$ rpki-client -vvf rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.mft File: kJQ-uOrUTDbtyZEDG_-IuKtlWik.mft (raw, json) Hash identifier: x71j6QM/FqHs0vqg33fFlCQXew+3UXWQE3yDAYvxVsk= Subject key identifier: F2:52:05:F3:B8:09:9E:4B:D1:33:50:F5:C5:4C:66:A1:D9:53:1C:A7 Authority key identifier: 90:94:3E:B8:EA:D4:4C:36:ED:C9:91:03:1B:FF:88:B8:AB:65:5A:29 Certificate issuer: /CN=A9149106/serialNumber=90943EB8EAD44C36EDC991031BFF88B8AB655A29 Certificate serial: 0446 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kJQ-uOrUTDbtyZEDG_-IuKtlWik.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.mft Manifest number: 0446 Signing time: Tue 13 May 2025 00:01:59 +0000 Manifest this update: Tue 13 May 2025 00:01:59 +0000 Manifest next update: Tue 20 May 2025 00:01:59 +0000 Files and hashes: 1: kJQ-uOrUTDbtyZEDG_-IuKtlWik.crl (hash: suIHHObzt4I0MhEAYJDBP1PzVoPnb0zf4h1FKIyU+aQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.crl rsync://rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kJQ-uOrUTDbtyZEDG_-IuKtlWik.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 00:01:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1094 (0x446) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149106, serialNumber=90943EB8EAD44C36EDC991031BFF88B8AB655A29 Validity Not Before: May 13 00:01:59 2025 GMT Not After : May 20 00:01:59 2025 GMT Subject: CN=68228bf7-cc79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:af:ef:18:87:ec:84:77:71:ce:5d:f2:05:a7: e5:87:e6:e5:f3:91:5c:53:5b:dd:76:d9:60:11:f9: 4c:1d:84:0a:f3:98:28:59:61:63:c5:9f:3e:57:61: 91:ca:54:eb:a7:de:d2:35:ce:83:5b:2e:eb:f6:fc: 4e:7a:df:b7:c9:85:8d:bc:68:fa:c9:37:4c:90:b1: 6c:cf:81:12:71:4e:73:c3:09:d2:d1:55:33:9a:9d: 4d:49:2b:29:2b:4c:62:9f:c0:78:d1:95:13:46:55: c7:3a:73:6e:41:29:95:e1:ee:08:7a:97:e7:86:01: 48:d7:9e:1f:79:08:1e:d2:8b:74:0a:1f:97:83:bd: 0c:c9:48:2e:45:08:75:c1:2d:5e:a0:46:5f:87:27: c8:46:35:f2:f4:46:ea:a1:82:dc:dd:c2:26:94:3d: 28:6a:3d:b6:28:6e:9e:2e:d0:bf:7e:74:32:69:ac: 51:71:31:49:86:2b:82:78:c1:e9:ba:75:00:fd:d4: 98:f8:1e:87:d5:e4:a3:6f:46:a6:82:af:84:ea:27: 62:f2:73:f8:08:9b:1a:50:83:6d:07:78:39:ac:bc: 59:5f:46:a7:89:ed:b1:7a:f4:0c:af:50:d1:b8:fa: 56:93:7c:de:24:b6:38:5c:79:84:a7:b2:38:4d:1b: 01:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:52:05:F3:B8:09:9E:4B:D1:33:50:F5:C5:4C:66:A1:D9:53:1C:A7 X509v3 Authority Key Identifier: keyid:90:94:3E:B8:EA:D4:4C:36:ED:C9:91:03:1B:FF:88:B8:AB:65:5A:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kJQ-uOrUTDbtyZEDG_-IuKtlWik.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:7c:31:d9:46:c0:6e:01:5d:f0:fa:2b:42:6a:6e:99:29:b5: f4:a5:bf:dd:bd:27:15:dc:09:fd:51:75:5f:a2:47:a4:19:dc: e2:36:a3:48:de:07:10:ab:b4:9f:ad:d4:f3:3c:34:09:1a:59: ae:b3:51:c7:92:06:66:9f:2e:29:16:21:f7:65:2c:9e:d8:25: ca:2d:6f:09:63:12:c7:17:63:10:29:31:d3:69:7b:9b:b4:77: d4:ce:3a:7c:e4:85:a6:67:d2:b3:4b:a3:bd:39:32:1a:a5:12: d5:bd:73:9d:b7:65:69:54:e9:1b:4e:40:e6:de:16:cc:68:24: c9:10:c7:9f:93:5a:ff:25:ac:ac:b0:35:84:eb:fe:94:2b:76: bc:96:d4:9b:db:4c:12:18:52:2f:d6:f4:7e:ce:52:20:5c:43: be:3b:4c:33:bf:25:f6:ac:e0:d7:35:58:22:81:1c:bd:3a:62: 58:8e:9c:82:3d:c6:d6:c1:f6:ef:92:cb:ab:57:da:e5:24:6b: 0d:f2:34:c1:96:6e:25:d6:c1:2a:7d:0c:f8:96:1b:68:56:72: e3:9e:91:63:97:16:d0:e9:da:1b:99:d5:97:7e:81:17:ab:25: 39:c5:55:1f:9b:f8:34:e6:a1:fc:d2:99:86:c4:bf:e9:01:3e: 45:43:ea:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDkxMDYxMTAvBgNVBAUTKDkwOTQzRUI4RUFENDRDMzZFREM5OTEwMzFCRkY4OEI4 QUI2NTVBMjkwHhcNMjUwNTEzMDAwMTU5WhcNMjUwNTIwMDAwMTU5WjAYMRYwFAYD VQQDEw02ODIyOGJmNy1jYzc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwq/vGIfshHdxzl3yBaflh+bl85FcU1vddtlgEflMHYQK85goWWFjxZ8+V2GR ylTrp97SNc6DWy7r9vxOet+3yYWNvGj6yTdMkLFsz4EScU5zwwnS0VUzmp1NSSsp K0xin8B40ZUTRlXHOnNuQSmV4e4IepfnhgFI154feQge0ot0Ch+Xg70MyUguRQh1 wS1eoEZfhyfIRjXy9EbqoYLc3cImlD0oaj22KG6eLtC/fnQyaaxRcTFJhiuCeMHp unUA/dSY+B6H1eSjb0amgq+E6idi8nP4CJsaUINtB3g5rLxZX0anie2xevQMr1DR uPpWk3zeJLY4XHmEp7I4TRsBtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPJSBfO4 CZ5L0TNQ9cVMZqHZUxynMB8GA1UdIwQYMBaAFJCUPrjq1Ew27cmRAxv/iLirZVop MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTEwNi85NjE3QzA2RTUz NjkxMUVDQTRBNkJDNzhDNEY5QUUwMi9rSlEtdU9yVVREYnR5WkVER18tSXVLdGxX aWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tKUS11T3JVVERidHlaRURHXy1JdUt0bFdpay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTEwNi85NjE3QzA2RTUzNjkxMUVDQTRBNkJDNzhDNEY5QUUwMi9rSlEtdU9yVVRE YnR5WkVER18tSXVLdGxXaWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBfDHZRsBuAV3w+itCam6ZKbX0pb/dvScV3An9UXVfokekGdziNqNI 3gcQq7SfrdTzPDQJGlmus1HHkgZmny4pFiH3ZSye2CXKLW8JYxLHF2MQKTHTaXub tHfUzjp85IWmZ9KzS6O9OTIapRLVvXOdt2VpVOkbTkDm3hbMaCTJEMefk1r/Jays sDWE6/6UK3a8ltSb20wSGFIv1vR+zlIgXEO+O0wzvyX2rODXNVgigRy9OmJYjpyC PcbWwfbvksurV9rlJGsN8jTBlm4l1sEqfQz4lhtoVnLjnpFjlxbQ6dobmdWXfoEX qyU5xVUfm/g05qH80pmGxL/pAT5FQ+oH -----END CERTIFICATE-----Generated at Tue May 13 15:31:59 2025 by rpki-client