$ rpki-client -vvf rpki.apnic.net/member_repository/A912F3B6/50F011C848BA11EFBD45163DC4F9AE02/KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.mft File: KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.mft (raw, json) Hash identifier: 2ZVHVYXT6jbu1VpZWyzpriu0oBTyYICU9KehX2EHZxs= Subject key identifier: 1E:31:57:FD:05:01:08:8D:F6:97:DE:A5:FD:B7:04:84:F4:73:6C:3C Authority key identifier: 2B:13:1A:A1:0D:7E:6B:FE:A3:67:E8:1B:73:D7:FD:B0:AC:01:D6:78 Certificate issuer: /CN=A912F3B6/serialNumber=2B131AA10D7E6BFEA367E81B73D7FDB0AC01D678 Certificate serial: 9B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F3B6/50F011C848BA11EFBD45163DC4F9AE02/KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.mft Manifest number: 95 Signing time: Fri 25 Apr 2025 05:27:36 +0000 Manifest this update: Fri 25 Apr 2025 05:27:36 +0000 Manifest next update: Fri 02 May 2025 05:27:36 +0000 Files and hashes: 1: KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.crl (hash: 5H8f8JjA1FNKwuJeQKwzJyJ9u7pcsRLjqur1un+FvWU=) 2: D91E3ADC498E11EF908FD222C4F9AE02.roa (hash: +ehd8KtxPwFaqFNVmOCKeYgOq8q50OL3e4iQXY+Px88=) 3: D9C5B55A498E11EF908FD222C4F9AE02.roa (hash: IYR9mQ1VQUiO08kcI4RHdp/FLN6UHawsT13ESG27pvs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F3B6/50F011C848BA11EFBD45163DC4F9AE02/KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.crl rsync://rpki.apnic.net/member_repository/A912F3B6/50F011C848BA11EFBD45163DC4F9AE02/KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:27:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 155 (0x9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F3B6, serialNumber=2B131AA10D7E6BFEA367E81B73D7FDB0AC01D678 Validity Not Before: Apr 25 05:27:36 2025 GMT Not After : May 2 05:27:36 2025 GMT Subject: CN=680b1d48-a440 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:7a:52:7d:f2:32:13:ff:fd:1b:ad:62:f9:b4: 76:2a:56:a2:1d:73:13:0e:b6:23:10:67:16:d9:da: 47:af:98:13:f7:74:0c:45:82:fb:a1:f7:e3:91:35: 20:83:11:6c:6b:09:7b:38:d0:dd:95:26:f3:c0:70: 9f:76:d5:07:b5:e2:c8:b5:07:e7:ac:51:7c:e9:f2: 07:98:73:b3:79:17:52:9f:c9:cd:55:f2:f7:3d:3c: 6e:cf:30:76:ec:a4:61:c3:c7:38:d7:11:9d:8f:bb: 0f:62:f9:e4:19:3b:54:7a:92:10:7f:06:27:6d:42: 18:e7:90:b8:a3:5e:76:94:98:d0:a8:80:40:9d:05: 08:b3:97:06:80:6b:0a:9b:63:ed:fb:ec:a4:fc:22: d1:e2:77:be:28:f6:a4:25:7d:23:8b:d8:84:4a:a7: bc:a9:4c:9b:00:52:bd:91:cf:20:b2:27:78:aa:b4: b0:8c:6d:95:bb:00:75:b1:d3:13:88:03:10:54:1d: f3:83:d2:a3:28:b0:16:93:67:b1:92:eb:13:37:c5: 17:dd:b9:eb:0c:98:c3:7e:16:95:2d:78:01:d6:5b: b5:ac:c9:4a:22:b2:11:42:1a:d7:f9:a1:4c:54:be: 30:78:ee:91:a3:a0:c6:e1:69:77:97:f0:68:3a:d9: e5:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:31:57:FD:05:01:08:8D:F6:97:DE:A5:FD:B7:04:84:F4:73:6C:3C X509v3 Authority Key Identifier: keyid:2B:13:1A:A1:0D:7E:6B:FE:A3:67:E8:1B:73:D7:FD:B0:AC:01:D6:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F3B6/50F011C848BA11EFBD45163DC4F9AE02/KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F3B6/50F011C848BA11EFBD45163DC4F9AE02/KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:76:7e:ce:ec:67:1f:58:49:83:8d:6d:e6:6a:65:f5:70:c8: 23:d6:f7:7c:d3:c6:86:2e:5f:e9:98:af:5d:12:42:a6:e7:2e: c8:08:6f:d3:cd:1c:55:9b:c0:5b:4f:71:e7:0c:6d:43:4f:ae: 8b:9a:1a:a7:1c:b5:20:78:1c:98:ad:ac:a5:73:0c:60:11:1e: 39:90:1e:5b:45:0b:82:2d:71:57:4f:37:b3:92:d0:b1:c0:df: 64:3c:29:0f:9b:cd:20:72:83:71:50:9b:d1:d0:8d:2d:d6:a3: 01:15:df:28:9a:fb:9d:91:38:c3:f2:dc:a5:e5:ca:8a:9c:3e: 51:3c:49:d6:37:40:49:91:3d:a1:d8:59:39:31:ce:36:fe:24: 72:45:c6:1a:2b:d0:7d:07:2b:ab:90:7b:c4:1c:df:d3:2c:8b: 12:60:e6:75:55:3c:b9:b9:74:4f:68:f8:e2:2b:28:fe:e0:44: 95:a4:6f:4c:c5:42:07:30:b9:1d:a4:98:2d:39:8b:41:16:b2: 51:82:72:5c:f7:e3:00:61:d6:db:63:33:44:40:98:6b:f4:1b: 10:c0:1b:16:de:b9:05:ad:c4:c6:a2:e0:c4:d7:83:13:e5:aa: 61:ce:f1:50:79:b2:4f:7e:ad:95:53:c0:a2:6a:fb:9c:7e:2b: a5:68:39:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYzQjYxMTAvBgNVBAUTKDJCMTMxQUExMEQ3RTZCRkVBMzY3RTgxQjczRDdGREIw QUMwMUQ2NzgwHhcNMjUwNDI1MDUyNzM2WhcNMjUwNTAyMDUyNzM2WjAYMRYwFAYD VQQDEw02ODBiMWQ0OC1hNDQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1npSffIyE//9G61i+bR2KlaiHXMTDrYjEGcW2dpHr5gT93QMRYL7offjkTUg gxFsawl7ONDdlSbzwHCfdtUHteLItQfnrFF86fIHmHOzeRdSn8nNVfL3PTxuzzB2 7KRhw8c41xGdj7sPYvnkGTtUepIQfwYnbUIY55C4o152lJjQqIBAnQUIs5cGgGsK m2Pt++yk/CLR4ne+KPakJX0ji9iESqe8qUybAFK9kc8gsid4qrSwjG2VuwB1sdMT iAMQVB3zg9KjKLAWk2exkusTN8UX3bnrDJjDfhaVLXgB1lu1rMlKIrIRQhrX+aFM VL4weO6Ro6DG4Wl3l/BoOtnlGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB4xV/0F AQiN9pfepf23BIT0c2w8MB8GA1UdIwQYMBaAFCsTGqENfmv+o2foG3PX/bCsAdZ4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjNCNi81MEYwMTFDODQ4 QkExMUVGQkQ0NTE2M0RDNEY5QUUwMi9LeE1hb1ExLWFfNmpaLWdiYzlmOXNLd0Ix bmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0t4TWFvUTEtYV82alotZ2JjOWY5c0t3QjFuZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjNCNi81MEYwMTFDODQ4QkExMUVGQkQ0NTE2M0RDNEY5QUUwMi9LeE1hb1ExLWFf NmpaLWdiYzlmOXNLd0IxbmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkdn7O7GcfWEmDjW3mamX1cMgj1vd808aGLl/pmK9dEkKm5y7ICG/T zRxVm8BbT3HnDG1DT66LmhqnHLUgeByYraylcwxgER45kB5bRQuCLXFXTzezktCx wN9kPCkPm80gcoNxUJvR0I0t1qMBFd8omvudkTjD8tyl5cqKnD5RPEnWN0BJkT2h 2Fk5Mc42/iRyRcYaK9B9ByurkHvEHN/TLIsSYOZ1VTy5uXRPaPjiKyj+4ESVpG9M xUIHMLkdpJgtOYtBFrJRgnJc9+MAYdbbYzNEQJhr9BsQwBsW3rkFrcTGouDE14MT 5aphzvFQebJPfq2VU8CiavucfiulaDnH -----END CERTIFICATE-----Generated at Sat Apr 26 16:52:24 2025 by rpki-client