$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft File: kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft (raw, json) Hash identifier: 8Q0F49hqRHO4aARZJEv1oi7Y34baathuYn+hIIkloEk= Subject key identifier: C9:F7:1B:21:0B:57:90:65:80:B7:01:50:FB:64:66:BC:D9:B4:12:4F Authority key identifier: 91:F2:DE:67:C8:E6:5B:B5:33:ED:8F:3C:64:F3:2D:F9:C6:95:C0:57 Certificate issuer: /CN=A91BC1CE/serialNumber=91F2DE67C8E65BB533ED8F3C64F32DF9C695C057 Certificate serial: 1049 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft Manifest number: 1042 Signing time: Mon 28 Apr 2025 17:37:33 +0000 Manifest this update: Mon 28 Apr 2025 17:37:33 +0000 Manifest next update: Mon 05 May 2025 17:37:33 +0000 Files and hashes: 1: kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.crl (hash: MXCmsGSK5C+EAYcm0NfoK1usTA2eHH0WCx2PNOsV9w4=) 2: 4178B83237ED11E99B3C9C4AC4F9AE02.roa (hash: Zx1NZFaobsMkPgZlMNZ8S9A1zmjC7C3D22JCgStrQxA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.crl rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 17:37:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4169 (0x1049) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC1CE, serialNumber=91F2DE67C8E65BB533ED8F3C64F32DF9C695C057 Validity Not Before: Apr 28 17:37:33 2025 GMT Not After : May 5 17:37:33 2025 GMT Subject: CN=680fbcdd-1d15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:97:3f:f3:1e:c9:87:9c:25:74:ad:92:f2:01: 07:d3:5e:88:10:31:90:92:22:c0:24:04:7e:5d:33: 5a:e3:c9:0c:3d:91:64:e1:02:46:8b:b8:25:9f:c5: e3:03:3d:4d:06:af:c4:3c:db:f3:37:87:ec:f3:1f: 60:c5:c0:41:fd:32:26:2f:4c:02:a2:4c:35:ed:d5: 9f:91:bb:cc:0c:f0:85:10:8a:d3:dc:0b:2b:c7:56: fc:33:0a:81:d9:15:ab:f0:66:1f:9f:44:25:78:df: bb:91:97:00:53:b0:4b:e8:38:b4:b8:5e:b0:91:bc: 25:56:8c:2f:24:30:d2:ee:80:82:57:33:e6:9a:c7: 6d:e9:15:fd:c9:e9:e3:af:9c:ea:b9:8e:5d:38:e3: c9:e7:05:78:7a:aa:19:61:46:02:4d:d7:1f:12:76: 7d:91:2c:f2:96:49:72:3e:f5:3d:79:62:12:96:94: ec:c2:1f:77:73:a3:77:5f:f4:fc:9a:a1:99:70:f2: d6:52:f4:7b:8f:69:36:7c:95:bd:c9:df:78:c5:a4: e0:c5:7c:33:11:2f:e6:85:ba:7d:e9:0e:aa:28:54: 92:50:60:aa:1b:08:66:ff:95:e9:1c:1d:c6:c8:70: 28:1c:89:69:f0:85:9f:0c:c3:a1:ad:8c:80:5e:6a: 02:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:F7:1B:21:0B:57:90:65:80:B7:01:50:FB:64:66:BC:D9:B4:12:4F X509v3 Authority Key Identifier: keyid:91:F2:DE:67:C8:E6:5B:B5:33:ED:8F:3C:64:F3:2D:F9:C6:95:C0:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:cd:35:e8:e8:1e:36:b7:db:d3:5f:35:96:dc:2b:5c:83:0e: e3:4a:16:88:62:28:c3:b4:a9:10:be:8c:0f:4a:e7:d1:82:d2: 3b:64:10:c1:e1:61:39:87:be:09:f7:a0:0c:c3:dc:3c:cc:18: e3:bf:e0:83:e1:93:8d:ad:f6:6c:48:0d:e1:56:7b:6b:df:a0: f2:2f:e8:33:45:b8:de:d9:94:d0:eb:e8:00:12:b4:3c:49:37: 24:9a:dd:d5:51:34:9b:07:cb:1a:98:c9:6c:eb:31:5b:cd:5b: 42:0e:4d:8f:4a:38:b5:9d:d1:66:d6:ab:45:49:fb:64:7c:eb: 25:7c:8f:69:93:bc:02:40:f5:eb:c9:e0:b4:c8:31:32:5c:13: 78:02:fb:a9:2d:63:5e:1e:43:f3:09:a6:60:e5:5c:e6:50:4c: fc:06:c4:c1:c9:7f:cd:6d:85:77:97:d7:ee:2c:17:11:d6:3e: 58:d8:74:06:1c:c3:1f:fb:20:cb:3c:b5:0d:78:91:36:69:1f: 3e:ba:54:03:94:df:cd:b7:39:f0:5e:6a:02:e2:86:93:59:bf: da:4d:6a:e6:7c:7b:a4:9d:95:2b:6c:74:53:93:aa:5d:0e:e4: b8:6b:ac:13:86:2e:b9:c9:b8:d0:d9:88:6a:15:39:f6:c1:9a: e6:32:cc:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEEkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkMxQ0UxMTAvBgNVBAUTKDkxRjJERTY3QzhFNjVCQjUzM0VEOEYzQzY0RjMyREY5 QzY5NUMwNTcwHhcNMjUwNDI4MTczNzMzWhcNMjUwNTA1MTczNzMzWjAYMRYwFAYD VQQDEw02ODBmYmNkZC0xZDE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvZc/8x7Jh5wldK2S8gEH016IEDGQkiLAJAR+XTNa48kMPZFk4QJGi7gln8Xj Az1NBq/EPNvzN4fs8x9gxcBB/TImL0wCokw17dWfkbvMDPCFEIrT3Asrx1b8MwqB 2RWr8GYfn0QleN+7kZcAU7BL6Di0uF6wkbwlVowvJDDS7oCCVzPmmsdt6RX9yenj r5zquY5dOOPJ5wV4eqoZYUYCTdcfEnZ9kSzylklyPvU9eWISlpTswh93c6N3X/T8 mqGZcPLWUvR7j2k2fJW9yd94xaTgxXwzES/mhbp96Q6qKFSSUGCqGwhm/5XpHB3G yHAoHIlp8IWfDMOhrYyAXmoCTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMn3GyEL V5BlgLcBUPtkZrzZtBJPMB8GA1UdIwQYMBaAFJHy3mfI5lu1M+2PPGTzLfnGlcBX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzFDRS8yNEZBNjBFNDM3 RUMxMUU5QTg3NUU4NDhDNEY5QUUwMi9rZkxlWjhqbVc3VXo3WTg4WlBNdC1jYVZ3 RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tmTGVaOGptVzdVejdZODhaUE10LWNhVndGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzFDRS8yNEZBNjBFNDM3RUMxMUU5QTg3NUU4NDhDNEY5QUUwMi9rZkxlWjhqbVc3 VXo3WTg4WlBNdC1jYVZ3RmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKzTXo6B42t9vTXzWW3Ctcgw7jShaIYijDtKkQvowPSufRgtI7ZBDB 4WE5h74J96AMw9w8zBjjv+CD4ZONrfZsSA3hVntr36DyL+gzRbje2ZTQ6+gAErQ8 STckmt3VUTSbB8samMls6zFbzVtCDk2PSji1ndFm1qtFSftkfOslfI9pk7wCQPXr yeC0yDEyXBN4AvupLWNeHkPzCaZg5VzmUEz8BsTByX/NbYV3l9fuLBcR1j5Y2HQG HMMf+yDLPLUNeJE2aR8+ulQDlN/NtznwXmoC4oaTWb/aTWrmfHuknZUrbHRTk6pd DuS4a6wThi65ybjQ2YhqFTn2wZrmMsx0 -----END CERTIFICATE-----Generated at Wed Apr 30 14:39:53 2025 by rpki-client