$ rpki-client -vvf rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.mft File: kPaA_KfJMP0f3FM2dTha6Q-0FnI.mft (raw, json) Hash identifier: pj5kWx8vIOEby02YiTEy6jztRbGDIHL9m6ac5uKbuEw= Subject key identifier: 8C:B5:64:8A:9C:82:7E:22:86:4C:C9:4B:44:BE:34:86:48:76:83:61 Authority key identifier: 90:F6:80:FC:A7:C9:30:FD:1F:DC:53:36:75:38:5A:E9:0F:B4:16:72 Certificate issuer: /CN=A91248C9/serialNumber=90F680FCA7C930FD1FDC533675385AE90FB41672 Certificate serial: 0127 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kPaA_KfJMP0f3FM2dTha6Q-0FnI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.mft Manifest number: 0125 Signing time: Tue 13 May 2025 03:52:23 +0000 Manifest this update: Tue 13 May 2025 03:52:22 +0000 Manifest next update: Tue 20 May 2025 03:52:22 +0000 Files and hashes: 1: kPaA_KfJMP0f3FM2dTha6Q-0FnI.crl (hash: jHRBDLS+mXXz0nITg/lvhJUfaspolnKTeqnXZ+Lf+KI=) 2: 4B3C43EA6EF011EE84DC9B0EC4F9AE02.roa (hash: fKu+QnI9JJSs0/0qC7wtQtv1o9IdD9KvcLGhg+7rRMo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.crl rsync://rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kPaA_KfJMP0f3FM2dTha6Q-0FnI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 03:52:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 295 (0x127) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91248C9, serialNumber=90F680FCA7C930FD1FDC533675385AE90FB41672 Validity Not Before: May 13 03:52:22 2025 GMT Not After : May 20 03:52:22 2025 GMT Subject: CN=6822c1f6-6282 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:16:ce:a5:3a:30:c2:9d:21:e8:43:ee:4a:0a: df:8d:9c:4e:2a:c9:3d:e2:06:30:92:68:46:f9:01: 45:a0:63:ed:80:58:49:29:99:b1:9c:d9:89:8f:a2: c7:a7:3a:77:7e:20:3c:a5:35:ed:aa:e2:1b:33:9f: 88:7a:a8:26:45:75:a4:19:3f:95:27:f5:c4:86:02: a3:37:23:f0:24:f1:f1:59:68:90:8c:8f:8e:95:d8: 54:40:c7:78:39:36:3d:e5:e3:d5:63:24:0f:96:a1: eb:77:d2:7d:c7:b7:de:4f:1f:27:d6:93:75:e4:47: ee:c9:cf:a4:fe:64:df:ad:5d:26:81:f1:6b:96:66: 73:b6:65:03:af:62:1a:3b:52:e0:9c:fd:63:69:8a: 12:8b:98:3b:ef:aa:7a:c0:31:6f:f5:1a:28:53:ca: b2:2f:22:37:d2:d7:e2:dd:36:a3:1d:c0:c4:ce:80: 3b:56:3f:0d:1a:22:19:b2:6a:f5:41:42:4d:70:9f: 43:e8:fc:d1:33:87:22:39:c3:c2:49:29:65:b7:99: ed:88:61:cc:1b:4f:1d:b2:4d:e6:c0:61:df:fc:25: 3b:59:03:31:8b:3b:8b:f2:72:02:5c:8b:e7:8a:41: 3e:80:c8:4b:fb:f0:9f:18:bb:64:53:86:e3:c7:f6: 26:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:B5:64:8A:9C:82:7E:22:86:4C:C9:4B:44:BE:34:86:48:76:83:61 X509v3 Authority Key Identifier: keyid:90:F6:80:FC:A7:C9:30:FD:1F:DC:53:36:75:38:5A:E9:0F:B4:16:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kPaA_KfJMP0f3FM2dTha6Q-0FnI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:00:f7:a8:46:4a:c6:e8:0b:6a:01:3e:87:5d:64:b2:e2:3b: 95:24:fc:bc:04:af:1f:1b:8c:7c:8c:35:d5:c2:e3:e1:17:d9: 13:47:ce:54:33:37:74:a9:bd:62:9d:4c:bb:48:85:12:ab:49: 13:3b:76:2a:af:45:fd:48:1e:2f:dd:66:29:8e:ea:13:fe:43: ae:81:c2:c0:23:c9:1c:bd:a7:a8:dd:7e:26:0c:9f:61:0d:84: e5:eb:b5:39:03:f1:36:57:62:0f:c7:0e:e2:a4:7a:c7:d3:d6: 2f:23:ed:88:ca:e1:e7:5e:32:78:d4:0c:ef:a2:6b:43:77:f1: 1c:ad:ef:96:88:0a:27:4f:c0:4c:bb:6f:4c:33:5c:a2:da:11: 9b:74:c9:ff:fb:e5:33:1c:82:e2:a6:70:87:4d:64:46:2c:53: 66:82:02:15:d9:00:e7:c9:59:5a:f2:c7:0f:15:c2:f0:30:51: f1:75:2c:8c:ad:69:b2:c2:03:17:95:60:3c:7c:a6:9c:9c:92: c1:9b:8d:09:f7:48:0b:f8:82:3b:6d:5b:06:17:59:e0:e4:2c: 1d:af:9c:ed:55:29:80:c0:b9:38:6b:ac:51:46:05:c7:6e:fc: ea:35:bd:4b:11:3a:bf:70:1e:e9:be:94:bd:94:02:98:84:d5: 7e:13:9c:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQ4QzkxMTAvBgNVBAUTKDkwRjY4MEZDQTdDOTMwRkQxRkRDNTMzNjc1Mzg1QUU5 MEZCNDE2NzIwHhcNMjUwNTEzMDM1MjIyWhcNMjUwNTIwMDM1MjIyWjAYMRYwFAYD VQQDEw02ODIyYzFmNi02MjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4hbOpTowwp0h6EPuSgrfjZxOKsk94gYwkmhG+QFFoGPtgFhJKZmxnNmJj6LH pzp3fiA8pTXtquIbM5+IeqgmRXWkGT+VJ/XEhgKjNyPwJPHxWWiQjI+OldhUQMd4 OTY95ePVYyQPlqHrd9J9x7feTx8n1pN15Efuyc+k/mTfrV0mgfFrlmZztmUDr2Ia O1LgnP1jaYoSi5g776p6wDFv9RooU8qyLyI30tfi3TajHcDEzoA7Vj8NGiIZsmr1 QUJNcJ9D6PzRM4ciOcPCSSllt5ntiGHMG08dsk3mwGHf/CU7WQMxizuL8nICXIvn ikE+gMhL+/CfGLtkU4bjx/Ym0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIy1ZIqc gn4ihkzJS0S+NIZIdoNhMB8GA1UdIwQYMBaAFJD2gPynyTD9H9xTNnU4WukPtBZy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDhDOS9BMDU1QjVCMjZF RUQxMUVFQkMxQUFCNTNDNEY5QUUwMi9rUGFBX0tmSk1QMGYzRk0yZFRoYTZRLTBG bkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tQYUFfS2ZKTVAwZjNGTTJkVGhhNlEtMEZuSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDhDOS9BMDU1QjVCMjZFRUQxMUVFQkMxQUFCNTNDNEY5QUUwMi9rUGFBX0tmSk1Q MGYzRk0yZFRoYTZRLTBGbkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKAPeoRkrG6AtqAT6HXWSy4juVJPy8BK8fG4x8jDXVwuPhF9kTR85U Mzd0qb1inUy7SIUSq0kTO3Yqr0X9SB4v3WYpjuoT/kOugcLAI8kcvaeo3X4mDJ9h DYTl67U5A/E2V2IPxw7ipHrH09YvI+2IyuHnXjJ41AzvomtDd/Ecre+WiAonT8BM u29MM1yi2hGbdMn/++UzHILipnCHTWRGLFNmggIV2QDnyVla8scPFcLwMFHxdSyM rWmywgMXlWA8fKacnJLBm40J90gL+II7bVsGF1ng5Cwdr5ztVSmAwLk4a6xRRgXH bvzqNb1LETq/cB7pvpS9lAKYhNV+E5xU -----END CERTIFICATE-----Generated at Tue May 13 11:18:00 2025 by rpki-client