$ rpki-client -vvf rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft File: Ks6UC13DAzfS5UIXIhkauSOqdcc.mft (raw, json) Hash identifier: L54VdTN+smhGB43gbieiGZE1djCTfh032ty0CWWWV94= Subject key identifier: 6F:6E:89:2C:99:80:20:AF:43:75:CA:A6:06:3B:CB:3A:E7:FA:CB:05 Authority key identifier: 2A:CE:94:0B:5D:C3:03:37:D2:E5:42:17:22:19:1A:B9:23:AA:75:C7 Certificate issuer: /CN=A9138A9F/serialNumber=2ACE940B5DC30337D2E5421722191AB923AA75C7 Certificate serial: F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ks6UC13DAzfS5UIXIhkauSOqdcc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft Manifest number: EF Signing time: Tue 13 May 2025 04:31:16 +0000 Manifest this update: Tue 13 May 2025 04:31:16 +0000 Manifest next update: Tue 20 May 2025 04:31:16 +0000 Files and hashes: 1: Ks6UC13DAzfS5UIXIhkauSOqdcc.crl (hash: SzDx+mw9W0SDwIyvsEiU7kI5esOyv5qvAvTuqqzHM5M=) 2: 440FD944C56F11EE8FF5FF2FC4F9AE02.roa (hash: LYlNZimo/Kla2SAg6rJowkusOEeb0t8EqOyo/ewHEdM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.crl rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ks6UC13DAzfS5UIXIhkauSOqdcc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 04:31:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 242 (0xf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138A9F, serialNumber=2ACE940B5DC30337D2E5421722191AB923AA75C7 Validity Not Before: May 13 04:31:16 2025 GMT Not After : May 20 04:31:16 2025 GMT Subject: CN=6822cb14-1d3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:2f:7f:aa:1d:f5:9a:52:01:ea:a2:59:5d:ee: 7b:04:c3:1e:41:5a:ab:94:3e:d8:86:bb:36:16:68: 78:c9:a4:d0:7c:c6:63:07:39:94:9d:ee:61:b3:02: 25:bb:dc:74:ba:ef:9d:d1:37:b4:4c:6d:88:3f:20: 05:d0:0e:bd:1f:2e:09:c2:1d:9b:eb:af:b0:8f:6e: 3a:b0:93:69:8e:00:c9:72:d6:13:38:47:ab:f3:c0: 02:fa:ea:6f:27:f5:81:3a:ae:44:7d:07:4e:31:8c: 80:d1:62:eb:90:8f:be:0e:80:2c:a3:6f:23:0a:3a: dd:e5:bc:d3:5b:92:17:27:42:6b:a2:59:d1:63:98: a9:96:1b:09:80:ba:0a:54:e3:a2:f9:50:ee:79:fb: 34:3e:03:46:b2:89:7d:f8:86:8e:28:e9:fc:1b:d3: 4f:5f:c7:60:70:d4:e1:5c:db:a5:a6:ed:0c:93:cb: fd:b7:a8:59:2b:8b:4c:92:7f:2a:05:24:05:5a:69: 12:52:c8:9a:72:f1:b9:bb:0c:72:ac:0a:01:2c:53: d7:b9:20:df:e2:12:8e:a7:4c:71:90:16:f1:17:0c: a2:43:09:3e:2d:b9:2f:b5:0f:9e:da:fe:f6:4a:d8: dc:80:fc:bf:be:75:a5:6c:b5:e3:a9:16:19:0a:b1: 16:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:6E:89:2C:99:80:20:AF:43:75:CA:A6:06:3B:CB:3A:E7:FA:CB:05 X509v3 Authority Key Identifier: keyid:2A:CE:94:0B:5D:C3:03:37:D2:E5:42:17:22:19:1A:B9:23:AA:75:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ks6UC13DAzfS5UIXIhkauSOqdcc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:d8:82:86:9b:2c:08:43:d7:c1:93:b5:ff:b9:a1:ee:59:1c: 6a:29:c7:d9:f5:f4:cc:c6:19:e8:74:d3:c2:8b:0f:ba:04:eb: 5c:7c:a2:e9:78:c2:4e:0e:d1:cb:4c:65:88:b1:ec:a5:27:91: 27:53:3d:5e:e1:43:53:a2:3f:47:74:ed:be:e1:33:5a:81:cb: 50:13:92:77:1e:14:18:56:5f:8e:c3:ca:9c:a1:d4:c4:3d:26: 27:f6:ac:9c:61:da:de:72:ea:fe:4d:b8:d3:f6:5b:45:86:fd: ba:0b:46:42:b2:52:a6:6f:d7:5e:0d:96:cb:22:d0:f8:8d:97: 8f:ff:fb:c3:ed:8e:57:e8:5a:53:0d:86:83:30:e2:7e:ec:f3: a4:3b:42:a5:45:54:56:40:76:f8:25:6d:af:92:69:b6:72:88: 2a:56:02:7d:dc:58:8f:aa:59:a4:17:e9:95:eb:9f:f5:77:b7: ac:9a:0f:e1:93:c0:a6:de:d6:1a:55:bc:55:cc:99:e3:09:47: f1:dc:74:18:76:01:ec:19:24:72:c2:a7:6a:c1:23:4a:ac:71: 18:8c:df:0a:af:7c:fd:47:0d:1a:41:f5:35:92:1b:b5:b6:89: 68:d6:ee:a0:de:18:86:b2:e6:6a:d6:0f:72:0a:bc:94:7c:79: 72:9b:f5:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzhBOUYxMTAvBgNVBAUTKDJBQ0U5NDBCNURDMzAzMzdEMkU1NDIxNzIyMTkxQUI5 MjNBQTc1QzcwHhcNMjUwNTEzMDQzMTE2WhcNMjUwNTIwMDQzMTE2WjAYMRYwFAYD VQQDEw02ODIyY2IxNC0xZDNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3C9/qh31mlIB6qJZXe57BMMeQVqrlD7Yhrs2Fmh4yaTQfMZjBzmUne5hswIl u9x0uu+d0Te0TG2IPyAF0A69Hy4Jwh2b66+wj246sJNpjgDJctYTOEer88AC+upv J/WBOq5EfQdOMYyA0WLrkI++DoAso28jCjrd5bzTW5IXJ0JrolnRY5iplhsJgLoK VOOi+VDuefs0PgNGsol9+IaOKOn8G9NPX8dgcNThXNulpu0Mk8v9t6hZK4tMkn8q BSQFWmkSUsiacvG5uwxyrAoBLFPXuSDf4hKOp0xxkBbxFwyiQwk+LbkvtQ+e2v72 StjcgPy/vnWlbLXjqRYZCrEWUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG9uiSyZ gCCvQ3XKpgY7yzrn+ssFMB8GA1UdIwQYMBaAFCrOlAtdwwM30uVCFyIZGrkjqnXH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOEE5Ri84MkM2N0VBNkM1 NkQxMUVFQjI3ODUzNEFDNEY5QUUwMi9LczZVQzEzREF6ZlM1VUlYSWhrYXVTT3Fk Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tzNlVDMTNEQXpmUzVVSVhJaGthdVNPcWRjYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OEE5Ri84MkM2N0VBNkM1NkQxMUVFQjI3ODUzNEFDNEY5QUUwMi9LczZVQzEzREF6 ZlM1VUlYSWhrYXVTT3FkY2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBt2IKGmywIQ9fBk7X/uaHuWRxqKcfZ9fTMxhnodNPCiw+6BOtcfKLp eMJODtHLTGWIseylJ5EnUz1e4UNToj9HdO2+4TNagctQE5J3HhQYVl+Ow8qcodTE PSYn9qycYdrecur+TbjT9ltFhv26C0ZCslKmb9deDZbLItD4jZeP//vD7Y5X6FpT DYaDMOJ+7POkO0KlRVRWQHb4JW2vkmm2cogqVgJ93FiPqlmkF+mV65/1d7esmg/h k8Cm3tYaVbxVzJnjCUfx3HQYdgHsGSRywqdqwSNKrHEYjN8Kr3z9Rw0aQfU1khu1 tolo1u6g3hiGsuZq1g9yCryUfHlym/U3 -----END CERTIFICATE-----Generated at Wed May 14 13:07:18 2025 by rpki-client