$ rpki-client -vvf rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft File: Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft (raw, json) Hash identifier: b7peJvBAfODusz3ExX7oSCViyD027Tb2EFspLL8Acqk= Subject key identifier: 43:E4:E9:8B:20:15:1B:0A:F1:4A:8B:3C:C8:D1:A7:BD:70:7B:76:0B Authority key identifier: 2A:47:75:37:F3:23:EF:B5:9D:BD:8D:BE:B3:AF:AB:1F:15:82:F5:46 Certificate issuer: /CN=A916DDB4/serialNumber=2A477537F323EFB59DBD8DBEB3AFAB1F1582F546 Certificate serial: 05D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft Manifest number: 05CA Signing time: Thu 24 Apr 2025 22:50:06 +0000 Manifest this update: Thu 24 Apr 2025 22:50:06 +0000 Manifest next update: Thu 01 May 2025 22:50:06 +0000 Files and hashes: 1: Kkd1N_Mj77WdvY2-s6-rHxWC9UY.crl (hash: D4FzbKq0DZ+lmllSN/num20bXj2LGC1IDQeOfdVyFms=) 2: B951F87ABE6D11EF933FE870C4F9AE02.roa (hash: z/OvD5EQcBmWZhdA8ip/E6h0FRzhkXq6osJ4yXLXzHc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.crl rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:50:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1489 (0x5d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DDB4, serialNumber=2A477537F323EFB59DBD8DBEB3AFAB1F1582F546 Validity Not Before: Apr 24 22:50:06 2025 GMT Not After : May 1 22:50:06 2025 GMT Subject: CN=680ac01e-8544 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:5e:bf:d8:27:f2:1b:72:86:c2:28:e5:a5:48: 17:aa:9f:f3:7e:b1:bd:ce:ee:9e:2e:13:c2:a0:ec: e4:36:f5:bf:d7:dd:b6:44:9f:b6:ae:b4:9e:12:ed: a9:bf:83:6c:d0:13:72:4b:44:c4:9d:a4:c9:ea:ac: 7d:3b:bc:84:c8:ef:59:fa:00:e2:7b:66:92:a3:91: 96:34:29:49:2a:37:36:bc:a3:fa:65:3a:2c:f9:37: a6:8b:a3:9e:4c:63:db:f7:26:ae:8b:b5:69:31:8c: cc:a5:8b:d1:67:49:13:34:da:ed:b6:80:bf:35:ba: 08:c8:b2:35:1a:ae:93:1e:90:04:d4:d8:66:bf:5c: d7:ff:75:c9:11:53:b5:43:49:76:ee:2f:ba:36:cd: bd:0f:18:34:9c:75:7a:e7:cd:42:a2:bd:ea:fd:b1: d5:7e:aa:40:a8:61:75:e0:1b:48:42:ff:17:30:6a: c3:d2:41:dd:78:05:1c:b7:f2:ca:99:1a:d9:08:61: 82:53:ae:ae:4a:64:09:71:a5:ef:a5:d8:9e:b5:a4: ea:e4:fc:87:3e:d6:bd:93:7b:45:2c:54:88:7b:9c: b2:e3:aa:3b:2c:ff:23:23:8f:6d:7d:22:de:5e:c6: ab:50:f3:4a:60:45:7f:c8:ea:7e:cf:6e:73:99:1e: b7:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:E4:E9:8B:20:15:1B:0A:F1:4A:8B:3C:C8:D1:A7:BD:70:7B:76:0B X509v3 Authority Key Identifier: keyid:2A:47:75:37:F3:23:EF:B5:9D:BD:8D:BE:B3:AF:AB:1F:15:82:F5:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:33:3b:ce:62:fc:20:75:4c:41:1c:43:bb:0f:03:72:b5:24: f0:b1:ff:c9:40:c1:38:00:da:c6:cc:81:bf:30:06:80:93:80: b6:ad:db:86:b0:62:f5:f3:b7:8a:b7:5a:7f:26:f3:18:c4:42: 40:fe:be:ad:1c:f9:fe:2f:11:31:63:2d:c8:c1:8e:f0:58:1c: 2d:45:d8:d9:c3:a5:5d:56:cf:15:7c:fb:99:19:27:32:0a:56: 0f:99:a8:53:65:64:ac:f4:1b:99:b0:df:2d:80:4b:4d:99:e3: 0b:d2:38:ad:9b:7f:26:9c:ac:dd:09:2f:31:ea:ed:f6:d5:94: 8c:b4:6e:74:cc:b5:2a:89:f1:df:c6:11:07:c4:cf:0b:a4:77: a4:06:fb:eb:b4:f7:e2:cc:c3:86:76:2f:e7:50:8f:41:d7:c1: d2:c9:8b:be:c0:4f:01:00:32:e8:9b:bf:92:dc:2d:b7:fd:c1: 2e:b3:2c:0e:2e:59:97:e3:ee:48:fb:42:2a:21:3c:bf:55:83: 2d:04:c2:28:dd:88:44:ea:a4:bf:d6:41:3a:e8:f1:7b:1a:32: fe:9c:42:ee:dc:4d:05:04:ec:c8:b2:a0:87:07:9d:f3:22:e5: c1:d0:d7:25:38:d2:0c:2b:55:8d:ca:75:34:5c:45:a6:5e:eb: e7:71:2a:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBdEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkREQjQxMTAvBgNVBAUTKDJBNDc3NTM3RjMyM0VGQjU5REJEOERCRUIzQUZBQjFG MTU4MkY1NDYwHhcNMjUwNDI0MjI1MDA2WhcNMjUwNTAxMjI1MDA2WjAYMRYwFAYD VQQDEw02ODBhYzAxZS04NTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx16/2CfyG3KGwijlpUgXqp/zfrG9zu6eLhPCoOzkNvW/1922RJ+2rrSeEu2p v4Ns0BNyS0TEnaTJ6qx9O7yEyO9Z+gDie2aSo5GWNClJKjc2vKP6ZTos+Temi6Oe TGPb9yaui7VpMYzMpYvRZ0kTNNrttoC/NboIyLI1Gq6THpAE1Nhmv1zX/3XJEVO1 Q0l27i+6Ns29Dxg0nHV6581Cor3q/bHVfqpAqGF14BtIQv8XMGrD0kHdeAUct/LK mRrZCGGCU66uSmQJcaXvpdietaTq5PyHPta9k3tFLFSIe5yy46o7LP8jI49tfSLe XsarUPNKYEV/yOp+z25zmR63ywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEPk6Ysg FRsK8UqLPMjRp71we3YLMB8GA1UdIwQYMBaAFCpHdTfzI++1nb2NvrOvqx8VgvVG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RERCNC9BNjAwODMxNkI5 MzIxMUVCQjk1RDA2M0NDNEY5QUUwMi9La2QxTl9Najc3V2R2WTItczYtckh4V0M5 VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0trZDFOX01qNzdXZHZZMi1zNi1ySHhXQzlVWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RERCNC9BNjAwODMxNkI5MzIxMUVCQjk1RDA2M0NDNEY5QUUwMi9La2QxTl9Najc3 V2R2WTItczYtckh4V0M5VVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3MzvOYvwgdUxBHEO7DwNytSTwsf/JQME4ANrGzIG/MAaAk4C2rduG sGL187eKt1p/JvMYxEJA/r6tHPn+LxExYy3IwY7wWBwtRdjZw6VdVs8VfPuZGScy ClYPmahTZWSs9BuZsN8tgEtNmeML0jitm38mnKzdCS8x6u321ZSMtG50zLUqifHf xhEHxM8LpHekBvvrtPfizMOGdi/nUI9B18HSyYu+wE8BADLom7+S3C23/cEusywO LlmX4+5I+0IqITy/VYMtBMIo3YhE6qS/1kE66PF7GjL+nELu3E0FBOzIsqCHB53z IuXB0NclONIMK1WNynU0XEWmXuvncSrM -----END CERTIFICATE-----Generated at Sat Apr 26 04:28:12 2025 by rpki-client