$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/Ktu3GxFSPKM5Ll832dx2shHb4IM.mft File: Ktu3GxFSPKM5Ll832dx2shHb4IM.mft (raw, json) Hash identifier: ZpzCx3u29ROPPlOH7KwCoBe/rMkbzVHfsFP0TXSg1os= Subject key identifier: 20:9F:60:52:24:E9:9B:50:5F:5D:93:04:5F:F0:8D:B9:40:45:43:BE Authority key identifier: 2A:DB:B7:1B:11:52:3C:A3:39:2E:5F:37:D9:DC:76:B2:11:DB:E0:83 Certificate issuer: /CN=A91C8347/serialNumber=2ADBB71B11523CA3392E5F37D9DC76B211DBE083 Certificate serial: EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ktu3GxFSPKM5Ll832dx2shHb4IM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/Ktu3GxFSPKM5Ll832dx2shHb4IM.mft Manifest number: D8 Signing time: Fri 25 Apr 2025 04:52:20 +0000 Manifest this update: Fri 25 Apr 2025 04:52:20 +0000 Manifest next update: Fri 02 May 2025 04:52:20 +0000 Files and hashes: 1: Ktu3GxFSPKM5Ll832dx2shHb4IM.crl (hash: /Y0Jm5SXOpn+Q0NG1/SeGgaaW33Pvgx1Kt+kW0oWoCo=) 2: 34C7EB4010F411EFB4CD9614C4F9AE02.roa (hash: fhHN+wika6qw4BQ5YkJmWVk33R5FKnY5aL2UuUzBHhw=) 3: F4777FBEEDDA11EF9731160CC4F9AE02.roa (hash: /1+2xPWqZMP3cO+rD339mV/1/rVWVDweL8VvbjIWd3Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/Ktu3GxFSPKM5Ll832dx2shHb4IM.crl rsync://rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/Ktu3GxFSPKM5Ll832dx2shHb4IM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ktu3GxFSPKM5Ll832dx2shHb4IM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:52:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 234 (0xea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8347, serialNumber=2ADBB71B11523CA3392E5F37D9DC76B211DBE083 Validity Not Before: Apr 25 04:52:20 2025 GMT Not After : May 2 04:52:20 2025 GMT Subject: CN=680b1504-0a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:57:80:c1:ee:25:48:2f:2e:1a:90:08:02:04: 1f:7d:2c:09:d8:9e:e4:9c:bd:6d:44:0f:7f:53:6e: 5f:ed:a9:ae:78:1d:ee:24:d1:d0:cf:9b:31:1e:83: d1:d6:c4:e9:5e:bb:2b:8b:ba:e5:3c:6c:17:07:ee: ea:c1:8f:0f:64:c2:91:24:b6:92:6b:bb:f2:03:3b: bf:2a:4c:63:56:05:84:9e:15:2f:e7:0a:1f:0c:6c: 98:c3:d3:c6:e1:fe:12:f8:c0:75:e3:f5:36:a2:b6: d0:fa:88:71:5e:4c:b8:56:18:76:07:6e:0e:72:2e: 74:e9:2b:74:2b:93:56:af:35:77:ac:ab:af:c4:fc: 8a:6e:ce:d8:b5:78:d2:47:0b:f9:28:d8:de:66:63: cc:1d:ee:98:6c:a5:8d:76:a0:e9:b8:66:2d:d7:e7: 11:18:0f:56:2c:b4:90:57:a9:4a:30:d2:94:36:db: a8:de:bc:fa:03:24:23:78:5e:3c:51:5f:22:7f:2e: 80:6c:65:50:ce:1e:e5:55:f5:8e:fb:f7:8d:6d:e4: 6c:11:3f:d1:9b:b6:f9:e8:f8:b0:1e:e4:54:da:1c: 4d:b1:4a:f2:a3:70:a2:cc:cc:e4:11:f1:27:35:87: 0d:be:74:b3:ae:07:2b:2e:35:75:13:d2:7c:9c:97: f5:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:9F:60:52:24:E9:9B:50:5F:5D:93:04:5F:F0:8D:B9:40:45:43:BE X509v3 Authority Key Identifier: keyid:2A:DB:B7:1B:11:52:3C:A3:39:2E:5F:37:D9:DC:76:B2:11:DB:E0:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/Ktu3GxFSPKM5Ll832dx2shHb4IM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ktu3GxFSPKM5Ll832dx2shHb4IM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/Ktu3GxFSPKM5Ll832dx2shHb4IM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:bf:86:f3:ac:5b:44:1b:c7:66:e8:5b:0e:3a:03:e9:8a:8b: f3:24:20:b7:37:9d:eb:90:6f:5b:b8:7b:be:69:22:55:62:fd: 9e:2e:ca:b8:fd:a5:2e:1b:6f:3b:3a:c2:eb:58:58:fe:f5:0c: 64:69:a2:1c:13:cc:05:ee:95:18:86:2b:02:56:83:f1:4b:0b: 0a:83:a0:3c:77:e7:34:42:89:c6:a2:60:c5:e1:a7:34:6d:35: 9b:e4:2d:3f:f2:de:80:b3:fb:8a:00:c4:76:68:2c:81:86:af: 6c:19:9d:ef:66:27:ae:b7:13:a5:8a:85:60:f8:95:35:35:4e: 7b:11:02:72:b7:51:e0:23:a1:93:dc:f4:ee:ec:8a:2b:95:c6: 3a:50:b7:5b:2e:07:ed:9f:86:fb:53:c6:63:be:0a:de:5c:b1: 57:90:f5:fa:3c:58:aa:89:04:02:a0:87:cf:91:a9:9c:b5:ae: 56:a0:f8:69:d7:74:f3:9c:a4:0e:8f:24:7e:f7:ef:98:0e:23: ab:92:ef:fa:d8:61:89:e5:74:fa:de:ba:75:c4:42:56:61:5a: 18:6b:98:1b:7b:62:55:a3:de:b1:43:a5:f3:39:8a:e8:88:1b: 73:07:0e:ed:ac:e6:84:e3:b1:fb:4d:81:e2:dc:2d:21:4e:c1: 78:81:d2:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzgzNDcxMTAvBgNVBAUTKDJBREJCNzFCMTE1MjNDQTMzOTJFNUYzN0Q5REM3NkIy MTFEQkUwODMwHhcNMjUwNDI1MDQ1MjIwWhcNMjUwNTAyMDQ1MjIwWjAYMRYwFAYD VQQDEw02ODBiMTUwNC0wYTgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuFeAwe4lSC8uGpAIAgQffSwJ2J7knL1tRA9/U25f7amueB3uJNHQz5sxHoPR 1sTpXrsri7rlPGwXB+7qwY8PZMKRJLaSa7vyAzu/KkxjVgWEnhUv5wofDGyYw9PG 4f4S+MB14/U2orbQ+ohxXky4Vhh2B24Oci506St0K5NWrzV3rKuvxPyKbs7YtXjS Rwv5KNjeZmPMHe6YbKWNdqDpuGYt1+cRGA9WLLSQV6lKMNKUNtuo3rz6AyQjeF48 UV8ify6AbGVQzh7lVfWO+/eNbeRsET/Rm7b56PiwHuRU2hxNsUryo3CizMzkEfEn NYcNvnSzrgcrLjV1E9J8nJf17QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCCfYFIk 6ZtQX12TBF/wjblARUO+MB8GA1UdIwQYMBaAFCrbtxsRUjyjOS5fN9ncdrIR2+CD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODM0Ny9DM0U3MjE5MEY5 QTkxMUVFQTgyQTc5MUFDNEY5QUUwMi9LdHUzR3hGU1BLTTVMbDgzMmR4MnNoSGI0 SU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0t0dTNHeEZTUEtNNUxsODMyZHgyc2hIYjRJTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODM0Ny9DM0U3MjE5MEY5QTkxMUVFQTgyQTc5MUFDNEY5QUUwMi9LdHUzR3hGU1BL TTVMbDgzMmR4MnNoSGI0SU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5v4bzrFtEG8dm6FsOOgPpiovzJCC3N53rkG9buHu+aSJVYv2eLsq4 /aUuG287OsLrWFj+9QxkaaIcE8wF7pUYhisCVoPxSwsKg6A8d+c0QonGomDF4ac0 bTWb5C0/8t6As/uKAMR2aCyBhq9sGZ3vZieutxOlioVg+JU1NU57EQJyt1HgI6GT 3PTu7IorlcY6ULdbLgftn4b7U8ZjvgreXLFXkPX6PFiqiQQCoIfPkamcta5WoPhp 13TznKQOjyR+9++YDiOrku/62GGJ5XT63rp1xEJWYVoYa5gbe2JVo96xQ6XzOYro iBtzBw7trOaE47H7TYHi3C0hTsF4gdId -----END CERTIFICATE-----Generated at Sat Apr 26 04:19:02 2025 by rpki-client