$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft File: kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft (raw, json) Hash identifier: 0aZiV4dvAqt1uj6adjWoSqIak+7ZlIQ4pzcZZAVGYsk= Subject key identifier: AB:8E:32:CE:95:A4:60:7B:ED:5F:AD:24:27:A6:85:CD:4A:03:34:40 Authority key identifier: 92:0E:C6:FC:36:57:D3:FB:00:98:82:59:8C:98:6A:74:F5:55:58:DF Certificate issuer: /CN=A91EF163/serialNumber=920EC6FC3657D3FB009882598C986A74F55558DF Certificate serial: 1699 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kg7G_DZX0_sAmIJZjJhqdPVVWN8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft Manifest number: 1684 Signing time: Thu 24 Apr 2025 16:42:20 +0000 Manifest this update: Thu 24 Apr 2025 16:42:19 +0000 Manifest next update: Thu 01 May 2025 16:42:19 +0000 Files and hashes: 1: kg7G_DZX0_sAmIJZjJhqdPVVWN8.crl (hash: jqcHB5aw5rKuTiKU8pZx/PG1VUE8qKQpPJEZt8XL4Oo=) 2: 47F9786C171B11ECB022FD54C4F9AE02.roa (hash: 9LkXl9QxDSxbtZYyZ8LFVmO6uJfg1+QNK1ML8GwAiHg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.crl rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kg7G_DZX0_sAmIJZjJhqdPVVWN8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:42:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5785 (0x1699) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF163, serialNumber=920EC6FC3657D3FB009882598C986A74F55558DF Validity Not Before: Apr 24 16:42:19 2025 GMT Not After : May 1 16:42:19 2025 GMT Subject: CN=680a69eb-e160 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e2:79:6b:91:d4:2c:d1:94:74:b8:8a:6e:dd: a6:be:b4:43:3f:77:79:59:a1:50:fa:cd:87:01:22: f9:ca:80:1d:b1:7a:29:eb:0c:a7:2e:47:98:c9:68: e6:11:53:95:38:f1:f5:07:00:41:67:70:43:bc:61: 2e:81:a3:93:be:05:f5:c7:da:1d:5d:69:be:20:05: a9:b6:1b:68:f2:6e:c7:6d:0b:92:b3:b7:0b:d3:ea: 78:9b:93:11:51:47:5b:af:c7:82:67:f3:3e:4f:a8: bb:51:72:fc:6e:38:3a:e4:89:d3:0f:6a:ff:66:17: f3:b8:26:af:c5:df:e0:ee:65:3b:55:bc:4e:99:d6: db:e1:21:7d:d6:20:8e:12:07:d7:dd:a1:6d:41:6e: 88:58:e9:dc:7b:29:bb:f2:2a:e8:57:45:ad:85:6e: 8a:47:bd:0f:f2:5a:71:d0:20:29:fb:3e:e4:41:cc: e1:91:04:ec:ca:88:65:e5:12:28:48:88:c4:39:20: e5:ab:3c:45:d1:3e:4e:f4:6c:c2:c8:16:ce:9c:c6: f6:d6:b0:44:75:64:87:27:6f:10:dc:df:b8:6b:48: 82:4c:97:67:4e:4b:da:38:c9:3a:59:fb:3f:de:85: 01:22:82:eb:3e:f6:f5:bf:6d:e8:55:f0:85:a8:f8: 87:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:8E:32:CE:95:A4:60:7B:ED:5F:AD:24:27:A6:85:CD:4A:03:34:40 X509v3 Authority Key Identifier: keyid:92:0E:C6:FC:36:57:D3:FB:00:98:82:59:8C:98:6A:74:F5:55:58:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kg7G_DZX0_sAmIJZjJhqdPVVWN8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:3f:4e:9d:60:5d:cb:c6:3d:90:bc:67:ef:1d:ee:bb:42:ad: 7f:d2:b0:95:29:17:0e:3c:9c:ba:48:41:62:c0:6e:88:0f:41: 90:81:3a:d8:f9:10:81:c9:1e:4f:f5:28:08:ea:46:93:6c:d4: b2:40:42:77:c6:6f:95:5a:b6:5f:eb:44:ae:55:8a:cd:81:66: 32:9b:60:95:5e:fe:6c:04:8c:af:7b:ea:a1:5d:9d:19:4a:f0: 63:e7:bb:3a:06:ae:1a:6c:bb:f0:81:18:69:be:a0:24:0a:ae: 88:d4:1a:cd:19:50:f5:a0:32:d0:11:ba:1c:24:55:0f:85:22: 5b:9b:86:f4:12:b9:6a:c5:c6:fc:e6:1b:7a:d9:6e:0d:7d:5f: 19:f8:11:4f:aa:12:7e:71:1f:c9:51:19:40:04:30:37:38:8f: 56:f5:b1:f3:86:0c:30:19:a5:1b:ac:3c:f7:30:da:bf:c2:38: fd:51:72:4e:7e:3d:ee:e7:d8:77:f7:44:d6:33:f1:be:1d:e8: eb:a0:50:46:b3:0f:02:77:69:2e:92:18:66:07:5a:b9:3e:ea: 11:d8:7d:07:08:61:05:94:38:f4:f3:c8:66:9f:f8:b2:83:75: 9e:76:bf:5e:d6:c4:14:64:54:f9:c3:10:5f:de:d4:93:dd:bf: 3e:0b:36:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFpkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYxNjMxMTAvBgNVBAUTKDkyMEVDNkZDMzY1N0QzRkIwMDk4ODI1OThDOTg2QTc0 RjU1NTU4REYwHhcNMjUwNDI0MTY0MjE5WhcNMjUwNTAxMTY0MjE5WjAYMRYwFAYD VQQDEw02ODBhNjllYi1lMTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtOJ5a5HULNGUdLiKbt2mvrRDP3d5WaFQ+s2HASL5yoAdsXop6wynLkeYyWjm EVOVOPH1BwBBZ3BDvGEugaOTvgX1x9odXWm+IAWpthto8m7HbQuSs7cL0+p4m5MR UUdbr8eCZ/M+T6i7UXL8bjg65InTD2r/ZhfzuCavxd/g7mU7VbxOmdbb4SF91iCO EgfX3aFtQW6IWOnceym78iroV0WthW6KR70P8lpx0CAp+z7kQczhkQTsyohl5RIo SIjEOSDlqzxF0T5O9GzCyBbOnMb21rBEdWSHJ28Q3N+4a0iCTJdnTkvaOMk6Wfs/ 3oUBIoLrPvb1v23oVfCFqPiHvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKuOMs6V pGB77V+tJCemhc1KAzRAMB8GA1UdIwQYMBaAFJIOxvw2V9P7AJiCWYyYanT1VVjf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjE2My8wMjlBRjk4NjAw NzYxMUU4QjM1OTlEMTdDNEY5QUUwMi9rZzdHX0RaWDBfc0FtSUpaakpocWRQVlZX TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tnN0dfRFpYMF9zQW1JSlpqSmhxZFBWVldOOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjE2My8wMjlBRjk4NjAwNzYxMUU4QjM1OTlEMTdDNEY5QUUwMi9rZzdHX0RaWDBf c0FtSUpaakpocWRQVlZXTjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUP06dYF3Lxj2QvGfvHe67Qq1/0rCVKRcOPJy6SEFiwG6ID0GQgTrY +RCByR5P9SgI6kaTbNSyQEJ3xm+VWrZf60SuVYrNgWYym2CVXv5sBIyve+qhXZ0Z SvBj57s6Bq4abLvwgRhpvqAkCq6I1BrNGVD1oDLQEbocJFUPhSJbm4b0Erlqxcb8 5ht62W4NfV8Z+BFPqhJ+cR/JURlABDA3OI9W9bHzhgwwGaUbrDz3MNq/wjj9UXJO fj3u59h390TWM/G+HejroFBGsw8Cd2kukhhmB1q5PuoR2H0HCGEFlDj088hmn/iy g3Wedr9e1sQUZFT5wxBf3tST3b8+CzZx -----END CERTIFICATE-----Generated at Sat Apr 26 03:46:27 2025 by rpki-client