$ rpki-client -vvf rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.mft File: K_CuZ5DS8B3R22c4MTLcQDtnRSI.mft (raw, json) Hash identifier: JdB7n6va0K/5JLIGdEUv3UWj3+tisXBr0N4qyfGMJIY= Subject key identifier: B3:57:20:BF:8E:D7:06:C5:E6:61:E5:18:B6:89:A6:EB:C8:4A:A2:B0 Authority key identifier: 2B:F0:AE:67:90:D2:F0:1D:D1:DB:67:38:31:32:DC:40:3B:67:45:22 Certificate issuer: /CN=A912F6E3/serialNumber=2BF0AE6790D2F01DD1DB67383132DC403B674522 Certificate serial: 53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K_CuZ5DS8B3R22c4MTLcQDtnRSI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.mft Manifest number: 53 Signing time: Tue 13 May 2025 06:28:29 +0000 Manifest this update: Tue 13 May 2025 06:28:29 +0000 Manifest next update: Tue 20 May 2025 06:28:29 +0000 Files and hashes: 1: K_CuZ5DS8B3R22c4MTLcQDtnRSI.crl (hash: BjrLiPW1weIqEmc1tC9SIzhNnEukCktx4BTnHY8sgy4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.crl rsync://rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K_CuZ5DS8B3R22c4MTLcQDtnRSI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 06:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 83 (0x53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F6E3, serialNumber=2BF0AE6790D2F01DD1DB67383132DC403B674522 Validity Not Before: May 13 06:28:29 2025 GMT Not After : May 20 06:28:29 2025 GMT Subject: CN=6822e68d-ad2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:fc:c3:db:26:89:6a:ca:7d:b7:41:c8:e0:14: be:96:30:b5:99:02:62:78:09:e7:73:3c:13:7f:10: e0:7a:a7:9a:75:e5:2b:bd:c5:c3:2e:18:9d:56:00: 35:e4:3e:bf:f8:87:73:5f:19:b1:f2:90:eb:bf:fe: 99:c9:84:06:e2:f1:74:e2:dd:62:a8:8e:37:a7:2e: e1:39:f9:25:6a:fe:a7:5b:bf:c6:80:cc:a0:7b:91: a5:ae:7a:7f:07:42:48:af:03:2f:e6:02:b9:2a:aa: bc:2f:c1:65:36:f8:6b:e1:73:1b:1d:ed:f4:b0:4f: fa:13:c1:45:14:da:6b:d6:c1:7b:60:b8:c9:1e:81: 71:b9:6b:42:ad:d7:32:d2:c2:3b:ba:e9:56:05:96: 28:f8:63:99:88:44:0b:68:2b:e6:b3:03:20:49:e1: 98:f3:35:9b:e4:ad:f2:b0:0f:bf:5c:1c:8d:96:1b: e0:af:1c:53:1b:da:01:e2:9c:a2:22:57:68:20:f6: 31:66:88:57:90:6f:c0:3c:91:d7:90:11:aa:e5:ea: e5:8c:35:2f:31:e5:74:a1:ed:0f:4e:72:49:02:bd: 06:49:0a:80:e2:f1:6b:d9:4c:57:a0:05:1c:85:a1: 5a:ee:76:83:e9:35:28:46:ae:92:8c:2e:df:8d:70: 4c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:57:20:BF:8E:D7:06:C5:E6:61:E5:18:B6:89:A6:EB:C8:4A:A2:B0 X509v3 Authority Key Identifier: keyid:2B:F0:AE:67:90:D2:F0:1D:D1:DB:67:38:31:32:DC:40:3B:67:45:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K_CuZ5DS8B3R22c4MTLcQDtnRSI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:3b:24:b4:37:98:83:d5:9e:71:03:4f:19:66:ae:ac:6b:45: 66:e8:67:4c:39:9a:c1:27:3c:60:bd:7e:c6:66:d4:78:63:fd: 58:f8:fb:07:6b:20:48:19:98:0c:05:9a:47:c4:96:ee:45:a3: e8:1e:a9:55:ef:1c:58:ce:c8:da:3f:31:df:fe:c4:d6:cd:0b: 69:a9:5a:bb:67:2e:c0:12:3e:5d:ac:e5:00:ae:d4:8c:f5:85: 81:68:12:f0:69:cb:ff:5a:37:36:c2:1f:b4:e2:13:d2:04:c3: c6:bf:0c:ff:73:ee:06:21:2f:48:f4:1c:06:13:71:31:c9:5b: d9:40:be:60:0a:ec:dc:93:40:fc:62:f8:b4:d9:1f:f3:e2:cb: aa:d3:96:d9:1a:30:a0:d8:78:6d:92:a6:cd:88:7b:17:83:2b: 80:ca:38:b8:f6:26:5b:2c:15:74:7d:1f:5a:c9:29:a5:00:59: 81:f3:40:39:42:c6:39:30:01:9b:05:71:8d:46:77:42:47:b2: 72:17:c5:ac:ba:93:b0:54:87:61:b1:52:cc:d7:63:ad:97:03: 45:c1:ff:2e:c8:2c:09:00:f1:17:f9:66:2c:49:41:80:ec:9d: f3:8a:67:51:03:01:90:aa:70:fb:06:de:92:3e:8d:65:42:f1: ac:63:9f:50 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RjZFMzExMC8GA1UEBRMoMkJGMEFFNjc5MEQyRjAxREQxREI2NzM4MzEzMkRDNDAz QjY3NDUyMjAeFw0yNTA1MTMwNjI4MjlaFw0yNTA1MjAwNjI4MjlaMBgxFjAUBgNV BAMTDTY4MjJlNjhkLWFkMmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDL/MPbJolqyn23QcjgFL6WMLWZAmJ4CedzPBN/EOB6p5p15Su9xcMuGJ1WADXk Pr/4h3NfGbHykOu//pnJhAbi8XTi3WKojjenLuE5+SVq/qdbv8aAzKB7kaWuen8H QkivAy/mArkqqrwvwWU2+Gvhcxsd7fSwT/oTwUUU2mvWwXtguMkegXG5a0Kt1zLS wju66VYFlij4Y5mIRAtoK+azAyBJ4ZjzNZvkrfKwD79cHI2WG+CvHFMb2gHinKIi V2gg9jFmiFeQb8A8kdeQEarl6uWMNS8x5XSh7Q9OckkCvQZJCoDi8WvZTFegBRyF oVrudoPpNShGrpKMLt+NcEzHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUs1cgv47X BsXmYeUYtomm68hKorAwHwYDVR0jBBgwFoAUK/CuZ5DS8B3R22c4MTLcQDtnRSIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJGNkUzL0YyRkI4MjUwQjVE RDExRUY5N0Q5RkEzNEM0RjlBRTAyL0tfQ3VaNURTOEIzUjIyYzRNVExjUUR0blJT SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvS19DdVo1RFM4QjNSMjJjNE1UTGNRRHRuUlNJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJG NkUzL0YyRkI4MjUwQjVERDExRUY5N0Q5RkEzNEM0RjlBRTAyL0tfQ3VaNURTOEIz UjIyYzRNVExjUUR0blJTSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACo7JLQ3mIPVnnEDTxlmrqxrRWboZ0w5msEnPGC9fsZm1Hhj/Vj4+wdr IEgZmAwFmkfElu5Fo+geqVXvHFjOyNo/Md/+xNbNC2mpWrtnLsASPl2s5QCu1Iz1 hYFoEvBpy/9aNzbCH7TiE9IEw8a/DP9z7gYhL0j0HAYTcTHJW9lAvmAK7NyTQPxi +LTZH/Piy6rTltkaMKDYeG2Sps2IexeDK4DKOLj2JlssFXR9H1rJKaUAWYHzQDlC xjkwAZsFcY1Gd0JHsnIXxay6k7BUh2GxUszXY62XA0XB/y7ILAkA8Rf5ZixJQYDs nfOKZ1EDAZCqcPsG3pI+jWVC8axjn1A= -----END CERTIFICATE-----Generated at Wed May 14 11:35:00 2025 by rpki-client