$ rpki-client -vvf rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.mft File: Kc2N-IBuEWdMvF-d9Nv40j4MIoM.mft (raw, json) Hash identifier: CzMj5wSYjvzFoZWcTWKrMgal7sC9mqbuXDQd8Fh3obI= Subject key identifier: 0A:12:E9:CA:E5:A7:3F:D6:F8:7C:8C:33:6D:2A:99:EB:AE:51:A2:68 Authority key identifier: 29:CD:8D:F8:80:6E:11:67:4C:BC:5F:9D:F4:DB:F8:D2:3E:0C:22:83 Certificate issuer: /CN=A917F241/serialNumber=29CD8DF8806E11674CBC5F9DF4DBF8D23E0C2283 Certificate serial: CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.mft Manifest number: C4 Signing time: Fri 09 May 2025 04:54:59 +0000 Manifest this update: Fri 09 May 2025 04:54:59 +0000 Manifest next update: Fri 16 May 2025 04:54:59 +0000 Files and hashes: 1: Kc2N-IBuEWdMvF-d9Nv40j4MIoM.crl (hash: b/nWO6k6lo78a7suJc+wQBxnE0LA/aRWPX26R4jIwXU=) 2: A0B44D9C60E211EFB1283930C4F9AE02.roa (hash: We+bh/dPouK8NlGju2k+lFoIHBb/HkpPfF89DMkSLSg=) 3: 7434811060E211EFBAE0C52FC4F9AE02.roa (hash: OvtEst3O8Yb7GSI88hSTYs6uncMGZjm+NzSGzxQ2axk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.crl rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 04:54:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 202 (0xca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F241, serialNumber=29CD8DF8806E11674CBC5F9DF4DBF8D23E0C2283 Validity Not Before: May 9 04:54:59 2025 GMT Not After : May 16 04:54:59 2025 GMT Subject: CN=681d8aa3-e0ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:40:5f:05:df:fb:1e:9c:a0:31:19:10:86:d4: e2:b7:02:94:3a:79:28:35:bc:6c:c3:34:84:1a:bb: a4:bd:c5:7b:5b:d4:df:f2:f6:5a:55:dd:0a:87:68: 95:a5:7b:ab:dc:f1:5d:9d:7f:fd:e4:b8:eb:20:e0: 02:53:4d:ee:c5:9b:fc:5e:97:9f:b0:79:e0:fe:03: 75:58:40:04:ac:f7:a8:87:64:8d:53:a3:27:a1:3d: b2:3f:61:fb:9b:3b:df:a6:9c:58:96:3a:cf:d7:fb: 0b:24:f8:80:67:06:f7:a3:fe:e0:51:0f:45:8f:10: 81:40:8d:1c:90:8c:0d:cb:6c:cd:e7:1e:03:66:0f: 74:43:99:5e:b1:81:61:d6:d3:62:29:7d:d9:0c:ee: 90:c7:98:24:79:1d:35:ae:f4:d4:10:d5:5f:7f:b8: da:78:2e:7b:ca:c9:08:e6:f6:46:35:b1:03:5f:95: b0:a9:1c:21:49:66:da:0a:a9:1f:da:43:65:b7:18: 45:ef:9f:0a:df:4c:c3:3d:f1:a2:42:eb:93:91:3f: a0:ee:c6:e1:e7:f5:4a:a7:50:7b:d6:03:3b:88:23: 05:c2:ba:97:b2:09:81:bb:47:70:bc:aa:b6:09:bf: 65:4f:bc:90:a3:d1:a6:7a:3f:f7:f2:c3:38:12:ed: 53:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:12:E9:CA:E5:A7:3F:D6:F8:7C:8C:33:6D:2A:99:EB:AE:51:A2:68 X509v3 Authority Key Identifier: keyid:29:CD:8D:F8:80:6E:11:67:4C:BC:5F:9D:F4:DB:F8:D2:3E:0C:22:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:e7:fa:b0:32:72:67:06:b5:ed:95:0e:d2:d5:1f:3a:bf:dc: 20:bf:7c:c6:65:18:2a:69:36:25:e6:97:ad:ac:8b:9d:7a:ac: 4e:54:e2:c0:27:02:1e:3c:d9:c4:9b:0d:91:09:c5:48:a9:43: ee:c0:61:a5:51:d5:e5:d6:2b:89:1b:0f:54:96:6d:ca:b1:ea: b7:bf:ce:71:b7:54:57:47:57:23:f5:b5:a4:8a:ca:ea:30:01: a3:90:f7:65:55:85:40:04:b2:8a:e2:07:85:24:08:04:f4:94: 14:6a:83:8c:35:e5:40:bf:d8:07:a7:03:85:60:57:66:6f:6f: 33:97:a4:a3:05:32:e8:4b:87:7e:c5:ad:1f:0a:5c:cb:a5:3f: ac:4e:b6:41:a3:2a:f6:6e:b7:3a:56:fe:95:0f:62:3a:21:c9: 69:4c:f9:cc:f0:2a:70:5c:08:cf:7d:4d:08:72:d3:dd:90:2b: d3:e2:9b:c2:28:dd:1e:5d:0d:86:b1:94:2e:ad:74:28:1a:01: 7c:5a:98:44:99:ac:87:ea:67:65:d4:33:72:d4:38:bb:fe:bf: 18:cf:04:b2:e0:36:33:de:2e:b6:24:62:80:16:12:40:c8:b5: cb:c5:7f:c9:60:59:23:49:a0:cb:1c:19:f4:bd:9b:97:bd:1a: 47:de:ff:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YyNDExMTAvBgNVBAUTKDI5Q0Q4REY4ODA2RTExNjc0Q0JDNUY5REY0REJGOEQy M0UwQzIyODMwHhcNMjUwNTA5MDQ1NDU5WhcNMjUwNTE2MDQ1NDU5WjAYMRYwFAYD VQQDEw02ODFkOGFhMy1lMGVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtkBfBd/7HpygMRkQhtTitwKUOnkoNbxswzSEGrukvcV7W9Tf8vZaVd0Kh2iV pXur3PFdnX/95LjrIOACU03uxZv8XpefsHng/gN1WEAErPeoh2SNU6MnoT2yP2H7 mzvfppxYljrP1/sLJPiAZwb3o/7gUQ9FjxCBQI0ckIwNy2zN5x4DZg90Q5lesYFh 1tNiKX3ZDO6Qx5gkeR01rvTUENVff7jaeC57yskI5vZGNbEDX5WwqRwhSWbaCqkf 2kNltxhF758K30zDPfGiQuuTkT+g7sbh5/VKp1B71gM7iCMFwrqXsgmBu0dwvKq2 Cb9lT7yQo9Gmej/38sM4Eu1TzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAoS6crl pz/W+HyMM20qmeuuUaJoMB8GA1UdIwQYMBaAFCnNjfiAbhFnTLxfnfTb+NI+DCKD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjI0MS9FQjIxMzY4ODBC RjYxMUVGOUNBOUMxNTFDNEY5QUUwMi9LYzJOLUlCdUVXZE12Ri1kOU52NDBqNE1J b00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tjMk4tSUJ1RVdkTXZGLWQ5TnY0MGo0TUlvTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjI0MS9FQjIxMzY4ODBCRjYxMUVGOUNBOUMxNTFDNEY5QUUwMi9LYzJOLUlCdUVX ZE12Ri1kOU52NDBqNE1Jb00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAk5/qwMnJnBrXtlQ7S1R86v9wgv3zGZRgqaTYl5petrIudeqxOVOLA JwIePNnEmw2RCcVIqUPuwGGlUdXl1iuJGw9Ulm3Kseq3v85xt1RXR1cj9bWkisrq MAGjkPdlVYVABLKK4geFJAgE9JQUaoOMNeVAv9gHpwOFYFdmb28zl6SjBTLoS4d+ xa0fClzLpT+sTrZBoyr2brc6Vv6VD2I6IclpTPnM8CpwXAjPfU0IctPdkCvT4pvC KN0eXQ2GsZQurXQoGgF8WphEmayH6mdl1DNy1Di7/r8YzwSy4DYz3i62JGKAFhJA yLXLxX/JYFkjSaDLHBn0vZuXvRpH3v8+ -----END CERTIFICATE-----Generated at Sun May 11 03:42:19 2025 by rpki-client