$ rpki-client -vvf rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft File: KZYjJd4LreTcndvFdq4ncBK8N1g.mft (raw, json) Hash identifier: O8UUMnFyiCi2JCMJgi7nujWIuZATteUOZeXqn0BbRVo= Subject key identifier: 55:54:ED:86:93:41:5A:26:11:7A:72:E7:1A:5C:39:E5:AF:D5:15:FD Authority key identifier: 29:96:23:25:DE:0B:AD:E4:DC:9D:DB:C5:76:AE:27:70:12:BC:37:58 Certificate issuer: /CN=A914DA2D/serialNumber=29962325DE0BADE4DC9DDBC576AE277012BC3758 Certificate serial: 1A42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KZYjJd4LreTcndvFdq4ncBK8N1g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft Manifest number: 1A26 Signing time: Thu 24 Apr 2025 16:23:12 +0000 Manifest this update: Thu 24 Apr 2025 16:23:12 +0000 Manifest next update: Thu 01 May 2025 16:23:12 +0000 Files and hashes: 1: KZYjJd4LreTcndvFdq4ncBK8N1g.crl (hash: zrmOWXdG84mkZqMfeIac91B2Nb+q9ZMMBmqrymv9o+w=) 2: A0769964641D11EFA3C4902EC4F9AE02.roa (hash: YiQQCnKQlSh2g27BuutnhmwEnJ5qDzk3kEj9SOd11G4=) 3: B201496EF3A311EC8804FE09C4F9AE02.roa (hash: RhwUVojEG1WuV9dRF2T14LTQ1Wlv5CN2R82nJUIH6fo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.crl rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KZYjJd4LreTcndvFdq4ncBK8N1g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:23:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6722 (0x1a42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DA2D, serialNumber=29962325DE0BADE4DC9DDBC576AE277012BC3758 Validity Not Before: Apr 24 16:23:12 2025 GMT Not After : May 1 16:23:12 2025 GMT Subject: CN=680a6570-85ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:18:bc:37:a5:17:26:70:74:d4:8e:3f:d4:70: 59:d1:ec:fc:9d:85:75:20:ff:ac:c5:a9:e3:bb:d8: de:1a:6f:b9:1c:eb:05:f1:63:e6:7e:84:0a:83:d8: ba:88:78:b9:55:69:4f:cd:ff:ba:4b:e6:c4:42:f2: 53:33:a0:e8:86:8c:61:3a:53:5b:44:c7:1c:d7:13: 23:87:03:a7:04:d5:bc:f5:73:da:6a:bf:55:72:82: a5:76:b9:c3:f0:e0:04:49:18:3e:a3:7e:28:27:69: 06:2f:d5:d4:bf:5a:30:e3:bd:9c:9d:2b:12:8e:5e: e9:59:f1:87:7a:ef:fb:1b:b0:56:b8:9c:5c:11:dc: 45:41:03:21:ff:ae:4a:bb:8e:48:db:73:ae:f1:cf: f6:2b:f7:4f:55:45:75:4e:c7:ba:38:d5:5d:26:d3: 0b:2e:09:41:1c:6c:a4:2b:cb:7f:4e:d2:a5:96:2c: 98:a9:4c:f6:c6:b7:ab:8f:5f:48:32:f5:23:ca:5a: fb:d4:b0:b0:94:95:df:20:0b:8b:92:c8:d7:88:b8: ca:59:9d:a5:e8:41:98:f8:e6:37:22:a6:47:de:8a: 6f:09:52:84:f2:fe:35:4d:95:cd:38:5a:9d:f5:df: c9:1b:5c:38:b3:6f:54:4c:ce:b1:a7:40:fc:85:e6: 25:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:54:ED:86:93:41:5A:26:11:7A:72:E7:1A:5C:39:E5:AF:D5:15:FD X509v3 Authority Key Identifier: keyid:29:96:23:25:DE:0B:AD:E4:DC:9D:DB:C5:76:AE:27:70:12:BC:37:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KZYjJd4LreTcndvFdq4ncBK8N1g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:be:1e:fa:b8:89:f8:cf:4c:55:9e:6d:db:26:b6:92:71:ab: 85:80:f4:7a:2b:04:0c:8b:dc:e2:4f:bd:17:dc:9c:cc:48:05: 6f:0c:fb:f6:a4:68:50:00:c1:5f:74:d6:4c:7a:ad:e6:38:6a: 9c:c8:38:74:d6:13:68:51:b8:40:22:71:e7:aa:88:10:79:77: ff:0f:90:27:a2:7f:cd:5d:6f:0f:3f:6a:ac:fc:66:99:25:12: e4:71:11:c4:ec:71:cb:33:d4:c7:87:3e:4d:59:3b:02:e4:03: b2:6a:0a:03:a8:ed:4e:06:a7:b1:dd:dc:52:5b:1a:fb:cb:04: 7f:da:65:ac:27:ea:75:6d:a2:0d:82:02:47:30:c6:26:8b:da: e2:3c:94:5b:ea:07:41:d5:48:12:8e:a6:c8:0c:6a:12:b1:e0: eb:4e:5a:ca:4a:bc:3f:dd:20:23:a4:dd:39:9b:c4:7a:18:61: 50:74:dd:02:4f:d6:3e:6d:40:72:cf:ed:e9:2f:2f:bb:95:68: 30:93:fc:d5:46:60:91:dc:c0:30:01:ff:68:84:b2:8c:50:87: 62:2b:23:bd:a9:02:73:b2:44:9b:9c:91:b2:cd:93:02:c8:2a: b3:36:54:0a:0c:74:31:66:78:5f:e1:ca:23:b2:21:8d:d8:b6: 18:38:f6:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGkIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NERBMkQxMTAvBgNVBAUTKDI5OTYyMzI1REUwQkFERTREQzlEREJDNTc2QUUyNzcw MTJCQzM3NTgwHhcNMjUwNDI0MTYyMzEyWhcNMjUwNTAxMTYyMzEyWjAYMRYwFAYD VQQDEw02ODBhNjU3MC04NWVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtxi8N6UXJnB01I4/1HBZ0ez8nYV1IP+sxanju9jeGm+5HOsF8WPmfoQKg9i6 iHi5VWlPzf+6S+bEQvJTM6DohoxhOlNbRMcc1xMjhwOnBNW89XPaar9VcoKldrnD 8OAESRg+o34oJ2kGL9XUv1ow472cnSsSjl7pWfGHeu/7G7BWuJxcEdxFQQMh/65K u45I23Ou8c/2K/dPVUV1Tse6ONVdJtMLLglBHGykK8t/TtKlliyYqUz2xrerj19I MvUjylr71LCwlJXfIAuLksjXiLjKWZ2l6EGY+OY3IqZH3opvCVKE8v41TZXNOFqd 9d/JG1w4s29UTM6xp0D8heYlxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFVU7YaT QVomEXpy5xpcOeWv1RX9MB8GA1UdIwQYMBaAFCmWIyXeC63k3J3bxXauJ3ASvDdY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REEyRC84MzgzNjIwQTUw RDUxMUU3OUVDRTQwMTNDNEY5QUUwMi9LWllqSmQ0THJlVGNuZHZGZHE0bmNCSzhO MWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0taWWpKZDRMcmVUY25kdkZkcTRuY0JLOE4xZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 REEyRC84MzgzNjIwQTUwRDUxMUU3OUVDRTQwMTNDNEY5QUUwMi9LWllqSmQ0THJl VGNuZHZGZHE0bmNCSzhOMWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGvh76uIn4z0xVnm3bJraScauFgPR6KwQMi9ziT70X3JzMSAVvDPv2 pGhQAMFfdNZMeq3mOGqcyDh01hNoUbhAInHnqogQeXf/D5Anon/NXW8PP2qs/GaZ JRLkcRHE7HHLM9THhz5NWTsC5AOyagoDqO1OBqex3dxSWxr7ywR/2mWsJ+p1baIN ggJHMMYmi9riPJRb6gdB1UgSjqbIDGoSseDrTlrKSrw/3SAjpN05m8R6GGFQdN0C T9Y+bUByz+3pLy+7lWgwk/zVRmCR3MAwAf9ohLKMUIdiKyO9qQJzskSbnJGyzZMC yCqzNlQKDHQxZnhf4cojsiGN2LYYOPZK -----END CERTIFICATE-----Generated at Sat Apr 26 13:33:26 2025 by rpki-client