$ rpki-client -vvf rpki.apnic.net/member_repository/A9192E6F/62EB1DFE26B811EC9F205B1EC4F9AE02/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.mft File: k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.mft (raw, json) Hash identifier: yOStFH3VXb2tbmVpeABZI9oBg3/A2pAnJXocTf+SOJo= Subject key identifier: 38:6E:C9:7E:BA:AF:EF:B4:DB:2B:D8:D8:FE:0B:F5:D2:40:57:56:3E Authority key identifier: 93:F4:9D:D3:ED:C9:D5:92:71:AF:E1:31:3C:92:1D:E6:6C:22:20:64 Certificate issuer: /CN=A9192E6F/serialNumber=93F49DD3EDC9D59271AFE1313C921DE66C222064 Certificate serial: 04BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192E6F/62EB1DFE26B811EC9F205B1EC4F9AE02/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.mft Manifest number: 04B7 Signing time: Sun 04 May 2025 23:29:52 +0000 Manifest this update: Sun 04 May 2025 23:29:52 +0000 Manifest next update: Sun 11 May 2025 23:29:52 +0000 Files and hashes: 1: k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.crl (hash: Os66Xq0TzEhzxIRZUNoFGL460ODNWez0ULamtradkkE=) 2: 1443F7BA200411EE84DAD06BC4F9AE02.roa (hash: zLQo77q+5IMP6DcnXVEpDBCRchvfQ2yuvBtuKyjQHYY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192E6F/62EB1DFE26B811EC9F205B1EC4F9AE02/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.crl rsync://rpki.apnic.net/member_repository/A9192E6F/62EB1DFE26B811EC9F205B1EC4F9AE02/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 23:29:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1212 (0x4bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192E6F, serialNumber=93F49DD3EDC9D59271AFE1313C921DE66C222064 Validity Not Before: May 4 23:29:52 2025 GMT Not After : May 11 23:29:52 2025 GMT Subject: CN=6817f870-6a42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:fb:41:6d:4c:5a:03:92:46:d3:92:f8:3b:ed: 02:a6:8b:17:9c:9e:9a:52:e7:fa:ef:14:43:d4:01: 6f:fc:a9:b4:f0:ea:6d:4b:10:b1:4a:0c:30:7c:f1: d4:eb:a1:77:38:0b:a8:74:26:9d:33:30:d9:b7:c8: 64:6a:d7:e7:fa:02:a7:88:aa:2c:82:cf:03:d4:c0: 28:e7:8a:39:d0:82:44:6c:61:16:6c:8d:dd:c1:9e: 03:cd:13:94:a3:31:7d:18:93:29:1d:e7:1c:bb:d8: 71:8f:cd:72:54:f2:e8:ee:3c:5f:5f:f3:6f:2e:7c: 90:63:77:e5:9e:8a:ad:45:aa:16:37:4a:f4:c2:b2: 74:39:24:28:3f:41:cf:d5:1b:a9:d2:40:50:8e:1e: 76:7e:a4:2c:37:e0:aa:9d:00:ea:15:a5:51:f9:f6: 3f:eb:e7:83:2f:9e:fc:7a:6b:80:82:fe:19:f0:8a: 10:3f:78:3f:3a:54:d4:55:64:93:aa:a4:bc:5b:25: 9e:b3:69:7b:8c:7c:89:57:56:d0:bc:04:3f:7a:db: a9:1f:8e:3a:55:8d:7a:b4:5e:29:be:c8:24:64:79: d8:f6:64:12:a5:ad:af:c5:9f:e0:69:21:ac:12:f5: 18:da:89:e2:35:85:19:2b:6d:b0:00:49:5e:8e:e7: b6:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:6E:C9:7E:BA:AF:EF:B4:DB:2B:D8:D8:FE:0B:F5:D2:40:57:56:3E X509v3 Authority Key Identifier: keyid:93:F4:9D:D3:ED:C9:D5:92:71:AF:E1:31:3C:92:1D:E6:6C:22:20:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192E6F/62EB1DFE26B811EC9F205B1EC4F9AE02/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192E6F/62EB1DFE26B811EC9F205B1EC4F9AE02/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:7b:ac:ee:0d:10:cd:0f:12:09:34:5e:75:45:6f:5f:58:ec: 54:86:90:4e:18:09:67:ff:45:70:a9:33:98:d4:05:75:81:0a: df:04:65:6a:da:6b:61:c4:1b:8d:c4:94:1d:a7:e8:94:d4:85: a4:42:ce:c1:e4:66:69:79:a6:50:65:5c:20:98:40:53:4e:c3: 1e:f5:d7:7c:0e:03:11:bf:c1:b8:f0:1f:fa:42:b4:4a:33:2d: db:38:d5:8d:c5:53:64:b7:40:68:e8:4c:46:51:c6:20:f7:e2: da:4c:ff:8a:98:1a:a4:6d:a6:5d:85:19:0b:be:9a:7c:a6:3a: 4f:bb:38:69:27:bc:97:23:29:3d:02:bc:76:9d:82:11:82:a5: 63:92:a1:63:a3:c9:2f:e8:af:80:45:80:f1:f9:1e:48:37:1b: ca:07:e4:1d:49:b3:1c:65:a2:27:b4:8f:3f:23:ca:71:ba:81: 8c:80:38:85:15:17:ce:9a:c1:9b:1a:3a:65:da:a4:0c:80:4b: 0e:74:21:31:20:22:b5:27:8c:30:ef:65:f6:6e:63:4d:b2:9b: d0:dd:70:96:92:50:98:d1:56:04:d5:38:8c:cb:be:32:b5:61: 9d:c3:f5:8a:4a:f8:7c:6c:0a:80:52:42:ca:13:35:16:b8:bb: 69:d7:e2:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJFNkYxMTAvBgNVBAUTKDkzRjQ5REQzRURDOUQ1OTI3MUFGRTEzMTNDOTIxREU2 NkMyMjIwNjQwHhcNMjUwNTA0MjMyOTUyWhcNMjUwNTExMjMyOTUyWjAYMRYwFAYD VQQDEw02ODE3Zjg3MC02YTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqPtBbUxaA5JG05L4O+0CposXnJ6aUuf67xRD1AFv/Km08OptSxCxSgwwfPHU 66F3OAuodCadMzDZt8hkatfn+gKniKosgs8D1MAo54o50IJEbGEWbI3dwZ4DzROU ozF9GJMpHeccu9hxj81yVPLo7jxfX/NvLnyQY3flnoqtRaoWN0r0wrJ0OSQoP0HP 1Rup0kBQjh52fqQsN+CqnQDqFaVR+fY/6+eDL578emuAgv4Z8IoQP3g/OlTUVWST qqS8WyWes2l7jHyJV1bQvAQ/etupH446VY16tF4pvsgkZHnY9mQSpa2vxZ/gaSGs EvUY2oniNYUZK22wAElejue2uQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDhuyX66 r++02yvY2P4L9dJAV1Y+MB8GA1UdIwQYMBaAFJP0ndPtydWSca/hMTySHeZsIiBk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkU2Ri82MkVCMURGRTI2 QjgxMUVDOUYyMDVCMUVDNEY5QUUwMi9rX1NkMC0zSjFaSnhyLUV4UEpJZDVtd2lJ R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tfU2QwLTNKMVpKeHItRXhQSklkNW13aUlHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MkU2Ri82MkVCMURGRTI2QjgxMUVDOUYyMDVCMUVDNEY5QUUwMi9rX1NkMC0zSjFa SnhyLUV4UEpJZDVtd2lJR1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDIe6zuDRDNDxIJNF51RW9fWOxUhpBOGAln/0VwqTOY1AV1gQrfBGVq 2mthxBuNxJQdp+iU1IWkQs7B5GZpeaZQZVwgmEBTTsMe9dd8DgMRv8G48B/6QrRK My3bONWNxVNkt0Bo6ExGUcYg9+LaTP+KmBqkbaZdhRkLvpp8pjpPuzhpJ7yXIyk9 Arx2nYIRgqVjkqFjo8kv6K+ARYDx+R5INxvKB+QdSbMcZaIntI8/I8pxuoGMgDiF FRfOmsGbGjpl2qQMgEsOdCExICK1J4ww72X2bmNNspvQ3XCWklCY0VYE1TiMy74y tWGdw/WKSvh8bAqAUkLKEzUWuLtp1+KS -----END CERTIFICATE-----Generated at Mon May 5 10:17:13 2025 by rpki-client