$ rpki-client -vvf rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.mft File: kRJuhvGMYJQE0ZDymMMs1gn8-nk.mft (raw, json) Hash identifier: Az78Yzd+iZxypGD+DJHg7ccFS7csA+OspusfLqLwZZo= Subject key identifier: E6:35:FA:1F:26:D6:A5:5A:6A:DB:7F:1C:F8:02:CE:D4:AD:D0:C4:00 Authority key identifier: 91:12:6E:86:F1:8C:60:94:04:D1:90:F2:98:C3:2C:D6:09:FC:FA:79 Certificate issuer: /CN=A914669D/serialNumber=91126E86F18C609404D190F298C32CD609FCFA79 Certificate serial: 063A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRJuhvGMYJQE0ZDymMMs1gn8-nk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.mft Manifest number: 0635 Signing time: Thu 24 Apr 2025 22:26:31 +0000 Manifest this update: Thu 24 Apr 2025 22:26:30 +0000 Manifest next update: Thu 01 May 2025 22:26:30 +0000 Files and hashes: 1: kRJuhvGMYJQE0ZDymMMs1gn8-nk.crl (hash: 0fGzmEpmNBt1si4ALjNkA/OMoebwEEYCLO08gx8xWk8=) 2: E521C8BE8DB011EBBA0A3723C4F9AE02.roa (hash: QIcvi4uK4+sV4KonLrCq7np3/p5FTh38+jPZf45l5Uo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.crl rsync://rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRJuhvGMYJQE0ZDymMMs1gn8-nk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:26:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1594 (0x63a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914669D, serialNumber=91126E86F18C609404D190F298C32CD609FCFA79 Validity Not Before: Apr 24 22:26:30 2025 GMT Not After : May 1 22:26:30 2025 GMT Subject: CN=680aba97-0af2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:7f:0e:72:28:99:ac:19:10:07:50:d0:20:d5: 53:a0:87:70:46:ff:e7:8e:80:2f:34:fa:90:52:77: 4d:eb:8b:e3:3b:90:51:8f:42:1a:e8:a6:5f:03:d9: 03:bd:86:da:8f:3a:c4:8e:08:f5:43:b1:9a:c0:26: fa:7c:d6:ac:bd:f1:a3:bb:00:7b:7d:fd:72:86:0e: 3a:d6:30:ed:85:b4:96:93:5b:3a:a8:d4:00:d7:d4: 01:ce:95:e5:b1:33:bd:70:f5:55:55:88:1b:2d:de: 31:41:c0:6f:90:32:96:a2:bb:19:8d:71:71:b9:4e: 80:b9:2c:22:a7:fa:9f:31:d5:4b:ee:f4:24:59:c0: 61:c4:04:67:c8:89:2a:d9:7c:c7:db:55:f3:8f:bb: 0b:f1:5e:05:62:df:fa:29:c0:74:d1:98:c8:f7:85: d3:8c:87:c7:7b:24:19:28:0d:51:ed:6c:b3:56:1a: a1:3e:4c:4b:a4:83:89:8c:72:d8:8a:cb:c6:c8:36: 01:70:4b:56:9c:38:3d:ff:3c:cf:cd:60:b8:43:57: 82:81:1e:dd:3a:dd:66:e3:4f:c7:b3:d4:56:8c:e8: c3:09:90:ef:a8:52:05:29:fa:53:a9:b0:b8:1d:2f: 37:c9:fb:60:5b:85:ac:ff:d0:e3:fd:fa:12:ae:0f: 64:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:35:FA:1F:26:D6:A5:5A:6A:DB:7F:1C:F8:02:CE:D4:AD:D0:C4:00 X509v3 Authority Key Identifier: keyid:91:12:6E:86:F1:8C:60:94:04:D1:90:F2:98:C3:2C:D6:09:FC:FA:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRJuhvGMYJQE0ZDymMMs1gn8-nk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:93:56:2f:c2:1c:ac:63:3c:81:4b:6d:36:19:96:67:16:6e: a6:eb:db:39:c3:3d:33:6e:f5:84:4d:9f:63:59:20:65:f8:3e: 4b:79:e9:7f:23:16:35:6f:2e:00:e1:5c:4a:9e:39:33:6f:4d: 05:4c:a0:2e:7c:b8:96:b1:2b:ec:a6:05:05:21:a8:62:4f:de: 1c:5c:b3:71:1f:21:a6:c9:62:f6:c9:a4:e8:d2:0e:85:1d:87: 01:fe:7f:04:ac:e9:ac:a1:44:7e:8d:b6:c0:87:a1:3b:7f:9d: f6:78:b7:de:e0:db:fb:60:df:12:8d:74:13:67:62:87:2b:9e: 82:ec:d1:f7:96:2e:78:04:fc:58:bf:11:ef:cf:ef:8c:71:50: 1d:fe:1d:01:8b:cc:a4:87:b9:f6:cb:6d:87:36:eb:e3:0d:a2: 68:5d:af:58:d6:29:43:8b:e7:c1:bf:5b:eb:52:48:8b:2a:7f: 44:3a:11:d3:1a:84:ad:1d:1b:c6:39:d1:1a:4c:2b:28:b4:ee: 79:e5:79:b0:1f:dd:d4:80:15:94:4b:3c:ec:9c:62:47:1b:58: e4:7d:ff:95:2a:1a:fd:86:70:c7:cb:92:c6:06:67:3e:ec:2d: 1f:4c:9f:07:07:14:04:8a:c6:47:17:d2:9b:09:a7:ef:52:36: a4:56:5d:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDY2OUQxMTAvBgNVBAUTKDkxMTI2RTg2RjE4QzYwOTQwNEQxOTBGMjk4QzMyQ0Q2 MDlGQ0ZBNzkwHhcNMjUwNDI0MjIyNjMwWhcNMjUwNTAxMjIyNjMwWjAYMRYwFAYD VQQDEw02ODBhYmE5Ny0wYWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2X8OciiZrBkQB1DQINVToIdwRv/njoAvNPqQUndN64vjO5BRj0Ia6KZfA9kD vYbajzrEjgj1Q7GawCb6fNasvfGjuwB7ff1yhg461jDthbSWk1s6qNQA19QBzpXl sTO9cPVVVYgbLd4xQcBvkDKWorsZjXFxuU6AuSwip/qfMdVL7vQkWcBhxARnyIkq 2XzH21Xzj7sL8V4FYt/6KcB00ZjI94XTjIfHeyQZKA1R7WyzVhqhPkxLpIOJjHLY isvGyDYBcEtWnDg9/zzPzWC4Q1eCgR7dOt1m40/Hs9RWjOjDCZDvqFIFKfpTqbC4 HS83yftgW4Ws/9Dj/foSrg9k4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOY1+h8m 1qVaatt/HPgCztSt0MQAMB8GA1UdIwQYMBaAFJESbobxjGCUBNGQ8pjDLNYJ/Pp5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjY5RC9CRjZFMjBBNjhE QUUxMUVCQjI5OEI1MUZDNEY5QUUwMi9rUkp1aHZHTVlKUUUwWkR5bU1NczFnbjgt bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tSSnVodkdNWUpRRTBaRHltTU1zMWduOC1uay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjY5RC9CRjZFMjBBNjhEQUUxMUVCQjI5OEI1MUZDNEY5QUUwMi9rUkp1aHZHTVlK UUUwWkR5bU1NczFnbjgtbmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBok1YvwhysYzyBS202GZZnFm6m69s5wz0zbvWETZ9jWSBl+D5Leel/ IxY1by4A4VxKnjkzb00FTKAufLiWsSvspgUFIahiT94cXLNxHyGmyWL2yaTo0g6F HYcB/n8ErOmsoUR+jbbAh6E7f532eLfe4Nv7YN8SjXQTZ2KHK56C7NH3li54BPxY vxHvz++McVAd/h0Bi8ykh7n2y22HNuvjDaJoXa9Y1ilDi+fBv1vrUkiLKn9EOhHT GoStHRvGOdEaTCsotO555XmwH93UgBWUSzzsnGJHG1jkff+VKhr9hnDHy5LGBmc+ 7C0fTJ8HBxQEisZHF9KbCafvUjakVl3o -----END CERTIFICATE-----Generated at Sat Apr 26 17:08:53 2025 by rpki-client