$ rpki-client -vvf rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.mft File: KxuyStzbFPbix7uy2Iq62x3diY0.mft (raw, json) Hash identifier: cjRDSGFloE9PQo3ixQ3Wy59GmCfv0gEu8XM2jhkAY98= Subject key identifier: 5C:43:6C:CA:67:F7:05:6D:C4:4C:F6:46:D7:11:67:C6:36:DB:3D:4F Authority key identifier: 2B:1B:B2:4A:DC:DB:14:F6:E2:C7:BB:B2:D8:8A:BA:DB:1D:DD:89:8D Certificate issuer: /CN=A91A80D2/serialNumber=2B1BB24ADCDB14F6E2C7BBB2D88ABADB1DDD898D Certificate serial: 02EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxuyStzbFPbix7uy2Iq62x3diY0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.mft Manifest number: 02E8 Signing time: Fri 25 Apr 2025 01:05:20 +0000 Manifest this update: Fri 25 Apr 2025 01:05:19 +0000 Manifest next update: Fri 02 May 2025 01:05:19 +0000 Files and hashes: 1: KxuyStzbFPbix7uy2Iq62x3diY0.crl (hash: ID8trP+tSnIkaKFQHX0TXKKZT47DGQCIKUQgbB/28HI=) 2: 3486D47412D511EFB1EF161DC4F9AE02.roa (hash: Crj6EQEsFsVZ7Rl37tD7+KlB9qlhMrOAHvL0KyIGgkI=) 3: 95CA439CDAE211ECA14A8254C4F9AE02.roa (hash: 16TIMxSDuDuwbvd9GQ+m4o06d2DMg8lDV7WSYdSxPbs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.crl rsync://rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxuyStzbFPbix7uy2Iq62x3diY0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:05:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 750 (0x2ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A80D2, serialNumber=2B1BB24ADCDB14F6E2C7BBB2D88ABADB1DDD898D Validity Not Before: Apr 25 01:05:19 2025 GMT Not After : May 2 01:05:19 2025 GMT Subject: CN=680adfcf-8fc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:51:62:5a:b5:ad:ae:f0:70:37:c0:87:5e:19: fe:fa:42:16:73:02:78:1c:de:2d:40:ea:fa:02:e3: cf:3f:fc:19:fe:59:8e:5d:f0:05:89:41:fa:6d:95: dc:93:3f:e0:47:09:27:61:6c:39:b4:2a:87:a6:ae: ba:31:b3:0a:10:e5:91:ab:70:64:25:62:c8:32:9d: 3b:cb:12:dc:fc:db:47:48:a9:b9:3d:f4:6e:c3:d9: 74:29:02:91:5e:e5:ca:37:89:14:e8:a8:2b:53:d5: 62:13:86:4a:c7:c9:57:e3:08:33:59:39:17:0a:6a: e5:19:7f:85:bd:75:d9:5b:28:b6:35:b5:d9:29:29: 8d:e9:06:02:29:4d:87:28:b2:43:7c:4a:1f:0c:e5: 40:05:05:51:ab:63:8b:50:d1:03:f4:f9:00:58:a4: f2:3a:b2:56:c4:0b:96:c2:24:98:fb:98:86:bb:cd: 32:1c:44:7d:de:48:6c:75:92:4f:82:62:81:b7:34: 6a:ea:f7:19:ea:d5:3b:ee:04:59:75:c7:28:1a:7f: 18:da:67:69:f0:1c:92:5c:62:2d:4a:4f:0e:e0:6b: b6:65:c8:3c:08:61:18:2e:af:80:0c:dd:10:db:0d: f2:7c:32:68:73:79:fa:77:a0:26:58:b1:4d:7f:bd: 9c:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:43:6C:CA:67:F7:05:6D:C4:4C:F6:46:D7:11:67:C6:36:DB:3D:4F X509v3 Authority Key Identifier: keyid:2B:1B:B2:4A:DC:DB:14:F6:E2:C7:BB:B2:D8:8A:BA:DB:1D:DD:89:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxuyStzbFPbix7uy2Iq62x3diY0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:a9:74:52:23:b6:45:53:31:7c:d1:86:81:7f:58:8a:d5:b1: cd:92:8a:00:65:1a:36:4f:c5:d9:6c:f8:a6:87:71:d2:4e:9b: 50:4d:29:19:00:2e:db:97:0d:77:e9:09:45:ee:2f:9b:53:00: bf:d0:39:2f:cc:15:5e:2e:81:1c:de:e6:87:57:13:ee:4d:f7: 84:54:9a:d9:27:c1:89:9f:1d:bd:75:41:df:77:b1:c3:fb:fa: 10:2f:7b:12:13:02:e0:f2:05:b5:c6:36:72:1f:15:20:21:e6: 49:11:b7:90:d7:1f:d6:c3:19:6f:7e:bc:9d:1c:25:5a:29:0d: c9:3e:3a:69:bb:68:ef:78:d3:79:62:7d:53:c3:4f:a5:1b:76: 1b:7a:e6:6d:bb:30:71:3f:59:8e:2c:80:ba:b0:bb:f3:d1:2d: 5d:b3:71:51:19:33:7d:d3:0c:63:83:0e:72:39:15:85:61:07: af:4f:ba:41:0b:28:b7:3b:a8:08:a3:03:23:53:3d:a7:e0:4c: b4:df:89:c8:38:33:4d:13:3c:24:ff:6e:e5:86:16:79:29:c2: f9:b6:f0:19:6b:0d:29:f2:7d:bf:80:c2:7e:30:a3:15:5b:7d: b7:e8:38:fc:37:33:8d:fb:06:b6:70:19:93:1b:15:f9:f4:ad: b5:b2:df:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAu4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTgwRDIxMTAvBgNVBAUTKDJCMUJCMjRBRENEQjE0RjZFMkM3QkJCMkQ4OEFCQURC MURERDg5OEQwHhcNMjUwNDI1MDEwNTE5WhcNMjUwNTAyMDEwNTE5WjAYMRYwFAYD VQQDEw02ODBhZGZjZi04ZmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArFFiWrWtrvBwN8CHXhn++kIWcwJ4HN4tQOr6AuPPP/wZ/lmOXfAFiUH6bZXc kz/gRwknYWw5tCqHpq66MbMKEOWRq3BkJWLIMp07yxLc/NtHSKm5PfRuw9l0KQKR XuXKN4kU6KgrU9ViE4ZKx8lX4wgzWTkXCmrlGX+FvXXZWyi2NbXZKSmN6QYCKU2H KLJDfEofDOVABQVRq2OLUNED9PkAWKTyOrJWxAuWwiSY+5iGu80yHER93khsdZJP gmKBtzRq6vcZ6tU77gRZdccoGn8Y2mdp8BySXGItSk8O4Gu2Zcg8CGEYLq+ADN0Q 2w3yfDJoc3n6d6AmWLFNf72cwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFxDbMpn 9wVtxEz2RtcRZ8Y22z1PMB8GA1UdIwQYMBaAFCsbskrc2xT24se7stiKutsd3YmN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODBEMi9ENDI4RDBDNkRB REUxMUVDODc3MTE0NTBDNEY5QUUwMi9LeHV5U3R6YkZQYml4N3V5MklxNjJ4M2Rp WTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0t4dXlTdHpiRlBiaXg3dXkySXE2MngzZGlZMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODBEMi9ENDI4RDBDNkRBREUxMUVDODc3MTE0NTBDNEY5QUUwMi9LeHV5U3R6YkZQ Yml4N3V5MklxNjJ4M2RpWTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNqXRSI7ZFUzF80YaBf1iK1bHNkooAZRo2T8XZbPimh3HSTptQTSkZ AC7blw136QlF7i+bUwC/0DkvzBVeLoEc3uaHVxPuTfeEVJrZJ8GJnx29dUHfd7HD +/oQL3sSEwLg8gW1xjZyHxUgIeZJEbeQ1x/WwxlvfrydHCVaKQ3JPjppu2jveNN5 Yn1Tw0+lG3YbeuZtuzBxP1mOLIC6sLvz0S1ds3FRGTN90wxjgw5yORWFYQevT7pB Cyi3O6gIowMjUz2n4Ey034nIODNNEzwk/27lhhZ5KcL5tvAZaw0p8n2/gMJ+MKMV W3236Dj8NzON+wa2cBmTGxX59K21st9M -----END CERTIFICATE-----Generated at Sat Apr 26 14:05:35 2025 by rpki-client