$ rpki-client -vvf rpki.apnic.net/member_repository/A915A161/B07B2AB84B1011E9AAE3EE43C4F9AE02/kCs-s81I0JqgoQybLLKA0KDNLbo.mft File: kCs-s81I0JqgoQybLLKA0KDNLbo.mft (raw, json) Hash identifier: xwBYH7twWFSIcBubpjn1rh7DY2Qqv7qx+j9X8eCPd0M= Subject key identifier: CB:9E:0F:79:74:5B:90:D0:E2:8B:17:6E:2A:1F:DB:C0:3E:67:67:56 Authority key identifier: 90:2B:3E:B3:CD:48:D0:9A:A0:A1:0C:9B:2C:B2:80:D0:A0:CD:2D:BA Certificate issuer: /CN=A915A161/serialNumber=902B3EB3CD48D09AA0A10C9B2CB280D0A0CD2DBA Certificate serial: 0FE1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCs-s81I0JqgoQybLLKA0KDNLbo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A161/B07B2AB84B1011E9AAE3EE43C4F9AE02/kCs-s81I0JqgoQybLLKA0KDNLbo.mft Manifest number: 0FE1 Signing time: Mon 12 May 2025 17:23:22 +0000 Manifest this update: Mon 12 May 2025 17:23:21 +0000 Manifest next update: Mon 19 May 2025 17:23:21 +0000 Files and hashes: 1: kCs-s81I0JqgoQybLLKA0KDNLbo.crl (hash: rXTAmFoufxdIsaGD7ArajePRvWXOqHZk0n7NvoGGoos=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A161/B07B2AB84B1011E9AAE3EE43C4F9AE02/kCs-s81I0JqgoQybLLKA0KDNLbo.crl rsync://rpki.apnic.net/member_repository/A915A161/B07B2AB84B1011E9AAE3EE43C4F9AE02/kCs-s81I0JqgoQybLLKA0KDNLbo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCs-s81I0JqgoQybLLKA0KDNLbo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 17:23:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4065 (0xfe1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A161, serialNumber=902B3EB3CD48D09AA0A10C9B2CB280D0A0CD2DBA Validity Not Before: May 12 17:23:21 2025 GMT Not After : May 19 17:23:21 2025 GMT Subject: CN=68222e8a-e7e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:ab:4f:7a:52:eb:f9:f7:ea:7e:e6:cb:47:0d: 09:59:1a:f2:99:b2:61:67:d3:45:75:e0:9b:0d:d0: 19:1b:ca:e3:c4:ef:69:21:aa:3f:39:d2:d9:ab:44: 44:d4:cb:9b:89:74:dc:b6:04:7f:2b:46:6d:ed:50: 2b:5f:c2:a3:66:79:77:51:3c:22:d2:cd:4b:1a:61: c3:06:63:98:39:8c:30:6c:d6:74:75:ee:73:6c:f4: fe:c4:ff:15:ad:8a:ff:5b:e3:da:7e:99:9c:bd:6c: 1c:48:02:84:80:6c:3c:1f:8a:7d:d2:83:b9:77:f5: 8e:6e:6a:1b:6c:fd:6f:2c:63:ea:68:62:90:3d:67: b0:da:4a:e4:a4:2c:bc:40:80:f7:13:98:ad:d2:a9: b4:76:63:08:ae:8a:53:30:05:ba:a8:90:21:52:46: 5a:f2:f6:bb:e8:47:87:a9:95:8d:0b:82:60:e9:52: 11:fd:34:a0:2a:50:05:1c:5b:ce:52:b2:3a:f0:a1: 3d:72:2a:e9:af:c5:07:4b:eb:82:75:55:70:71:c9: 03:32:db:53:41:fb:54:7f:17:8a:a8:3e:3b:0e:81: 4e:87:f7:47:35:7c:77:f7:00:a2:3a:a8:61:7b:c5: 3c:b0:47:d4:a0:53:a6:d8:1a:24:92:2b:35:de:3a: 98:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:9E:0F:79:74:5B:90:D0:E2:8B:17:6E:2A:1F:DB:C0:3E:67:67:56 X509v3 Authority Key Identifier: keyid:90:2B:3E:B3:CD:48:D0:9A:A0:A1:0C:9B:2C:B2:80:D0:A0:CD:2D:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A161/B07B2AB84B1011E9AAE3EE43C4F9AE02/kCs-s81I0JqgoQybLLKA0KDNLbo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCs-s81I0JqgoQybLLKA0KDNLbo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A161/B07B2AB84B1011E9AAE3EE43C4F9AE02/kCs-s81I0JqgoQybLLKA0KDNLbo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:c6:37:1f:cf:e2:30:87:20:b0:df:3b:a7:bb:f0:08:ad:cb: 2b:a9:53:45:14:32:cc:f1:d4:65:3c:a3:bf:f2:33:69:2d:9d: bf:b1:9e:63:b9:6f:fb:d4:c7:d8:7e:b6:51:36:1e:86:b7:d3: dc:54:b4:ae:df:72:bc:9d:da:55:89:68:74:95:aa:35:9e:c1: 54:7a:ba:cb:42:d6:ff:0c:fe:78:85:6a:9d:58:a9:02:d0:59: 22:3b:94:ac:1d:85:81:a8:45:02:bd:80:13:de:30:5d:4a:18: cf:9a:9c:66:ba:fd:59:77:31:07:79:20:46:f1:16:70:67:8a: a1:02:ce:07:4e:42:fc:dc:c5:14:c6:a1:0e:97:83:36:d9:7a: f8:84:f4:b9:77:63:60:b4:42:02:c2:02:85:1a:44:89:01:65: 92:3a:09:07:17:8b:90:12:48:d5:8f:d5:df:a2:3b:6c:e7:1e: 81:3d:fd:8e:bd:08:40:98:51:67:77:11:b3:ed:dc:9b:e6:ed: f5:d6:4e:56:f5:0e:4e:70:f2:29:5b:40:9c:16:b7:a4:7f:97: e9:24:c0:6a:ae:14:b7:f6:2d:30:ed:e8:cb:de:ab:3c:6d:8e: 10:21:c2:1b:5c:62:c1:0d:aa:62:a8:c3:63:78:64:96:34:8b: 4b:96:53:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD+EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUExNjExMTAvBgNVBAUTKDkwMkIzRUIzQ0Q0OEQwOUFBMEExMEM5QjJDQjI4MEQw QTBDRDJEQkEwHhcNMjUwNTEyMTcyMzIxWhcNMjUwNTE5MTcyMzIxWjAYMRYwFAYD VQQDEw02ODIyMmU4YS1lN2UzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6atPelLr+ffqfubLRw0JWRrymbJhZ9NFdeCbDdAZG8rjxO9pIao/OdLZq0RE 1MubiXTctgR/K0Zt7VArX8KjZnl3UTwi0s1LGmHDBmOYOYwwbNZ0de5zbPT+xP8V rYr/W+PafpmcvWwcSAKEgGw8H4p90oO5d/WObmobbP1vLGPqaGKQPWew2krkpCy8 QID3E5it0qm0dmMIropTMAW6qJAhUkZa8va76EeHqZWNC4Jg6VIR/TSgKlAFHFvO UrI68KE9cirpr8UHS+uCdVVwcckDMttTQftUfxeKqD47DoFOh/dHNXx39wCiOqhh e8U8sEfUoFOm2Bokkis13jqYqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMueD3l0 W5DQ4osXbiof28A+Z2dWMB8GA1UdIwQYMBaAFJArPrPNSNCaoKEMmyyygNCgzS26 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTE2MS9CMDdCMkFCODRC MTAxMUU5QUFFM0VFNDNDNEY5QUUwMi9rQ3MtczgxSTBKcWdvUXliTExLQTBLRE5M Ym8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tDcy1zODFJMEpxZ29ReWJMTEtBMEtETkxiby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTE2MS9CMDdCMkFCODRCMTAxMUU5QUFFM0VFNDNDNEY5QUUwMi9rQ3MtczgxSTBK cWdvUXliTExLQTBLRE5MYm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVxjcfz+IwhyCw3zunu/AIrcsrqVNFFDLM8dRlPKO/8jNpLZ2/sZ5j uW/71MfYfrZRNh6Gt9PcVLSu33K8ndpViWh0lao1nsFUerrLQtb/DP54hWqdWKkC 0FkiO5SsHYWBqEUCvYAT3jBdShjPmpxmuv1ZdzEHeSBG8RZwZ4qhAs4HTkL83MUU xqEOl4M22Xr4hPS5d2NgtEICwgKFGkSJAWWSOgkHF4uQEkjVj9Xfojts5x6BPf2O vQhAmFFndxGz7dyb5u311k5W9Q5OcPIpW0CcFrekf5fpJMBqrhS39i0w7ejL3qs8 bY4QIcIbXGLBDapiqMNjeGSWNItLllO+ -----END CERTIFICATE-----Generated at Tue May 13 02:32:49 2025 by rpki-client