$ rpki-client -vvf rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft File: m-KS59FtTo6BYWnDtQLr5O9FwWM.mft (raw, json) Hash identifier: xnMZWipf9BS6Eh4pRS7z1HIwCfXHEQ+JwWQwXQwhfCo= Subject key identifier: 4C:B4:E7:F4:81:3F:8B:EE:47:CD:78:41:B6:9A:26:60:78:E8:34:A8 Authority key identifier: 9B:E2:92:E7:D1:6D:4E:8E:81:61:69:C3:B5:02:EB:E4:EF:45:C1:63 Certificate issuer: /CN=A91897B3/serialNumber=9BE292E7D16D4E8E816169C3B502EBE4EF45C163 Certificate serial: 059B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-KS59FtTo6BYWnDtQLr5O9FwWM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft Manifest number: 0592 Signing time: Thu 24 Apr 2025 23:02:01 +0000 Manifest this update: Thu 24 Apr 2025 23:02:01 +0000 Manifest next update: Thu 01 May 2025 23:02:01 +0000 Files and hashes: 1: m-KS59FtTo6BYWnDtQLr5O9FwWM.crl (hash: nG6w+9fJTWd+rFO/LsL3GGNyWD4nc1hzkcnMBrczWCk=) 2: E3D745E4049C11F0A6EDC22CC4F9AE02.roa (hash: px/As8pki2KLZRbmQBjTDtiyZ+5fgWEf49lQhcXaLv8=) 3: 034BA52C03AE11F0BDE1863DC4F9AE02.roa (hash: paq7kuxsaTc9AvIuFqICTToZpA0Jq132ZaYgNXR44RU=) 4: 6D353E4E97F711EFB3A27D59C4F9AE02.roa (hash: kw1Gr6Odxudr/FJkrtaM+rmCUMWq3czGnQtcOZ5fgIA=) 5: 101ED47C04A811F0B2A84883C4F9AE02.roa (hash: z+c9NTtbF9p/XObcI5GpVa5IpkCw1psUhuzIxI8+BQo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.crl rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-KS59FtTo6BYWnDtQLr5O9FwWM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1435 (0x59b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91897B3, serialNumber=9BE292E7D16D4E8E816169C3B502EBE4EF45C163 Validity Not Before: Apr 24 23:02:01 2025 GMT Not After : May 1 23:02:01 2025 GMT Subject: CN=680ac2e9-056b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:ee:38:29:72:6f:6f:3f:5f:b2:60:a1:8e:38: fa:ae:17:f9:f1:48:6e:fb:37:b2:a2:93:64:35:ce: 6c:67:fb:ca:8c:be:09:eb:55:e0:42:6b:42:52:c6: 73:8e:44:59:ca:04:4e:f1:1a:65:c0:34:2a:fa:27: 64:a5:77:76:b7:39:f8:ea:8d:a6:6d:8f:83:c8:c7: f0:37:6a:8d:4b:1a:87:59:bf:cf:c0:1e:5c:c4:be: 64:34:35:44:5c:3c:37:6f:27:76:23:e5:20:50:9d: c8:23:a2:f1:aa:4c:e2:37:51:40:6c:9b:6c:9e:e5: 18:54:1e:02:34:c4:65:65:b6:57:ce:ec:83:99:c0: 63:dc:fe:f1:89:c8:ba:b3:7e:33:9a:49:f0:85:5c: 3e:a1:f5:7a:15:87:7f:1f:ad:dc:d3:79:b7:ea:24: cf:36:66:ea:6c:04:d2:8b:3b:fc:44:6c:1b:52:03: 30:7d:65:71:88:d8:6f:81:ad:eb:23:2f:29:d2:6d: 8f:d8:cd:2d:ae:5a:65:0e:7e:28:e3:c3:15:0f:50: 66:f1:d6:3f:2d:27:45:87:d3:be:c5:38:43:7a:2b: 97:1f:ab:80:1c:77:f7:e2:32:d4:d4:c9:2a:5c:71: d7:80:51:6f:5c:f8:3e:98:79:5c:3a:91:9c:39:4a: de:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:B4:E7:F4:81:3F:8B:EE:47:CD:78:41:B6:9A:26:60:78:E8:34:A8 X509v3 Authority Key Identifier: keyid:9B:E2:92:E7:D1:6D:4E:8E:81:61:69:C3:B5:02:EB:E4:EF:45:C1:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-KS59FtTo6BYWnDtQLr5O9FwWM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:c9:35:f7:08:b3:bb:9f:b6:cb:cc:44:59:a1:b5:9b:f0:e0: 5c:35:17:af:cb:b4:b1:34:87:fd:3e:f4:49:de:af:ed:3e:4a: ec:28:18:70:57:52:e5:8d:83:c8:28:9d:1b:b3:22:81:b0:61: 21:b7:33:b9:99:14:53:f7:c2:5c:0b:9d:1e:ce:51:8c:9c:c8: 89:bb:d0:aa:f0:ce:7a:3e:5f:dc:9f:9e:6f:f5:44:23:89:3a: d4:c3:9c:82:b0:37:36:37:41:a4:6a:7e:4c:6b:a4:50:53:09: 20:81:bf:43:44:e9:5d:79:77:c4:b9:28:ea:c4:6c:93:a8:6e: 97:5b:a8:6e:d0:31:da:34:46:da:26:43:81:a3:36:be:a3:6a: 7f:c5:42:34:23:10:47:e5:16:b4:f9:67:5d:99:50:2a:3e:d5: 3a:6e:30:17:e7:67:5b:f9:32:43:30:33:b5:15:93:8b:7d:8a: 4b:ae:8a:1c:2c:ab:dc:f2:4a:b6:e6:09:d7:f7:ee:8a:bf:c7: e9:09:43:f9:7b:c8:35:51:0a:c9:38:2f:9e:f1:b0:09:b2:39: b8:46:b8:49:74:5b:a4:65:8a:45:31:47:25:8d:8e:b0:35:80: 44:3e:fd:d8:0f:5d:1f:4a:8b:a8:a0:24:fe:87:ca:ce:a6:aa: 9b:f9:8d:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODk3QjMxMTAvBgNVBAUTKDlCRTI5MkU3RDE2RDRFOEU4MTYxNjlDM0I1MDJFQkU0 RUY0NUMxNjMwHhcNMjUwNDI0MjMwMjAxWhcNMjUwNTAxMjMwMjAxWjAYMRYwFAYD VQQDEw02ODBhYzJlOS0wNTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4e44KXJvbz9fsmChjjj6rhf58Uhu+zeyopNkNc5sZ/vKjL4J61XgQmtCUsZz jkRZygRO8RplwDQq+idkpXd2tzn46o2mbY+DyMfwN2qNSxqHWb/PwB5cxL5kNDVE XDw3byd2I+UgUJ3II6LxqkziN1FAbJtsnuUYVB4CNMRlZbZXzuyDmcBj3P7xici6 s34zmknwhVw+ofV6FYd/H63c03m36iTPNmbqbATSizv8RGwbUgMwfWVxiNhvga3r Iy8p0m2P2M0trlplDn4o48MVD1Bm8dY/LSdFh9O+xThDeiuXH6uAHHf34jLU1Mkq XHHXgFFvXPg+mHlcOpGcOUreFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEy05/SB P4vuR814QbaaJmB46DSoMB8GA1UdIwQYMBaAFJvikufRbU6OgWFpw7UC6+TvRcFj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTdCMy82NzIxMkRGRUNF QTgxMUVCOUE5NjlFMEZDNEY5QUUwMi9tLUtTNTlGdFRvNkJZV25EdFFMcjVPOUZ3 V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL20tS1M1OUZ0VG82QllXbkR0UUxyNU85RndXTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTdCMy82NzIxMkRGRUNFQTgxMUVCOUE5NjlFMEZDNEY5QUUwMi9tLUtTNTlGdFRv NkJZV25EdFFMcjVPOUZ3V00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsyTX3CLO7n7bLzERZobWb8OBcNRevy7SxNIf9PvRJ3q/tPkrsKBhw V1LljYPIKJ0bsyKBsGEhtzO5mRRT98JcC50ezlGMnMiJu9Cq8M56Pl/cn55v9UQj iTrUw5yCsDc2N0Gkan5Ma6RQUwkggb9DROldeXfEuSjqxGyTqG6XW6hu0DHaNEba JkOBoza+o2p/xUI0IxBH5Ra0+WddmVAqPtU6bjAX52db+TJDMDO1FZOLfYpLrooc LKvc8kq25gnX9+6Kv8fpCUP5e8g1UQrJOC+e8bAJsjm4RrhJdFukZYpFMUcljY6w NYBEPv3YD10fSouooCT+h8rOpqqb+Y0V -----END CERTIFICATE-----Generated at Sat Apr 26 04:23:52 2025 by rpki-client