$ rpki-client -vvf rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft File: KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft (raw, json) Hash identifier: +aG78P4zcBEltQqQ8wpfbUUHpz1xX8wZgjUziNGffIA= Subject key identifier: FA:4A:39:A4:7D:57:53:8A:82:C2:E8:49:84:7B:1B:4A:0A:66:14:28 Authority key identifier: 2A:93:E1:45:97:66:50:61:95:DF:FC:99:B5:23:36:2B:E5:AC:0D:6B Certificate issuer: /CN=A91233D4/serialNumber=2A93E1459766506195DFFC99B523362BE5AC0D6B Certificate serial: 0A4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpPhRZdmUGGV3_yZtSM2K-WsDWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft Manifest number: 0A3D Signing time: Wed 14 May 2025 19:52:58 +0000 Manifest this update: Wed 14 May 2025 19:52:57 +0000 Manifest next update: Wed 21 May 2025 19:52:57 +0000 Files and hashes: 1: KpPhRZdmUGGV3_yZtSM2K-WsDWs.crl (hash: 03NPsNyNsSUhrIolqvkf1oiMGb3QV3jkDa3WdLkCJDQ=) 2: A08B108A78D411EAA8C57711C4F9AE02.roa (hash: 3OpBGXXCJTXlZTJu94VcICtCah5ixfAdvhW279UITTY=) 3: A1D479B878D411EAA8C57711C4F9AE02.roa (hash: OYgq0o9dgNrqTYjdakq5qNzK/yt9wMabsIU2jLZbz/U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.crl rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpPhRZdmUGGV3_yZtSM2K-WsDWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 19:52:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2639 (0xa4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91233D4, serialNumber=2A93E1459766506195DFFC99B523362BE5AC0D6B Validity Not Before: May 14 19:52:57 2025 GMT Not After : May 21 19:52:57 2025 GMT Subject: CN=6824f49a-aade Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:39:eb:fb:cc:4f:29:5e:bb:3f:cd:78:87:60: 2c:25:42:33:e3:d1:b4:98:c6:dc:b6:e0:64:0a:a0: c1:b6:9e:38:fe:3e:49:7c:6f:41:9e:2a:fd:1b:f0: fb:04:aa:ca:1d:c7:51:eb:56:0e:15:12:6d:61:84: d0:0f:a4:37:96:f1:3d:7b:fe:b4:ea:95:62:a9:86: 12:7b:c8:e1:63:01:aa:a2:45:5a:b7:e7:bc:11:e7: 0e:12:34:4f:57:12:de:6f:c9:5e:93:16:68:37:19: 1d:e5:0f:6f:22:d8:1f:3b:8c:48:be:ee:24:74:de: f4:a4:9f:62:a0:7a:9e:17:2c:7a:c9:25:cd:6d:69: f3:bc:44:1c:13:71:2a:6d:40:87:15:7a:2f:40:44: 71:cc:b4:2e:21:ac:81:a7:0a:ad:fb:52:a7:13:6b: 86:12:4b:54:a0:cd:6f:82:33:d2:e8:00:e5:00:e6: 4c:68:f6:9f:7e:99:dd:97:a4:61:ba:9f:89:41:f3: 2c:0f:02:b5:94:46:fc:b5:90:6c:98:d2:d2:78:23: fa:11:1f:39:0e:a6:0e:05:b5:a9:8a:b5:40:5e:91: c7:9f:d8:43:b8:23:46:3d:f5:a5:04:57:bc:30:b6: 22:d2:31:21:58:c3:fa:af:fc:a1:91:ab:83:1d:84: 3f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:4A:39:A4:7D:57:53:8A:82:C2:E8:49:84:7B:1B:4A:0A:66:14:28 X509v3 Authority Key Identifier: keyid:2A:93:E1:45:97:66:50:61:95:DF:FC:99:B5:23:36:2B:E5:AC:0D:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpPhRZdmUGGV3_yZtSM2K-WsDWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:02:3a:3b:7d:d6:e7:94:14:47:c6:5a:20:5a:a2:91:2f:52: c1:06:a1:b3:fa:c9:f5:00:51:1b:b3:20:cd:8a:03:50:5d:4e: b6:76:ea:e7:3c:39:fe:0b:22:c7:34:4c:f2:74:c6:fb:51:a1: c6:c3:99:0f:ef:c4:b3:55:dd:ed:67:b1:f5:13:33:84:ce:82: ab:63:72:ff:d2:18:24:6c:86:8d:bd:ba:27:bf:42:8a:5c:93: 43:07:68:83:c3:08:32:6d:43:a8:26:27:3b:04:6d:bc:b9:e0: db:a9:73:06:c3:e1:f8:35:fc:bf:84:d6:6e:05:e2:f6:c6:d7: 86:e3:3e:43:57:92:b8:b3:b6:18:c3:b9:0e:b8:60:2a:0a:ef: 96:ff:a4:42:ee:8a:cb:05:e3:d0:6e:3f:43:0b:0e:72:0d:1b: e0:42:f1:12:f6:12:d4:35:92:e2:55:14:74:ff:67:ec:c0:58: 34:e1:fa:13:6d:39:a9:b5:09:8f:3e:d7:1a:76:12:9f:a7:9b: 9b:cd:fa:9a:15:69:20:bc:43:03:33:c2:7a:70:0e:aa:c5:ab: e9:be:f6:17:2b:c9:ba:7b:a4:0c:74:f0:3d:b8:bb:05:31:ba: b1:05:3e:14:2d:2f:40:ea:f3:a7:34:b5:c2:a3:55:c0:e7:fc: 83:e9:8e:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCk8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjMzRDQxMTAvBgNVBAUTKDJBOTNFMTQ1OTc2NjUwNjE5NURGRkM5OUI1MjMzNjJC RTVBQzBENkIwHhcNMjUwNTE0MTk1MjU3WhcNMjUwNTIxMTk1MjU3WjAYMRYwFAYD VQQDEw02ODI0ZjQ5YS1hYWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxDnr+8xPKV67P814h2AsJUIz49G0mMbctuBkCqDBtp44/j5JfG9Bnir9G/D7 BKrKHcdR61YOFRJtYYTQD6Q3lvE9e/606pViqYYSe8jhYwGqokVat+e8EecOEjRP VxLeb8lekxZoNxkd5Q9vItgfO4xIvu4kdN70pJ9ioHqeFyx6ySXNbWnzvEQcE3Eq bUCHFXovQERxzLQuIayBpwqt+1KnE2uGEktUoM1vgjPS6ADlAOZMaPaffpndl6Rh up+JQfMsDwK1lEb8tZBsmNLSeCP6ER85DqYOBbWpirVAXpHHn9hDuCNGPfWlBFe8 MLYi0jEhWMP6r/yhkauDHYQ/sQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPpKOaR9 V1OKgsLoSYR7G0oKZhQoMB8GA1UdIwQYMBaAFCqT4UWXZlBhld/8mbUjNivlrA1r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzNENC8yNUEwNjE4MDZC MUYxMUVBODEzMEE2NUZDNEY5QUUwMi9LcFBoUlpkbVVHR1YzX3ladFNNMkstV3NE V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0twUGhSWmRtVUdHVjNfeVp0U00ySy1Xc0RXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzNENC8yNUEwNjE4MDZCMUYxMUVBODEzMEE2NUZDNEY5QUUwMi9LcFBoUlpkbVVH R1YzX3ladFNNMkstV3NEV3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhAjo7fdbnlBRHxlogWqKRL1LBBqGz+sn1AFEbsyDNigNQXU62durn PDn+CyLHNEzydMb7UaHGw5kP78SzVd3tZ7H1EzOEzoKrY3L/0hgkbIaNvbonv0KK XJNDB2iDwwgybUOoJic7BG28ueDbqXMGw+H4Nfy/hNZuBeL2xteG4z5DV5K4s7YY w7kOuGAqCu+W/6RC7orLBePQbj9DCw5yDRvgQvES9hLUNZLiVRR0/2fswFg04foT bTmptQmPPtcadhKfp5ubzfqaFWkgvEMDM8J6cA6qxavpvvYXK8m6e6QMdPA9uLsF MbqxBT4ULS9A6vOnNLXCo1XA5/yD6Y55 -----END CERTIFICATE-----Generated at Fri May 16 06:02:59 2025 by rpki-client