$ rpki-client -vvf rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.mft File: rs-kglLctVxfHrOBKIztw-b4YnQ.mft (raw, json) Hash identifier: XhjTpufvBu8gAaieYQvMlpEsXPA+1CCYTYreBEnY+GE= Subject key identifier: D6:65:71:88:AE:AD:10:08:1E:04:4B:9D:2F:70:C2:A1:67:F0:27:DD Authority key identifier: AE:CF:A4:82:52:DC:B5:5C:5F:1E:B3:81:28:8C:ED:C3:E6:F8:62:74 Certificate issuer: /CN=A91356BA/serialNumber=AECFA48252DCB55C5F1EB381288CEDC3E6F86274 Certificate serial: 86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rs-kglLctVxfHrOBKIztw-b4YnQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.mft Manifest number: 84 Signing time: Wed 07 May 2025 05:46:53 +0000 Manifest this update: Wed 07 May 2025 05:46:53 +0000 Manifest next update: Wed 14 May 2025 05:46:53 +0000 Files and hashes: 1: rs-kglLctVxfHrOBKIztw-b4YnQ.crl (hash: vCw4qUcJb6iAHfjtxB41ljuBrqpwNkjod2XS7foveIM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.crl rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rs-kglLctVxfHrOBKIztw-b4YnQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 23:16:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 134 (0x86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91356BA, serialNumber=AECFA48252DCB55C5F1EB381288CEDC3E6F86274 Validity Not Before: May 7 05:46:53 2025 GMT Not After : May 14 05:46:53 2025 GMT Subject: CN=681af3cd-d5e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ef:91:d7:9b:2f:65:50:61:bf:dc:f0:55:92: 2f:e2:ab:5a:e5:e2:a9:7b:a1:2e:07:22:b9:b6:96: df:8f:a7:6b:01:55:38:6f:3b:c6:f1:f1:85:0a:47: 61:5e:72:43:03:e5:20:ef:3d:2f:d0:64:e6:89:6e: 66:17:86:e5:16:fc:0a:1c:35:c0:cf:06:ad:bf:39: d5:50:a7:97:41:d9:82:05:aa:2b:52:c7:00:8b:6e: 2f:53:1a:7a:20:7b:4e:f3:1a:ac:26:58:7b:46:cc: 33:9e:54:d2:8e:2e:23:86:ef:46:29:09:c2:48:6f: 72:39:3d:e6:67:d0:99:72:6c:ae:29:40:c8:8b:7b: 62:f6:70:70:67:60:02:b9:cb:21:8c:f8:a5:e8:05: d5:49:ff:04:68:22:3d:bb:95:df:b2:22:65:03:73: e9:69:a5:13:1d:36:75:93:18:58:87:3f:c1:1e:3a: 2d:8b:d4:31:6e:7c:b6:86:4f:d1:e7:ba:c3:e7:27: 6d:f9:ff:94:d4:d1:ca:5e:46:a7:a7:43:1e:f7:89: da:30:b7:75:a1:22:11:8d:5a:91:99:ba:37:80:74: 41:a9:10:54:31:00:63:e6:ed:c4:27:64:19:1e:76: 30:81:e4:06:63:9f:2a:13:7e:76:66:b7:40:c9:18: f2:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:65:71:88:AE:AD:10:08:1E:04:4B:9D:2F:70:C2:A1:67:F0:27:DD X509v3 Authority Key Identifier: keyid:AE:CF:A4:82:52:DC:B5:5C:5F:1E:B3:81:28:8C:ED:C3:E6:F8:62:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rs-kglLctVxfHrOBKIztw-b4YnQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:c9:eb:55:1f:38:88:4d:fe:7f:d6:f9:4e:07:85:ca:09:0f: 68:f1:41:97:89:a6:b6:e6:55:97:60:2f:7e:59:d6:46:b9:fd: 3f:dd:00:d4:76:06:70:a9:96:a1:e3:f5:e1:92:5d:6b:1f:db: 4f:e6:c0:c7:63:ed:a0:8f:3f:c4:18:45:4d:31:da:8c:42:0f: 1c:1d:f7:b4:33:79:a6:d3:4a:8b:d1:83:89:6d:cb:08:44:07: d3:d4:37:b8:36:45:f8:28:ab:48:13:33:b9:2b:84:ae:e5:1e: 78:35:e6:65:63:66:0b:60:b8:58:d2:08:64:00:f0:50:c4:b0: d0:d4:46:2b:0f:e2:ce:2e:ee:e2:46:8b:01:91:5c:69:6a:9a: 54:6e:32:7d:47:18:18:9e:ea:f5:79:ef:98:2e:ff:ed:cc:e8: 87:07:0a:94:18:ac:cf:03:83:ce:98:73:16:ef:bf:d4:5b:4e: 19:98:0c:db:39:5f:84:a5:4c:d6:4f:81:27:a1:54:b1:34:fe: 8e:e9:1b:0c:ad:a7:96:6a:75:46:74:79:de:22:08:3d:b7:8c: 9d:b8:f8:d1:fd:ed:54:f3:11:94:20:2e:92:3c:ff:dc:bb:bf: 5b:6f:6e:61:2c:aa:d2:ff:cf:b1:66:2a:17:b4:e3:81:d8:ad: 65:5e:68:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU2QkExMTAvBgNVBAUTKEFFQ0ZBNDgyNTJEQ0I1NUM1RjFFQjM4MTI4OENFREMz RTZGODYyNzQwHhcNMjUwNTA3MDU0NjUzWhcNMjUwNTE0MDU0NjUzWjAYMRYwFAYD VQQDEw02ODFhZjNjZC1kNWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwu+R15svZVBhv9zwVZIv4qta5eKpe6EuByK5tpbfj6drAVU4bzvG8fGFCkdh XnJDA+Ug7z0v0GTmiW5mF4blFvwKHDXAzwatvznVUKeXQdmCBaorUscAi24vUxp6 IHtO8xqsJlh7RswznlTSji4jhu9GKQnCSG9yOT3mZ9CZcmyuKUDIi3ti9nBwZ2AC ucshjPil6AXVSf8EaCI9u5XfsiJlA3PpaaUTHTZ1kxhYhz/BHjoti9Qxbny2hk/R 57rD5ydt+f+U1NHKXkanp0Me94naMLd1oSIRjVqRmbo3gHRBqRBUMQBj5u3EJ2QZ HnYwgeQGY58qE352ZrdAyRjyuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNZlcYiu rRAIHgRLnS9wwqFn8CfdMB8GA1UdIwQYMBaAFK7PpIJS3LVcXx6zgSiM7cPm+GJ0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTZCQS8yNjQ1MjFEMjY5 MDUxMUVGQUQyMzA0NjRDNEY5QUUwMi9ycy1rZ2xMY3RWeGZIck9CS0l6dHctYjRZ blEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JzLWtnbExjdFZ4ZkhyT0JLSXp0dy1iNFluUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTZCQS8yNjQ1MjFEMjY5MDUxMUVGQUQyMzA0NjRDNEY5QUUwMi9ycy1rZ2xMY3RW eGZIck9CS0l6dHctYjRZblEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0yetVHziITf5/1vlOB4XKCQ9o8UGXiaa25lWXYC9+WdZGuf0/3QDU dgZwqZah4/Xhkl1rH9tP5sDHY+2gjz/EGEVNMdqMQg8cHfe0M3mm00qL0YOJbcsI RAfT1De4NkX4KKtIEzO5K4Su5R54NeZlY2YLYLhY0ghkAPBQxLDQ1EYrD+LOLu7i RosBkVxpappUbjJ9RxgYnur1ee+YLv/tzOiHBwqUGKzPA4POmHMW77/UW04ZmAzb OV+EpUzWT4EnoVSxNP6O6RsMraeWanVGdHneIgg9t4yduPjR/e1U8xGUIC6SPP/c u79bb25hLKrS/8+xZioXtOOB2K1lXmjH -----END CERTIFICATE-----Generated at Wed May 7 15:49:17 2025 by rpki-client