$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.mft File: kj-024ZZxeCui93HGpK2o3Ay89Q.mft (raw, json) Hash identifier: vOZjbgxgY6306hmM4VNB8eterTl6A9kF6DVRcvjtkEk= Subject key identifier: 53:40:72:41:55:ED:F1:24:90:EE:60:52:84:90:D0:CC:C4:B0:D2:70 Authority key identifier: 92:3F:B4:DB:86:59:C5:E0:AE:8B:DD:C7:1A:92:B6:A3:70:32:F3:D4 Certificate issuer: /CN=A91AA8E4/serialNumber=923FB4DB8659C5E0AE8BDDC71A92B6A37032F3D4 Certificate serial: 08B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kj-024ZZxeCui93HGpK2o3Ay89Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.mft Manifest number: 08AA Signing time: Thu 24 Apr 2025 20:23:35 +0000 Manifest this update: Thu 24 Apr 2025 20:23:34 +0000 Manifest next update: Thu 01 May 2025 20:23:34 +0000 Files and hashes: 1: kj-024ZZxeCui93HGpK2o3Ay89Q.crl (hash: M0U8D+o6KgaQccxAspOlePe1b5vT+jQHKgQGwT9H9rA=) 2: E76ABE9EB51811EAA9D89B43C4F9AE02.roa (hash: ttXfxcVj6+WhtbE63+vyOYQl4F7FNyy4bCidNx2zj30=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.crl rsync://rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kj-024ZZxeCui93HGpK2o3Ay89Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:23:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2224 (0x8b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA8E4, serialNumber=923FB4DB8659C5E0AE8BDDC71A92B6A37032F3D4 Validity Not Before: Apr 24 20:23:34 2025 GMT Not After : May 1 20:23:34 2025 GMT Subject: CN=680a9dc6-642f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:96:b4:28:16:ff:9b:88:c7:33:e1:28:e7:8a: 1e:c4:df:27:26:92:8d:f9:f1:f8:f4:19:09:ff:4d: 96:39:ac:5d:88:8c:ec:50:d9:63:d7:02:32:f0:95: f7:06:bf:9e:fd:40:80:ef:25:9a:77:f6:f3:38:76: 5c:ac:fe:4c:29:c6:92:83:4e:15:67:29:b2:f6:7b: 27:03:ad:a1:f7:ea:78:15:fe:a4:65:60:8f:47:b5: 4b:7a:51:91:0e:a6:81:48:15:1d:3b:18:31:7c:e1: 83:13:58:aa:32:75:fe:1c:af:79:04:cc:db:2e:d4: 49:d8:4a:85:3a:c9:55:3b:7e:b1:bf:69:d5:eb:99: 87:0d:7d:31:ca:69:92:d1:29:04:42:f3:26:1b:a0: 5c:7b:0d:25:ac:e2:e9:6c:37:17:d5:4a:87:d1:62: eb:ce:ae:a8:f8:76:f6:72:a4:48:60:ec:a4:37:1c: 6c:53:02:ec:34:79:fe:5f:b9:e9:13:2f:80:4f:84: 8a:54:c4:4a:18:d9:b2:df:02:69:a8:ce:a0:45:f7: 0b:7e:3b:d4:41:2d:25:02:a2:ae:66:c9:d1:41:20: 4e:44:6f:44:34:40:18:0b:90:72:68:f1:c4:64:07: da:40:7c:56:a5:42:aa:24:65:42:3f:14:20:dd:02: 86:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:40:72:41:55:ED:F1:24:90:EE:60:52:84:90:D0:CC:C4:B0:D2:70 X509v3 Authority Key Identifier: keyid:92:3F:B4:DB:86:59:C5:E0:AE:8B:DD:C7:1A:92:B6:A3:70:32:F3:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kj-024ZZxeCui93HGpK2o3Ay89Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:d7:d0:ca:d7:a8:b4:77:48:41:0b:38:14:02:2e:b7:4f:90: b3:b4:dd:c2:be:e0:1d:79:5d:06:d4:7c:9d:81:85:4e:d6:96: bc:cf:15:d5:62:65:b1:a5:43:f5:6e:9c:b8:9a:93:ca:95:91: 9c:b3:de:f7:89:f6:97:eb:69:ba:a2:c1:b4:e8:a1:6c:0a:b0: f8:99:be:ae:e9:46:ac:49:5f:af:94:8e:d2:73:92:ee:31:98: 73:8d:db:71:88:d1:e0:24:5a:67:97:99:33:42:52:de:fd:7b: 46:58:07:af:25:94:45:46:10:ae:3a:3d:6a:d8:12:dd:8a:56: f9:5b:fd:ae:e7:00:f3:fe:52:3b:29:07:89:4d:55:ce:cb:e6: 40:9f:9f:e6:a9:56:ae:fd:1e:a7:c4:b1:28:7d:6a:d4:5f:fa: a2:48:d3:4d:06:dd:f8:56:a0:6b:49:5f:cf:6b:7a:df:17:e4: 95:f7:f2:ab:54:6b:89:f3:3b:e1:48:c9:bc:6c:54:41:dc:f3: a1:d8:41:22:cc:79:94:41:2c:08:b8:ff:86:73:89:5a:e3:60: bf:b1:8e:ab:2d:69:df:77:08:8c:82:e9:c4:10:13:f8:4d:7f: cf:21:4e:e6:e5:78:d4:26:6c:50:6c:05:06:0e:b5:65:a0:b2: fc:f8:ee:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCLAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUE4RTQxMTAvBgNVBAUTKDkyM0ZCNERCODY1OUM1RTBBRThCRERDNzFBOTJCNkEz NzAzMkYzRDQwHhcNMjUwNDI0MjAyMzM0WhcNMjUwNTAxMjAyMzM0WjAYMRYwFAYD VQQDEw02ODBhOWRjNi02NDJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Za0KBb/m4jHM+Eo54oexN8nJpKN+fH49BkJ/02WOaxdiIzsUNlj1wIy8JX3 Br+e/UCA7yWad/bzOHZcrP5MKcaSg04VZymy9nsnA62h9+p4Ff6kZWCPR7VLelGR DqaBSBUdOxgxfOGDE1iqMnX+HK95BMzbLtRJ2EqFOslVO36xv2nV65mHDX0xymmS 0SkEQvMmG6Bcew0lrOLpbDcX1UqH0WLrzq6o+Hb2cqRIYOykNxxsUwLsNHn+X7np Ey+AT4SKVMRKGNmy3wJpqM6gRfcLfjvUQS0lAqKuZsnRQSBORG9ENEAYC5ByaPHE ZAfaQHxWpUKqJGVCPxQg3QKGBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFNAckFV 7fEkkO5gUoSQ0MzEsNJwMB8GA1UdIwQYMBaAFJI/tNuGWcXgrovdxxqStqNwMvPU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQThFNC9DNDI1RjUyNkI0 RjkxMUVBODVFNjAwNTlDNEY5QUUwMi9rai0wMjRaWnhlQ3VpOTNIR3BLMm8zQXk4 OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tqLTAyNFpaeGVDdWk5M0hHcEsybzNBeTg5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QThFNC9DNDI1RjUyNkI0RjkxMUVBODVFNjAwNTlDNEY5QUUwMi9rai0wMjRaWnhl Q3VpOTNIR3BLMm8zQXk4OVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAy19DK16i0d0hBCzgUAi63T5CztN3CvuAdeV0G1HydgYVO1pa8zxXV YmWxpUP1bpy4mpPKlZGcs973ifaX62m6osG06KFsCrD4mb6u6UasSV+vlI7Sc5Lu MZhzjdtxiNHgJFpnl5kzQlLe/XtGWAevJZRFRhCuOj1q2BLdilb5W/2u5wDz/lI7 KQeJTVXOy+ZAn5/mqVau/R6nxLEofWrUX/qiSNNNBt34VqBrSV/Pa3rfF+SV9/Kr VGuJ8zvhSMm8bFRB3POh2EEizHmUQSwIuP+Gc4la42C/sY6rLWnfdwiMgunEEBP4 TX/PIU7m5XjUJmxQbAUGDrVloLL8+O6X -----END CERTIFICATE-----Generated at Sat Apr 26 15:23:44 2025 by rpki-client