$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft File: KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft (raw, json) Hash identifier: 4ss1tNjEdPsCqGnHiAs9C30uiU92EMU2X13DMCxDg+s= Subject key identifier: 8A:EC:78:EB:11:C4:A2:1E:DA:F7:9B:83:2E:98:12:90:6B:95:7E:7E Authority key identifier: 2A:C5:3E:26:20:2F:4B:CB:C1:48:06:F1:3E:9E:86:0D:0A:C6:77:F9 Certificate issuer: /CN=A91A4EF9/serialNumber=2AC53E26202F4BCBC14806F13E9E860D0AC677F9 Certificate serial: DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsU-JiAvS8vBSAbxPp6GDQrGd_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft Manifest number: DB Signing time: Fri 25 Apr 2025 04:35:37 +0000 Manifest this update: Fri 25 Apr 2025 04:35:36 +0000 Manifest next update: Fri 02 May 2025 04:35:36 +0000 Files and hashes: 1: KsU-JiAvS8vBSAbxPp6GDQrGd_k.crl (hash: 8YagjxzNOFWx8938bBHn1pt487jaHkwuaLnruQ1ABCU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.crl rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsU-JiAvS8vBSAbxPp6GDQrGd_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:35:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 219 (0xdb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4EF9, serialNumber=2AC53E26202F4BCBC14806F13E9E860D0AC677F9 Validity Not Before: Apr 25 04:35:36 2025 GMT Not After : May 2 04:35:36 2025 GMT Subject: CN=680b1118-8c9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:17:72:b3:60:8d:ae:1c:99:9a:58:64:b8:02: 1c:dd:79:d2:01:fd:77:e1:f5:57:e9:1d:dc:48:b6: 4e:0b:a0:a6:98:24:a6:2b:4e:0d:66:3f:64:09:97: 12:d6:b6:77:2f:06:20:e4:5d:71:44:ff:57:50:3c: 3b:b6:06:c9:c2:df:4f:7f:54:01:79:6b:af:c3:e0: 26:b6:ea:c0:28:33:f2:e3:08:86:80:81:19:6b:29: 62:81:01:c2:08:b3:7a:22:ce:d9:ab:c0:35:51:08: 45:31:61:94:de:4c:b3:2d:4b:95:c8:04:91:fc:40: 48:d2:3a:9b:59:0d:9f:f4:ee:15:ef:65:95:bc:ab: 8e:92:db:5a:7d:f3:ef:b3:df:2f:7a:1b:b0:07:f7: 54:ad:7f:60:53:1c:9b:66:07:c3:80:6d:a0:c6:5c: 06:a1:cb:db:5f:64:18:25:43:b7:d4:15:c1:df:7c: 62:7a:32:a0:05:6f:6a:21:bd:60:0f:11:99:9f:c4: 7e:a2:7e:77:9a:8f:e6:c1:d1:11:59:67:f1:f0:4a: 8f:59:d3:bd:db:8d:d9:fc:4a:ee:88:cc:cd:e6:41: 75:e5:14:55:3e:e8:d2:6f:76:0c:b7:02:5b:b9:14: 95:2b:e8:d3:3a:1b:02:e5:21:52:44:5a:78:97:14: 6d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:EC:78:EB:11:C4:A2:1E:DA:F7:9B:83:2E:98:12:90:6B:95:7E:7E X509v3 Authority Key Identifier: keyid:2A:C5:3E:26:20:2F:4B:CB:C1:48:06:F1:3E:9E:86:0D:0A:C6:77:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsU-JiAvS8vBSAbxPp6GDQrGd_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:aa:6c:12:3c:9b:e2:e0:44:77:33:fe:d4:b3:16:77:e3:47: ed:67:b7:64:dd:c9:1f:5c:63:24:e6:85:ff:8e:56:73:5c:3f: 0e:4a:a3:19:23:9c:97:73:16:bc:f8:ef:ec:20:98:b4:62:fc: c1:f6:19:86:12:09:03:b0:96:f8:4a:b4:70:25:cd:c9:04:b8: c0:26:cf:af:40:b6:61:e5:22:45:7a:b6:d9:7e:9d:3d:9a:bf: 98:c7:81:d7:a8:00:d4:b3:a6:62:d9:79:9b:ca:71:29:8d:7f: 63:eb:db:26:22:17:a5:67:98:97:58:b5:dc:16:bd:f1:55:ea: f6:08:e0:ca:09:a6:50:0e:6e:07:61:51:86:d8:b6:b5:a9:5e: 18:d5:2c:97:53:a7:bc:ed:be:1b:ca:d8:c1:ee:0b:17:0e:94: 31:04:f3:2d:0e:38:8d:08:c9:0c:8f:7f:f9:17:e8:92:1c:60: 23:c8:93:54:67:38:48:9d:a8:a9:98:e2:6d:0a:ef:ce:70:d4: 15:49:5e:f0:44:ba:51:77:5f:75:c5:a8:1c:4c:07:43:a8:65: 58:a5:86:65:9a:eb:16:a3:13:36:ff:16:ee:4d:2e:88:d6:a2: fe:70:f0:11:25:95:76:6c:df:4a:bb:78:d4:7d:63:8e:67:10: 73:91:fc:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRFRjkxMTAvBgNVBAUTKDJBQzUzRTI2MjAyRjRCQ0JDMTQ4MDZGMTNFOUU4NjBE MEFDNjc3RjkwHhcNMjUwNDI1MDQzNTM2WhcNMjUwNTAyMDQzNTM2WjAYMRYwFAYD VQQDEw02ODBiMTExOC04YzlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAphdys2CNrhyZmlhkuAIc3XnSAf134fVX6R3cSLZOC6CmmCSmK04NZj9kCZcS 1rZ3LwYg5F1xRP9XUDw7tgbJwt9Pf1QBeWuvw+AmturAKDPy4wiGgIEZayligQHC CLN6Is7Zq8A1UQhFMWGU3kyzLUuVyASR/EBI0jqbWQ2f9O4V72WVvKuOkttaffPv s98vehuwB/dUrX9gUxybZgfDgG2gxlwGocvbX2QYJUO31BXB33xiejKgBW9qIb1g DxGZn8R+on53mo/mwdERWWfx8EqPWdO9243Z/EruiMzN5kF15RRVPujSb3YMtwJb uRSVK+jTOhsC5SFSRFp4lxRtlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIrseOsR xKIe2vebgy6YEpBrlX5+MB8GA1UdIwQYMBaAFCrFPiYgL0vLwUgG8T6ehg0Kxnf5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEVGOS83RTlFMjNGOEQx MzcxMUVFQUE5RjE5ODBDNEY5QUUwMi9Lc1UtSmlBdlM4dkJTQWJ4UHA2R0RRckdk X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tzVS1KaUF2Uzh2QlNBYnhQcDZHRFFyR2Rfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEVGOS83RTlFMjNGOEQxMzcxMUVFQUE5RjE5ODBDNEY5QUUwMi9Lc1UtSmlBdlM4 dkJTQWJ4UHA2R0RRckdkX2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwqmwSPJvi4ER3M/7UsxZ340ftZ7dk3ckfXGMk5oX/jlZzXD8OSqMZ I5yXcxa8+O/sIJi0YvzB9hmGEgkDsJb4SrRwJc3JBLjAJs+vQLZh5SJFerbZfp09 mr+Yx4HXqADUs6Zi2XmbynEpjX9j69smIhelZ5iXWLXcFr3xVer2CODKCaZQDm4H YVGG2La1qV4Y1SyXU6e87b4bytjB7gsXDpQxBPMtDjiNCMkMj3/5F+iSHGAjyJNU ZzhInaipmOJtCu/OcNQVSV7wRLpRd191xagcTAdDqGVYpYZlmusWoxM2/xbuTS6I 1qL+cPARJZV2bN9Ku3jUfWOOZxBzkfxC -----END CERTIFICATE-----Generated at Sat Apr 26 03:42:16 2025 by rpki-client