$ rpki-client -vvf rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.mft File: kJUWWXx2-jz_qxUgjArpiGY0qgM.mft (raw, json) Hash identifier: OtttP4isqq9D0qNImYcjpBftmrVpopJ5HqEZvGoazIE= Subject key identifier: 34:3D:C8:D2:2F:D2:51:D3:F7:4A:C3:1B:30:9E:C8:90:BE:9D:5E:4B Authority key identifier: 90:95:16:59:7C:76:FA:3C:FF:AB:15:20:8C:0A:E9:88:66:34:AA:03 Certificate issuer: /CN=A91847A2/serialNumber=909516597C76FA3CFFAB15208C0AE9886634AA03 Certificate serial: 0AA1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kJUWWXx2-jz_qxUgjArpiGY0qgM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.mft Manifest number: 0A99 Signing time: Mon 12 May 2025 19:26:38 +0000 Manifest this update: Mon 12 May 2025 19:26:38 +0000 Manifest next update: Mon 19 May 2025 19:26:38 +0000 Files and hashes: 1: kJUWWXx2-jz_qxUgjArpiGY0qgM.crl (hash: bKnSwAkMj9HznSloYRo7QVJO9hqK0xGznIYjg3OuRcc=) 2: 54EDB8542E1811EBB4E80B1FC4F9AE02.roa (hash: 3V95dG8EwbjGC7EMndTVlVAHQWvt90W2HKQwUZ++P/E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.crl rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kJUWWXx2-jz_qxUgjArpiGY0qgM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:06:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2721 (0xaa1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91847A2, serialNumber=909516597C76FA3CFFAB15208C0AE9886634AA03 Validity Not Before: May 12 19:26:38 2025 GMT Not After : May 19 19:26:38 2025 GMT Subject: CN=68224b6e-ab2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:7e:50:9e:e9:d4:48:14:31:97:3a:de:0b:a9: 68:de:8f:62:28:ba:3f:c4:74:83:34:92:49:11:01: a1:06:f3:64:5e:ba:64:72:fa:e1:0b:10:c6:a2:d0: a9:0e:d9:f8:92:46:50:14:4a:30:41:b3:db:37:8d: d2:fe:9b:1a:3c:fa:a7:cc:f4:2b:c0:c3:80:a1:0a: ba:08:d7:11:70:6c:cd:f6:ab:9e:f1:3a:b1:c5:6c: 16:1a:78:e1:2c:4c:9e:34:28:af:00:81:a4:50:7b: d3:34:2d:41:18:a4:0b:17:05:b6:93:c7:0e:02:f5: 64:5c:d7:9b:6a:b8:df:72:c9:62:74:b0:a1:25:87: 48:f3:26:eb:45:2d:ac:45:03:b2:b1:64:62:e2:78: 04:9c:1d:72:27:8f:52:2f:9f:02:41:ea:c3:5e:be: 09:54:14:55:c7:30:25:68:dc:f4:68:d3:b7:fe:0c: b4:0d:80:45:87:c2:39:c1:a6:11:d0:49:ae:1a:a5: e5:2d:63:a8:b7:dc:a1:da:f0:ce:b4:0e:6a:92:cc: 6f:52:d9:5e:f6:ca:46:6d:7f:fc:9b:74:e1:b9:bc: 78:a9:db:9f:1e:c7:2f:26:cd:a1:84:7a:86:90:45: be:b8:fb:5a:6f:f8:8f:ac:06:12:83:d8:48:66:ca: 1b:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:3D:C8:D2:2F:D2:51:D3:F7:4A:C3:1B:30:9E:C8:90:BE:9D:5E:4B X509v3 Authority Key Identifier: keyid:90:95:16:59:7C:76:FA:3C:FF:AB:15:20:8C:0A:E9:88:66:34:AA:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kJUWWXx2-jz_qxUgjArpiGY0qgM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:d3:1c:54:50:03:30:0c:ff:95:75:10:6e:42:5b:f0:5f:2d: ab:92:aa:82:36:a2:80:c0:c9:55:21:c4:52:af:42:97:e2:97: 58:23:7f:6d:33:e5:13:b9:39:53:41:68:d5:49:f3:53:f8:da: 59:f9:de:6c:88:55:62:23:b7:24:f1:31:3f:99:7e:cc:9b:e4: 12:6f:52:67:68:09:c7:c5:9d:59:e2:ea:9a:a5:4b:ab:aa:a1: f8:21:83:25:aa:c1:af:aa:aa:82:87:ca:80:36:30:af:25:1a: 93:24:3c:c0:92:2c:4a:94:0d:e5:14:fe:dd:fd:20:5b:fb:ed: 7f:7d:c9:d1:98:80:f4:97:8d:9d:98:4c:ac:ff:46:a5:c2:27: 95:06:7e:f6:3e:b1:b8:93:b0:f5:7f:e3:f1:5a:e5:0b:33:b6: 69:92:13:f8:0d:7b:3b:ec:76:02:8b:33:28:92:e3:25:93:1e: 69:df:01:65:ca:5f:ef:9b:d3:c0:0a:7c:12:a8:ed:e7:52:67: 8b:14:cc:5a:be:ff:6d:de:0f:bc:05:ae:eb:b5:4a:65:66:e7: 72:8a:e4:fd:7c:b5:cb:f4:17:e7:5e:a5:86:a0:73:90:aa:f9: 8f:50:b7:a4:55:80:03:82:68:92:c4:dc:d0:22:58:4b:33:54: be:0b:51:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCqEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ3QTIxMTAvBgNVBAUTKDkwOTUxNjU5N0M3NkZBM0NGRkFCMTUyMDhDMEFFOTg4 NjYzNEFBMDMwHhcNMjUwNTEyMTkyNjM4WhcNMjUwNTE5MTkyNjM4WjAYMRYwFAYD VQQDEw02ODIyNGI2ZS1hYjJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7n5QnunUSBQxlzreC6lo3o9iKLo/xHSDNJJJEQGhBvNkXrpkcvrhCxDGotCp Dtn4kkZQFEowQbPbN43S/psaPPqnzPQrwMOAoQq6CNcRcGzN9que8TqxxWwWGnjh LEyeNCivAIGkUHvTNC1BGKQLFwW2k8cOAvVkXNebarjfcslidLChJYdI8ybrRS2s RQOysWRi4ngEnB1yJ49SL58CQerDXr4JVBRVxzAlaNz0aNO3/gy0DYBFh8I5waYR 0EmuGqXlLWOot9yh2vDOtA5qksxvUtle9spGbX/8m3Thubx4qdufHscvJs2hhHqG kEW+uPtab/iPrAYSg9hIZsobdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDQ9yNIv 0lHT90rDGzCeyJC+nV5LMB8GA1UdIwQYMBaAFJCVFll8dvo8/6sVIIwK6YhmNKoD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDdBMi9BRUQzRDM1RTU5 NDIxMUVBOTM2RkNFNDNDNEY5QUUwMi9rSlVXV1h4Mi1qel9xeFVnakFycGlHWTBx Z00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2tKVVdXWHgyLWp6X3F4VWdqQXJwaUdZMHFnTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDdBMi9BRUQzRDM1RTU5NDIxMUVBOTM2RkNFNDNDNEY5QUUwMi9rSlVXV1h4Mi1q el9xeFVnakFycGlHWTBxZ00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAr0xxUUAMwDP+VdRBuQlvwXy2rkqqCNqKAwMlVIcRSr0KX4pdYI39t M+UTuTlTQWjVSfNT+NpZ+d5siFViI7ck8TE/mX7Mm+QSb1JnaAnHxZ1Z4uqapUur qqH4IYMlqsGvqqqCh8qANjCvJRqTJDzAkixKlA3lFP7d/SBb++1/fcnRmID0l42d mEys/0alwieVBn72PrG4k7D1f+PxWuULM7ZpkhP4DXs77HYCizMokuMlkx5p3wFl yl/vm9PACnwSqO3nUmeLFMxavv9t3g+8Ba7rtUplZudyiuT9fLXL9BfnXqWGoHOQ qvmPULekVYADgmiSxNzQIlhLM1S+C1FR -----END CERTIFICATE-----Generated at Mon May 12 21:36:08 2025 by rpki-client