:8d:82:75:81: d9:8a:fc:2a:bf:d1:d5:0b:15:4e:9b:25:57:5b:28:60:51:d7: 4b:70:e7:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkVEQjcxMTAvBgNVBAUTKDkzMTU5QzlCNjEzM0Y0ODA2RkJCMjhDNjIyNUU5NDM5 NjNBNkIwMDEwHhcNMjUwNDI0MTgxNDU0WhcNMjUwNTAxMTgxNDUzWjAYMRYwFAYD VQQDEw02ODBhN2Y5ZS05Yzg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2zq0vLAmD/sAnhQh+rtHIi1mopg9W6zbGtC7m3HCyZccukbvRdmdR5QPi9rI 5Po6CN9rCS8UF1D4YPmlLK+/iDjNRV3xStGVlwJCapfiV1+VPyGaENGuoeNF9INF NYDCHUJYn32HludWU00hG1XnVtJ5BzIh17E2Bm6YPTc4tyQf/GOM5GkySqTte99V +S4YYz41jQ/2z9481Sc2WGPS1u7MVndmqFJ/1gLH6f6abGEJqzKg7Yyz2q/xf7za 2hPxNb5wdH2GNtlb4Xw5TTLfZY1aDvHcejaLPfYvgKqzy2ebHPCRE+WmyVzpNAqa CqVEko2xYplC6iLkJDirw0la2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKfsMvP3 Vu3Mf5kQIdqXo5Gj/RwCMB8GA1UdIwQYMBaAFJMVnJthM/SAb7soxiJelDljprAB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRURCNy80NjE2MkFEQUZF RDIxMUU5ODdGRkMyMTdDNEY5QUUwMi9reFdjbTJFejlJQnZ1eWpHSWw2VU9XT21z QUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2t4V2NtMkV6OUlCdnV5akdJbDZVT1dPbXNBRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RURCNy80NjE2MkFEQUZFRDIxMUU5ODdGRkMyMTdDNEY5QUUwMi9reFdjbTJFejlJ QnZ1eWpHSWw2VU9XT21zQUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvZxKAzrDSVuHWxs3gYzOLIcgo7jRcKDLniZYNIKRfR1fmlPaGxEEt HMJL7DMhi8ai739clHqIFK6uSUKsRXgsT2VHgd94Mxiqge2DOuLSWsDbmLfhFQip DKdaQR0yLcv/DEUbPRb8kle3fDNf/ORczOt/unzpvJ4s9buSvDnnGWznouMLA60Z 3NkVYX4k1HkOl5ddUPnaHc69yRnUhB4b9QsqLuX4S0coTuvSXHoDQ2SXNptb/mtE 1FQlfZVlY2JfARJCgmJm5wJWLh+eNfvzz3bGBmicgk0yqGIMXey9rm3lQLLI2o2C dYHZivwqv9HVCxVOmyVXWyhgUddLcOdi -----END CERTIFICATE-----Generated at Sat Apr 26 14:08:09 2025 by rpki-client