$ rpki-client -vvf rpki.apnic.net/member_repository/A91876D9/9260C658061811ECBB262C5EC4F9AE02/keZpzgIVCXvU1Hehp0RrDZ0CSP8.mft File: keZpzgIVCXvU1Hehp0RrDZ0CSP8.mft (raw, json) Hash identifier: GkuL4F7pZ7X7eqqWcf2CaxwWAUd6OLlx6ciI17ylhLA= Subject key identifier: 69:98:DA:CB:85:A5:0A:CD:A0:DC:FB:E0:D5:A5:7F:7F:DC:F0:75:42 Authority key identifier: 91:E6:69:CE:02:15:09:7B:D4:D4:77:A1:A7:44:6B:0D:9D:02:48:FF Certificate issuer: /CN=A91876D9/serialNumber=91E669CE0215097BD4D477A1A7446B0D9D0248FF Certificate serial: 050B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keZpzgIVCXvU1Hehp0RrDZ0CSP8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91876D9/9260C658061811ECBB262C5EC4F9AE02/keZpzgIVCXvU1Hehp0RrDZ0CSP8.mft Manifest number: 0505 Signing time: Thu 24 Apr 2025 23:27:06 +0000 Manifest this update: Thu 24 Apr 2025 23:27:06 +0000 Manifest next update: Thu 01 May 2025 23:27:06 +0000 Files and hashes: 1: keZpzgIVCXvU1Hehp0RrDZ0CSP8.crl (hash: L5CcO4Sb0CqC0rn4wsO+B1+NZwy1Xjvcsf8H0NAjXnM=) 2: CDFDBE10061C11ECA4633B32C4F9AE02.roa (hash: phE+adBWK7PYAI4KAosAkS6IfQBeyVMqazuKmnqaEwg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91876D9/9260C658061811ECBB262C5EC4F9AE02/keZpzgIVCXvU1Hehp0RrDZ0CSP8.crl rsync://rpki.apnic.net/member_repository/A91876D9/9260C658061811ECBB262C5EC4F9AE02/keZpzgIVCXvU1Hehp0RrDZ0CSP8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keZpzgIVCXvU1Hehp0RrDZ0CSP8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:27:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1291 (0x50b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91876D9, serialNumber=91E669CE0215097BD4D477A1A7446B0D9D0248FF Validity Not Before: Apr 24 23:27:06 2025 GMT Not After : May 1 23:27:06 2025 GMT Subject: CN=680ac8ca-a04c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:58:69:0a:7e:7b:d9:68:6e:6b:df:09:6c:f9: 56:3e:57:02:76:d0:e8:34:7e:79:82:59:29:45:5c: e2:95:fa:1f:13:71:cb:27:1d:50:32:c1:bc:3f:89: c5:04:c7:f1:4f:af:3c:64:56:d3:78:5d:3f:61:a6: c4:57:6b:3b:a0:8a:0f:3c:7e:27:62:ac:7d:d7:7c: 4d:96:b7:30:d5:77:18:e5:47:4f:8a:bc:ce:58:12: 40:e1:92:e0:55:68:d2:83:58:6d:dc:ba:86:49:ce: 91:0d:39:61:4d:e9:cc:16:ff:3d:40:e3:3c:1c:e8: 79:d5:ea:eb:c8:0d:cc:f7:e0:3c:39:34:a8:44:f1: 45:b4:a1:22:cd:85:1a:3a:d8:b1:69:80:60:4b:80: 37:1c:fb:6a:bc:bf:4d:51:7a:a8:4c:d3:62:41:bc: f2:1d:dd:e1:ac:aa:36:30:fc:7e:2a:d8:f1:ff:4e: a3:c8:c0:c3:0e:3a:9e:8e:99:a6:ad:6f:f6:8f:f2: 31:4d:1d:d6:7e:29:27:16:5b:ba:6e:79:9d:e3:bf: 5c:b4:8e:87:45:fb:f3:e6:71:d6:55:65:ac:f7:39: 40:04:df:c7:13:68:8c:d4:f7:c3:bf:02:87:a9:d6: 2d:5b:7d:e1:d1:38:9c:3b:a1:43:fd:83:69:4b:d5: 73:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:98:DA:CB:85:A5:0A:CD:A0:DC:FB:E0:D5:A5:7F:7F:DC:F0:75:42 X509v3 Authority Key Identifier: keyid:91:E6:69:CE:02:15:09:7B:D4:D4:77:A1:A7:44:6B:0D:9D:02:48:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91876D9/9260C658061811ECBB262C5EC4F9AE02/keZpzgIVCXvU1Hehp0RrDZ0CSP8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keZpzgIVCXvU1Hehp0RrDZ0CSP8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91876D9/9260C658061811ECBB262C5EC4F9AE02/keZpzgIVCXvU1Hehp0RrDZ0CSP8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:8d:10:84:35:1e:71:4c:43:d0:50:42:fe:92:52:57:65:55: 23:90:ac:bf:5e:2d:ec:fe:00:a9:b6:b9:15:4a:a7:39:7c:3d: 9e:f2:70:f8:b1:a9:f0:dd:b0:92:29:c7:06:14:54:a9:f5:9a: d7:c9:46:6d:b8:ed:a6:27:a8:03:09:a1:b5:b9:30:0f:7b:36: a4:36:55:8d:58:00:c6:c6:df:aa:82:af:bf:28:59:a9:ad:cd: 9b:7d:42:5b:f0:36:c1:29:f9:95:21:08:e7:dc:88:5a:b0:ff: c9:a6:ce:a7:86:ae:20:54:9c:73:27:26:53:e7:18:b2:44:9e: 60:ec:be:01:84:fb:13:ae:45:2d:f1:b8:69:6d:ca:1a:df:48: 5b:a7:8f:b7:af:1e:34:fc:6f:03:ba:36:98:3b:67:a4:18:b1: 6a:29:99:bf:43:a2:23:f1:4b:ad:dc:6e:91:7b:88:32:de:b4: 2c:dc:db:3e:3a:60:c5:8d:8b:06:8d:ac:34:a9:13:25:b5:43: fa:b2:06:41:f6:51:00:71:50:be:c3:db:90:0b:7e:2f:fc:58: f5:a7:ed:c2:ca:04:f6:4c:cf:38:85:76:0a:fa:15:17:db:73: 86:9e:44:aa:1f:02:e7:80:10:d4:f6:8b:f4:53:e6:b4:ed:4d: 8d:99:9d:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc2RDkxMTAvBgNVBAUTKDkxRTY2OUNFMDIxNTA5N0JENEQ0NzdBMUE3NDQ2QjBE OUQwMjQ4RkYwHhcNMjUwNDI0MjMyNzA2WhcNMjUwNTAxMjMyNzA2WjAYMRYwFAYD VQQDEw02ODBhYzhjYS1hMDRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu1hpCn572Whua98JbPlWPlcCdtDoNH55glkpRVzilfofE3HLJx1QMsG8P4nF BMfxT688ZFbTeF0/YabEV2s7oIoPPH4nYqx913xNlrcw1XcY5UdPirzOWBJA4ZLg VWjSg1ht3LqGSc6RDTlhTenMFv89QOM8HOh51erryA3M9+A8OTSoRPFFtKEizYUa OtixaYBgS4A3HPtqvL9NUXqoTNNiQbzyHd3hrKo2MPx+Ktjx/06jyMDDDjqejpmm rW/2j/IxTR3WfiknFlu6bnmd479ctI6HRfvz5nHWVWWs9zlABN/HE2iM1PfDvwKH qdYtW33h0TicO6FD/YNpS9VzTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGmY2suF pQrNoNz74NWlf3/c8HVCMB8GA1UdIwQYMBaAFJHmac4CFQl71NR3oadEaw2dAkj/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzZEOS85MjYwQzY1ODA2 MTgxMUVDQkIyNjJDNUVDNEY5QUUwMi9rZVpwemdJVkNYdlUxSGVocDBSckRaMENT UDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tlWnB6Z0lWQ1h2VTFIZWhwMFJyRFowQ1NQOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzZEOS85MjYwQzY1ODA2MTgxMUVDQkIyNjJDNUVDNEY5QUUwMi9rZVpwemdJVkNY dlUxSGVocDBSckRaMENTUDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9jRCENR5xTEPQUEL+klJXZVUjkKy/Xi3s/gCptrkVSqc5fD2e8nD4 sanw3bCSKccGFFSp9ZrXyUZtuO2mJ6gDCaG1uTAPezakNlWNWADGxt+qgq+/KFmp rc2bfUJb8DbBKfmVIQjn3IhasP/Jps6nhq4gVJxzJyZT5xiyRJ5g7L4BhPsTrkUt 8bhpbcoa30hbp4+3rx40/G8DujaYO2ekGLFqKZm/Q6Ij8Uut3G6Re4gy3rQs3Ns+ OmDFjYsGjaw0qRMltUP6sgZB9lEAcVC+w9uQC34v/Fj1p+3CygT2TM84hXYK+hUX 23OGnkSqHwLngBDU9ov0U+a07U2NmZ0k -----END CERTIFICATE-----Generated at Sat Apr 26 04:29:39 2025 by rpki-client