$ rpki-client -vvf rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.mft File: Kprva8EpkUyguRBcknHerznbyGY.mft (raw, json) Hash identifier: CrhRjaF07RSRv6U9OtFtzTnwvi0y+LK48iKNzq+NaNA= Subject key identifier: 95:E4:FA:E9:11:CD:10:04:A2:7A:CA:DA:B7:E2:AB:39:3E:AB:EF:45 Authority key identifier: 2A:9A:EF:6B:C1:29:91:4C:A0:B9:10:5C:92:71:DE:AF:39:DB:C8:66 Certificate issuer: /CN=A9147C4C/serialNumber=2A9AEF6BC129914CA0B9105C9271DEAF39DBC866 Certificate serial: 08BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kprva8EpkUyguRBcknHerznbyGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.mft Manifest number: 08A7 Signing time: Mon 12 May 2025 20:22:42 +0000 Manifest this update: Mon 12 May 2025 20:22:42 +0000 Manifest next update: Mon 19 May 2025 20:22:42 +0000 Files and hashes: 1: Kprva8EpkUyguRBcknHerznbyGY.crl (hash: i/5KKP8TP6McPJmXjRibLNxvopWYqUzcuccAR5LS1EE=) 2: 6211D40A941F11EEA7C3E86FC4F9AE02.roa (hash: VzIcL9cwYPKsctz7TXhlKtxDnAxMW1Nmzyb+yo8dVqU=) 3: 9FB96E16929A11EE8CC5D033C4F9AE02.roa (hash: EsEKbWC4WA6ZCtUbUMwn5+A+yLzgnyso48+dg3mdnLg=) 4: 62CDEE42941F11EEA7C3E86FC4F9AE02.roa (hash: jWUv93OFgLRobJCPDshPuiIM7/E47gD5EueqYHT3EYA=) 5: 48E4C546941F11EE8517B26FC4F9AE02.roa (hash: Q3bzBf2Cm0H9fJSOzDe2WKkPLnodIQtsL1N0gyfPp9c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.crl rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kprva8EpkUyguRBcknHerznbyGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 20:22:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2239 (0x8bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147C4C, serialNumber=2A9AEF6BC129914CA0B9105C9271DEAF39DBC866 Validity Not Before: May 12 20:22:42 2025 GMT Not After : May 19 20:22:42 2025 GMT Subject: CN=68225892-acd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:2c:d4:68:b9:2b:24:fb:cb:cf:14:32:8a:60: f5:3f:59:c0:7c:c8:70:18:5c:4e:5a:e3:9c:a5:0e: f5:a3:b0:f8:ae:9b:38:24:61:73:c1:91:80:e1:67: 5c:43:7b:2f:63:62:e5:15:c0:20:30:95:24:ac:9e: d7:4e:5b:46:9a:98:a4:48:54:85:db:99:77:2d:99: b6:09:67:83:87:5c:19:c7:50:38:8a:f3:52:e3:d7: be:ce:73:d4:21:69:92:6f:48:52:2e:c5:fd:55:67: f1:21:91:8c:7b:20:58:f6:f7:1b:4c:33:43:e5:da: 44:12:c5:65:05:33:ad:7d:54:83:82:cc:35:99:c5: 6b:e3:c7:73:1b:6e:8b:cd:f4:e3:7f:7d:3b:e1:00: 41:86:44:e2:a0:cc:74:f3:20:ab:7a:de:3c:2f:f3: 1a:02:c6:15:19:e1:e6:be:96:f8:5d:cc:10:81:9f: 33:7b:f7:4d:8a:5c:fb:40:4e:45:b1:48:7f:5d:8f: 8a:43:6b:22:14:be:8c:cd:71:0d:65:73:fd:8a:f5: 19:a8:24:5b:22:79:32:30:35:ad:d4:9b:5c:c6:d5: f6:7c:83:24:2d:b7:48:4a:c5:d7:7f:74:4e:32:ce: 1c:93:a3:9d:4b:76:e3:0b:90:e9:f1:ff:1e:70:d3: e4:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:E4:FA:E9:11:CD:10:04:A2:7A:CA:DA:B7:E2:AB:39:3E:AB:EF:45 X509v3 Authority Key Identifier: keyid:2A:9A:EF:6B:C1:29:91:4C:A0:B9:10:5C:92:71:DE:AF:39:DB:C8:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kprva8EpkUyguRBcknHerznbyGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:6f:7f:04:b6:e6:aa:ce:02:4f:9f:07:86:03:2f:b9:ab:63: 22:2c:51:a6:e3:ce:50:0b:32:35:64:ab:38:6e:83:ad:b2:16: 23:88:5e:e6:c8:ac:88:7c:de:e8:2a:a6:3b:56:93:54:c6:7f: f9:23:46:14:02:a2:b9:13:34:f6:2f:11:4f:36:3e:65:92:fe: d1:cb:61:b8:1a:9f:64:cc:3f:b1:5f:15:08:e8:58:05:9f:fe: 3f:19:74:12:8a:ff:ae:00:3a:49:93:29:ef:4b:58:28:0b:44: 98:24:d3:45:91:d7:c5:59:23:6a:64:8f:1a:5f:35:00:c8:4b: 5a:5a:f1:ca:b4:e4:0e:1f:65:83:70:48:41:16:56:10:24:b7: 45:87:06:60:b2:7c:bf:bf:b1:9f:ef:05:94:b7:bc:ef:38:5e: 63:17:ce:5e:dc:09:af:ea:b4:24:16:fa:3b:1d:84:b6:9e:08: 49:89:47:c4:05:b7:a6:6b:bf:21:9c:f2:1b:dd:82:eb:50:a3: 60:02:c3:98:e6:b5:c5:9a:ed:86:ca:4f:cd:73:ed:59:fa:a7: 84:ee:69:b4:e5:70:c7:71:de:f2:6c:75:97:0a:10:5b:73:0f: 82:0d:54:c8:c8:ba:cc:c4:12:98:33:66:8b:1f:07:58:8e:e2: 0d:a1:cc:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDdDNEMxMTAvBgNVBAUTKDJBOUFFRjZCQzEyOTkxNENBMEI5MTA1QzkyNzFERUFG MzlEQkM4NjYwHhcNMjUwNTEyMjAyMjQyWhcNMjUwNTE5MjAyMjQyWjAYMRYwFAYD VQQDEw02ODIyNTg5Mi1hY2Q2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8SzUaLkrJPvLzxQyimD1P1nAfMhwGFxOWuOcpQ71o7D4rps4JGFzwZGA4Wdc Q3svY2LlFcAgMJUkrJ7XTltGmpikSFSF25l3LZm2CWeDh1wZx1A4ivNS49e+znPU IWmSb0hSLsX9VWfxIZGMeyBY9vcbTDND5dpEEsVlBTOtfVSDgsw1mcVr48dzG26L zfTjf3074QBBhkTioMx08yCret48L/MaAsYVGeHmvpb4XcwQgZ8ze/dNilz7QE5F sUh/XY+KQ2siFL6MzXENZXP9ivUZqCRbInkyMDWt1JtcxtX2fIMkLbdISsXXf3RO Ms4ck6OdS3bjC5Dp8f8ecNPksQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJXk+ukR zRAEonrK2rfiqzk+q+9FMB8GA1UdIwQYMBaAFCqa72vBKZFMoLkQXJJx3q8528hm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0M0Qy9DQ0IyMDM1NEI5 RTIxMUVBQkM1NTRCODNDNEY5QUUwMi9LcHJ2YThFcGtVeWd1UkJja25IZXJ6bmJ5 R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0twcnZhOEVwa1V5Z3VSQmNrbkhlcnpuYnlHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 N0M0Qy9DQ0IyMDM1NEI5RTIxMUVBQkM1NTRCODNDNEY5QUUwMi9LcHJ2YThFcGtV eWd1UkJja25IZXJ6bmJ5R1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXb38EtuaqzgJPnweGAy+5q2MiLFGm485QCzI1ZKs4boOtshYjiF7m yKyIfN7oKqY7VpNUxn/5I0YUAqK5EzT2LxFPNj5lkv7Ry2G4Gp9kzD+xXxUI6FgF n/4/GXQSiv+uADpJkynvS1goC0SYJNNFkdfFWSNqZI8aXzUAyEtaWvHKtOQOH2WD cEhBFlYQJLdFhwZgsny/v7Gf7wWUt7zvOF5jF85e3Amv6rQkFvo7HYS2nghJiUfE Bbema78hnPIb3YLrUKNgAsOY5rXFmu2Gyk/Nc+1Z+qeE7mm05XDHcd7ybHWXChBb cw+CDVTIyLrMxBKYM2aLHwdYjuINoczL -----END CERTIFICATE-----Generated at Wed May 14 16:26:47 2025 by rpki-client