$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/kz73JgbZ1bKf46QfIMUrIMr1Vbo.mft File: kz73JgbZ1bKf46QfIMUrIMr1Vbo.mft (raw, json) Hash identifier: 6xL8to6+7lDcf9rgscBUkDGdxZ8XfKlcLTcxU+DvFbY= Subject key identifier: 10:AA:50:FD:46:B9:5F:69:A1:48:03:D7:C2:A8:81:AE:A5:F4:6A:59 Authority key identifier: 93:3E:F7:26:06:D9:D5:B2:9F:E3:A4:1F:20:C5:2B:20:CA:F5:55:BA Certificate issuer: /CN=A91D6503/serialNumber=933EF72606D9D5B29FE3A41F20C52B20CAF555BA Certificate serial: 07CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kz73JgbZ1bKf46QfIMUrIMr1Vbo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/kz73JgbZ1bKf46QfIMUrIMr1Vbo.mft Manifest number: 07C9 Signing time: Thu 24 Apr 2025 20:53:58 +0000 Manifest this update: Thu 24 Apr 2025 20:53:58 +0000 Manifest next update: Thu 01 May 2025 20:53:58 +0000 Files and hashes: 1: kz73JgbZ1bKf46QfIMUrIMr1Vbo.crl (hash: pz2aoyfLfmUvAGL6C1XnXWDjtinDapBRmMYwXu7eXSU=) 2: 3CC77D02EE8811EA9225690DC4F9AE02.roa (hash: IS2j0d/zVkxwnqe+1txywwwV0QyYZmwCTkV8FQIqSXQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/kz73JgbZ1bKf46QfIMUrIMr1Vbo.crl rsync://rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/kz73JgbZ1bKf46QfIMUrIMr1Vbo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kz73JgbZ1bKf46QfIMUrIMr1Vbo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:53:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1999 (0x7cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6503, serialNumber=933EF72606D9D5B29FE3A41F20C52B20CAF555BA Validity Not Before: Apr 24 20:53:58 2025 GMT Not After : May 1 20:53:58 2025 GMT Subject: CN=680aa4e6-70fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:19:3e:9b:f9:6a:df:77:c5:a3:80:c9:59:5d: b3:0e:3e:0d:29:fc:af:a4:a0:7a:2f:ba:ca:f1:27: 78:83:42:a6:42:bf:14:9c:38:9c:ba:fe:cc:cb:35: 86:33:4b:7f:d8:d6:6c:9e:2b:24:b7:a6:2d:35:96: 2c:71:f0:6d:99:14:31:0b:d9:11:0e:86:a1:e1:ae: 41:73:08:30:6b:83:df:44:84:30:e7:bc:5d:f9:e7: 28:ee:a7:f7:b2:6c:5d:01:72:22:cb:19:ab:e2:b6: c9:4d:1c:f5:3d:e4:55:ce:8a:d0:ef:37:ae:9c:83: 1e:74:bb:c1:b9:89:dd:94:be:24:c1:0f:aa:46:61: 13:f0:ab:f8:8c:5d:79:cd:cd:81:41:d3:d9:b8:ac: d5:c4:5e:a0:e1:52:55:6b:cc:50:c7:d1:4d:ad:79: b5:77:7b:34:1a:86:64:be:9f:2c:6d:aa:5e:9f:86: 5b:ec:d1:d6:23:31:d3:c9:f5:54:a2:8c:58:ea:a5: fd:a1:5b:dc:ed:95:4b:ab:47:e4:3b:a7:16:19:54: 59:54:da:b7:d4:7e:32:6e:49:9e:98:8d:cc:60:c9: 73:f3:d4:7f:3c:9f:8c:3a:59:81:83:b0:f4:21:0e: 26:7a:70:87:a1:d2:1d:ba:1c:31:83:57:14:c3:be: 15:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:AA:50:FD:46:B9:5F:69:A1:48:03:D7:C2:A8:81:AE:A5:F4:6A:59 X509v3 Authority Key Identifier: keyid:93:3E:F7:26:06:D9:D5:B2:9F:E3:A4:1F:20:C5:2B:20:CA:F5:55:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/kz73JgbZ1bKf46QfIMUrIMr1Vbo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kz73JgbZ1bKf46QfIMUrIMr1Vbo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/kz73JgbZ1bKf46QfIMUrIMr1Vbo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:d3:9a:ac:1d:c1:96:79:81:97:f9:74:56:15:6e:57:c1:d2: 62:4c:26:ac:8e:25:24:09:16:5e:74:b3:fb:a0:ea:3c:74:55: 2f:c9:2e:64:75:b3:5c:e5:82:3e:22:10:37:d8:d5:3e:32:6c: cd:26:95:42:b3:6d:d4:d0:84:f1:e1:cd:22:7d:da:5d:3d:01: ef:f9:34:ea:83:9b:c1:87:89:46:23:f1:24:a7:93:53:e2:2f: e4:80:38:79:51:b6:c1:d4:0b:84:4e:0c:fc:9b:b8:66:83:47: 10:6e:75:eb:0d:87:97:66:31:89:e7:46:bf:fe:49:c0:0e:9f: cb:80:4f:47:a1:b9:7f:c6:c8:9d:6c:97:0e:03:cf:e2:df:dc: 5d:62:23:00:1a:70:6a:85:e8:f6:2f:db:13:6f:fa:03:64:ef: 41:9f:ff:95:18:28:f3:4b:10:8a:fd:0f:24:60:32:96:4c:96: 6b:aa:de:a5:ac:98:1a:19:36:df:89:76:50:6d:fb:08:74:9a: 01:b9:c6:8f:32:32:55:da:4d:7e:13:7d:de:be:27:18:d2:a2: 5e:64:b3:96:8e:bb:43:7c:1d:d1:5d:b0:82:57:c8:63:f5:0c: 64:7b:08:84:d3:17:28:16:9c:57:9c:8b:06:c9:d8:6f:4c:a2: 17:fd:2e:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB88wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY1MDMxMTAvBgNVBAUTKDkzM0VGNzI2MDZEOUQ1QjI5RkUzQTQxRjIwQzUyQjIw Q0FGNTU1QkEwHhcNMjUwNDI0MjA1MzU4WhcNMjUwNTAxMjA1MzU4WjAYMRYwFAYD VQQDEw02ODBhYTRlNi03MGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnBk+m/lq33fFo4DJWV2zDj4NKfyvpKB6L7rK8Sd4g0KmQr8UnDicuv7MyzWG M0t/2NZsniskt6YtNZYscfBtmRQxC9kRDoah4a5Bcwgwa4PfRIQw57xd+eco7qf3 smxdAXIiyxmr4rbJTRz1PeRVzorQ7zeunIMedLvBuYndlL4kwQ+qRmET8Kv4jF15 zc2BQdPZuKzVxF6g4VJVa8xQx9FNrXm1d3s0GoZkvp8sbapen4Zb7NHWIzHTyfVU ooxY6qX9oVvc7ZVLq0fkO6cWGVRZVNq31H4ybkmemI3MYMlz89R/PJ+MOlmBg7D0 IQ4menCHodIduhwxg1cUw74VSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBCqUP1G uV9poUgD18Koga6l9GpZMB8GA1UdIwQYMBaAFJM+9yYG2dWyn+OkHyDFKyDK9VW6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjUwMy8wMTU0QjRCNkVF ODcxMUVBQjUyQTVDMDlDNEY5QUUwMi9rejczSmdiWjFiS2Y0NlFmSU1VcklNcjFW Ym8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2t6NzNKZ2JaMWJLZjQ2UWZJTVVySU1yMVZiby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjUwMy8wMTU0QjRCNkVFODcxMUVBQjUyQTVDMDlDNEY5QUUwMi9rejczSmdiWjFi S2Y0NlFmSU1VcklNcjFWYm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCA05qsHcGWeYGX+XRWFW5XwdJiTCasjiUkCRZedLP7oOo8dFUvyS5k dbNc5YI+IhA32NU+MmzNJpVCs23U0ITx4c0ifdpdPQHv+TTqg5vBh4lGI/Ekp5NT 4i/kgDh5UbbB1AuETgz8m7hmg0cQbnXrDYeXZjGJ50a//knADp/LgE9Hobl/xsid bJcOA8/i39xdYiMAGnBqhej2L9sTb/oDZO9Bn/+VGCjzSxCK/Q8kYDKWTJZrqt6l rJgaGTbfiXZQbfsIdJoBucaPMjJV2k1+E33evicY0qJeZLOWjrtDfB3RXbCCV8hj 9QxkewiE0xcoFpxXnIsGydhvTKIX/S7f -----END CERTIFICATE-----Generated at Sat Apr 26 04:35:47 2025 by rpki-client