$ rpki-client -vvf rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/KJYksuALd009OQ9aCtELW8NfVtg.mft File: KJYksuALd009OQ9aCtELW8NfVtg.mft (raw, json) Hash identifier: jzqVKWuB9245SnNfAWKquE/SndtJ9y9ubM/vDo0En44= Subject key identifier: 33:48:1B:43:61:AA:38:7A:42:6B:A6:6D:DE:97:31:57:CA:44:F6:4A Authority key identifier: 28:96:24:B2:E0:0B:77:4D:3D:39:0F:5A:0A:D1:0B:5B:C3:5F:56:D8 Certificate issuer: /CN=A918748C/serialNumber=289624B2E00B774D3D390F5A0AD10B5BC35F56D8 Certificate serial: 0A74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJYksuALd009OQ9aCtELW8NfVtg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/KJYksuALd009OQ9aCtELW8NfVtg.mft Manifest number: 0A5A Signing time: Sat 10 May 2025 19:26:00 +0000 Manifest this update: Sat 10 May 2025 19:25:59 +0000 Manifest next update: Sat 17 May 2025 19:25:59 +0000 Files and hashes: 1: KJYksuALd009OQ9aCtELW8NfVtg.crl (hash: FIiv9cVzHla27BPJHMjWeZObL5pteYkxzpulIRRKxXQ=) 2: DCE066622C7811EC97C8D979C4F9AE02.roa (hash: DeSX5mR90qF9IRdX2EyXW+cFduwBwR++LaECrmC9RqI=) 3: DE137C362C7811EC97C8D979C4F9AE02.roa (hash: 1JrXRKrsJBaJ+/4+ml3Sz+iqG9fcskoIvUEpTyCTJxA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/KJYksuALd009OQ9aCtELW8NfVtg.crl rsync://rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/KJYksuALd009OQ9aCtELW8NfVtg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJYksuALd009OQ9aCtELW8NfVtg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 19:25:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2676 (0xa74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918748C, serialNumber=289624B2E00B774D3D390F5A0AD10B5BC35F56D8 Validity Not Before: May 10 19:25:59 2025 GMT Not After : May 17 19:25:59 2025 GMT Subject: CN=681fa847-7a7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ea:cf:be:65:bd:ad:25:c8:3c:29:4e:e1:5a: ac:9b:b0:72:f1:43:20:e1:93:84:32:e6:ec:65:34: c2:28:71:5d:bd:a8:73:2b:64:13:b3:66:ce:6d:82: 2d:a6:3c:09:02:a7:db:70:a1:9a:ff:1d:fd:01:ca: 86:00:c8:a3:96:db:b4:f1:6e:cb:93:d7:7c:70:f9: 1b:15:53:d1:6d:07:98:1c:e8:dd:c7:19:04:fb:9b: 62:e2:d5:ec:86:19:ed:f2:ad:86:54:50:aa:b1:82: 9e:c3:2f:b9:dc:be:74:e5:a4:da:7d:e5:d6:60:36: 5f:12:62:4f:1c:56:08:39:42:4e:ef:44:5e:06:8b: 46:b4:a1:9e:05:81:27:03:f9:8d:0e:bb:76:f2:18: 8e:61:35:da:1b:25:12:5e:d3:61:2a:ad:03:8f:21: 8e:ba:44:a0:fb:33:9b:d1:37:87:52:dc:99:4a:2c: b4:69:cd:55:6b:9f:69:e6:1e:92:c6:3e:0d:6e:2d: 18:58:0a:c7:e4:a0:21:2e:7a:ce:79:5b:6d:8a:51: 9d:7e:5f:d2:80:31:1f:22:63:88:8c:4b:37:0c:f3: 38:e2:8d:a0:05:69:f4:d6:52:98:1a:cc:52:98:d7: 5e:ab:60:7e:a6:20:f0:90:d8:f9:a9:dd:99:b8:46: ce:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:48:1B:43:61:AA:38:7A:42:6B:A6:6D:DE:97:31:57:CA:44:F6:4A X509v3 Authority Key Identifier: keyid:28:96:24:B2:E0:0B:77:4D:3D:39:0F:5A:0A:D1:0B:5B:C3:5F:56:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/KJYksuALd009OQ9aCtELW8NfVtg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJYksuALd009OQ9aCtELW8NfVtg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/KJYksuALd009OQ9aCtELW8NfVtg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:24:5a:7a:32:c8:1f:99:e9:6c:a7:f7:2d:5a:9d:40:2a:4e: 20:27:ce:4d:c0:3e:a8:4c:3c:f1:7c:6a:db:31:db:7c:66:ab: d0:8d:9a:e6:3a:fd:8e:bb:79:92:65:f0:26:aa:e3:68:c3:d7: f8:a9:56:ec:a3:ad:f9:37:d3:b2:74:ca:dd:b7:a2:2c:18:78: 4a:e7:e4:ae:9e:ad:8d:88:b1:5d:4c:ed:17:96:fa:90:b0:78: 49:3b:bb:c3:e3:6b:b1:9f:a4:5e:22:ae:08:f5:a0:a1:4b:bc: e6:55:e4:84:49:2e:15:e2:97:00:2d:3a:1a:0f:75:37:01:24: f7:ef:35:a5:3a:a1:35:78:ea:6f:8a:80:63:1b:c7:8f:54:fa: e1:ce:47:09:70:5c:6a:19:3d:22:c3:73:b5:94:40:61:df:a7: 99:26:93:3f:72:86:f3:ac:99:27:8f:38:9f:a6:77:c4:74:ae: 12:9b:86:24:0a:43:f6:b8:8e:cc:9f:25:b5:f9:11:c5:cd:5d: 2c:6f:55:4f:4e:e3:72:03:38:0c:fd:1a:a2:89:44:0a:e7:09: 6c:f6:df:6b:8e:02:77:8e:b9:0b:46:8d:1b:35:c7:d5:a7:40: df:fc:c4:db:a9:4e:19:e1:32:4b:6b:10:aa:4b:61:2a:f5:c9: f1:08:10:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCnQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc0OEMxMTAvBgNVBAUTKDI4OTYyNEIyRTAwQjc3NEQzRDM5MEY1QTBBRDEwQjVC QzM1RjU2RDgwHhcNMjUwNTEwMTkyNTU5WhcNMjUwNTE3MTkyNTU5WjAYMRYwFAYD VQQDEw02ODFmYTg0Ny03YTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxurPvmW9rSXIPClO4Vqsm7By8UMg4ZOEMubsZTTCKHFdvahzK2QTs2bObYIt pjwJAqfbcKGa/x39AcqGAMijltu08W7Lk9d8cPkbFVPRbQeYHOjdxxkE+5ti4tXs hhnt8q2GVFCqsYKewy+53L505aTafeXWYDZfEmJPHFYIOUJO70ReBotGtKGeBYEn A/mNDrt28hiOYTXaGyUSXtNhKq0DjyGOukSg+zOb0TeHUtyZSiy0ac1Va59p5h6S xj4Nbi0YWArH5KAhLnrOeVttilGdfl/SgDEfImOIjEs3DPM44o2gBWn01lKYGsxS mNdeq2B+piDwkNj5qd2ZuEbOrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDNIG0Nh qjh6Qmumbd6XMVfKRPZKMB8GA1UdIwQYMBaAFCiWJLLgC3dNPTkPWgrRC1vDX1bY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzQ4Qy9BNzREQTc3MjY0 QjQxMUVBQjM4QTM0MERDNEY5QUUwMi9LSllrc3VBTGQwMDlPUTlhQ3RFTFc4TmZW dGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tKWWtzdUFMZDAwOU9ROWFDdEVMVzhOZlZ0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzQ4Qy9BNzREQTc3MjY0QjQxMUVBQjM4QTM0MERDNEY5QUUwMi9LSllrc3VBTGQw MDlPUTlhQ3RFTFc4TmZWdGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOJFp6Msgfmelsp/ctWp1AKk4gJ85NwD6oTDzxfGrbMdt8ZqvQjZrm Ov2Ou3mSZfAmquNow9f4qVbso635N9OydMrdt6IsGHhK5+Sunq2NiLFdTO0XlvqQ sHhJO7vD42uxn6ReIq4I9aChS7zmVeSESS4V4pcALToaD3U3AST37zWlOqE1eOpv ioBjG8ePVPrhzkcJcFxqGT0iw3O1lEBh36eZJpM/cobzrJknjzifpnfEdK4Sm4Yk CkP2uI7MnyW1+RHFzV0sb1VPTuNyAzgM/RqiiUQK5wls9t9rjgJ3jrkLRo0bNcfV p0Df/MTbqU4Z4TJLaxCqS2Eq9cnxCBDg -----END CERTIFICATE-----Generated at Sun May 11 15:57:01 2025 by rpki-client