$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft File: ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft (raw, json) Hash identifier: xdaUl4RcsuyBexUa3beW7lB2GWhLz1IPlL1X7WJ5NLs= Subject key identifier: 46:87:0D:21:76:18:47:01:C4:7F:2C:3C:46:B1:AE:8F:27:3C:98:50 Authority key identifier: 92:D4:56:E9:9B:60:DC:ED:14:8C:93:D5:94:B6:F4:31:27:0A:24:C4 Certificate issuer: /CN=A91A1818/serialNumber=92D456E99B60DCED148C93D594B6F431270A24C4 Certificate serial: 0181 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft Manifest number: 016F Signing time: Fri 25 Apr 2025 03:06:52 +0000 Manifest this update: Fri 25 Apr 2025 03:06:51 +0000 Manifest next update: Fri 02 May 2025 03:06:51 +0000 Files and hashes: 1: ktRW6Ztg3O0UjJPVlLb0MScKJMQ.crl (hash: qoCo4sUOG0tu8hOBpLZA4vhFxSU40PB7W2gNAz9KlI4=) 2: 9F79846406E911EE88450147C4F9AE02.roa (hash: VUMq+AnQ5vAh9348tyFEWeU9Ep6U+LrIKC3PKZ58L3M=) 3: 9EE8F55206E911EE88450147C4F9AE02.roa (hash: xqi0fyo9pYw63B4k/7OwfLMW8Zv6WUfvY5OXteBY87I=) 4: E5925096093911EEABCFA170C4F9AE02.roa (hash: 9se4h5DVwbqK4ocwNJG41tqNbygd7PqouTQTwTnQqOU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.crl rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:06:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 385 (0x181) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1818, serialNumber=92D456E99B60DCED148C93D594B6F431270A24C4 Validity Not Before: Apr 25 03:06:51 2025 GMT Not After : May 2 03:06:51 2025 GMT Subject: CN=680afc4b-bf39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b0:73:5f:60:26:e8:67:5a:13:41:52:70:e3: da:6f:8b:ed:30:cb:bf:cf:e6:58:53:2c:56:64:7b: f9:11:5a:97:4d:f3:55:99:64:ed:a8:d1:b3:38:5b: 93:a5:27:b6:89:96:b6:db:39:b2:56:6b:99:5b:75: d1:35:01:7e:fe:23:b0:8a:c5:92:ea:81:7f:1d:1a: ee:b6:a2:8d:01:92:57:ae:a0:43:88:1f:0e:c1:4b: a3:be:00:c8:dd:86:1d:bc:3d:96:b2:63:98:96:9a: c8:16:63:13:31:44:bd:d8:41:d9:af:4d:17:56:47: bb:d8:1c:ce:2b:20:1a:7a:76:5c:d6:01:0e:91:10: 32:35:a4:c3:75:89:2b:95:48:d3:da:76:58:47:5d: aa:ee:bf:16:3a:24:f4:e6:71:a4:ee:3d:c3:3f:07: 2a:59:06:e5:a7:d4:9e:c4:f6:aa:d3:a2:44:4d:b5: 8b:f8:35:83:72:7d:74:84:13:ec:68:e7:ed:54:5d: 2b:a5:f8:dc:ec:85:ba:70:aa:b7:f2:61:fa:81:1a: 24:1f:e1:ce:b9:53:30:7b:e7:98:9a:97:90:29:69: 66:8f:d3:3b:30:dd:e1:bc:3b:74:31:bd:0d:a9:4c: e1:95:7f:51:73:58:45:48:77:58:b8:b1:30:33:c9: 54:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:87:0D:21:76:18:47:01:C4:7F:2C:3C:46:B1:AE:8F:27:3C:98:50 X509v3 Authority Key Identifier: keyid:92:D4:56:E9:9B:60:DC:ED:14:8C:93:D5:94:B6:F4:31:27:0A:24:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:6b:c2:0f:aa:e7:1d:ff:82:03:14:cf:aa:3f:db:1e:da:ef: 7b:19:76:1b:2d:e3:32:0e:d0:60:a5:dd:97:c9:6d:9d:27:02: fc:58:23:1f:88:6f:bc:6a:50:3c:6b:e4:d1:a9:be:cd:1e:b0: b8:05:b6:d5:54:57:f0:8b:6b:1f:74:4c:52:60:ee:30:8e:64: 8c:c0:9d:5a:22:5b:d5:c9:12:3a:12:ef:04:1a:c2:75:55:fc: 1f:5e:44:3b:4f:a3:11:0a:25:45:20:05:53:42:1a:8a:82:48: 22:48:bb:05:5c:4d:7a:4c:8c:db:a5:ac:ef:a7:4b:44:fd:f0: f8:a6:9c:11:29:6e:d0:fd:45:7a:cc:79:e6:ba:f7:98:31:22: b5:d8:6a:03:3b:72:c3:f4:cc:d0:f9:1a:de:68:7d:55:14:4e: 62:f0:3c:50:50:8b:85:f9:95:b0:17:76:08:30:de:83:74:ab: d6:e7:44:b2:d8:dc:5a:fb:f4:ed:30:c7:e9:c6:08:6f:fe:0d: 33:99:3e:e1:79:d0:d2:3b:34:ff:d5:da:49:b9:ad:85:00:ba: c8:fb:be:24:83:72:da:a5:24:22:47:b6:24:1d:8a:90:01:89: 9f:13:95:c9:55:92:9f:14:35:15:04:b8:9f:c0:a0:f6:99:7a: a3:ac:d8:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTE4MTgxMTAvBgNVBAUTKDkyRDQ1NkU5OUI2MERDRUQxNDhDOTNENTk0QjZGNDMx MjcwQTI0QzQwHhcNMjUwNDI1MDMwNjUxWhcNMjUwNTAyMDMwNjUxWjAYMRYwFAYD VQQDEw02ODBhZmM0Yi1iZjM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs7BzX2Am6GdaE0FScOPab4vtMMu/z+ZYUyxWZHv5EVqXTfNVmWTtqNGzOFuT pSe2iZa22zmyVmuZW3XRNQF+/iOwisWS6oF/HRrutqKNAZJXrqBDiB8OwUujvgDI 3YYdvD2WsmOYlprIFmMTMUS92EHZr00XVke72BzOKyAaenZc1gEOkRAyNaTDdYkr lUjT2nZYR12q7r8WOiT05nGk7j3DPwcqWQblp9SexPaq06JETbWL+DWDcn10hBPs aOftVF0rpfjc7IW6cKq38mH6gRokH+HOuVMwe+eYmpeQKWlmj9M7MN3hvDt0Mb0N qUzhlX9Rc1hFSHdYuLEwM8lUvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEaHDSF2 GEcBxH8sPEaxro8nPJhQMB8GA1UdIwQYMBaAFJLUVumbYNztFIyT1ZS29DEnCiTE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTgxOC82OEVBNzNFQzA2 OUMxMUVFOEM2Njc4MTJDNEY5QUUwMi9rdFJXNlp0ZzNPMFVqSlBWbExiME1TY0tK TVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2t0Ulc2WnRnM08wVWpKUFZsTGIwTVNjS0pNUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTgxOC82OEVBNzNFQzA2OUMxMUVFOEM2Njc4MTJDNEY5QUUwMi9rdFJXNlp0ZzNP MFVqSlBWbExiME1TY0tKTVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIa8IPqucd/4IDFM+qP9se2u97GXYbLeMyDtBgpd2XyW2dJwL8WCMf iG+8alA8a+TRqb7NHrC4BbbVVFfwi2sfdExSYO4wjmSMwJ1aIlvVyRI6Eu8EGsJ1 VfwfXkQ7T6MRCiVFIAVTQhqKgkgiSLsFXE16TIzbpazvp0tE/fD4ppwRKW7Q/UV6 zHnmuveYMSK12GoDO3LD9MzQ+RreaH1VFE5i8DxQUIuF+ZWwF3YIMN6DdKvW50Sy 2Nxa+/TtMMfpxghv/g0zmT7hedDSOzT/1dpJua2FALrI+74kg3LapSQiR7YkHYqQ AYmfE5XJVZKfFDUVBLifwKD2mXqjrNi/ -----END CERTIFICATE-----Generated at Sat Apr 26 13:41:42 2025 by rpki-client