$ rpki-client -vvf rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.mft File: kSlbu3W_quuVMbObNux1Id3jDWM.mft (raw, json) Hash identifier: AbqdDgrPqNWXFLoxex3U9Ahqovivro/mRtqxwCSIiFE= Subject key identifier: 24:F0:C0:CA:E0:38:54:05:70:52:C1:E8:ED:32:75:21:A7:5D:79:45 Authority key identifier: 91:29:5B:BB:75:BF:AA:EB:95:31:B3:9B:36:EC:75:21:DD:E3:0D:63 Certificate issuer: /CN=A911D9B2/serialNumber=91295BBB75BFAAEB9531B39B36EC7521DDE30D63 Certificate serial: 013F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSlbu3W_quuVMbObNux1Id3jDWM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.mft Manifest number: 012D Signing time: Fri 09 May 2025 04:00:58 +0000 Manifest this update: Fri 09 May 2025 04:00:58 +0000 Manifest next update: Fri 16 May 2025 04:00:58 +0000 Files and hashes: 1: kSlbu3W_quuVMbObNux1Id3jDWM.crl (hash: jqvzACTf5cwcvWilHUrsKLryjnArl9JaTCkEa9o9yqo=) 2: 11A28878915611EE83F61C41C4F9AE02.roa (hash: wRjDxSYF9ME/+w7UeeO+MKXvgDC5w3qNX+JKTSzXhtw=) 3: 59962840D01911EE96596B16C4F9AE02.roa (hash: jM6outMgdpJ44HUHhOOUfnOx+r280G0rdmU4B0AEX90=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.crl rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSlbu3W_quuVMbObNux1Id3jDWM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 04:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 319 (0x13f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D9B2, serialNumber=91295BBB75BFAAEB9531B39B36EC7521DDE30D63 Validity Not Before: May 9 04:00:58 2025 GMT Not After : May 16 04:00:58 2025 GMT Subject: CN=681d7dfa-7928 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b9:01:5a:4d:16:85:fa:a1:b1:09:cf:3c:ea: b1:08:61:8a:75:46:a8:9e:78:2b:02:f8:db:66:b7: f9:f6:3b:8a:5b:ed:30:2a:68:0c:65:6a:b2:91:4c: 40:8d:c4:ae:17:3b:80:c8:db:77:26:6d:73:be:2d: 65:51:75:eb:bf:f8:97:3d:bb:cf:de:5b:54:68:28: 76:98:72:b2:e8:e1:75:d5:69:d7:c0:ce:4d:98:b1: 2c:31:55:9b:74:8f:80:cb:d5:cb:00:5d:32:7d:0b: 15:2b:97:ac:52:a5:13:c6:ca:32:fc:d4:26:7f:4a: 4d:f9:ad:83:1a:ec:70:76:94:85:a1:0c:1f:e1:de: 64:20:3d:85:eb:8d:a7:d4:85:36:7a:4c:b1:cb:1e: cf:69:2c:40:c3:d5:aa:c2:cd:b0:6c:9d:63:08:bc: d1:1a:20:55:e7:6e:b9:3e:23:15:47:b6:c6:b3:eb: 31:7d:fa:aa:30:47:45:49:f6:5c:25:fd:88:75:a7: 73:a2:df:e1:38:c8:ea:86:d6:64:c5:b1:50:08:b7: 0a:1c:32:27:27:0c:e5:a5:64:b4:21:47:b7:42:fb: 84:74:9d:8e:cd:7f:5b:9c:13:88:39:97:a5:ad:8d: a8:68:3b:3d:1b:cf:95:17:82:c6:37:51:41:0c:89: 6d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:F0:C0:CA:E0:38:54:05:70:52:C1:E8:ED:32:75:21:A7:5D:79:45 X509v3 Authority Key Identifier: keyid:91:29:5B:BB:75:BF:AA:EB:95:31:B3:9B:36:EC:75:21:DD:E3:0D:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSlbu3W_quuVMbObNux1Id3jDWM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:05:4c:d3:1f:27:91:70:e3:b3:5d:97:48:cd:de:5c:de:f8: 8e:45:05:75:be:d6:06:64:dd:6a:c9:87:e1:d5:2c:f7:95:0c: 57:34:50:7c:bc:e1:48:4a:6b:6a:ae:fb:2c:40:4f:de:eb:90: 68:d7:3c:dc:6e:84:29:ba:3e:4c:02:6a:0c:5b:bb:80:46:f6: 69:17:86:a1:9c:52:08:a4:6c:37:dc:86:da:4d:dd:60:30:5b: 9a:7a:33:7f:66:70:bd:04:ea:88:41:91:b1:c6:8f:9e:8c:a5: af:8c:4b:f0:50:08:cc:cf:dc:a4:d6:a1:e4:0c:79:46:a9:ae: b2:21:25:5b:63:d2:1b:18:ea:af:0c:3b:5d:e6:00:63:a5:65: be:0c:65:89:4a:c5:a2:00:32:4a:b1:48:07:0d:ab:01:40:37: b8:4e:57:33:30:16:7d:ef:8a:4c:37:06:ed:66:3d:a2:3c:e5: 56:97:68:2b:6c:57:ef:e4:49:f5:18:c1:c3:64:9d:32:b6:d2: 38:84:a1:77:25:6e:57:5b:ed:fd:e0:1a:ed:3f:2a:f6:e7:aa: a9:15:14:3c:63:93:bf:5d:18:0d:80:3f:0f:b0:ff:3b:85:0c: f5:57:3b:9d:98:88:88:04:e2:07:5e:d9:bf:bd:ba:9d:2e:ac: 4a:85:2c:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ5QjIxMTAvBgNVBAUTKDkxMjk1QkJCNzVCRkFBRUI5NTMxQjM5QjM2RUM3NTIx RERFMzBENjMwHhcNMjUwNTA5MDQwMDU4WhcNMjUwNTE2MDQwMDU4WjAYMRYwFAYD VQQDEw02ODFkN2RmYS03OTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1rkBWk0WhfqhsQnPPOqxCGGKdUaonngrAvjbZrf59juKW+0wKmgMZWqykUxA jcSuFzuAyNt3Jm1zvi1lUXXrv/iXPbvP3ltUaCh2mHKy6OF11WnXwM5NmLEsMVWb dI+Ay9XLAF0yfQsVK5esUqUTxsoy/NQmf0pN+a2DGuxwdpSFoQwf4d5kID2F642n 1IU2ekyxyx7PaSxAw9Wqws2wbJ1jCLzRGiBV5265PiMVR7bGs+sxffqqMEdFSfZc Jf2Idadzot/hOMjqhtZkxbFQCLcKHDInJwzlpWS0IUe3QvuEdJ2OzX9bnBOIOZel rY2oaDs9G8+VF4LGN1FBDIltQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCTwwMrg OFQFcFLB6O0ydSGnXXlFMB8GA1UdIwQYMBaAFJEpW7t1v6rrlTGzmzbsdSHd4w1j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDlCMi8wQTZGM0I0Mjkx NTUxMUVFQTRDMEY2NjhDNEY5QUUwMi9rU2xidTNXX3F1dVZNYk9iTnV4MUlkM2pE V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tTbGJ1M1dfcXV1Vk1iT2JOdXgxSWQzakRXTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDlCMi8wQTZGM0I0MjkxNTUxMUVFQTRDMEY2NjhDNEY5QUUwMi9rU2xidTNXX3F1 dVZNYk9iTnV4MUlkM2pEV00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxBUzTHyeRcOOzXZdIzd5c3viORQV1vtYGZN1qyYfh1Sz3lQxXNFB8 vOFISmtqrvssQE/e65Bo1zzcboQpuj5MAmoMW7uARvZpF4ahnFIIpGw33IbaTd1g MFuaejN/ZnC9BOqIQZGxxo+ejKWvjEvwUAjMz9yk1qHkDHlGqa6yISVbY9IbGOqv DDtd5gBjpWW+DGWJSsWiADJKsUgHDasBQDe4TlczMBZ974pMNwbtZj2iPOVWl2gr bFfv5En1GMHDZJ0yttI4hKF3JW5XW+394BrtPyr256qpFRQ8Y5O/XRgNgD8PsP87 hQz1VzudmIiIBOIHXtm/vbqdLqxKhSxQ -----END CERTIFICATE-----Generated at Sun May 11 04:21:49 2025 by rpki-client