$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft File: ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft (raw, json) Hash identifier: 5HjhaoY3AAqFb8I8mZ7YyMfS3OCaz0difzr8ZRdMb1g= Subject key identifier: 2E:5C:81:1B:CF:20:00:21:E7:48:07:11:37:53:89:AE:38:B7:D9:57 Authority key identifier: 92:EF:D5:C0:B9:20:1A:7E:D3:96:5F:2D:98:B6:D9:EB:66:29:05:30 Certificate issuer: /CN=A91ED9F9/serialNumber=92EFD5C0B9201A7ED3965F2D98B6D9EB66290530 Certificate serial: EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ku_VwLkgGn7Tll8tmLbZ62YpBTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft Manifest number: E7 Signing time: Fri 25 Apr 2025 04:31:19 +0000 Manifest this update: Fri 25 Apr 2025 04:31:19 +0000 Manifest next update: Fri 02 May 2025 04:31:19 +0000 Files and hashes: 1: ku_VwLkgGn7Tll8tmLbZ62YpBTA.crl (hash: cgq2YoTb5XL7Ow2brx+eAONnC55Zr/EX8dzlss2TE7Q=) 2: BAE1F274190511F0826DA721C4F9AE02.roa (hash: hkDgEW3xtmdXjSOLRvfpWhXCPRLijL9lQq3GA+lSi2M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.crl rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ku_VwLkgGn7Tll8tmLbZ62YpBTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:31:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 236 (0xec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED9F9, serialNumber=92EFD5C0B9201A7ED3965F2D98B6D9EB66290530 Validity Not Before: Apr 25 04:31:19 2025 GMT Not After : May 2 04:31:19 2025 GMT Subject: CN=680b1017-bac7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:83:36:db:1e:9d:f1:04:cb:53:cf:88:ff:9f: ea:ca:05:4e:bc:97:e5:e6:d8:35:93:71:05:06:01: 46:de:8a:9a:22:d0:6e:66:7e:8f:b0:ff:1d:52:86: b4:66:31:0d:ad:3e:c0:3d:8a:a4:ff:66:4f:a5:87: 35:d3:cd:f2:85:d9:98:73:63:37:16:76:5d:85:94: 47:c7:78:3f:ea:8f:48:c2:50:4d:ef:aa:d0:a7:19: 71:0a:a1:8e:89:48:b6:7e:26:66:e0:e4:f6:8d:3c: 8e:a6:f0:e9:af:d9:8c:db:d3:07:99:a2:d5:f0:51: 4d:ea:fb:e1:53:5d:87:9a:cf:a2:41:37:93:b9:c0: f8:e6:4b:16:f0:36:34:19:a0:8c:af:fc:e7:09:e0: d7:80:e8:f2:4a:17:42:74:6f:a5:1f:9b:4e:e1:0c: c7:8a:06:c0:09:42:fa:11:ef:d0:42:df:23:9e:56: e9:cd:de:66:5c:59:45:16:ba:04:6c:28:9a:88:3a: 13:a3:06:05:ca:3d:79:19:17:a2:2c:0f:97:57:25: f8:42:7b:d5:dd:8f:de:65:ba:d9:16:47:5e:3c:ad: e1:f7:53:f4:88:d7:fd:03:0a:a8:21:89:9f:1b:f7: 3c:88:24:87:7d:39:1b:18:53:1a:9c:45:99:01:d8: 29:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:5C:81:1B:CF:20:00:21:E7:48:07:11:37:53:89:AE:38:B7:D9:57 X509v3 Authority Key Identifier: keyid:92:EF:D5:C0:B9:20:1A:7E:D3:96:5F:2D:98:B6:D9:EB:66:29:05:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ku_VwLkgGn7Tll8tmLbZ62YpBTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:9e:a6:db:34:25:4e:f3:11:f4:5c:3b:0b:42:dc:3a:94:9a: 5d:cc:19:7d:4f:a7:f1:97:f6:79:dc:bc:bc:0f:d2:a6:1e:64: b8:1f:39:0d:db:a5:20:84:77:be:2a:85:a9:7b:b4:ca:c5:ba: 6d:b6:b8:cb:a1:89:56:40:0b:3a:76:6b:0f:81:19:25:de:d9: 45:4d:de:f5:c4:02:39:1a:91:44:3b:29:91:c4:c8:fa:a4:9e: 51:67:58:46:af:81:a0:0d:0b:57:ea:43:4b:08:2c:f7:e8:88: 10:66:35:1e:8a:04:d8:55:33:c2:99:3b:f0:05:13:f9:af:8c: 51:6c:8a:c4:36:6c:33:6e:05:28:d3:14:92:42:84:40:ef:ab: 79:a8:a1:76:77:6c:de:c1:2d:a6:83:d3:ca:99:7c:f1:81:d3: b2:4c:37:dc:94:6d:03:79:db:69:2d:43:6d:ab:f3:b3:90:11: 56:49:0a:42:a4:e8:f5:ce:f6:88:8f:6d:cf:47:57:ea:d2:21: ed:1e:eb:13:57:27:e6:12:a3:b2:45:23:f1:59:83:a3:02:7b: 7a:8d:4a:4c:7d:4e:f9:1b:e0:05:ae:fd:1f:5e:ff:c1:25:84: ad:fc:12:92:d9:51:55:3e:9b:64:5c:65:d1:e1:a3:e8:26:76: c2:75:75:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQ5RjkxMTAvBgNVBAUTKDkyRUZENUMwQjkyMDFBN0VEMzk2NUYyRDk4QjZEOUVC NjYyOTA1MzAwHhcNMjUwNDI1MDQzMTE5WhcNMjUwNTAyMDQzMTE5WjAYMRYwFAYD VQQDEw02ODBiMTAxNy1iYWM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv4M22x6d8QTLU8+I/5/qygVOvJfl5tg1k3EFBgFG3oqaItBuZn6PsP8dUoa0 ZjENrT7APYqk/2ZPpYc1083yhdmYc2M3FnZdhZRHx3g/6o9IwlBN76rQpxlxCqGO iUi2fiZm4OT2jTyOpvDpr9mM29MHmaLV8FFN6vvhU12Hms+iQTeTucD45ksW8DY0 GaCMr/znCeDXgOjyShdCdG+lH5tO4QzHigbACUL6Ee/QQt8jnlbpzd5mXFlFFroE bCiaiDoTowYFyj15GReiLA+XVyX4QnvV3Y/eZbrZFkdePK3h91P0iNf9AwqoIYmf G/c8iCSHfTkbGFManEWZAdgpowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC5cgRvP IAAh50gHETdTia44t9lXMB8GA1UdIwQYMBaAFJLv1cC5IBp+05ZfLZi22etmKQUw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDlGOS82ODYwRDVBMEM5 NTIxMUVFQjdBRERENEVDNEY5QUUwMi9rdV9Wd0xrZ0duN1RsbDh0bUxiWjYyWXBC VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2t1X1Z3TGtnR243VGxsOHRtTGJaNjJZcEJUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDlGOS82ODYwRDVBMEM5NTIxMUVFQjdBRERENEVDNEY5QUUwMi9rdV9Wd0xrZ0du N1RsbDh0bUxiWjYyWXBCVEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOnqbbNCVO8xH0XDsLQtw6lJpdzBl9T6fxl/Z53Ly8D9KmHmS4HzkN 26UghHe+KoWpe7TKxbpttrjLoYlWQAs6dmsPgRkl3tlFTd71xAI5GpFEOymRxMj6 pJ5RZ1hGr4GgDQtX6kNLCCz36IgQZjUeigTYVTPCmTvwBRP5r4xRbIrENmwzbgUo 0xSSQoRA76t5qKF2d2zewS2mg9PKmXzxgdOyTDfclG0DedtpLUNtq/OzkBFWSQpC pOj1zvaIj23PR1fq0iHtHusTVyfmEqOyRSPxWYOjAnt6jUpMfU75G+AFrv0fXv/B JYSt/BKS2VFVPptkXGXR4aPoJnbCdXUR -----END CERTIFICATE-----Generated at Sat Apr 26 04:22:44 2025 by rpki-client