$ rpki-client -vvf rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.mft File: kakyPLNEJvPZyJDjl4Ag1BezWfU.mft (raw, json) Hash identifier: 9yqAqSlEjqCFFaBxBtxrU9LfvIDGoAWlNbEep7iuBMg= Subject key identifier: 9B:9E:A6:AB:A8:A8:C6:33:DA:43:C2:2E:13:BD:A0:F5:DE:80:B3:0A Authority key identifier: 91:A9:32:3C:B3:44:26:F3:D9:C8:90:E3:97:80:20:D4:17:B3:59:F5 Certificate issuer: /CN=A9151265/serialNumber=91A9323CB34426F3D9C890E3978020D417B359F5 Certificate serial: 0454 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kakyPLNEJvPZyJDjl4Ag1BezWfU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.mft Manifest number: 044F Signing time: Tue 13 May 2025 00:00:38 +0000 Manifest this update: Tue 13 May 2025 00:00:38 +0000 Manifest next update: Tue 20 May 2025 00:00:38 +0000 Files and hashes: 1: kakyPLNEJvPZyJDjl4Ag1BezWfU.crl (hash: owPTpKkHU4/SX+OXnRYlxkKE6N6iBMmjKLFotKGQKXc=) 2: B1334FD4522011ECB0594C2BC4F9AE02.roa (hash: /FpsHXLPYXsoHcGNcebXfdYyitx9/IlpkTRLrZlFe1o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.crl rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kakyPLNEJvPZyJDjl4Ag1BezWfU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 00:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1108 (0x454) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151265, serialNumber=91A9323CB34426F3D9C890E3978020D417B359F5 Validity Not Before: May 13 00:00:38 2025 GMT Not After : May 20 00:00:38 2025 GMT Subject: CN=68228ba6-cdef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:3b:9a:c5:7e:dd:b2:da:fa:57:86:ff:ab:cc: 68:0c:48:b9:d0:53:96:f5:c5:cc:96:6c:0d:5f:91: 24:aa:74:42:a7:ef:c5:25:1e:95:8b:06:be:2a:f1: 2b:60:6b:ae:0c:27:83:96:9d:61:68:eb:7d:cb:46: 78:62:12:4c:65:5d:26:e4:81:6d:11:8a:96:83:35: e2:c3:d9:ef:58:e8:37:71:de:b9:0e:06:0f:bf:35: 16:62:2d:ad:53:74:ca:ec:15:be:ef:b2:77:35:e7: af:7d:30:0d:66:26:6a:93:97:7d:48:42:7d:17:4a: c7:17:c5:9f:f3:d7:9a:53:33:04:df:7c:ce:7b:32: a9:80:50:85:db:38:26:b2:75:33:2c:91:e0:7a:86: 56:7f:fa:12:cf:f7:d2:d7:ed:f1:43:5e:c3:90:4e: 7d:ee:37:2c:7f:16:b3:4a:2a:94:21:67:53:4e:45: 97:94:b1:4f:10:d2:3b:65:e0:41:ad:38:eb:c7:25: 90:6b:be:cc:d3:da:06:5c:3e:70:a0:be:8a:bd:48: 60:7c:e9:96:9f:9f:1f:2b:fa:a9:b5:6e:1b:3e:34: d8:c3:01:92:7f:25:b2:88:25:96:b2:69:35:98:ff: 73:f8:2d:e2:54:82:71:32:13:cb:19:c9:c0:82:44: 75:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:9E:A6:AB:A8:A8:C6:33:DA:43:C2:2E:13:BD:A0:F5:DE:80:B3:0A X509v3 Authority Key Identifier: keyid:91:A9:32:3C:B3:44:26:F3:D9:C8:90:E3:97:80:20:D4:17:B3:59:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kakyPLNEJvPZyJDjl4Ag1BezWfU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:09:33:3a:a8:2d:ce:86:41:96:1d:4e:ea:97:3b:2c:c1:4d: 5f:6e:2d:8a:8f:d8:c2:32:f5:90:81:0b:43:02:96:31:9e:b3: fc:ce:10:28:79:da:03:ef:bd:7f:3e:f8:31:02:e2:dc:c7:4a: 05:72:c0:7a:10:df:79:96:57:47:8e:25:86:1d:63:51:58:84: bc:a8:bd:85:2e:88:af:3e:47:60:84:1f:9d:b7:29:0e:a2:0f: b7:c1:17:b0:99:c5:25:e2:88:62:98:51:1e:c9:0f:d3:bc:aa: c0:fe:e1:27:b7:b1:16:68:bd:2b:cc:8c:eb:7a:a2:99:30:39: 96:11:3b:d2:f4:ed:c2:d3:40:f6:a8:58:31:cb:14:62:b2:4e: 3c:5e:53:48:c2:e6:15:97:5e:09:8c:ff:35:45:04:11:a7:11: 09:7c:e2:33:d0:35:cd:e1:f9:2f:57:bf:a2:56:ca:5d:de:88: dd:95:d0:25:fa:51:00:85:be:ca:ba:c8:c4:14:d7:95:09:00: 54:34:34:d5:67:43:d9:d6:8e:ff:f2:20:83:86:ce:af:14:42: d3:a8:5f:f9:53:29:21:13:a2:fa:25:81:58:53:27:0d:e0:e2: 8e:59:c9:79:34:2a:c2:c3:e9:e9:db:d3:83:1b:6e:db:a2:69: 68:9d:23:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTEyNjUxMTAvBgNVBAUTKDkxQTkzMjNDQjM0NDI2RjNEOUM4OTBFMzk3ODAyMEQ0 MTdCMzU5RjUwHhcNMjUwNTEzMDAwMDM4WhcNMjUwNTIwMDAwMDM4WjAYMRYwFAYD VQQDEw02ODIyOGJhNi1jZGVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxTuaxX7dstr6V4b/q8xoDEi50FOW9cXMlmwNX5EkqnRCp+/FJR6Viwa+KvEr YGuuDCeDlp1haOt9y0Z4YhJMZV0m5IFtEYqWgzXiw9nvWOg3cd65DgYPvzUWYi2t U3TK7BW+77J3NeevfTANZiZqk5d9SEJ9F0rHF8Wf89eaUzME33zOezKpgFCF2zgm snUzLJHgeoZWf/oSz/fS1+3xQ17DkE597jcsfxazSiqUIWdTTkWXlLFPENI7ZeBB rTjrxyWQa77M09oGXD5woL6KvUhgfOmWn58fK/qptW4bPjTYwwGSfyWyiCWWsmk1 mP9z+C3iVIJxMhPLGcnAgkR12wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJuepquo qMYz2kPCLhO9oPXegLMKMB8GA1UdIwQYMBaAFJGpMjyzRCbz2ciQ45eAINQXs1n1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTI2NS8wNTcwOUFFQTUy MUYxMUVDQjNEMDE5MkJDNEY5QUUwMi9rYWt5UExORUp2UFp5SkRqbDRBZzFCZXpX ZlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tha3lQTE5FSnZQWnlKRGpsNEFnMUJleldmVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTI2NS8wNTcwOUFFQTUyMUYxMUVDQjNEMDE5MkJDNEY5QUUwMi9rYWt5UExORUp2 UFp5SkRqbDRBZzFCZXpXZlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9CTM6qC3OhkGWHU7qlzsswU1fbi2Kj9jCMvWQgQtDApYxnrP8zhAo edoD771/PvgxAuLcx0oFcsB6EN95lldHjiWGHWNRWIS8qL2FLoivPkdghB+dtykO og+3wRewmcUl4ohimFEeyQ/TvKrA/uEnt7EWaL0rzIzreqKZMDmWETvS9O3C00D2 qFgxyxRisk48XlNIwuYVl14JjP81RQQRpxEJfOIz0DXN4fkvV7+iVspd3ojdldAl +lEAhb7KusjEFNeVCQBUNDTVZ0PZ1o7/8iCDhs6vFELTqF/5UykhE6L6JYFYUycN 4OKOWcl5NCrCw+np29ODG27bomlonSNx -----END CERTIFICATE-----Generated at Wed May 14 15:09:18 2025 by rpki-client