$ rpki-client -vvf rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft File: kcSXberT3od45cDc_yYDlxrC1Ns.mft (raw, json) Hash identifier: vsE0x7Fqyi7E4CVLo8POYDMnZR9c6gP9MH6enUBKYso= Subject key identifier: FE:1E:95:7F:E2:D1:66:39:76:ED:2D:65:E1:82:CA:B1:AF:28:C2:9B Authority key identifier: 91:C4:97:6D:EA:D3:DE:87:78:E5:C0:DC:FF:26:03:97:1A:C2:D4:DB Certificate issuer: /CN=A9123F84/serialNumber=91C4976DEAD3DE8778E5C0DCFF2603971AC2D4DB Certificate serial: 01D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft Manifest number: 01CD Signing time: Tue 13 May 2025 02:10:03 +0000 Manifest this update: Tue 13 May 2025 02:10:02 +0000 Manifest next update: Tue 20 May 2025 02:10:02 +0000 Files and hashes: 1: kcSXberT3od45cDc_yYDlxrC1Ns.crl (hash: X0B1ZXCJxb7XcCYdDLElo0Tk/ykskcxdN2W/xDNkuT0=) 2: 24783DA46F3211EDA3DCF033C4F9AE02.roa (hash: qtI3PzkdqX+ax/bSegc1SLzhSYkSDBIGZPjolcu7R3M=) 3: 24FDC2446F3211EDA3DCF033C4F9AE02.roa (hash: d2+un5XTDgzJbWROr+IzD11y+bXi6HVh7GN60G2Vs5w=) 4: 25DD10F26F3211EDA3DCF033C4F9AE02.roa (hash: sj2URhxZjW3y0qKioZtUw0R7cEojajRcOxadk4cHwRY=) 5: D29F544CFCD711EEB654B271C4F9AE02.roa (hash: IcwXnPB2ehwiVEdMK3NN6Y5gPNM9uX8Kc+jyAk4uAcM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.crl rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 02:10:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 472 (0x1d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123F84, serialNumber=91C4976DEAD3DE8778E5C0DCFF2603971AC2D4DB Validity Not Before: May 13 02:10:02 2025 GMT Not After : May 20 02:10:02 2025 GMT Subject: CN=6822a9fb-ec3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:2a:2e:f3:d8:9e:80:a6:e8:9b:86:cb:e8:9e: 97:80:a1:1d:40:67:8a:bb:33:ab:2c:be:1e:47:ba: 54:1e:7b:66:86:41:8b:45:d3:7e:23:08:6a:f5:b1: 28:d5:93:69:2e:41:0e:60:55:a1:68:33:88:11:fc: cd:11:62:dc:50:b8:48:c5:09:75:e7:5d:57:78:15: d6:03:23:10:60:15:66:95:c2:8f:3a:20:9f:dc:3d: 80:c0:12:c8:75:7f:0c:95:30:62:1b:10:b4:8c:6b: a5:c2:af:a1:1c:8a:e0:e0:b1:fe:5f:3a:5f:8a:ce: 88:da:a6:73:f9:f8:de:e6:d0:36:81:7b:ba:8c:b5: 84:f0:8d:7d:85:de:af:e5:f1:94:c8:6d:1d:1b:83: 04:aa:7c:65:a2:65:cc:15:cc:e4:81:06:9d:d0:13: 87:f8:cd:49:b9:45:45:00:53:da:b3:d1:23:f6:96: e6:79:7d:61:cf:3d:e9:7d:59:1c:55:58:26:dd:c3: 14:d8:1b:f6:d7:5d:9f:48:56:fb:12:c7:bd:3a:7b: d4:7f:bd:b5:f3:92:1b:dd:1d:2c:df:fa:d5:0f:4e: 40:71:c7:48:83:ff:b1:5d:d4:73:9b:e5:10:9d:7c: 2c:7f:73:c4:6f:31:b7:e4:de:7c:9a:ea:97:97:ff: bb:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:1E:95:7F:E2:D1:66:39:76:ED:2D:65:E1:82:CA:B1:AF:28:C2:9B X509v3 Authority Key Identifier: keyid:91:C4:97:6D:EA:D3:DE:87:78:E5:C0:DC:FF:26:03:97:1A:C2:D4:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:5b:75:9a:de:18:c9:39:47:ff:01:79:8d:ff:f1:e5:f1:1b: b9:cf:01:1f:a7:a8:34:a9:47:3c:3b:f6:74:4f:b0:ea:4f:84: 5c:96:b4:98:95:a5:be:04:3b:b3:61:c0:01:48:a5:7d:da:f5: 13:74:f0:d2:d9:c2:50:e5:a5:b1:4d:08:8d:a3:7e:44:cb:ce: e5:9e:54:e6:af:bd:11:a9:87:dc:47:67:6f:eb:4e:9d:e8:4a: 34:c3:c9:82:7f:32:fb:a6:cb:40:a6:c2:71:92:b3:ac:92:a7: 06:e3:f5:0d:7a:22:b2:36:eb:bf:3f:0b:5c:d9:67:0b:22:3f: 3b:97:2f:80:f8:42:ee:5a:c2:30:25:43:a5:17:1b:9b:cd:4d: b5:52:15:1b:b2:8c:45:f1:fa:9d:31:64:6c:f1:db:9e:2d:58: 94:81:73:48:8a:d1:ad:10:8d:83:a7:be:50:2a:c7:fa:fd:ba: 81:dc:05:fe:43:fb:97:c3:8b:3b:a4:c7:8c:99:d6:a5:77:8d: 83:6c:e9:39:e9:d9:be:87:63:43:69:35:ab:16:a8:d5:1a:a8: ac:5e:4e:47:8f:ab:cf:39:c9:c9:87:66:96:15:8f:b4:d7:46: 7b:90:c2:b2:cf:98:a2:75:07:7a:aa:ef:35:86:33:32:91:36: 3f:f3:6b:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNGODQxMTAvBgNVBAUTKDkxQzQ5NzZERUFEM0RFODc3OEU1QzBEQ0ZGMjYwMzk3 MUFDMkQ0REIwHhcNMjUwNTEzMDIxMDAyWhcNMjUwNTIwMDIxMDAyWjAYMRYwFAYD VQQDEw02ODIyYTlmYi1lYzNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyyou89iegKbom4bL6J6XgKEdQGeKuzOrLL4eR7pUHntmhkGLRdN+Iwhq9bEo 1ZNpLkEOYFWhaDOIEfzNEWLcULhIxQl1511XeBXWAyMQYBVmlcKPOiCf3D2AwBLI dX8MlTBiGxC0jGulwq+hHIrg4LH+Xzpfis6I2qZz+fje5tA2gXu6jLWE8I19hd6v 5fGUyG0dG4MEqnxlomXMFczkgQad0BOH+M1JuUVFAFPas9Ej9pbmeX1hzz3pfVkc VVgm3cMU2Bv2112fSFb7Ese9OnvUf72185Ib3R0s3/rVD05AccdIg/+xXdRzm+UQ nXwsf3PEbzG35N58muqXl/+7JQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP4elX/i 0WY5du0tZeGCyrGvKMKbMB8GA1UdIwQYMBaAFJHEl23q096HeOXA3P8mA5cawtTb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0Y4NC9GNDNBM0YwNDZG MkYxMUVEQTg0QTY5MzNDNEY5QUUwMi9rY1NYYmVyVDNvZDQ1Y0RjX3lZRGx4ckMx TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tjU1hiZXJUM29kNDVjRGNfeVlEbHhyQzFOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0Y4NC9GNDNBM0YwNDZGMkYxMUVEQTg0QTY5MzNDNEY5QUUwMi9rY1NYYmVyVDNv ZDQ1Y0RjX3lZRGx4ckMxTnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATW3Wa3hjJOUf/AXmN//Hl8Ru5zwEfp6g0qUc8O/Z0T7DqT4RclrSY laW+BDuzYcABSKV92vUTdPDS2cJQ5aWxTQiNo35Ey87lnlTmr70RqYfcR2dv606d 6Eo0w8mCfzL7pstApsJxkrOskqcG4/UNeiKyNuu/Pwtc2WcLIj87ly+A+ELuWsIw JUOlFxubzU21UhUbsoxF8fqdMWRs8dueLViUgXNIitGtEI2Dp75QKsf6/bqB3AX+ Q/uXw4s7pMeMmdald42DbOk56dm+h2NDaTWrFqjVGqisXk5Hj6vPOcnJh2aWFY+0 10Z7kMKyz5iidQd6qu81hjMykTY/82ve -----END CERTIFICATE-----Generated at Tue May 13 23:12:28 2025 by rpki-client