$ rpki-client -vvf rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.mft File: kyJx_Edfot2dkzESKwelKNOPjv0.mft (raw, json) Hash identifier: qSNfvtb5nKPq+NR6jvMw77zpJ+b8b1PVojfW4nHgV+o= Subject key identifier: 0A:E6:53:39:0B:89:40:0A:95:19:2C:A2:15:09:CD:EA:82:CA:E8:E2 Authority key identifier: 93:22:71:FC:47:5F:A2:DD:9D:93:31:12:2B:07:A5:28:D3:8F:8E:FD Certificate issuer: /CN=A91983BD/serialNumber=932271FC475FA2DD9D9331122B07A528D38F8EFD Certificate serial: 042C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyJx_Edfot2dkzESKwelKNOPjv0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.mft Manifest number: 38A7 Signing time: Sat 10 May 2025 14:35:44 +0000 Manifest this update: Sat 10 May 2025 14:35:44 +0000 Manifest next update: Sat 17 May 2025 14:35:44 +0000 Files and hashes: 1: kyJx_Edfot2dkzESKwelKNOPjv0.crl (hash: U4u57QRhndu1dF7i+mH/GY2KZ3j+R8g4niJGn6svsFU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.crl rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyJx_Edfot2dkzESKwelKNOPjv0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 14:35:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1068 (0x42c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91983BD, serialNumber=932271FC475FA2DD9D9331122B07A528D38F8EFD Validity Not Before: May 10 14:35:44 2025 GMT Not After : May 17 14:35:44 2025 GMT Subject: CN=681f6440-0ce5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a7:f2:86:d4:9b:b8:06:70:4c:91:6a:d4:b2: fe:79:9b:1a:69:f7:3e:92:87:f6:74:83:86:f8:ce: 88:2c:a0:39:b9:1c:d7:c9:f5:33:c7:01:50:57:00: 0d:d5:e7:d3:f9:e0:5c:30:62:a5:a8:f7:9a:b3:25: 84:48:e7:a5:f7:36:b2:da:97:4d:0e:45:92:ff:28: cc:a1:72:0c:d4:ef:90:e1:f4:7f:9a:51:a5:73:93: c2:5e:37:0b:c3:95:bd:7c:ff:91:cd:38:50:9f:a2: 9e:43:2f:34:ec:d9:a3:bc:ce:3c:f1:99:b4:a4:bc: cf:a5:ec:3e:e2:44:91:d3:b4:37:0c:46:57:1b:36: a8:73:a8:d2:5d:60:62:6a:9d:ac:54:1e:61:0a:82: 64:f2:23:bc:eb:d3:1b:91:05:1e:a9:8a:fb:55:df: 32:30:db:df:07:5d:f0:63:e0:69:e0:5c:a7:19:a6: 9f:76:1f:c2:94:bf:4e:03:3a:77:f8:30:1a:4b:62: 6e:88:07:d0:6f:63:d3:fe:4d:4b:8f:f1:22:0d:c2: 2d:0c:94:63:66:c0:5e:5a:4f:91:05:d0:a0:ef:a3: 3a:ea:66:c7:10:35:bf:08:bb:c5:76:f7:94:f3:c0: 7c:94:0b:c1:d4:46:f8:74:c4:82:b8:67:3e:85:09: c3:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:E6:53:39:0B:89:40:0A:95:19:2C:A2:15:09:CD:EA:82:CA:E8:E2 X509v3 Authority Key Identifier: keyid:93:22:71:FC:47:5F:A2:DD:9D:93:31:12:2B:07:A5:28:D3:8F:8E:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyJx_Edfot2dkzESKwelKNOPjv0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:07:5c:0a:02:c9:03:53:87:c7:c3:30:86:17:3d:bb:41:9b: 36:0f:48:c5:25:94:96:dd:2f:40:2f:fe:0f:73:eb:31:23:ad: 33:f6:61:cb:04:18:61:35:09:bf:71:ed:ad:be:15:f3:73:17: ef:60:f2:fd:2e:de:95:1e:27:bd:76:53:3f:44:93:40:09:20: 58:79:2d:c4:00:93:0e:0e:59:cf:6e:bc:2b:3d:84:55:ae:19: c1:82:2b:45:e3:c5:d0:57:40:cc:3e:c1:6f:df:67:ca:fd:7d: e7:51:98:bf:eb:5d:8f:e2:dd:94:2f:2c:df:f9:b8:ca:63:45: 4d:20:5c:ee:7f:8a:94:77:07:c0:d4:02:86:0c:0e:f5:22:38: ad:d4:68:b4:67:d7:b5:df:f5:30:9c:97:80:87:32:c1:39:d3: 80:73:16:d6:2d:bb:0c:f8:ca:24:68:61:a8:54:9b:db:e2:0a: a6:84:5f:02:5f:e3:d4:10:f1:7d:34:01:67:a5:09:16:df:86: 91:f5:5f:f5:fd:33:64:62:74:eb:39:91:c6:e1:12:50:fa:e8: e8:d9:9b:52:be:0e:7e:55:ff:d3:9b:e2:1b:13:93:14:ce:aa: ed:86:ed:25:40:ce:1b:00:6e:46:7a:75:0c:bb:2b:3a:af:95: 1a:8f:ed:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgzQkQxMTAvBgNVBAUTKDkzMjI3MUZDNDc1RkEyREQ5RDkzMzExMjJCMDdBNTI4 RDM4RjhFRkQwHhcNMjUwNTEwMTQzNTQ0WhcNMjUwNTE3MTQzNTQ0WjAYMRYwFAYD VQQDEw02ODFmNjQ0MC0wY2U1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv6fyhtSbuAZwTJFq1LL+eZsaafc+kof2dIOG+M6ILKA5uRzXyfUzxwFQVwAN 1efT+eBcMGKlqPeasyWESOel9zay2pdNDkWS/yjMoXIM1O+Q4fR/mlGlc5PCXjcL w5W9fP+RzThQn6KeQy807NmjvM488Zm0pLzPpew+4kSR07Q3DEZXGzaoc6jSXWBi ap2sVB5hCoJk8iO869MbkQUeqYr7Vd8yMNvfB13wY+Bp4FynGaafdh/ClL9OAzp3 +DAaS2JuiAfQb2PT/k1Lj/EiDcItDJRjZsBeWk+RBdCg76M66mbHEDW/CLvFdveU 88B8lAvB1Eb4dMSCuGc+hQnD9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFArmUzkL iUAKlRksohUJzeqCyujiMB8GA1UdIwQYMBaAFJMicfxHX6LdnZMxEisHpSjTj479 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODNCRC9CRTdDRDAyQTFE OEMxMUUyQUVGMDQ1RTgwOEIwMkNEMi9reUp4X0VkZm90MmRrekVTS3dlbEtOT1Bq djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2t5SnhfRWRmb3QyZGt6RVNLd2VsS05PUGp2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODNCRC9CRTdDRDAyQTFEOEMxMUUyQUVGMDQ1RTgwOEIwMkNEMi9reUp4X0VkZm90 MmRrekVTS3dlbEtOT1BqdjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaB1wKAskDU4fHwzCGFz27QZs2D0jFJZSW3S9AL/4Pc+sxI60z9mHL BBhhNQm/ce2tvhXzcxfvYPL9Lt6VHie9dlM/RJNACSBYeS3EAJMODlnPbrwrPYRV rhnBgitF48XQV0DMPsFv32fK/X3nUZi/612P4t2ULyzf+bjKY0VNIFzuf4qUdwfA 1AKGDA71Ijit1Gi0Z9e13/UwnJeAhzLBOdOAcxbWLbsM+MokaGGoVJvb4gqmhF8C X+PUEPF9NAFnpQkW34aR9V/1/TNkYnTrOZHG4RJQ+ujo2ZtSvg5+Vf/Tm+IbE5MU zqrthu0lQM4bAG5GenUMuys6r5Uaj+06 -----END CERTIFICATE-----Generated at Sun May 11 09:12:32 2025 by rpki-client