$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDCFE/96505B2480E411ECB92DCB4DC4F9AE02/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.mft File: kqxPvhcOqd-J8MgxjDzUX5OlIzQ.mft (raw, json) Hash identifier: dYyUcahCHZy1sqnokjkVwe70xjBUpHucC9gXKfHZjs8= Subject key identifier: 55:0C:51:09:4F:20:0D:83:4A:42:53:16:99:78:B7:E5:38:DF:56:A4 Authority key identifier: 92:AC:4F:BE:17:0E:A9:DF:89:F0:C8:31:8C:3C:D4:5F:93:A5:23:34 Certificate issuer: /CN=A91FDCFE/serialNumber=92AC4FBE170EA9DF89F0C8318C3CD45F93A52334 Certificate serial: 03DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDCFE/96505B2480E411ECB92DCB4DC4F9AE02/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.mft Manifest number: 03D4 Signing time: Fri 25 Apr 2025 00:22:30 +0000 Manifest this update: Fri 25 Apr 2025 00:22:29 +0000 Manifest next update: Fri 02 May 2025 00:22:29 +0000 Files and hashes: 1: kqxPvhcOqd-J8MgxjDzUX5OlIzQ.crl (hash: h/R5lhSDhfjAAaY6M4rvKB1sgcK3cjh7dNWMbXHJQJQ=) 2: A5621F3480EA11EC9B13735BC4F9AE02.roa (hash: 8vDL+87ujwmt0cTUprGHDVqUcQ7iOWe78XinpUQSTr4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDCFE/96505B2480E411ECB92DCB4DC4F9AE02/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.crl rsync://rpki.apnic.net/member_repository/A91FDCFE/96505B2480E411ECB92DCB4DC4F9AE02/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:22:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 990 (0x3de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDCFE, serialNumber=92AC4FBE170EA9DF89F0C8318C3CD45F93A52334 Validity Not Before: Apr 25 00:22:29 2025 GMT Not After : May 2 00:22:29 2025 GMT Subject: CN=680ad5c6-2a2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:cb:52:ca:8c:55:5c:e3:a1:c9:50:dd:50:2e: b9:8f:4e:57:eb:a6:e2:79:72:62:6e:c3:07:5a:b6: e4:6a:7f:91:8c:6b:aa:bd:7a:ed:24:6e:bf:ee:5e: 4f:64:27:91:dd:97:82:8b:2e:d1:65:95:cb:5e:78: b2:e9:27:98:56:b7:f9:bc:22:d2:2c:7f:14:be:92: 7a:a8:ef:51:7f:52:72:df:86:44:0d:e2:f1:8f:8c: 41:4e:d0:93:0b:bd:de:dd:d4:ba:80:ba:92:95:49: 11:15:08:b5:fb:c1:c9:1e:44:cf:e1:3d:2c:4c:bc: 65:9f:e6:b9:c8:9d:45:06:e0:ad:77:2c:f4:9c:7e: 95:75:38:0d:cb:03:08:c6:5a:8b:2f:b2:77:b2:8a: 31:7e:0b:58:5a:41:ad:31:de:2d:57:2b:6c:2b:c0: 2e:69:bb:1a:ca:f1:cb:97:3a:41:92:47:37:f3:86: 1b:8c:67:80:44:e5:37:e1:87:24:be:96:f2:17:72: 49:25:cb:fe:01:97:86:d9:34:7f:ad:60:4b:cb:be: 3c:ad:f2:45:ab:ab:b4:19:41:fb:45:aa:91:fe:ef: 87:26:70:d2:2c:d1:74:0e:97:78:09:f1:dd:85:d2: 38:af:f9:cc:76:9e:63:d1:44:5f:fb:18:71:01:21: 40:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:0C:51:09:4F:20:0D:83:4A:42:53:16:99:78:B7:E5:38:DF:56:A4 X509v3 Authority Key Identifier: keyid:92:AC:4F:BE:17:0E:A9:DF:89:F0:C8:31:8C:3C:D4:5F:93:A5:23:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDCFE/96505B2480E411ECB92DCB4DC4F9AE02/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDCFE/96505B2480E411ECB92DCB4DC4F9AE02/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:f8:3a:ba:2e:46:d1:ed:d7:eb:29:05:c3:93:45:68:39:40: 7c:c2:82:0b:54:bd:f0:64:27:83:0d:1d:f5:28:5a:58:5b:54: c1:6b:62:9e:f4:75:35:fd:00:6d:16:b1:5f:60:68:70:80:48: 2d:a5:c8:a7:8c:d1:89:4f:9c:82:78:f6:fd:fd:b8:4a:3a:5a: f9:c0:04:3e:26:4d:98:86:5a:89:0e:25:01:13:02:82:98:c1: ea:55:27:68:8e:9d:c4:69:36:4a:a0:41:5f:6b:a0:e7:f5:bb: e8:e6:28:16:13:f5:79:b2:cc:82:f5:41:4d:11:d7:d8:72:f2: f4:c0:c1:13:34:72:39:2a:4c:f6:2d:e7:dc:5a:da:51:1f:4b: 45:0e:4c:1c:6e:7f:e6:18:88:7a:90:57:f1:9e:59:99:6b:c8: a9:7d:c6:f0:bc:71:91:b9:53:62:1b:be:fe:47:e1:be:80:f1: 55:1d:1c:5e:16:56:ee:d3:f1:f9:bf:38:23:ea:84:7a:14:af: c2:60:8e:ae:00:e1:3c:9d:dd:d1:fb:0d:3e:e7:af:3f:5c:f8: 58:2f:33:b6:6f:a3:46:ef:b5:b0:01:08:5d:d3:ce:bb:64:4c: 60:30:ef:05:74:2a:97:5a:5a:7f:1f:16:56:45:c2:02:25:29: b0:0e:67:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA94wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRDRkUxMTAvBgNVBAUTKDkyQUM0RkJFMTcwRUE5REY4OUYwQzgzMThDM0NENDVG OTNBNTIzMzQwHhcNMjUwNDI1MDAyMjI5WhcNMjUwNTAyMDAyMjI5WjAYMRYwFAYD VQQDEw02ODBhZDVjNi0yYTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvstSyoxVXOOhyVDdUC65j05X66bieXJibsMHWrbkan+RjGuqvXrtJG6/7l5P ZCeR3ZeCiy7RZZXLXniy6SeYVrf5vCLSLH8UvpJ6qO9Rf1Jy34ZEDeLxj4xBTtCT C73e3dS6gLqSlUkRFQi1+8HJHkTP4T0sTLxln+a5yJ1FBuCtdyz0nH6VdTgNywMI xlqLL7J3sooxfgtYWkGtMd4tVytsK8AuabsayvHLlzpBkkc384YbjGeAROU34Yck vpbyF3JJJcv+AZeG2TR/rWBLy748rfJFq6u0GUH7RaqR/u+HJnDSLNF0Dpd4CfHd hdI4r/nMdp5j0URf+xhxASFA5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFUMUQlP IA2DSkJTFpl4t+U431akMB8GA1UdIwQYMBaAFJKsT74XDqnfifDIMYw81F+TpSM0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRENGRS85NjUwNUIyNDgw RTQxMUVDQjkyRENCNERDNEY5QUUwMi9rcXhQdmhjT3FkLUo4TWd4akR6VVg1T2xJ elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2txeFB2aGNPcWQtSjhNZ3hqRHpVWDVPbEl6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RENGRS85NjUwNUIyNDgwRTQxMUVDQjkyRENCNERDNEY5QUUwMi9rcXhQdmhjT3Fk LUo4TWd4akR6VVg1T2xJelEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBI+Dq6LkbR7dfrKQXDk0VoOUB8woILVL3wZCeDDR31KFpYW1TBa2Ke 9HU1/QBtFrFfYGhwgEgtpcinjNGJT5yCePb9/bhKOlr5wAQ+Jk2YhlqJDiUBEwKC mMHqVSdojp3EaTZKoEFfa6Dn9bvo5igWE/V5ssyC9UFNEdfYcvL0wMETNHI5Kkz2 LefcWtpRH0tFDkwcbn/mGIh6kFfxnlmZa8ipfcbwvHGRuVNiG77+R+G+gPFVHRxe Flbu0/H5vzgj6oR6FK/CYI6uAOE8nd3R+w0+568/XPhYLzO2b6NG77WwAQhd0867 ZExgMO8FdCqXWlp/HxZWRcICJSmwDmfB -----END CERTIFICATE-----Generated at Sat Apr 26 04:30:43 2025 by rpki-client