$ rpki-client -vvf rpki.apnic.net/member_repository/A918424C/ABCBEBD623D411EF9575324EC4F9AE02/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.mft File: KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.mft (raw, json) Hash identifier: CzYPhMF9Xku3LKY5BKqRBHgV6GY60QyyKK5OYMaA6dk= Subject key identifier: 90:E4:3C:63:47:E4:BB:D3:14:2D:F7:0B:2A:7C:4B:C0:31:2E:E4:D4 Authority key identifier: 2A:44:56:D1:72:B2:B8:6D:CD:A7:12:E6:61:F6:D9:F2:FF:19:20:38 Certificate issuer: /CN=A918424C/serialNumber=2A4456D172B2B86DCDA712E661F6D9F2FF192038 Certificate serial: A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918424C/ABCBEBD623D411EF9575324EC4F9AE02/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.mft Manifest number: A6 Signing time: Fri 25 Apr 2025 05:09:37 +0000 Manifest this update: Fri 25 Apr 2025 05:09:36 +0000 Manifest next update: Fri 02 May 2025 05:09:36 +0000 Files and hashes: 1: KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.crl (hash: BTE3B7zugSJL6T22maO8EpqEjzejZydHO3qPGuWi2N0=) 2: 4394064223D511EF9AB13E4FC4F9AE02.roa (hash: uOPt38YEsEAnQYMhJ/vWZ8Bh0zzqI6ovkE/WceLABSs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918424C/ABCBEBD623D411EF9575324EC4F9AE02/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.crl rsync://rpki.apnic.net/member_repository/A918424C/ABCBEBD623D411EF9575324EC4F9AE02/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:09:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 167 (0xa7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918424C, serialNumber=2A4456D172B2B86DCDA712E661F6D9F2FF192038 Validity Not Before: Apr 25 05:09:36 2025 GMT Not After : May 2 05:09:36 2025 GMT Subject: CN=680b1911-a2e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ba:3c:59:61:30:97:9b:54:48:70:80:60:18: 3f:f0:a3:98:c2:85:2f:da:c9:8a:c6:09:a8:6f:23: 5d:a9:6b:67:85:5f:83:b1:b0:6f:b6:d3:76:54:c6: 55:67:66:02:62:87:35:3a:08:6a:af:40:e9:e5:25: da:eb:41:db:bd:3e:79:86:b2:be:a0:d2:f6:21:7d: 5f:5a:a4:12:27:03:08:9a:7a:52:08:9d:89:70:ad: 05:33:9e:8c:27:14:61:29:eb:c5:9d:0d:c2:91:b0: bf:4b:5f:0f:ab:3e:9f:18:38:83:9e:3a:14:d4:f4: 29:3d:e6:60:ab:21:c4:45:1a:3a:b0:ba:1f:85:ce: 78:4a:4b:37:fd:f9:94:68:73:30:ef:86:4e:0d:e9: 49:c9:af:69:61:ee:ca:3f:05:9b:48:3b:73:c2:7d: 5b:d9:e7:f6:d5:76:34:fc:da:2a:ef:22:da:32:de: 5e:4e:58:22:a9:01:80:22:d3:f8:c1:5c:a6:42:20: 40:cd:c9:0e:f3:08:79:ca:96:15:7d:71:b0:d7:10: 6e:c6:e9:b1:e9:18:4e:4d:cd:91:22:4a:f2:2e:02: f6:7a:1f:76:e1:5a:51:46:df:b2:14:d6:fb:a3:7d: d9:7d:c2:a5:4d:fb:c0:3a:a3:e7:53:74:b5:9f:3a: 76:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:E4:3C:63:47:E4:BB:D3:14:2D:F7:0B:2A:7C:4B:C0:31:2E:E4:D4 X509v3 Authority Key Identifier: keyid:2A:44:56:D1:72:B2:B8:6D:CD:A7:12:E6:61:F6:D9:F2:FF:19:20:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918424C/ABCBEBD623D411EF9575324EC4F9AE02/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918424C/ABCBEBD623D411EF9575324EC4F9AE02/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:ba:9a:61:9b:cd:47:12:30:f8:3b:50:4a:d0:b2:f6:30:46: 92:42:12:1a:92:32:68:c2:6f:82:12:1a:73:c4:69:e5:88:0e: 6c:d9:6c:b9:fb:4c:8e:45:03:e7:e8:35:0d:03:8f:22:c1:60: 25:86:d2:1a:fc:35:be:3b:41:33:3f:6f:02:26:2f:9d:0a:b2: c8:af:ee:9c:c9:55:46:56:3b:6b:f0:1f:70:f4:06:b1:75:1a: 94:7f:f5:6d:38:f2:0d:13:66:16:63:7e:f6:3b:3a:cd:92:86: 7c:0c:0a:19:98:c1:69:ca:4d:ea:cd:3e:c1:71:03:6a:df:82: 23:8d:2d:21:3b:5b:fa:48:2f:09:38:9a:6f:fa:e9:80:d3:08: 2f:15:00:b3:9a:10:a7:3e:ef:e3:ee:48:f8:98:ba:8f:a7:74: 64:24:3b:77:28:e3:87:5b:15:02:46:0f:a3:a9:2a:4d:f5:53: 84:7b:3a:77:11:d6:53:54:09:a0:f2:8f:84:39:a3:44:a8:d8: 67:5e:6d:3c:d2:c9:13:4a:8b:7e:b1:91:28:8b:3e:79:f6:16: 53:92:33:b7:0d:5c:58:ae:ff:df:08:fc:4a:f0:28:2e:86:41: 96:34:24:9e:d8:77:68:98:1b:92:77:5e:0d:ab:b7:e6:5e:55: ca:17:16:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQyNEMxMTAvBgNVBAUTKDJBNDQ1NkQxNzJCMkI4NkRDREE3MTJFNjYxRjZEOUYy RkYxOTIwMzgwHhcNMjUwNDI1MDUwOTM2WhcNMjUwNTAyMDUwOTM2WjAYMRYwFAYD VQQDEw02ODBiMTkxMS1hMmU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvLo8WWEwl5tUSHCAYBg/8KOYwoUv2smKxgmobyNdqWtnhV+DsbBvttN2VMZV Z2YCYoc1Oghqr0Dp5SXa60HbvT55hrK+oNL2IX1fWqQSJwMImnpSCJ2JcK0FM56M JxRhKevFnQ3CkbC/S18Pqz6fGDiDnjoU1PQpPeZgqyHERRo6sLofhc54Sks3/fmU aHMw74ZODelJya9pYe7KPwWbSDtzwn1b2ef21XY0/Noq7yLaMt5eTlgiqQGAItP4 wVymQiBAzckO8wh5ypYVfXGw1xBuxumx6RhOTc2RIkryLgL2eh924VpRRt+yFNb7 o33ZfcKlTfvAOqPnU3S1nzp2ywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJDkPGNH 5LvTFC33Cyp8S8AxLuTUMB8GA1UdIwQYMBaAFCpEVtFysrhtzacS5mH22fL/GSA4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDI0Qy9BQkNCRUJENjIz RDQxMUVGOTU3NTMyNEVDNEY5QUUwMi9La1JXMFhLeXVHM05weExtWWZiWjh2OFpJ RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0trUlcwWEt5dUczTnB4TG1ZZmJaOHY4WklEZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDI0Qy9BQkNCRUJENjIzRDQxMUVGOTU3NTMyNEVDNEY5QUUwMi9La1JXMFhLeXVH M05weExtWWZiWjh2OFpJRGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiupphm81HEjD4O1BK0LL2MEaSQhIakjJowm+CEhpzxGnliA5s2Wy5 +0yORQPn6DUNA48iwWAlhtIa/DW+O0EzP28CJi+dCrLIr+6cyVVGVjtr8B9w9Aax dRqUf/VtOPINE2YWY372OzrNkoZ8DAoZmMFpyk3qzT7BcQNq34IjjS0hO1v6SC8J OJpv+umA0wgvFQCzmhCnPu/j7kj4mLqPp3RkJDt3KOOHWxUCRg+jqSpN9VOEezp3 EdZTVAmg8o+EOaNEqNhnXm080skTSot+sZEoiz559hZTkjO3DVxYrv/fCPxK8Cgu hkGWNCSe2HdomBuSd14Nq7fmXlXKFxaA -----END CERTIFICATE-----Generated at Sat Apr 26 03:39:37 2025 by rpki-client