$ rpki-client -vvf rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.mft File: Klc5bc5w61bAc94adgtipyKwR44.mft (raw, json) Hash identifier: IuSWsdmFCYQCtFaHHUsxlJ+239Lbn7Hr/DahJffJaak= Subject key identifier: 01:6B:65:50:00:C4:D5:8A:A9:5C:C6:67:A2:0B:27:DC:C8:B8:F2:6F Authority key identifier: 2A:57:39:6D:CE:70:EB:56:C0:73:DE:1A:76:0B:62:A7:22:B0:47:8E Certificate issuer: /CN=A9193B94/serialNumber=2A57396DCE70EB56C073DE1A760B62A722B0478E Certificate serial: 4D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Klc5bc5w61bAc94adgtipyKwR44.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.mft Manifest number: 4C Signing time: Sun 11 May 2025 06:04:51 +0000 Manifest this update: Sun 11 May 2025 06:04:51 +0000 Manifest next update: Sun 18 May 2025 06:04:51 +0000 Files and hashes: 1: Klc5bc5w61bAc94adgtipyKwR44.crl (hash: STqZKzPnP4SgmeCs56zDfhdoSbiUv7J5XWGBwls4HUA=) 2: 329C17E6BCDA11EFA2D81814C4F9AE02.roa (hash: oBdfX7J4SfTWAha0J5te4TT+MMNp1UK2JxnYA8w+Btw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.crl rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Klc5bc5w61bAc94adgtipyKwR44.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 06:04:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77 (0x4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193B94, serialNumber=2A57396DCE70EB56C073DE1A760B62A722B0478E Validity Not Before: May 11 06:04:51 2025 GMT Not After : May 18 06:04:51 2025 GMT Subject: CN=68203e03-ca36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:2f:04:bd:cc:8f:fb:e6:b6:6f:e3:5b:61:84: de:7d:10:87:b7:3d:e6:1a:41:5f:be:8d:3e:8c:bd: af:61:aa:8b:42:17:94:89:eb:08:89:7c:b3:a2:96: cc:a5:f0:df:ba:70:29:55:9b:20:f4:c3:27:11:20: 1c:61:80:d0:2d:51:fa:17:5c:17:37:f6:f2:d8:7f: 8e:4d:aa:ce:ce:61:d7:7c:9d:79:42:da:77:7a:16: f7:c3:e7:fd:09:b5:9e:10:ef:a6:7b:d8:c7:f9:cc: 95:20:67:14:c3:07:4c:37:a9:3a:ef:cf:af:54:aa: 4a:eb:78:53:78:98:54:06:4f:9b:eb:11:23:0f:ee: ed:d5:b3:10:f5:cd:20:11:1b:63:22:4d:d1:de:f1: 4e:ea:15:ad:c6:82:c1:1e:85:85:5b:9b:e7:ae:2b: 2f:ae:31:18:61:22:8c:ff:ae:d1:cf:98:a2:82:c7: ed:7c:ab:7d:df:10:88:28:c3:cb:3b:c0:57:cd:13: 20:da:3f:7b:d7:9a:e5:75:87:8d:56:42:d9:71:3e: bc:96:c3:2d:f0:c1:6a:75:f5:ef:25:20:a1:05:f4: f4:39:5f:ed:c1:05:19:87:1c:2e:3d:65:d9:48:d7: bf:d3:04:a9:5c:08:10:4c:dd:1f:ea:3f:4e:e7:97: 7a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:6B:65:50:00:C4:D5:8A:A9:5C:C6:67:A2:0B:27:DC:C8:B8:F2:6F X509v3 Authority Key Identifier: keyid:2A:57:39:6D:CE:70:EB:56:C0:73:DE:1A:76:0B:62:A7:22:B0:47:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Klc5bc5w61bAc94adgtipyKwR44.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:1e:43:8f:83:fd:1b:0f:c0:0b:99:d0:f9:c9:f2:67:2c:ec: 78:33:34:d5:72:52:c8:90:ff:72:b3:8b:7e:1c:22:43:27:cf: 51:ed:16:c6:35:8a:8c:06:24:84:d5:7b:16:2c:8a:ec:a3:93: b2:ab:3f:e1:c5:5d:9d:c3:78:55:91:00:aa:01:21:cc:10:12: db:ef:99:47:8c:33:3c:1d:a8:ea:91:9a:69:7b:1c:5b:c9:03: 50:59:6a:ba:70:14:1d:22:27:89:19:aa:65:61:3c:d7:7b:f7: d7:32:9d:c3:ae:f4:d3:65:c1:4d:61:62:4f:a0:05:e9:df:f2: a1:b7:17:97:fd:20:80:ee:ea:ef:5f:3f:1e:be:ce:f0:db:fa: 26:b5:9b:ae:7e:d2:b2:a1:fb:2f:40:7b:d4:78:fc:10:9b:24: f7:a1:01:d4:58:ef:ca:9a:f2:e3:88:61:5a:bc:a3:15:b1:36: 62:1b:f8:aa:c6:81:8a:cf:bd:d8:17:9f:40:14:ea:b1:46:20: 44:9e:b2:1d:d1:32:aa:12:8f:30:1b:73:17:f1:61:8e:ac:24: c1:16:fe:b6:54:5f:4c:41:de:c6:dd:5d:5a:19:9a:9f:5e:3d: 6e:44:b5:91:ec:19:78:de:cd:fa:1f:46:7f:12:76:4d:42:ba: b5:91:b4:12 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 M0I5NDExMC8GA1UEBRMoMkE1NzM5NkRDRTcwRUI1NkMwNzNERTFBNzYwQjYyQTcy MkIwNDc4RTAeFw0yNTA1MTEwNjA0NTFaFw0yNTA1MTgwNjA0NTFaMBgxFjAUBgNV BAMTDTY4MjAzZTAzLWNhMzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDyLwS9zI/75rZv41thhN59EIe3PeYaQV++jT6Mva9hqotCF5SJ6wiJfLOilsyl 8N+6cClVmyD0wycRIBxhgNAtUfoXXBc39vLYf45Nqs7OYdd8nXlC2nd6FvfD5/0J tZ4Q76Z72Mf5zJUgZxTDB0w3qTrvz69UqkrreFN4mFQGT5vrESMP7u3VsxD1zSAR G2MiTdHe8U7qFa3GgsEehYVbm+euKy+uMRhhIoz/rtHPmKKCx+18q33fEIgow8s7 wFfNEyDaP3vXmuV1h41WQtlxPryWwy3wwWp19e8lIKEF9PQ5X+3BBRmHHC49ZdlI 17/TBKlcCBBM3R/qP07nl3pLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUAWtlUADE 1YqpXMZnogsn3Mi48m8wHwYDVR0jBBgwFoAUKlc5bc5w61bAc94adgtipyKwR44w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkzQjk0L0FGNDFCRDEwQkNE OTExRUY5MkFCMzMxM0M0RjlBRTAyL0tsYzViYzV3NjFiQWM5NGFkZ3RpcHlLd1I0 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvS2xjNWJjNXc2MWJBYzk0YWRndGlweUt3UjQ0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkz Qjk0L0FGNDFCRDEwQkNEOTExRUY5MkFCMzMxM0M0RjlBRTAyL0tsYzViYzV3NjFi QWM5NGFkZ3RpcHlLd1I0NC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACMeQ4+D/RsPwAuZ0PnJ8mcs7HgzNNVyUsiQ/3Kzi34cIkMnz1HtFsY1 iowGJITVexYsiuyjk7KrP+HFXZ3DeFWRAKoBIcwQEtvvmUeMMzwdqOqRmml7HFvJ A1BZarpwFB0iJ4kZqmVhPNd799cyncOu9NNlwU1hYk+gBenf8qG3F5f9IIDu6u9f Px6+zvDb+ia1m65+0rKh+y9Ae9R4/BCbJPehAdRY78qa8uOIYVq8oxWxNmIb+KrG gYrPvdgXn0AU6rFGIESesh3RMqoSjzAbcxfxYY6sJMEW/rZUX0xB3sbdXVoZmp9e PW5EtZHsGXjezfofRn8Sdk1CurWRtBI= -----END CERTIFICATE-----Generated at Tue May 13 00:09:35 2025 by rpki-client