$ rpki-client -vvf rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/kpDEPTqSZ4Kblhzv6cETsv5ARxg.mft File: kpDEPTqSZ4Kblhzv6cETsv5ARxg.mft (raw, json) Hash identifier: ZndjlAyBA5T5ucjn6i8DpcIiTYFGQ7D8qGaANaqRe6I= Subject key identifier: 42:7F:B0:25:69:93:4C:5B:AB:DF:A8:A4:96:F6:2D:81:E1:DA:C7:EB Authority key identifier: 92:90:C4:3D:3A:92:67:82:9B:96:1C:EF:E9:C1:13:B2:FE:40:47:18 Certificate issuer: /CN=A919B883/serialNumber=9290C43D3A9267829B961CEFE9C113B2FE404718 Certificate serial: 0980 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpDEPTqSZ4Kblhzv6cETsv5ARxg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/kpDEPTqSZ4Kblhzv6cETsv5ARxg.mft Manifest number: 0973 Signing time: Thu 24 Apr 2025 20:01:40 +0000 Manifest this update: Thu 24 Apr 2025 20:01:40 +0000 Manifest next update: Thu 01 May 2025 20:01:40 +0000 Files and hashes: 1: kpDEPTqSZ4Kblhzv6cETsv5ARxg.crl (hash: I3eLB/hY2ewIBKHVkywcZr+qNbdhXdmHP8a9R8bS6kQ=) 2: BB7C684E8E0011EA90489A40C4F9AE02.roa (hash: 4L/8MzP5Gv0BrcSJxbpf30TM5iV0Rok3eBScr5m+tTk=) 3: EC4788308DFD11EA8AAFBB36C4F9AE02.roa (hash: TDeFd4z1mfEd9OqdDhf5hU/55tTk1mPNz/sxM3VsRgg=) 4: EA74C41E84D911EF9E11D46FC4F9AE02.roa (hash: iwk36RqjK4+CbUIlYGdivIX0PP8tUC3WVzRS7SZf7Rc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/kpDEPTqSZ4Kblhzv6cETsv5ARxg.crl rsync://rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/kpDEPTqSZ4Kblhzv6cETsv5ARxg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpDEPTqSZ4Kblhzv6cETsv5ARxg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2432 (0x980) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B883, serialNumber=9290C43D3A9267829B961CEFE9C113B2FE404718 Validity Not Before: Apr 24 20:01:40 2025 GMT Not After : May 1 20:01:40 2025 GMT Subject: CN=680a98a4-b624 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:cd:93:15:09:2d:e4:ee:3a:92:db:86:b1:69: f8:f5:a4:44:82:12:c5:d7:a1:fe:d6:b1:07:19:ad: 12:04:b7:24:8e:b7:ff:2a:30:89:f6:01:eb:97:16: a2:34:6f:00:18:b6:9d:83:90:83:5c:34:c1:8d:c3: a6:1f:fa:61:f7:c4:82:43:5d:90:e8:ff:a0:64:72: 19:11:f4:71:e9:f2:1f:90:92:79:41:68:7d:10:ca: 9c:cd:82:6b:59:44:ed:cd:81:d8:a0:f7:c0:23:77: 3e:45:6f:e4:51:12:71:6d:58:77:4e:54:2d:9e:97: cd:31:f1:9b:fc:47:41:ce:a7:60:15:d5:85:9c:fa: 51:8e:65:50:4d:1a:5a:84:6a:03:ca:a0:77:6c:08: 3a:13:d0:0c:63:fe:cf:cb:2e:f1:60:6a:89:52:1d: 45:a4:a7:45:91:89:04:f6:cd:a2:ab:8a:9a:45:d1: d1:3c:52:41:81:8a:5f:b6:b7:8d:fd:47:7a:da:64: 67:01:0a:76:50:f4:87:3c:aa:fb:bf:f4:f1:8c:4e: a1:dc:ab:69:9a:13:91:48:eb:4e:67:d1:b6:9c:5f: 2f:6b:83:3d:9f:cc:51:ca:6e:3a:21:02:35:37:dd: e8:09:e0:c4:e9:6a:1b:9f:07:db:6c:28:4a:06:df: 7d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:7F:B0:25:69:93:4C:5B:AB:DF:A8:A4:96:F6:2D:81:E1:DA:C7:EB X509v3 Authority Key Identifier: keyid:92:90:C4:3D:3A:92:67:82:9B:96:1C:EF:E9:C1:13:B2:FE:40:47:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/kpDEPTqSZ4Kblhzv6cETsv5ARxg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpDEPTqSZ4Kblhzv6cETsv5ARxg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/kpDEPTqSZ4Kblhzv6cETsv5ARxg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:f8:a0:c9:05:43:59:8f:0b:ba:30:ea:3c:7b:25:9f:4e:dd: 0e:cc:88:1e:4c:6f:76:5d:23:ff:ea:2a:8d:1b:09:eb:5b:f3: 79:ad:a9:a3:22:d9:c8:f2:07:c8:5a:4c:3d:e6:26:1e:9c:95: 30:45:e6:e4:59:98:f6:02:a4:c9:b8:d7:cd:a1:b7:7f:5e:c2: c1:5e:1b:47:d6:89:f0:35:33:15:da:ab:15:cc:0d:d8:dc:db: 07:57:ce:51:ed:d1:20:de:b3:63:45:1a:73:2e:88:7a:e9:85: de:1b:fb:3f:19:3c:a5:1a:15:d4:61:1a:3c:07:0c:04:b1:f5: 7d:2f:12:24:11:c3:21:65:f7:2c:a4:e6:d2:3e:55:e9:b4:71: 56:e6:c7:06:d1:7f:33:d4:30:8f:3f:cb:8a:29:a9:6a:81:94: d2:43:4e:55:bc:e3:f4:ec:fa:f6:07:a8:f4:c2:70:39:a2:71: 44:e3:dc:bd:9e:24:9f:02:d7:87:7c:e0:d9:6f:27:36:bd:63: 17:5f:ef:60:b0:8a:9f:27:5d:07:2e:65:04:ee:71:cb:8a:3b: c8:0a:aa:58:61:ad:08:c9:df:cd:77:57:e3:11:9b:26:31:2e: e2:2e:ab:5c:d1:e0:81:61:c8:21:1d:4c:bf:c2:89:80:08:7a: 90:5e:a8:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCYAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUI4ODMxMTAvBgNVBAUTKDkyOTBDNDNEM0E5MjY3ODI5Qjk2MUNFRkU5QzExM0Iy RkU0MDQ3MTgwHhcNMjUwNDI0MjAwMTQwWhcNMjUwNTAxMjAwMTQwWjAYMRYwFAYD VQQDEw02ODBhOThhNC1iNjI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAss2TFQkt5O46ktuGsWn49aREghLF16H+1rEHGa0SBLckjrf/KjCJ9gHrlxai NG8AGLadg5CDXDTBjcOmH/ph98SCQ12Q6P+gZHIZEfRx6fIfkJJ5QWh9EMqczYJr WUTtzYHYoPfAI3c+RW/kURJxbVh3TlQtnpfNMfGb/EdBzqdgFdWFnPpRjmVQTRpa hGoDyqB3bAg6E9AMY/7Pyy7xYGqJUh1FpKdFkYkE9s2iq4qaRdHRPFJBgYpftreN /Ud62mRnAQp2UPSHPKr7v/TxjE6h3KtpmhORSOtOZ9G2nF8va4M9n8xRym46IQI1 N93oCeDE6WobnwfbbChKBt99yQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEJ/sCVp k0xbq9+opJb2LYHh2sfrMB8GA1UdIwQYMBaAFJKQxD06kmeCm5Yc7+nBE7L+QEcY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Qjg4My82MkFDRkNBRThE RkQxMUVBQTM5NkE5MzZDNEY5QUUwMi9rcERFUFRxU1o0S2JsaHp2NmNFVHN2NUFS eGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2twREVQVHFTWjRLYmxoenY2Y0VUc3Y1QVJ4Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Qjg4My82MkFDRkNBRThERkQxMUVBQTM5NkE5MzZDNEY5QUUwMi9rcERFUFRxU1o0 S2JsaHp2NmNFVHN2NUFSeGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAW+KDJBUNZjwu6MOo8eyWfTt0OzIgeTG92XSP/6iqNGwnrW/N5ramj ItnI8gfIWkw95iYenJUwRebkWZj2AqTJuNfNobd/XsLBXhtH1onwNTMV2qsVzA3Y 3NsHV85R7dEg3rNjRRpzLoh66YXeG/s/GTylGhXUYRo8BwwEsfV9LxIkEcMhZfcs pObSPlXptHFW5scG0X8z1DCPP8uKKalqgZTSQ05VvOP07Pr2B6j0wnA5onFE49y9 niSfAteHfODZbyc2vWMXX+9gsIqfJ10HLmUE7nHLijvICqpYYa0Iyd/Nd1fjEZsm MS7iLqtc0eCBYcghHUy/womACHqQXqgn -----END CERTIFICATE-----Generated at Sat Apr 26 04:36:57 2025 by rpki-client