$ rpki-client -vvf rpki.apnic.net/member_repository/A917408F/16CD9858B76E11EFACF0F865C4F9AE02/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.mft File: kQ8vQUCOE9rtfCHcRy3FxYxFiDY.mft (raw, json) Hash identifier: s+4dHI0gZWDWFJUekkhOvRceLzVSBb0q60u3IkePs0A= Subject key identifier: 12:15:9E:ED:7C:95:AB:CD:31:25:4B:9C:3C:D7:0A:10:B0:0A:E9:3E Authority key identifier: 91:0F:2F:41:40:8E:13:DA:ED:7C:21:DC:47:2D:C5:C5:8C:45:88:36 Certificate issuer: /CN=A917408F/serialNumber=910F2F41408E13DAED7C21DC472DC5C58C458836 Certificate serial: 55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917408F/16CD9858B76E11EFACF0F865C4F9AE02/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.mft Manifest number: 53 Signing time: Thu 15 May 2025 06:34:41 +0000 Manifest this update: Thu 15 May 2025 06:34:40 +0000 Manifest next update: Thu 22 May 2025 06:34:40 +0000 Files and hashes: 1: kQ8vQUCOE9rtfCHcRy3FxYxFiDY.crl (hash: kM4c8xnr6rCOjmPqOXx9n87Re/4T0VxGUGWg356/Jck=) 2: 9CEF2622B76E11EF8FCC9767C4F9AE02.roa (hash: 2R62YAvpAuupePKvyUwfJfetCOhCrZjNgarawDnuvxY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917408F/16CD9858B76E11EFACF0F865C4F9AE02/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.crl rsync://rpki.apnic.net/member_repository/A917408F/16CD9858B76E11EFACF0F865C4F9AE02/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 06:34:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 85 (0x55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917408F, serialNumber=910F2F41408E13DAED7C21DC472DC5C58C458836 Validity Not Before: May 15 06:34:40 2025 GMT Not After : May 22 06:34:40 2025 GMT Subject: CN=68258b01-3fdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4a:97:f6:82:64:fc:2e:5e:41:24:f1:34:23: ef:ad:e4:b3:cf:ac:b5:b7:b2:e1:35:22:a9:2d:1a: 86:6e:7e:13:e0:9e:0e:4e:21:6f:2e:9f:b6:39:b9: b6:4a:e2:d6:53:c6:b3:7f:da:f8:a1:cf:14:2b:b2: 25:bd:c1:f9:f8:28:89:7f:c8:13:04:09:9d:b7:5a: ad:6e:b7:8c:bb:44:87:ff:cf:bf:b5:7b:a8:64:e3: f3:fb:1d:6c:5e:0b:af:52:34:91:50:bf:e0:43:fc: 48:cc:b2:11:50:1e:19:64:33:ab:9e:81:05:1c:9b: f7:51:69:2a:6e:1b:24:a0:41:72:f5:90:a8:78:a5: e8:42:ae:33:96:cd:d9:cb:93:64:b7:dd:90:2c:3b: e6:7b:a4:92:f1:6e:53:85:96:42:a7:05:97:fa:80: 42:2d:5c:72:31:14:59:97:7c:21:2c:cf:6b:3e:ae: b0:27:b6:59:1b:a0:9b:11:aa:f8:15:ad:6c:9a:29: 2a:f9:df:77:fb:be:43:20:1b:a4:cc:ba:f5:e5:fc: 0e:4f:9b:9f:fd:a6:dc:39:dc:3c:08:7e:e8:65:d5: 9c:fb:a6:e0:c1:1b:86:8c:db:50:c9:83:75:61:26: ba:3e:c6:c5:2b:ac:25:1b:1c:bf:3d:3e:e0:1b:b4: b9:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:15:9E:ED:7C:95:AB:CD:31:25:4B:9C:3C:D7:0A:10:B0:0A:E9:3E X509v3 Authority Key Identifier: keyid:91:0F:2F:41:40:8E:13:DA:ED:7C:21:DC:47:2D:C5:C5:8C:45:88:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917408F/16CD9858B76E11EFACF0F865C4F9AE02/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917408F/16CD9858B76E11EFACF0F865C4F9AE02/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:ce:c0:92:49:53:25:b9:66:25:00:c6:ec:73:c9:32:1d:19: af:92:33:97:0d:1d:47:d0:f3:a2:c1:26:6f:a2:f5:ac:ae:69: f1:93:9a:39:a8:5c:2c:42:b1:23:4c:75:42:73:4d:7a:91:6b: 8c:71:08:60:8d:37:f2:6c:26:78:c3:19:ef:93:10:23:57:e8: fc:7a:2e:8d:64:bf:b9:ad:a0:4d:c8:21:52:20:3c:57:eb:74: ec:5d:f4:df:75:1e:fb:2e:1c:0c:e7:a7:9f:a8:25:7a:4d:75: 71:c0:d4:db:4e:b3:30:31:03:df:16:c8:9f:f5:b7:cb:24:d2: b3:a6:2a:c6:15:a8:c9:a9:31:30:71:48:fd:07:c3:12:e6:e0: 6b:ea:e7:df:92:33:38:72:8f:39:b3:27:67:d6:48:a2:40:9f: 32:4e:d4:51:bf:31:e2:ee:ea:f4:2a:39:4b:e4:0a:50:e7:93: 41:fe:43:30:9e:6f:ae:64:c7:ac:6e:e8:a7:d7:02:20:0c:5e: 83:2a:34:52:97:0f:ce:41:70:f8:12:29:78:25:ea:b4:aa:32: a6:e0:c8:21:02:8d:6c:24:12:86:ba:88:11:08:dc:f0:38:16: 92:29:d4:05:c0:fa:c0:c0:65:30:25:60:e5:bb:18:79:06:9f: b8:a1:08:de -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NDA4RjExMC8GA1UEBRMoOTEwRjJGNDE0MDhFMTNEQUVEN0MyMURDNDcyREM1QzU4 QzQ1ODgzNjAeFw0yNTA1MTUwNjM0NDBaFw0yNTA1MjIwNjM0NDBaMBgxFjAUBgNV BAMTDTY4MjU4YjAxLTNmZGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCSpf2gmT8Ll5BJPE0I++t5LPPrLW3suE1IqktGoZufhPgng5OIW8un7Y5ubZK 4tZTxrN/2vihzxQrsiW9wfn4KIl/yBMECZ23Wq1ut4y7RIf/z7+1e6hk4/P7HWxe C69SNJFQv+BD/EjMshFQHhlkM6uegQUcm/dRaSpuGySgQXL1kKh4pehCrjOWzdnL k2S33ZAsO+Z7pJLxblOFlkKnBZf6gEItXHIxFFmXfCEsz2s+rrAntlkboJsRqvgV rWyaKSr533f7vkMgG6TMuvXl/A5Pm5/9ptw53DwIfuhl1Zz7puDBG4aM21DJg3Vh Jro+xsUrrCUbHL89PuAbtLmpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUEhWe7XyV q80xJUucPNcKELAK6T4wHwYDVR0jBBgwFoAUkQ8vQUCOE9rtfCHcRy3FxYxFiDYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc0MDhGLzE2Q0Q5ODU4Qjc2 RTExRUZBQ0YwRjg2NUM0RjlBRTAyL2tROHZRVUNPRTlydGZDSGNSeTNGeFl4RmlE WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva1E4dlFVQ09FOXJ0ZkNIY1J5M0Z4WXhGaURZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc0 MDhGLzE2Q0Q5ODU4Qjc2RTExRUZBQ0YwRjg2NUM0RjlBRTAyL2tROHZRVUNPRTly dGZDSGNSeTNGeFl4RmlEWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAHOwJJJUyW5ZiUAxuxzyTIdGa+SM5cNHUfQ86LBJm+i9ayuafGTmjmo XCxCsSNMdUJzTXqRa4xxCGCNN/JsJnjDGe+TECNX6Px6Lo1kv7mtoE3IIVIgPFfr dOxd9N91HvsuHAznp5+oJXpNdXHA1NtOszAxA98WyJ/1t8sk0rOmKsYVqMmpMTBx SP0HwxLm4Gvq59+SMzhyjzmzJ2fWSKJAnzJO1FG/MeLu6vQqOUvkClDnk0H+QzCe b65kx6xu6KfXAiAMXoMqNFKXD85BcPgSKXgl6rSqMqbgyCECjWwkEoa6iBEI3PA4 FpIp1AXA+sDAZTAlYOW7GHkGn7ihCN4= -----END CERTIFICATE-----Generated at Fri May 16 02:44:38 2025 by rpki-client