$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/Khx4XL6-fNe6tToSO2BVhg9gfxg.mft File: Khx4XL6-fNe6tToSO2BVhg9gfxg.mft (raw, json) Hash identifier: Ejsqn1eSKGXREZ7cnEyDWmsWsuKs8Py4JXOGglpmUxE= Subject key identifier: 88:9F:40:A9:EC:52:28:32:24:5C:ED:D1:88:07:C2:E2:D9:A1:7E:FD Authority key identifier: 2A:1C:78:5C:BE:BE:7C:D7:BA:B5:3A:12:3B:60:55:86:0F:60:7F:18 Certificate issuer: /CN=A91D6AB2/serialNumber=2A1C785CBEBE7CD7BAB53A123B6055860F607F18 Certificate serial: 0820 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Khx4XL6-fNe6tToSO2BVhg9gfxg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/Khx4XL6-fNe6tToSO2BVhg9gfxg.mft Manifest number: 0C1E Signing time: Thu 24 Apr 2025 20:40:34 +0000 Manifest this update: Thu 24 Apr 2025 20:40:33 +0000 Manifest next update: Thu 01 May 2025 20:40:33 +0000 Files and hashes: 1: Khx4XL6-fNe6tToSO2BVhg9gfxg.crl (hash: ix58z+415rtc36NYW59ehZV6iOZprcpVvxedqW/D0+M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/Khx4XL6-fNe6tToSO2BVhg9gfxg.crl rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/Khx4XL6-fNe6tToSO2BVhg9gfxg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Khx4XL6-fNe6tToSO2BVhg9gfxg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:40:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2080 (0x820) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6AB2, serialNumber=2A1C785CBEBE7CD7BAB53A123B6055860F607F18 Validity Not Before: Apr 24 20:40:33 2025 GMT Not After : May 1 20:40:33 2025 GMT Subject: CN=680aa1c1-50ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:1c:c6:b4:5c:30:01:9d:c4:82:c6:43:7b:8c: 36:93:78:4e:9c:d7:0b:90:24:c5:a4:9b:58:45:ac: 1e:34:09:80:2e:70:cc:42:c5:d1:d4:ca:d9:df:12: e5:18:07:da:98:23:19:9f:56:ff:3e:96:23:6f:0b: 9f:d8:1a:62:06:c1:7c:26:14:5c:61:0d:77:dd:64: 18:e5:cc:64:e7:f9:b1:2d:87:ac:8b:be:8b:5a:ef: 5e:c4:54:d6:23:2f:5e:6f:14:d5:58:db:ad:dc:bc: 3f:da:55:f8:10:9a:ce:93:9f:01:96:78:0b:c7:53: 2e:b1:46:ee:ce:5b:ab:1f:dd:d2:b3:c2:2a:0a:3c: c9:07:39:80:11:a6:f4:10:e4:f1:66:2b:64:bb:62: 90:1f:31:4b:75:a6:68:f0:84:9a:16:a0:5a:0a:ca: 65:10:b8:57:dd:ec:23:9d:dc:aa:83:6c:bb:da:d7: bc:eb:cd:53:e2:0f:e6:77:f5:93:24:d7:26:e0:76: fc:46:45:3f:9b:d3:e2:45:25:38:ba:a3:e7:b6:24: 97:0c:6c:4c:62:b3:fb:47:ad:e1:3d:b4:42:64:57: 0c:5e:f4:2e:f0:6b:5c:2f:6d:1f:4b:ed:22:33:2f: 5d:55:5c:ce:c9:70:c8:20:90:d1:4a:98:cb:54:ac: 94:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:9F:40:A9:EC:52:28:32:24:5C:ED:D1:88:07:C2:E2:D9:A1:7E:FD X509v3 Authority Key Identifier: keyid:2A:1C:78:5C:BE:BE:7C:D7:BA:B5:3A:12:3B:60:55:86:0F:60:7F:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/Khx4XL6-fNe6tToSO2BVhg9gfxg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Khx4XL6-fNe6tToSO2BVhg9gfxg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/Khx4XL6-fNe6tToSO2BVhg9gfxg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:25:f9:fa:c9:e3:05:aa:b9:23:f8:f8:f4:8e:ea:48:9f:12: 15:a8:56:eb:6c:7c:a0:83:e0:6a:8e:07:03:17:a4:06:f0:e7: b3:d1:8d:4a:62:41:1d:b5:94:f1:b9:28:7e:39:aa:f6:db:e4: 1f:5f:d2:58:33:ce:8c:c2:89:08:36:34:1c:3a:72:5a:39:6b: 27:2c:35:e3:d5:c4:65:28:0b:44:88:13:dc:aa:61:8a:4b:da: 5a:fe:df:a5:64:c2:f0:25:70:1b:d5:f8:cf:57:46:70:0d:fb: bf:e8:e7:05:eb:e7:75:53:f3:9f:8c:46:c5:3a:13:2d:7b:b4: d1:ed:37:32:a6:40:3e:32:f7:f0:f1:be:e4:c7:61:8a:a9:af: 5c:33:11:22:3c:6b:b6:bc:a4:03:c3:0b:d4:de:2e:a3:58:cf: fc:a7:b2:b8:88:50:0e:8c:5c:ef:69:0e:f4:cc:5c:40:41:d2: 45:1d:ac:45:ec:1f:72:4a:db:81:cd:68:94:6a:d6:b3:1f:67: 54:5f:ab:c7:db:92:88:cc:a6:4f:b0:65:0f:e7:3f:2a:ad:84: 77:91:22:60:c1:a0:ea:90:f4:d5:69:15:a1:7c:e8:9c:b5:42: df:00:51:90:97:77:5f:87:fe:12:60:af:62:eb:fa:ba:32:c4: 74:82:2e:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDZBQjIxMTAvBgNVBAUTKDJBMUM3ODVDQkVCRTdDRDdCQUI1M0ExMjNCNjA1NTg2 MEY2MDdGMTgwHhcNMjUwNDI0MjA0MDMzWhcNMjUwNTAxMjA0MDMzWjAYMRYwFAYD VQQDEw02ODBhYTFjMS01MGNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnRzGtFwwAZ3EgsZDe4w2k3hOnNcLkCTFpJtYRaweNAmALnDMQsXR1MrZ3xLl GAfamCMZn1b/PpYjbwuf2BpiBsF8JhRcYQ133WQY5cxk5/mxLYesi76LWu9exFTW Iy9ebxTVWNut3Lw/2lX4EJrOk58BlngLx1MusUbuzlurH93Ss8IqCjzJBzmAEab0 EOTxZitku2KQHzFLdaZo8ISaFqBaCsplELhX3ewjndyqg2y72te8681T4g/md/WT JNcm4Hb8RkU/m9PiRSU4uqPntiSXDGxMYrP7R63hPbRCZFcMXvQu8GtcL20fS+0i My9dVVzOyXDIIJDRSpjLVKyUdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIifQKns UigyJFzt0YgHwuLZoX79MB8GA1UdIwQYMBaAFCoceFy+vnzXurU6EjtgVYYPYH8Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENkFCMi8wQUYyRUFBQUNG NzAxMUVBOEFFNTVENDhDNEY5QUUwMi9LaHg0WEw2LWZOZTZ0VG9TTzJCVmhnOWdm eGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0toeDRYTDYtZk5lNnRUb1NPMkJWaGc5Z2Z4Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NkFCMi8wQUYyRUFBQUNGNzAxMUVBOEFFNTVENDhDNEY5QUUwMi9LaHg0WEw2LWZO ZTZ0VG9TTzJCVmhnOWdmeGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6Jfn6yeMFqrkj+Pj0jupInxIVqFbrbHygg+BqjgcDF6QG8Oez0Y1K YkEdtZTxuSh+Oar22+QfX9JYM86MwokINjQcOnJaOWsnLDXj1cRlKAtEiBPcqmGK S9pa/t+lZMLwJXAb1fjPV0ZwDfu/6OcF6+d1U/OfjEbFOhMte7TR7TcypkA+Mvfw 8b7kx2GKqa9cMxEiPGu2vKQDwwvU3i6jWM/8p7K4iFAOjFzvaQ70zFxAQdJFHaxF 7B9yStuBzWiUatazH2dUX6vH25KIzKZPsGUP5z8qrYR3kSJgwaDqkPTVaRWhfOic tULfAFGQl3dfh/4SYK9i6/q6MsR0gi6y -----END CERTIFICATE-----Generated at Sat Apr 26 04:19:56 2025 by rpki-client