$ rpki-client -vvf rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.mft File: kBpDycSAhnF-284lXAKi8DU9qvo.mft (raw, json) Hash identifier: iYF8Eff2pmu5fmOy56RwgiNDeoWsinAnMZVWRUFXSIM= Subject key identifier: 3D:24:61:04:5A:97:0C:97:C8:52:C6:FD:68:83:4C:59:6E:EC:D1:73 Authority key identifier: 90:1A:43:C9:C4:80:86:71:7E:DB:CE:25:5C:02:A2:F0:35:3D:AA:FA Certificate issuer: /CN=A9165DB1/serialNumber=901A43C9C48086717EDBCE255C02A2F0353DAAFA Certificate serial: 026C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBpDycSAhnF-284lXAKi8DU9qvo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.mft Manifest number: 026C Signing time: Sat 17 May 2025 01:56:51 +0000 Manifest this update: Sat 17 May 2025 01:56:51 +0000 Manifest next update: Sat 24 May 2025 01:56:51 +0000 Files and hashes: 1: kBpDycSAhnF-284lXAKi8DU9qvo.crl (hash: QR1d5wyvjueKaym4qbaLR60uSDx7mtWNmfnNSnk4Rws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.crl rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBpDycSAhnF-284lXAKi8DU9qvo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 01:56:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 620 (0x26c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165DB1, serialNumber=901A43C9C48086717EDBCE255C02A2F0353DAAFA Validity Not Before: May 17 01:56:51 2025 GMT Not After : May 24 01:56:51 2025 GMT Subject: CN=6827ece3-f72b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:43:7d:f8:06:42:07:e1:80:dc:4d:e6:0f:39: 96:e3:e7:97:0d:1a:49:15:d6:8a:fd:e9:45:ef:72: c7:c8:5b:ef:fc:81:25:cd:df:3b:0a:e0:14:21:1b: 7d:10:a0:af:36:b4:8a:fd:0b:b7:d2:ef:32:e4:a6: 89:2f:3d:46:93:e0:3a:c1:b1:59:50:27:75:ff:56: d7:81:78:96:f8:5d:3a:f2:a1:4d:12:26:a1:23:2d: a0:7d:b3:30:da:1c:d6:17:94:90:dd:44:0a:34:71: aa:d0:58:fb:3d:f7:4a:8c:c7:9e:d4:db:52:fa:2c: 78:82:e5:f3:e3:22:53:1e:90:76:ac:7e:5a:2d:99: f6:06:38:38:90:bc:fc:44:b4:43:9f:78:f8:0a:7f: ca:a0:bb:34:c3:bb:8a:2f:74:01:fd:62:1b:cf:c5: 4a:70:11:d1:55:f6:5d:05:95:b8:17:41:20:c9:e0: 07:5e:4b:1d:70:9a:65:1b:b1:8f:2b:b4:05:58:81: 01:6d:d5:83:88:24:98:92:85:cb:60:a6:3d:82:fb: 9b:fb:e6:f9:83:7e:60:19:8a:90:2b:5e:23:d9:94: 7f:79:10:4f:1d:61:d4:02:ac:33:54:8b:7f:66:62: 21:3e:50:ba:66:31:84:2f:00:93:28:85:d6:74:d8: 3c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:24:61:04:5A:97:0C:97:C8:52:C6:FD:68:83:4C:59:6E:EC:D1:73 X509v3 Authority Key Identifier: keyid:90:1A:43:C9:C4:80:86:71:7E:DB:CE:25:5C:02:A2:F0:35:3D:AA:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBpDycSAhnF-284lXAKi8DU9qvo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:74:f5:14:b2:1a:cf:8d:49:44:34:63:fc:3e:71:00:d3:1b: 1b:98:ce:a2:1b:9c:3e:cd:e4:09:31:de:ec:91:3d:91:a2:01: 47:3c:70:76:5a:0f:bf:c4:1d:5a:e1:9a:8d:62:c8:60:08:63: fe:3f:e2:83:bb:ca:1b:08:75:79:5b:84:46:9c:94:99:54:c5: d0:7a:a0:26:b6:d3:3b:9f:c8:26:1d:5d:d9:69:2a:72:20:f9: d5:86:51:dc:62:15:7e:8e:7d:4f:8d:37:34:4f:f9:1d:91:9b: 3d:df:97:1a:98:6f:70:01:8f:f2:d7:3f:cb:9d:8d:27:4f:ac: 78:32:7e:f7:c8:25:e1:83:4c:50:e4:1e:b8:71:10:f8:b8:72: c4:da:0d:d2:b3:34:a3:0e:ee:d4:09:4f:25:03:26:c9:9f:57: 58:b5:70:ce:61:ab:62:97:30:b3:65:04:1f:5c:0f:06:fd:70: b5:7a:0b:d7:e4:c1:78:4c:18:22:a1:c5:81:74:ff:7c:bf:54: da:eb:b5:ea:6a:33:4f:5b:49:69:5c:7e:1e:d2:b2:99:cf:9a: a3:8d:05:03:60:56:d5:61:18:60:82:09:d2:2d:e9:b8:50:af: c3:cd:cd:4f:53:13:95:03:56:d0:4b:8d:ad:cb:ff:f5:52:9b: 1a:c1:13:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVEQjExMTAvBgNVBAUTKDkwMUE0M0M5QzQ4MDg2NzE3RURCQ0UyNTVDMDJBMkYw MzUzREFBRkEwHhcNMjUwNTE3MDE1NjUxWhcNMjUwNTI0MDE1NjUxWjAYMRYwFAYD VQQDEw02ODI3ZWNlMy1mNzJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy0N9+AZCB+GA3E3mDzmW4+eXDRpJFdaK/elF73LHyFvv/IElzd87CuAUIRt9 EKCvNrSK/Qu30u8y5KaJLz1Gk+A6wbFZUCd1/1bXgXiW+F068qFNEiahIy2gfbMw 2hzWF5SQ3UQKNHGq0Fj7PfdKjMee1NtS+ix4guXz4yJTHpB2rH5aLZn2Bjg4kLz8 RLRDn3j4Cn/KoLs0w7uKL3QB/WIbz8VKcBHRVfZdBZW4F0EgyeAHXksdcJplG7GP K7QFWIEBbdWDiCSYkoXLYKY9gvub++b5g35gGYqQK14j2ZR/eRBPHWHUAqwzVIt/ ZmIhPlC6ZjGELwCTKIXWdNg8xQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD0kYQRa lwyXyFLG/WiDTFlu7NFzMB8GA1UdIwQYMBaAFJAaQ8nEgIZxftvOJVwCovA1Par6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NURCMS81MEMxQkY5MjBF MTcxMUVEOEUzQkQ5MTVDNEY5QUUwMi9rQnBEeWNTQWhuRi0yODRsWEFLaThEVTlx dm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2tCcER5Y1NBaG5GLTI4NGxYQUtpOERVOXF2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NURCMS81MEMxQkY5MjBFMTcxMUVEOEUzQkQ5MTVDNEY5QUUwMi9rQnBEeWNTQWhu Ri0yODRsWEFLaThEVTlxdm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwdPUUshrPjUlENGP8PnEA0xsbmM6iG5w+zeQJMd7skT2RogFHPHB2 Wg+/xB1a4ZqNYshgCGP+P+KDu8obCHV5W4RGnJSZVMXQeqAmttM7n8gmHV3ZaSpy IPnVhlHcYhV+jn1PjTc0T/kdkZs935camG9wAY/y1z/LnY0nT6x4Mn73yCXhg0xQ 5B64cRD4uHLE2g3SszSjDu7UCU8lAybJn1dYtXDOYatilzCzZQQfXA8G/XC1egvX 5MF4TBgiocWBdP98v1Ta67XqajNPW0lpXH4e0rKZz5qjjQUDYFbVYRhgggnSLem4 UK/Dzc1PUxOVA1bQS42ty//1UpsawRM1 -----END CERTIFICATE-----Generated at Sat May 17 17:42:53 2025 by rpki-client