$ rpki-client -vvf rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.mft File: kakyPLNEJvPZyJDjl4Ag1BezWfU.mft (raw, json) Hash identifier: z6hgrhJCSL5wpoUio97IyQJurUBMwxCV14O5EpNQ3k0= Subject key identifier: D2:F9:65:AF:7E:1E:ED:54:EA:9E:07:64:F2:4E:8F:16:D6:58:41:16 Authority key identifier: 91:A9:32:3C:B3:44:26:F3:D9:C8:90:E3:97:80:20:D4:17:B3:59:F5 Certificate issuer: /CN=A9151265/serialNumber=91A9323CB34426F3D9C890E3978020D417B359F5 Certificate serial: 044B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kakyPLNEJvPZyJDjl4Ag1BezWfU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.mft Manifest number: 0446 Signing time: Fri 25 Apr 2025 00:00:51 +0000 Manifest this update: Fri 25 Apr 2025 00:00:51 +0000 Manifest next update: Fri 02 May 2025 00:00:51 +0000 Files and hashes: 1: kakyPLNEJvPZyJDjl4Ag1BezWfU.crl (hash: Cu/gM7loxiLxU07D6Nm+6NRzIp0X9p6SGBr1uitrZmU=) 2: B1334FD4522011ECB0594C2BC4F9AE02.roa (hash: /FpsHXLPYXsoHcGNcebXfdYyitx9/IlpkTRLrZlFe1o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.crl rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kakyPLNEJvPZyJDjl4Ag1BezWfU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1099 (0x44b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151265, serialNumber=91A9323CB34426F3D9C890E3978020D417B359F5 Validity Not Before: Apr 25 00:00:51 2025 GMT Not After : May 2 00:00:51 2025 GMT Subject: CN=680ad0b3-4cb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:0b:0b:dd:7c:3d:5a:03:2e:66:bf:a4:76:f9: 1e:cf:03:8e:8d:d0:40:ce:8d:bc:c5:bf:93:b4:c9: 51:b3:b2:7f:08:49:ed:3b:d5:90:b5:d6:78:13:95: 24:e4:90:e0:9e:f0:c0:52:57:55:bd:20:9c:d4:d6: d9:a2:de:7f:50:9a:2e:9e:6a:00:a5:92:53:25:c8: 3d:ed:05:1b:ae:87:ae:31:b3:8c:47:48:ee:2c:ba: f3:5c:66:be:2c:73:fd:0e:5f:33:89:ab:70:8b:3e: 9d:8e:77:e4:12:7a:c8:c2:92:f2:48:6f:8b:ff:e8: 4f:b1:f1:b1:ea:df:67:b1:53:3a:9c:ad:84:e6:75: e8:dc:94:01:b0:03:6f:49:9b:ea:2d:6e:d9:e0:f6: e6:fd:af:d2:c7:80:86:52:00:d4:8d:ef:a5:5b:ca: 9b:d0:4e:9b:5d:25:ae:b4:45:f7:db:3a:35:47:99: f8:04:36:a5:50:fe:5b:ec:81:98:30:7c:a7:95:f5: 83:7c:75:31:6d:c8:73:bb:d4:b6:68:67:ab:d0:5f: 4f:10:e9:b9:9d:48:6b:8a:a1:9f:f0:52:3b:46:2c: 5b:49:2c:79:b7:5f:c7:da:36:4c:bb:02:fd:50:50: 16:d5:37:1a:a1:d6:39:c5:1e:eb:a1:c5:b4:79:03: 94:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:F9:65:AF:7E:1E:ED:54:EA:9E:07:64:F2:4E:8F:16:D6:58:41:16 X509v3 Authority Key Identifier: keyid:91:A9:32:3C:B3:44:26:F3:D9:C8:90:E3:97:80:20:D4:17:B3:59:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kakyPLNEJvPZyJDjl4Ag1BezWfU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:0f:af:4a:7a:9e:e7:8c:97:64:5e:4e:72:33:f2:53:e1:07: 95:2d:87:e8:df:b0:6d:ef:c2:97:12:77:7e:fa:7c:90:11:30: c2:a4:9c:d1:19:4a:83:f0:9e:19:b2:5c:da:12:c8:aa:2b:46: 67:08:81:5f:9f:4e:56:46:30:49:46:de:d9:e5:eb:b3:70:bf: 68:53:4d:8e:13:0b:91:02:82:06:b5:44:80:28:b7:3f:f5:25: 92:ae:d6:c5:7a:76:40:a0:f1:8a:2f:54:fb:58:04:70:c6:38: e5:3f:fb:0f:d3:07:94:cd:e7:fb:30:ed:91:84:74:36:96:ec: 8d:aa:ca:68:e2:80:2f:22:fd:90:6b:1e:72:ab:b2:fe:d7:2b: 64:38:0c:e1:63:75:f0:a4:67:fc:1f:db:ce:23:ef:4d:c3:89: 08:72:81:c1:57:b6:bc:20:12:3f:97:80:77:69:79:73:a3:e0: 69:c0:69:7d:52:03:b5:09:44:fb:f0:42:3d:b6:df:02:bf:5f: 76:6c:e6:72:e7:d4:d7:92:08:62:fa:4d:10:ab:c0:3e:99:3b: 72:2c:ed:03:bc:46:f0:0a:8b:3d:81:d0:f7:68:f6:94:ec:40: dc:7f:10:c4:d4:0e:7d:9c:d2:14:3b:40:5e:d8:f3:e6:06:fb: 9f:13:34:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTEyNjUxMTAvBgNVBAUTKDkxQTkzMjNDQjM0NDI2RjNEOUM4OTBFMzk3ODAyMEQ0 MTdCMzU5RjUwHhcNMjUwNDI1MDAwMDUxWhcNMjUwNTAyMDAwMDUxWjAYMRYwFAYD VQQDEw02ODBhZDBiMy00Y2I4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+AsL3Xw9WgMuZr+kdvkezwOOjdBAzo28xb+TtMlRs7J/CEntO9WQtdZ4E5Uk 5JDgnvDAUldVvSCc1NbZot5/UJounmoApZJTJcg97QUbroeuMbOMR0juLLrzXGa+ LHP9Dl8ziatwiz6djnfkEnrIwpLySG+L/+hPsfGx6t9nsVM6nK2E5nXo3JQBsANv SZvqLW7Z4Pbm/a/Sx4CGUgDUje+lW8qb0E6bXSWutEX32zo1R5n4BDalUP5b7IGY MHynlfWDfHUxbchzu9S2aGer0F9PEOm5nUhriqGf8FI7RixbSSx5t1/H2jZMuwL9 UFAW1TcaodY5xR7rocW0eQOU4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNL5Za9+ Hu1U6p4HZPJOjxbWWEEWMB8GA1UdIwQYMBaAFJGpMjyzRCbz2ciQ45eAINQXs1n1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTI2NS8wNTcwOUFFQTUy MUYxMUVDQjNEMDE5MkJDNEY5QUUwMi9rYWt5UExORUp2UFp5SkRqbDRBZzFCZXpX ZlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tha3lQTE5FSnZQWnlKRGpsNEFnMUJleldmVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTI2NS8wNTcwOUFFQTUyMUYxMUVDQjNEMDE5MkJDNEY5QUUwMi9rYWt5UExORUp2 UFp5SkRqbDRBZzFCZXpXZlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUD69Kep7njJdkXk5yM/JT4QeVLYfo37Bt78KXEnd++nyQETDCpJzR GUqD8J4ZslzaEsiqK0ZnCIFfn05WRjBJRt7Z5euzcL9oU02OEwuRAoIGtUSAKLc/ 9SWSrtbFenZAoPGKL1T7WARwxjjlP/sP0weUzef7MO2RhHQ2luyNqspo4oAvIv2Q ax5yq7L+1ytkOAzhY3XwpGf8H9vOI+9Nw4kIcoHBV7a8IBI/l4B3aXlzo+BpwGl9 UgO1CUT78EI9tt8Cv192bOZy59TXkghi+k0Qq8A+mTtyLO0DvEbwCos9gdD3aPaU 7EDcfxDE1A59nNIUO0Be2PPmBvufEzSW -----END CERTIFICATE-----Generated at Sat Apr 26 17:00:08 2025 by rpki-client