$ rpki-client -vvf rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.mft File: kiQWZZVYIXyTYnuW2cnq-sH6o-4.mft (raw, json) Hash identifier: 6Y/3qtuM8NVsbOICg0o4q+YYddg9/tzb9WzJKs+Q0ws= Subject key identifier: FE:30:F4:3A:46:B5:C7:11:39:86:80:8A:A6:1A:04:1B:83:54:39:1F Authority key identifier: 92:24:16:65:95:58:21:7C:93:62:7B:96:D9:C9:EA:FA:C1:FA:A3:EE Certificate issuer: /CN=A91774FB/serialNumber=922416659558217C93627B96D9C9EAFAC1FAA3EE Certificate serial: A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kiQWZZVYIXyTYnuW2cnq-sH6o-4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.mft Manifest number: A6 Signing time: Thu 15 May 2025 05:26:36 +0000 Manifest this update: Thu 15 May 2025 05:26:36 +0000 Manifest next update: Thu 22 May 2025 05:26:36 +0000 Files and hashes: 1: kiQWZZVYIXyTYnuW2cnq-sH6o-4.crl (hash: ZDJGCuDoXXvrc6KYr7G13O1Fwr+lWqia+1Pp6tB5fuc=) 2: 671EAC66343D11EFB36ED310C4F9AE02.roa (hash: BGWFxC/B5z+W4syYv1KrB6WI1JIbx5pNt/4UAlcwzEA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.crl rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kiQWZZVYIXyTYnuW2cnq-sH6o-4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 05:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 167 (0xa7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91774FB, serialNumber=922416659558217C93627B96D9C9EAFAC1FAA3EE Validity Not Before: May 15 05:26:36 2025 GMT Not After : May 22 05:26:36 2025 GMT Subject: CN=68257b0c-1147 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:6f:1b:20:26:03:a5:d7:3a:5f:b6:d8:24:fd: ea:1a:94:9b:ef:3e:00:c5:60:d9:04:08:c0:80:4d: 93:b1:48:f2:80:46:04:f5:50:88:61:1c:41:36:85: d1:66:4e:96:7e:d2:4b:33:26:7e:80:53:c6:da:ce: f8:34:b9:a0:70:67:ce:92:e8:ac:1d:e9:6b:87:d1: 58:91:15:57:12:70:92:33:08:13:27:62:8a:e9:6a: b9:a5:09:87:51:62:08:39:a2:58:1c:ec:ae:46:1a: 2d:f6:1d:56:8b:7c:c1:20:86:ff:73:cc:7d:bc:81: 73:94:7f:a7:73:45:d2:4c:bd:1e:56:87:a8:d0:25: 19:cc:6b:48:e0:64:d5:60:bc:fd:08:ae:31:9c:1c: 04:68:93:15:8a:9c:02:78:58:59:5b:82:07:ea:b4: 7f:c8:c5:30:b7:03:0c:d3:25:f2:09:2a:d5:de:4a: e6:d6:52:d4:e6:77:f8:6a:c2:8a:00:e5:4a:b9:88: b2:ff:56:69:e6:ce:ae:82:04:ab:4b:b4:73:eb:f2: e4:22:de:04:9a:dc:ee:f8:d9:f5:e2:b7:12:76:f6: 11:b1:89:32:6c:9b:fe:be:5d:3f:d1:9b:32:01:07: 06:78:3f:f2:49:8d:26:c6:8a:16:5a:46:8a:d7:c0: 2e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:30:F4:3A:46:B5:C7:11:39:86:80:8A:A6:1A:04:1B:83:54:39:1F X509v3 Authority Key Identifier: keyid:92:24:16:65:95:58:21:7C:93:62:7B:96:D9:C9:EA:FA:C1:FA:A3:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kiQWZZVYIXyTYnuW2cnq-sH6o-4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:84:c0:fd:1a:fb:07:f8:16:c4:cb:60:43:3e:b2:48:54:73: 10:d3:68:42:3e:7d:20:db:29:ff:2e:2d:39:b0:94:bb:7f:9a: a3:ba:09:5a:9b:bd:50:ac:95:f7:a0:71:ff:1d:ec:0d:36:2c: 58:2e:68:7d:15:18:6a:c0:cb:e2:58:10:8c:81:1d:97:56:f3: f5:12:bb:06:fb:ad:21:89:39:ef:47:ac:e4:5e:85:53:16:4a: 4d:fb:7d:00:af:8f:05:3e:3b:4b:80:09:e2:c4:36:0d:2a:89: 69:3c:2a:37:85:15:22:57:ca:4b:09:8f:2d:ff:44:ce:17:54: e2:38:fb:c7:7e:8a:ac:71:47:a8:3f:7f:e6:b5:97:71:0a:69: 4e:56:fe:b1:33:01:ca:be:9c:18:1e:b9:df:8b:3d:05:34:ea: 71:2b:bf:1c:58:b5:38:3f:d4:c7:35:1a:5a:6b:e8:f6:89:7b: 2d:03:75:b9:f0:40:74:b6:f7:0c:3f:9b:e4:48:21:02:e0:dd: 03:3f:13:a1:00:bc:cd:71:93:66:1d:ea:60:f4:32:52:ec:5d: 57:2f:d7:d1:7f:46:d5:4e:57:37:48:59:c7:18:6a:dc:36:ea: cf:56:d6:3e:54:b3:14:bd:9e:13:5a:9b:97:cb:7b:da:20:f8: 1d:6b:46:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc0RkIxMTAvBgNVBAUTKDkyMjQxNjY1OTU1ODIxN0M5MzYyN0I5NkQ5QzlFQUZB QzFGQUEzRUUwHhcNMjUwNTE1MDUyNjM2WhcNMjUwNTIyMDUyNjM2WjAYMRYwFAYD VQQDEw02ODI1N2IwYy0xMTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA428bICYDpdc6X7bYJP3qGpSb7z4AxWDZBAjAgE2TsUjygEYE9VCIYRxBNoXR Zk6WftJLMyZ+gFPG2s74NLmgcGfOkuisHelrh9FYkRVXEnCSMwgTJ2KK6Wq5pQmH UWIIOaJYHOyuRhot9h1Wi3zBIIb/c8x9vIFzlH+nc0XSTL0eVoeo0CUZzGtI4GTV YLz9CK4xnBwEaJMVipwCeFhZW4IH6rR/yMUwtwMM0yXyCSrV3krm1lLU5nf4asKK AOVKuYiy/1Zp5s6uggSrS7Rz6/LkIt4Emtzu+Nn14rcSdvYRsYkybJv+vl0/0Zsy AQcGeD/ySY0mxooWWkaK18AufwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP4w9DpG tccROYaAiqYaBBuDVDkfMB8GA1UdIwQYMBaAFJIkFmWVWCF8k2J7ltnJ6vrB+qPu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzRGQi84MTY5NzJDNjM0 MzkxMUVGOUMzRDIxM0VDNEY5QUUwMi9raVFXWlpWWUlYeVRZbnVXMmNucS1zSDZv LTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tpUVdaWlZZSVh5VFludVcyY25xLXNINm8tNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzRGQi84MTY5NzJDNjM0MzkxMUVGOUMzRDIxM0VDNEY5QUUwMi9raVFXWlpWWUlY eVRZbnVXMmNucS1zSDZvLTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMhMD9GvsH+BbEy2BDPrJIVHMQ02hCPn0g2yn/Li05sJS7f5qjugla m71QrJX3oHH/HewNNixYLmh9FRhqwMviWBCMgR2XVvP1ErsG+60hiTnvR6zkXoVT FkpN+30Ar48FPjtLgAnixDYNKolpPCo3hRUiV8pLCY8t/0TOF1TiOPvHfoqscUeo P3/mtZdxCmlOVv6xMwHKvpwYHrnfiz0FNOpxK78cWLU4P9THNRpaa+j2iXstA3W5 8EB0tvcMP5vkSCEC4N0DPxOhALzNcZNmHepg9DJS7F1XL9fRf0bVTlc3SFnHGGrc NurPVtY+VLMUvZ4TWpuXy3vaIPgda0bk -----END CERTIFICATE-----Generated at Thu May 15 22:34:26 2025 by rpki-client