$ rpki-client -vvf rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.mft File: kzrI56xL07WCmJ_Mty_JJ9cWQks.mft (raw, json) Hash identifier: //9LF3eacuQQhFWy+6KvNaHzhiNclmz5Tu4mWOTIPwk= Subject key identifier: 6A:67:B9:97:6C:60:96:5F:18:F6:1D:CA:86:2F:42:12:FF:FA:87:88 Authority key identifier: 93:3A:C8:E7:AC:4B:D3:B5:82:98:9F:CC:B7:2F:C9:27:D7:16:42:4B Certificate issuer: /CN=A91C79E1/serialNumber=933AC8E7AC4BD3B582989FCCB72FC927D716424B Certificate serial: 080B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzrI56xL07WCmJ_Mty_JJ9cWQks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.mft Manifest number: 0805 Signing time: Thu 24 Apr 2025 20:43:27 +0000 Manifest this update: Thu 24 Apr 2025 20:43:27 +0000 Manifest next update: Thu 01 May 2025 20:43:27 +0000 Files and hashes: 1: kzrI56xL07WCmJ_Mty_JJ9cWQks.crl (hash: ydZ7HS4BloqCHyMlwDENHskWufUKZklskQm1OXeGIsg=) 2: 26D0F9B82A6611ECB12FB439C4F9AE02.roa (hash: o8uKSFAZOoKiAV/aw+gEXp611EqrXFJMlAGF3VnwD9c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.crl rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzrI56xL07WCmJ_Mty_JJ9cWQks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:43:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2059 (0x80b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C79E1, serialNumber=933AC8E7AC4BD3B582989FCCB72FC927D716424B Validity Not Before: Apr 24 20:43:27 2025 GMT Not After : May 1 20:43:27 2025 GMT Subject: CN=680aa26f-8d19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:6d:a2:88:6d:0c:f1:12:dc:c0:fd:bc:fb:ac: 5d:9b:ee:20:11:06:1b:94:84:f9:10:18:1f:e1:da: e4:55:2c:bd:14:55:25:e6:ff:5b:f9:a8:1c:ea:16: fb:87:ac:c9:39:14:b6:6e:53:66:28:57:c4:b4:88: 13:d9:db:b2:49:40:4a:7a:42:f7:7c:5e:af:04:f1: 0a:1c:d7:e2:dc:aa:7b:23:c8:5b:44:a4:2a:77:95: 29:a2:c6:50:fe:65:2d:3c:f6:7a:3e:01:f9:49:28: a7:82:55:04:76:5f:08:4d:a5:31:09:d9:e5:ec:89: f0:4e:9a:1c:a9:10:7e:ab:b9:d2:62:f4:e4:d1:bd: 1e:d5:48:da:33:92:a4:1b:01:1f:6e:5b:9a:fd:72: 7e:6b:72:09:ce:19:9f:df:b9:2d:30:bf:94:3f:ef: 59:e1:93:cc:d0:4f:c8:9c:16:90:5b:46:a4:da:ba: ef:2b:d5:c0:9a:66:a0:39:97:bc:0d:4c:7d:9b:d6: 52:bc:90:e3:9d:18:d1:69:62:f8:f6:e8:2f:61:f5: 75:e3:4e:4a:d7:92:7f:ba:2d:48:9c:8b:26:35:d2: 85:86:56:fd:c1:eb:9b:d3:ae:e0:a4:54:50:df:fe: 27:1c:48:62:ee:4d:d4:b7:c6:9a:54:f6:c3:ff:ff: 56:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:67:B9:97:6C:60:96:5F:18:F6:1D:CA:86:2F:42:12:FF:FA:87:88 X509v3 Authority Key Identifier: keyid:93:3A:C8:E7:AC:4B:D3:B5:82:98:9F:CC:B7:2F:C9:27:D7:16:42:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzrI56xL07WCmJ_Mty_JJ9cWQks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:0a:d1:c5:18:cd:e5:5d:e7:7d:87:4b:db:16:eb:5f:13:2a: 01:3a:41:1b:05:30:c9:95:8a:15:17:d9:fd:c3:15:5e:db:f8: b4:a6:8c:7c:c6:49:ff:41:f2:16:a2:eb:75:4b:37:9e:2f:5b: 5a:b5:6d:85:cd:e4:8c:c7:d2:d0:b1:af:6e:12:7f:de:41:76: 40:93:66:81:2d:fb:ec:5b:ab:07:af:ea:bc:88:f3:be:8e:d2: 38:65:fc:e3:57:da:c4:f6:bb:f4:73:fc:57:0b:5f:26:2a:a6: 9c:4e:2b:84:2c:9e:dd:d4:04:db:21:3a:83:ef:3a:00:8a:66: 1e:a1:6b:25:23:8b:b7:b3:a4:e1:b1:c2:fe:11:bc:76:e6:1e: 30:b1:82:5d:80:8a:67:57:61:cb:28:34:30:a9:10:b7:ea:41: fd:04:cf:2b:5c:1a:fa:92:50:5e:3c:01:17:35:23:ff:b2:f5: c9:92:0f:72:a0:cf:24:29:1e:d7:9a:b6:e8:7a:88:89:ff:8c: 5e:29:f4:4b:0a:7d:65:38:81:4e:02:2c:11:34:1b:54:3b:54: 8f:48:bf:45:21:16:d0:bb:10:09:95:b1:e9:1c:76:d2:b3:76: 23:ee:08:76:81:62:3a:ef:77:87:31:97:18:fa:32:64:82:41: dc:95:d9:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc5RTExMTAvBgNVBAUTKDkzM0FDOEU3QUM0QkQzQjU4Mjk4OUZDQ0I3MkZDOTI3 RDcxNjQyNEIwHhcNMjUwNDI0MjA0MzI3WhcNMjUwNTAxMjA0MzI3WjAYMRYwFAYD VQQDEw02ODBhYTI2Zi04ZDE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1W2iiG0M8RLcwP28+6xdm+4gEQYblIT5EBgf4drkVSy9FFUl5v9b+agc6hb7 h6zJORS2blNmKFfEtIgT2duySUBKekL3fF6vBPEKHNfi3Kp7I8hbRKQqd5UposZQ /mUtPPZ6PgH5SSinglUEdl8ITaUxCdnl7InwTpocqRB+q7nSYvTk0b0e1UjaM5Kk GwEfblua/XJ+a3IJzhmf37ktML+UP+9Z4ZPM0E/InBaQW0ak2rrvK9XAmmagOZe8 DUx9m9ZSvJDjnRjRaWL49ugvYfV1405K15J/ui1InIsmNdKFhlb9weub067gpFRQ 3/4nHEhi7k3Ut8aaVPbD//9W8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGpnuZds YJZfGPYdyoYvQhL/+oeIMB8GA1UdIwQYMBaAFJM6yOesS9O1gpifzLcvySfXFkJL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzlFMS82NTU2RjhEQUQ3 ODQxMUVBOUM1RDk2NDBDNEY5QUUwMi9renJJNTZ4TDA3V0NtSl9NdHlfSko5Y1dR a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2t6ckk1NnhMMDdXQ21KX010eV9KSjljV1Frcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzlFMS82NTU2RjhEQUQ3ODQxMUVBOUM1RDk2NDBDNEY5QUUwMi9renJJNTZ4TDA3 V0NtSl9NdHlfSko5Y1dRa3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXCtHFGM3lXed9h0vbFutfEyoBOkEbBTDJlYoVF9n9wxVe2/i0pox8 xkn/QfIWout1SzeeL1tatW2FzeSMx9LQsa9uEn/eQXZAk2aBLfvsW6sHr+q8iPO+ jtI4ZfzjV9rE9rv0c/xXC18mKqacTiuELJ7d1ATbITqD7zoAimYeoWslI4u3s6Th scL+Ebx25h4wsYJdgIpnV2HLKDQwqRC36kH9BM8rXBr6klBePAEXNSP/svXJkg9y oM8kKR7XmrboeoiJ/4xeKfRLCn1lOIFOAiwRNBtUO1SPSL9FIRbQuxAJlbHpHHbS s3Yj7gh2gWI673eHMZcY+jJkgkHcldk7 -----END CERTIFICATE-----Generated at Sat Apr 26 17:22:24 2025 by rpki-client