$ rpki-client -vvf rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft File: Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft (raw, json) Hash identifier: NcVFPKueM7J7qjk2rJq0LoMX/+nYtpnfTJSRoJ0CXvs= Subject key identifier: E9:EA:C6:88:6B:EA:72:74:24:F7:05:90:A3:AD:DA:79:EE:B2:BB:FF Authority key identifier: 2A:47:75:37:F3:23:EF:B5:9D:BD:8D:BE:B3:AF:AB:1F:15:82:F5:46 Certificate issuer: /CN=A916DDB4/serialNumber=2A477537F323EFB59DBD8DBEB3AFAB1F1582F546 Certificate serial: 05DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft Manifest number: 05D3 Signing time: Mon 12 May 2025 22:47:59 +0000 Manifest this update: Mon 12 May 2025 22:47:58 +0000 Manifest next update: Mon 19 May 2025 22:47:58 +0000 Files and hashes: 1: Kkd1N_Mj77WdvY2-s6-rHxWC9UY.crl (hash: xnKOcj5KjZmyKIN2YnFUgWsRyTRRPQBCa+sbRLnfJyc=) 2: B951F87ABE6D11EF933FE870C4F9AE02.roa (hash: z/OvD5EQcBmWZhdA8ip/E6h0FRzhkXq6osJ4yXLXzHc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.crl rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 22:47:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1498 (0x5da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DDB4, serialNumber=2A477537F323EFB59DBD8DBEB3AFAB1F1582F546 Validity Not Before: May 12 22:47:58 2025 GMT Not After : May 19 22:47:58 2025 GMT Subject: CN=68227a9e-01a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:62:9e:5b:41:93:e3:e5:ca:85:84:fe:2d:12: 9d:48:21:56:d1:5f:f6:f2:59:1c:71:d7:4e:4b:df: 6c:2e:fb:16:d9:cc:9a:d4:55:1b:5d:18:4f:37:bc: 99:a5:db:ec:0b:26:6f:96:81:7f:f3:a2:6f:ae:71: 25:d9:56:3c:ea:02:43:53:66:fe:36:c3:4c:fd:9c: ce:69:e7:f6:d4:13:6b:75:05:21:c2:ae:28:22:e6: 75:7b:ae:3a:47:b7:61:de:c6:33:61:89:65:c6:ca: a0:f7:59:9e:23:a2:b9:e2:b4:38:a8:20:62:b6:c5: 8f:ef:c4:19:d1:37:75:81:d2:8a:3e:2f:4a:ff:d2: 34:4c:93:54:ad:66:ea:04:26:ca:7a:a9:e2:b0:4d: e3:cb:39:69:29:cc:3f:7b:04:aa:2d:74:fc:9b:d3: 46:a3:b6:fd:c0:dc:43:35:49:31:07:93:b1:2e:e0: c5:e7:b3:c6:3d:80:c9:a7:1b:9b:30:66:c8:ef:e2: 72:51:dd:56:01:b0:3b:1f:98:e8:33:eb:fe:b9:51: 81:36:fc:8a:fa:5f:6b:ea:a5:37:aa:24:22:d4:bb: 71:1d:f4:de:76:e0:c0:b6:4c:bf:fd:96:21:7d:d3: ec:8b:33:fa:f8:bb:ab:07:57:90:68:d0:d8:ca:3c: 77:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:EA:C6:88:6B:EA:72:74:24:F7:05:90:A3:AD:DA:79:EE:B2:BB:FF X509v3 Authority Key Identifier: keyid:2A:47:75:37:F3:23:EF:B5:9D:BD:8D:BE:B3:AF:AB:1F:15:82:F5:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:63:d0:55:eb:f0:c4:e5:72:cb:e0:f5:55:0f:39:e9:74:80: 1c:85:f3:53:39:96:dc:60:e7:64:00:14:bb:75:10:ac:db:0d: 99:fe:c9:cc:7b:75:18:42:76:05:35:c6:ac:9d:f7:f8:d4:95: f2:4f:43:71:85:1b:16:a4:ec:e2:d1:8f:1c:42:49:55:e2:6e: bf:48:2c:b0:3d:f2:b2:40:1a:92:36:6a:97:4c:aa:d7:85:17: e5:64:5b:77:b0:f8:e2:5d:cd:d4:2d:bf:e9:d5:da:3b:5b:6d: df:75:4f:6d:3d:22:3a:8e:cb:ff:99:74:18:9b:6d:b0:76:8c: ee:fc:0c:af:51:ef:a6:eb:fe:0e:96:6a:cc:df:db:3e:ad:46: 12:97:7e:b3:80:73:c1:bd:b2:e3:fd:01:85:8f:f9:33:9f:a6: 45:78:c3:d1:6a:8d:be:38:e8:90:4d:4c:20:76:0e:7f:24:65: 88:d7:91:7d:cc:4b:bb:fe:3d:c9:7e:03:4c:89:db:37:6f:9f: c9:4e:85:65:d9:56:25:ab:39:0e:b9:f1:45:c5:78:a5:8e:b5: 44:0b:82:9f:94:36:55:fc:6f:7f:35:bc:db:c2:3d:7a:e0:c6: 8e:13:69:57:18:8b:65:97:33:5d:ad:c7:4b:0e:0f:19:24:d0: eb:63:ea:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBdowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkREQjQxMTAvBgNVBAUTKDJBNDc3NTM3RjMyM0VGQjU5REJEOERCRUIzQUZBQjFG MTU4MkY1NDYwHhcNMjUwNTEyMjI0NzU4WhcNMjUwNTE5MjI0NzU4WjAYMRYwFAYD VQQDEw02ODIyN2E5ZS0wMWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvGKeW0GT4+XKhYT+LRKdSCFW0V/28lkccddOS99sLvsW2cya1FUbXRhPN7yZ pdvsCyZvloF/86JvrnEl2VY86gJDU2b+NsNM/ZzOaef21BNrdQUhwq4oIuZ1e646 R7dh3sYzYYllxsqg91meI6K54rQ4qCBitsWP78QZ0Td1gdKKPi9K/9I0TJNUrWbq BCbKeqnisE3jyzlpKcw/ewSqLXT8m9NGo7b9wNxDNUkxB5OxLuDF57PGPYDJpxub MGbI7+JyUd1WAbA7H5joM+v+uVGBNvyK+l9r6qU3qiQi1LtxHfTeduDAtky//ZYh fdPsizP6+LurB1eQaNDYyjx3BQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOnqxohr 6nJ0JPcFkKOt2nnusrv/MB8GA1UdIwQYMBaAFCpHdTfzI++1nb2NvrOvqx8VgvVG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RERCNC9BNjAwODMxNkI5 MzIxMUVCQjk1RDA2M0NDNEY5QUUwMi9La2QxTl9Najc3V2R2WTItczYtckh4V0M5 VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0trZDFOX01qNzdXZHZZMi1zNi1ySHhXQzlVWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RERCNC9BNjAwODMxNkI5MzIxMUVCQjk1RDA2M0NDNEY5QUUwMi9La2QxTl9Najc3 V2R2WTItczYtckh4V0M5VVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqY9BV6/DE5XLL4PVVDznpdIAchfNTOZbcYOdkABS7dRCs2w2Z/snM e3UYQnYFNcasnff41JXyT0NxhRsWpOzi0Y8cQklV4m6/SCywPfKyQBqSNmqXTKrX hRflZFt3sPjiXc3ULb/p1do7W23fdU9tPSI6jsv/mXQYm22wdozu/AyvUe+m6/4O lmrM39s+rUYSl36zgHPBvbLj/QGFj/kzn6ZFeMPRao2+OOiQTUwgdg5/JGWI15F9 zEu7/j3JfgNMids3b5/JToVl2VYlqzkOufFFxXiljrVEC4KflDZV/G9/Nbzbwj16 4MaOE2lXGItllzNdrcdLDg8ZJNDrY+ry -----END CERTIFICATE-----Generated at Tue May 13 04:55:17 2025 by rpki-client