$ rpki-client -vvf rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.mft File: kg59CR8VVp8tg0DGWCuVlewGVoA.mft (raw, json) Hash identifier: RA/IScahN3SnN5wPj8uW23xf7ANpW0ROmHkytc2KpTA= Subject key identifier: 35:00:E8:F3:C1:1D:C5:26:47:EB:B1:E2:5E:D2:48:70:0B:19:49:91 Authority key identifier: 92:0E:7D:09:1F:15:56:9F:2D:83:40:C6:58:2B:95:95:EC:06:56:80 Certificate issuer: /CN=A9112FE1/serialNumber=920E7D091F15569F2D8340C6582B9595EC065680 Certificate serial: 1B Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kg59CR8VVp8tg0DGWCuVlewGVoA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.mft Manifest number: 1B Signing time: Tue 13 May 2025 07:11:38 +0000 Manifest this update: Tue 13 May 2025 07:11:38 +0000 Manifest next update: Tue 20 May 2025 07:11:38 +0000 Files and hashes: 1: kg59CR8VVp8tg0DGWCuVlewGVoA.crl (hash: /GE7/qlBbhhYpz7sGVRAemiEhVLRC7RsMhnxkf7AIg8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.crl rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kg59CR8VVp8tg0DGWCuVlewGVoA.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 07:11:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27 (0x1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112FE1, serialNumber=920E7D091F15569F2D8340C6582B9595EC065680 Validity Not Before: May 13 07:11:38 2025 GMT Not After : May 20 07:11:38 2025 GMT Subject: CN=6822f0aa-9f06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:14:1a:d6:b7:61:ee:98:33:86:65:69:d3:db: 75:b4:3c:4b:0c:f3:48:e5:02:8b:f2:98:c7:c7:eb: bd:ba:39:e2:ff:83:76:52:68:36:b4:91:66:33:89: 07:a5:02:c2:29:ca:60:9e:57:4e:81:23:43:7c:ff: 46:c6:7b:f9:ce:40:73:fe:ef:9c:ac:96:8f:78:bd: 8f:1c:66:8a:fd:d4:4c:e9:e2:3d:fe:f2:f3:df:f5: 0a:ed:25:28:4d:a0:c3:4a:07:19:78:ed:ee:23:36: 1e:b4:46:ff:71:86:70:5a:33:54:8f:f4:a4:ab:8f: 95:da:d4:53:c3:02:0d:18:b9:35:9d:cc:0c:81:19: bb:9e:7d:f4:d3:22:59:5c:3f:65:f8:c0:28:ba:f0: 35:68:1b:a1:5c:22:e1:b1:53:78:61:50:5f:00:d4: 49:5e:57:50:eb:6a:c0:91:ac:61:30:6f:be:a7:e1: d4:a2:07:5a:38:40:fd:7c:e8:e4:30:e0:bd:d4:ea: 1c:c7:57:c2:38:d2:ab:b9:dd:1c:37:eb:14:67:2b: 85:87:f7:eb:3a:f5:65:ec:a9:9a:86:19:97:bd:d1: c3:58:03:62:65:69:65:d4:08:54:bb:3a:79:ca:0b: 26:a8:f9:33:ab:15:72:75:02:eb:63:67:10:40:d5: ee:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:00:E8:F3:C1:1D:C5:26:47:EB:B1:E2:5E:D2:48:70:0B:19:49:91 X509v3 Authority Key Identifier: keyid:92:0E:7D:09:1F:15:56:9F:2D:83:40:C6:58:2B:95:95:EC:06:56:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kg59CR8VVp8tg0DGWCuVlewGVoA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:78:69:81:9b:63:c4:3c:4d:e4:bc:4d:18:40:58:2c:04:1c: 17:82:b8:30:ed:7b:b7:2f:c1:e0:8b:d3:a7:41:70:73:b8:3d: ff:c0:3a:61:6b:15:8a:91:a0:86:1b:ce:0b:1b:25:92:c7:05: 8c:be:33:34:59:db:85:65:e8:5a:5c:cf:20:f0:11:ab:c3:88: b5:00:26:1e:82:68:01:a7:6a:96:76:1e:ff:b4:84:64:e8:77: f6:29:c7:9a:d5:0f:39:df:fa:5f:08:bb:59:b6:fa:f1:2e:f7: d9:96:5c:78:c9:c3:53:48:9e:40:b9:fc:ba:a7:4d:85:49:00: 24:b5:f4:b3:f6:91:78:db:47:20:bf:9c:95:64:76:c4:d8:ed: 02:05:da:fa:39:f6:20:1d:b9:f7:e9:9a:e9:0d:c0:39:05:1e: bd:51:36:57:8a:29:82:a5:41:93:3f:a5:78:9e:76:48:d5:33: 64:f5:5c:47:de:4e:68:88:34:b3:80:c2:f2:bc:69:e7:89:c1: 86:df:57:28:6d:3f:42:df:80:9a:ed:24:e5:1a:97:8d:17:15: 4d:75:85:50:24:d5:1b:91:81:76:4b:74:a0:99:d0:b2:4d:75: d8:87:ea:c7:5b:2d:30:9d:c6:8f:0c:15:87:25:4f:86:6c:bd: 4b:59:d3:b5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MkZFMTExMC8GA1UEBRMoOTIwRTdEMDkxRjE1NTY5RjJEODM0MEM2NTgyQjk1OTVF QzA2NTY4MDAeFw0yNTA1MTMwNzExMzhaFw0yNTA1MjAwNzExMzhaMBgxFjAUBgNV BAMTDTY4MjJmMGFhLTlmMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7FBrWt2HumDOGZWnT23W0PEsM80jlAovymMfH6726OeL/g3ZSaDa0kWYziQel AsIpymCeV06BI0N8/0bGe/nOQHP+75yslo94vY8cZor91Ezp4j3+8vPf9QrtJShN oMNKBxl47e4jNh60Rv9xhnBaM1SP9KSrj5Xa1FPDAg0YuTWdzAyBGbueffTTIllc P2X4wCi68DVoG6FcIuGxU3hhUF8A1EleV1DrasCRrGEwb76n4dSiB1o4QP186OQw 4L3U6hzHV8I40qu53Rw36xRnK4WH9+s69WXsqZqGGZe90cNYA2JlaWXUCFS7OnnK Cyao+TOrFXJ1AutjZxBA1e5RAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNQDo88Ed xSZH67HiXtJIcAsZSZEwHwYDVR0jBBgwFoAUkg59CR8VVp8tg0DGWCuVlewGVoAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEyRkUxL0YxQzc0NDdFMDlG MTExRjA4QjQ0QTMyNUM0RjlBRTAyL2tnNTlDUjhWVnA4dGcwREdXQ3VWbGV3R1Zv QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIva2c1OUNSOFZWcDh0ZzBER1dDdVZsZXdHVm9BLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEy RkUxL0YxQzc0NDdFMDlGMTExRjA4QjQ0QTMyNUM0RjlBRTAyL2tnNTlDUjhWVnA4 dGcwREdXQ3VWbGV3R1ZvQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFl4aYGbY8Q8TeS8TRhAWCwEHBeCuDDte7cvweCL06dBcHO4Pf/AOmFr FYqRoIYbzgsbJZLHBYy+MzRZ24Vl6FpczyDwEavDiLUAJh6CaAGnapZ2Hv+0hGTo d/Ypx5rVDznf+l8Iu1m2+vEu99mWXHjJw1NInkC5/LqnTYVJACS19LP2kXjbRyC/ nJVkdsTY7QIF2vo59iAduffpmukNwDkFHr1RNleKKYKlQZM/pXiedkjVM2T1XEfe TmiINLOAwvK8aeeJwYbfVyhtP0LfgJrtJOUal40XFU11hVAk1RuRgXZLdKCZ0LJN ddiH6sdbLTCdxo8MFYclT4ZsvUtZ07U= -----END CERTIFICATE-----Generated at Thu May 15 00:10:22 2025 by rpki-client