$ rpki-client -vvf rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.mft File: kxWcm2Ez9IBvuyjGIl6UOWOmsAE.mft (raw, json) Hash identifier: lwHdaGGyO2bqJ8zn+ldcawGhBDwT6C/KGqOccm3OCS0= Subject key identifier: ED:3C:7B:58:A0:F3:18:CE:60:66:C9:F7:20:8A:F9:5B:45:B6:CF:85 Authority key identifier: 93:15:9C:9B:61:33:F4:80:6F:BB:28:C6:22:5E:94:39:63:A6:B0:01 Certificate issuer: /CN=A912EDB7/serialNumber=93159C9B6133F4806FBB28C6225E943963A6B001 Certificate serial: 0C64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.mft Manifest number: 0C5B Signing time: Mon 12 May 2025 18:09:27 +0000 Manifest this update: Mon 12 May 2025 18:09:27 +0000 Manifest next update: Mon 19 May 2025 18:09:27 +0000 Files and hashes: 1: kxWcm2Ez9IBvuyjGIl6UOWOmsAE.crl (hash: YhUXPRJ0yCWck5bRsnk13uhxa5H0iPIC8u6T56RSwJI=) 2: 18CA7386E35511EDA63D5182C4F9AE02.roa (hash: dvi0NiJsfBapKtj0ISklbEMBQ4R3yCT+QGTIlcMVI/A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.crl rsync://rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:09:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3172 (0xc64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912EDB7, serialNumber=93159C9B6133F4806FBB28C6225E943963A6B001 Validity Not Before: May 12 18:09:27 2025 GMT Not After : May 19 18:09:27 2025 GMT Subject: CN=68223957-2dff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:06:08:4a:7b:6b:06:5a:b1:84:0c:9a:98:f2: 7c:31:33:95:88:ac:84:2d:52:8c:5e:61:ae:22:6a: d1:22:fb:10:2f:dd:ee:25:de:99:11:de:e6:93:9b: f8:a3:f1:31:29:65:b8:bf:9b:19:36:8b:1b:22:7f: 86:3c:ad:bb:14:48:06:74:fd:6f:e5:2e:43:6e:eb: 77:55:7f:dc:c2:af:20:23:fa:0f:22:bf:e5:53:4d: ee:5a:7c:6a:65:33:4d:c5:c3:b2:d7:81:7d:60:08: 30:46:be:f0:6b:0e:85:b9:23:33:de:94:10:bf:91: 84:02:49:fb:dc:b6:cd:ee:0f:39:71:bf:68:9c:4d: f3:96:9f:77:0f:8d:e3:c8:f5:62:df:26:fe:36:c2: bf:ec:0d:8c:ca:58:4c:d8:d5:d0:fa:8a:f8:75:4b: 57:5f:36:dc:43:17:f6:c4:29:bd:f2:bb:7f:fe:90: a3:62:c8:72:b0:2a:ab:14:a7:51:ac:66:3e:33:fe: f4:b4:6d:13:da:3c:bc:4d:90:48:45:00:60:03:62: 4b:d6:df:b8:db:9b:8d:09:fd:3e:de:ce:a5:bd:96: c4:5b:d6:c5:1a:1c:82:2d:2d:38:7b:67:d1:4a:30: d8:23:00:db:e8:45:f2:c4:f1:db:67:df:09:f7:cd: 24:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:3C:7B:58:A0:F3:18:CE:60:66:C9:F7:20:8A:F9:5B:45:B6:CF:85 X509v3 Authority Key Identifier: keyid:93:15:9C:9B:61:33:F4:80:6F:BB:28:C6:22:5E:94:39:63:A6:B0:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:38:c7:3b:f9:73:8a:b0:e0:56:b2:57:cf:0a:e9:e5:76:3d: 64:55:25:a8:28:77:39:bf:ca:71:4a:9c:7b:85:72:3d:83:f8: 0a:f0:6d:90:f6:5b:f5:f2:09:84:7c:09:00:90:a2:09:3e:da: 0b:67:6c:8d:76:cc:c8:bd:15:11:fc:97:b5:dc:38:81:c0:0f: 08:94:de:a4:1b:d4:36:3c:fc:a9:6b:ef:cd:24:c3:ae:7b:e1: 7e:22:93:dd:61:2c:3d:cf:a0:16:cf:96:9a:6a:0e:18:19:a8: 51:0d:78:d6:ab:d5:36:53:81:67:7b:d7:bb:7b:f7:3b:96:f7: bd:2c:d2:7a:2b:e0:2e:6b:11:44:74:bb:d8:e8:da:0f:9d:89: c5:d2:8a:41:29:b4:69:56:fe:da:b1:40:f6:19:90:e2:5c:13: 48:1f:ed:39:27:1b:f2:c9:ac:96:ea:7a:79:c9:af:d0:4d:dc: af:eb:d2:06:4a:04:70:10:ef:07:c8:0e:0d:bc:32:fa:6e:3d: 53:62:75:1c:f2:a6:4a:c5:f9:80:fe:b9:d5:77:30:1e:8f:cc: ef:b5:eb:d5:d4:72:d4:4d:20:44:09:c9:00:7e:99:b4:e3:67: cc:4f:a7:e6:0d:90:49:8f:37:88:c6:c6:29:5c:13:86:8d:36: 4b:d0:13:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkVEQjcxMTAvBgNVBAUTKDkzMTU5QzlCNjEzM0Y0ODA2RkJCMjhDNjIyNUU5NDM5 NjNBNkIwMDEwHhcNMjUwNTEyMTgwOTI3WhcNMjUwNTE5MTgwOTI3WjAYMRYwFAYD VQQDEw02ODIyMzk1Ny0yZGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwwYISntrBlqxhAyamPJ8MTOViKyELVKMXmGuImrRIvsQL93uJd6ZEd7mk5v4 o/ExKWW4v5sZNosbIn+GPK27FEgGdP1v5S5Dbut3VX/cwq8gI/oPIr/lU03uWnxq ZTNNxcOy14F9YAgwRr7waw6FuSMz3pQQv5GEAkn73LbN7g85cb9onE3zlp93D43j yPVi3yb+NsK/7A2MylhM2NXQ+or4dUtXXzbcQxf2xCm98rt//pCjYshysCqrFKdR rGY+M/70tG0T2jy8TZBIRQBgA2JL1t+425uNCf0+3s6lvZbEW9bFGhyCLS04e2fR SjDYIwDb6EXyxPHbZ98J980kswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO08e1ig 8xjOYGbJ9yCK+VtFts+FMB8GA1UdIwQYMBaAFJMVnJthM/SAb7soxiJelDljprAB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRURCNy80NjE2MkFEQUZF RDIxMUU5ODdGRkMyMTdDNEY5QUUwMi9reFdjbTJFejlJQnZ1eWpHSWw2VU9XT21z QUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2t4V2NtMkV6OUlCdnV5akdJbDZVT1dPbXNBRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RURCNy80NjE2MkFEQUZFRDIxMUU5ODdGRkMyMTdDNEY5QUUwMi9reFdjbTJFejlJ QnZ1eWpHSWw2VU9XT21zQUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2OMc7+XOKsOBWslfPCunldj1kVSWoKHc5v8pxSpx7hXI9g/gK8G2Q 9lv18gmEfAkAkKIJPtoLZ2yNdszIvRUR/Je13DiBwA8IlN6kG9Q2PPypa+/NJMOu e+F+IpPdYSw9z6AWz5aaag4YGahRDXjWq9U2U4Fne9e7e/c7lve9LNJ6K+AuaxFE dLvY6NoPnYnF0opBKbRpVv7asUD2GZDiXBNIH+05JxvyyayW6np5ya/QTdyv69IG SgRwEO8HyA4NvDL6bj1TYnUc8qZKxfmA/rnVdzAej8zvtevV1HLUTSBECckAfpm0 42fMT6fmDZBJjzeIxsYpXBOGjTZL0BPd -----END CERTIFICATE-----Generated at Tue May 13 19:54:28 2025 by rpki-client