$ rpki-client -vvf rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft File: kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft (raw, json) Hash identifier: N2VscVj2X/wZ9CQOAy5joGWsbeg7RgULn2YITkZWVsA= Subject key identifier: 7B:80:D9:DF:28:98:89:5F:5F:24:B1:5C:83:C5:46:27:82:5F:8A:E0 Authority key identifier: 92:29:19:95:35:EB:EE:44:72:A2:2F:C5:19:5B:0A:7E:FF:CB:66:84 Certificate issuer: /CN=A91B952E/serialNumber=9229199535EBEE4472A22FC5195B0A7EFFCB6684 Certificate serial: 0428 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kikZlTXr7kRyoi_FGVsKfv_LZoQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft Manifest number: 0423 Signing time: Fri 25 Apr 2025 00:10:09 +0000 Manifest this update: Fri 25 Apr 2025 00:10:08 +0000 Manifest next update: Fri 02 May 2025 00:10:08 +0000 Files and hashes: 1: kikZlTXr7kRyoi_FGVsKfv_LZoQ.crl (hash: bfG1lR/uduc2BKYJiZ7Iethlix7taysPRM8N/NtYSbM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.crl rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kikZlTXr7kRyoi_FGVsKfv_LZoQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:10:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1064 (0x428) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B952E, serialNumber=9229199535EBEE4472A22FC5195B0A7EFFCB6684 Validity Not Before: Apr 25 00:10:08 2025 GMT Not After : May 2 00:10:08 2025 GMT Subject: CN=680ad2e0-9291 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:64:13:2d:1a:b1:73:b2:43:98:f4:f5:4d:5e: f9:50:03:b9:67:d2:d4:a7:01:cd:3f:0a:f4:c7:46: af:d3:db:e5:2f:c5:67:2f:e1:fd:7e:6c:d4:4c:69: 6f:3c:dc:91:94:29:66:31:07:af:00:28:c4:bb:fb: 53:a9:63:4d:1e:45:3a:a1:bc:3a:9a:69:ba:36:22: 83:1e:bc:11:f9:31:d4:db:b0:a9:fe:9b:88:76:f1: d0:98:0b:f5:5f:9c:2a:74:83:4a:dd:35:d5:5a:06: 7e:15:e7:7d:93:7e:70:43:53:e7:86:d7:f1:43:1b: 61:f9:27:18:6d:20:12:d6:23:e8:42:95:1c:67:0c: a7:ef:4f:74:0d:db:a4:77:b8:70:4d:8c:ec:36:d3: 69:ab:e8:86:b7:d6:57:db:32:b8:fe:ec:9e:d8:3b: 7e:4f:38:85:87:d4:b3:6e:5a:86:ef:e2:b8:33:3a: 37:ef:a9:a8:66:28:c6:8a:dc:1a:d1:7a:a8:d6:0d: fc:6d:67:5d:39:e8:64:18:57:5a:91:83:e1:33:af: 18:f3:96:5f:61:a5:b3:4e:66:63:bc:26:96:e6:8f: e2:97:a8:39:f7:2c:4a:17:fc:b0:3e:d5:a2:ec:30: 76:03:c1:ef:6c:5b:b8:9e:2f:f6:e5:7c:06:42:69: 07:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:80:D9:DF:28:98:89:5F:5F:24:B1:5C:83:C5:46:27:82:5F:8A:E0 X509v3 Authority Key Identifier: keyid:92:29:19:95:35:EB:EE:44:72:A2:2F:C5:19:5B:0A:7E:FF:CB:66:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kikZlTXr7kRyoi_FGVsKfv_LZoQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:27:78:bd:f6:8a:d2:f5:5f:f2:ae:ce:34:4f:e6:13:9e:9d: c3:43:37:5f:d8:25:16:71:75:a2:9c:4b:a3:5c:b8:b1:99:b3: 6f:41:05:3d:d7:15:38:d1:fc:c3:dc:28:d3:63:36:a4:7f:48: e4:a3:40:7c:2e:05:a7:1c:00:ff:6c:3b:8c:20:d0:75:3e:b8: d5:36:d7:e6:b6:8a:b0:f0:6a:0a:78:12:2d:b3:13:d0:21:3e: bd:d7:27:5c:0b:ed:08:6c:11:10:7c:39:08:dc:d6:87:ac:2f: c4:41:09:d4:67:26:dc:32:bb:2a:43:2c:44:ac:ca:63:e1:53: 1c:90:ed:92:87:fa:e4:ab:39:b9:81:9f:61:21:11:2d:da:5a: 85:26:48:15:9d:9e:9c:a6:2c:64:e7:35:61:ca:54:90:1f:40: df:2c:07:11:c8:6f:02:47:e5:d0:b9:08:2c:00:79:61:73:b5: ca:14:23:ac:a3:7e:e2:d0:d4:64:e0:d2:49:e1:5b:d0:50:2e: 19:e8:97:e1:f4:9e:8a:0e:4d:9f:e7:93:71:8d:ae:74:d1:1a: 51:ce:59:4a:13:4b:a9:3e:d8:39:33:af:b5:ee:fa:af:94:16: 4a:c6:f0:70:4a:c8:ab:00:27:ba:a3:cc:b2:e2:d5:91:7f:dc: 41:7c:f4:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjk1MkUxMTAvBgNVBAUTKDkyMjkxOTk1MzVFQkVFNDQ3MkEyMkZDNTE5NUIwQTdF RkZDQjY2ODQwHhcNMjUwNDI1MDAxMDA4WhcNMjUwNTAyMDAxMDA4WjAYMRYwFAYD VQQDEw02ODBhZDJlMC05MjkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp2QTLRqxc7JDmPT1TV75UAO5Z9LUpwHNPwr0x0av09vlL8VnL+H9fmzUTGlv PNyRlClmMQevACjEu/tTqWNNHkU6obw6mmm6NiKDHrwR+THU27Cp/puIdvHQmAv1 X5wqdINK3TXVWgZ+Fed9k35wQ1PnhtfxQxth+ScYbSAS1iPoQpUcZwyn7090Dduk d7hwTYzsNtNpq+iGt9ZX2zK4/uye2Dt+TziFh9SzblqG7+K4Mzo376moZijGitwa 0Xqo1g38bWddOehkGFdakYPhM68Y85ZfYaWzTmZjvCaW5o/il6g59yxKF/ywPtWi 7DB2A8HvbFu4ni/25XwGQmkHjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHuA2d8o mIlfXySxXIPFRieCX4rgMB8GA1UdIwQYMBaAFJIpGZU16+5EcqIvxRlbCn7/y2aE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTUyRS84M0NGODExNjYw RTQxMUVDQUQxODhEMzRDNEY5QUUwMi9raWtabFRYcjdrUnlvaV9GR1ZzS2Z2X0xa b1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tpa1psVFhyN2tSeW9pX0ZHVnNLZnZfTFpvUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTUyRS84M0NGODExNjYwRTQxMUVDQUQxODhEMzRDNEY5QUUwMi9raWtabFRYcjdr UnlvaV9GR1ZzS2Z2X0xab1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRJ3i99orS9V/yrs40T+YTnp3DQzdf2CUWcXWinEujXLixmbNvQQU9 1xU40fzD3CjTYzakf0jko0B8LgWnHAD/bDuMINB1PrjVNtfmtoqw8GoKeBItsxPQ IT691ydcC+0IbBEQfDkI3NaHrC/EQQnUZybcMrsqQyxErMpj4VMckO2Sh/rkqzm5 gZ9hIREt2lqFJkgVnZ6cpixk5zVhylSQH0DfLAcRyG8CR+XQuQgsAHlhc7XKFCOs o37i0NRk4NJJ4VvQUC4Z6Jfh9J6KDk2f55Nxja500RpRzllKE0upPtg5M6+17vqv lBZKxvBwSsirACe6o8yy4tWRf9xBfPQx -----END CERTIFICATE-----Generated at Sat Apr 26 17:18:57 2025 by rpki-client