$ rpki-client -vvf rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.mft File: khLuorkaMmYPdScf7IWJswnDifA.mft (raw, json) Hash identifier: 1jMBhJTqVE1PCrMsRLPUZk0oqeMqpjnt5JoAaLRfph8= Subject key identifier: 01:13:26:70:80:36:8F:1E:40:DF:10:55:46:71:AA:78:41:16:46:F7 Authority key identifier: 92:12:EE:A2:B9:1A:32:66:0F:75:27:1F:EC:85:89:B3:09:C3:89:F0 Certificate issuer: /CN=A91999F5/serialNumber=9212EEA2B91A32660F75271FEC8589B309C389F0 Certificate serial: 0397 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khLuorkaMmYPdScf7IWJswnDifA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.mft Manifest number: 038F Signing time: Sun 11 May 2025 00:25:21 +0000 Manifest this update: Sun 11 May 2025 00:25:20 +0000 Manifest next update: Sun 18 May 2025 00:25:20 +0000 Files and hashes: 1: khLuorkaMmYPdScf7IWJswnDifA.crl (hash: 2u8wx+mEq1IY0vAnIr0ljshVVS//HVPF4M6YmgqeQhk=) 2: F84777FCD9DC11EDA4083A71C4F9AE02.roa (hash: CoOJrAcKTrWo0nejzXhp58RWFVEIO9a7vZX9DurBX3o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.crl rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khLuorkaMmYPdScf7IWJswnDifA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 00:25:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 919 (0x397) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91999F5, serialNumber=9212EEA2B91A32660F75271FEC8589B309C389F0 Validity Not Before: May 11 00:25:20 2025 GMT Not After : May 18 00:25:20 2025 GMT Subject: CN=681fee71-cf44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:86:d8:c1:4d:d3:39:52:81:e6:54:8e:41:11: 01:87:c0:63:47:1c:bf:53:1b:6a:ed:39:58:d6:d8: d1:c6:ed:30:c0:e3:ca:b6:d0:58:b9:fa:99:87:8a: e5:95:07:d3:4a:ac:bf:60:8e:f3:0c:8b:46:3e:cc: 64:10:58:8b:cc:d0:6b:e2:9f:21:ed:d2:d1:3b:c7: ab:c6:27:bf:db:58:82:53:10:84:a2:b1:30:d4:91: 2c:bf:6b:c2:29:ba:1b:0f:55:8e:b3:41:32:c7:2f: ae:32:b3:63:c1:f3:0c:de:a3:8a:33:bb:46:23:00: 2b:c8:74:dc:27:15:80:d1:7b:75:13:93:72:9e:03: 3c:13:f0:d6:51:78:f4:65:e5:5a:32:2f:22:a8:10: 67:be:59:c8:19:ff:3d:48:b0:65:01:ee:d5:c0:47: 68:9c:11:17:55:72:b4:c0:93:06:98:89:ff:60:75: 29:53:c9:ce:d9:94:e6:42:fb:e1:f5:7c:db:b3:e4: cc:45:c7:2d:9c:ca:b3:ab:c8:b7:30:f5:b2:3f:ee: 06:71:a5:7e:40:22:b5:c9:6e:3c:4b:cd:b5:68:1d: ca:f1:7d:2d:10:cf:b2:78:52:0a:94:bb:17:35:43: 2b:49:1a:cf:42:e9:36:af:f5:80:df:18:82:08:93: 26:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:13:26:70:80:36:8F:1E:40:DF:10:55:46:71:AA:78:41:16:46:F7 X509v3 Authority Key Identifier: keyid:92:12:EE:A2:B9:1A:32:66:0F:75:27:1F:EC:85:89:B3:09:C3:89:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khLuorkaMmYPdScf7IWJswnDifA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:e9:25:05:c4:76:b8:12:25:50:43:9a:e4:bc:57:fd:14:e3: ce:cc:b4:f1:08:bf:3b:45:78:0f:98:b0:60:79:12:51:90:ca: 9f:39:dc:85:f3:f2:3c:16:76:ac:67:d6:33:46:20:27:8d:47: 2b:9b:73:fc:6a:c8:f8:ca:23:cc:63:3d:9f:84:4f:8a:ce:10: 08:bb:f6:7f:ce:90:e9:04:29:d5:f3:33:55:52:b7:4d:90:72: 11:e3:26:50:5e:9d:d4:6c:61:9d:76:fc:cb:91:aa:e0:8b:8e: 24:72:b9:98:19:bc:d0:74:89:93:38:1b:16:38:42:65:01:14: 51:5f:73:ea:c3:6a:be:73:8a:eb:ed:ee:1c:5d:bf:03:fe:ac: 48:57:af:ec:99:2d:97:41:ff:ed:d3:5b:f6:3e:a3:f8:05:4e: 5e:42:f3:49:f8:9e:a8:9c:3f:1c:87:43:d3:05:b4:1a:01:24: a3:66:33:13:10:3b:01:1d:60:e2:35:9a:d8:16:b7:7e:0f:29: 44:f8:fe:b5:eb:67:8f:4e:50:d6:79:73:b3:45:f4:c0:3d:00: 5a:ba:0b:9d:86:ac:96:05:ae:10:3a:aa:93:7d:85:d8:ed:0b: 98:d5:cf:aa:d6:8a:64:cd:90:53:20:50:c3:c6:19:d0:0d:5c: 39:ee:ce:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk5RjUxMTAvBgNVBAUTKDkyMTJFRUEyQjkxQTMyNjYwRjc1MjcxRkVDODU4OUIz MDlDMzg5RjAwHhcNMjUwNTExMDAyNTIwWhcNMjUwNTE4MDAyNTIwWjAYMRYwFAYD VQQDEw02ODFmZWU3MS1jZjQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2YbYwU3TOVKB5lSOQREBh8BjRxy/Uxtq7TlY1tjRxu0wwOPKttBYufqZh4rl lQfTSqy/YI7zDItGPsxkEFiLzNBr4p8h7dLRO8erxie/21iCUxCEorEw1JEsv2vC KbobD1WOs0Eyxy+uMrNjwfMM3qOKM7tGIwAryHTcJxWA0Xt1E5NyngM8E/DWUXj0 ZeVaMi8iqBBnvlnIGf89SLBlAe7VwEdonBEXVXK0wJMGmIn/YHUpU8nO2ZTmQvvh 9Xzbs+TMRcctnMqzq8i3MPWyP+4GcaV+QCK1yW48S821aB3K8X0tEM+yeFIKlLsX NUMrSRrPQuk2r/WA3xiCCJMmxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAETJnCA No8eQN8QVUZxqnhBFkb3MB8GA1UdIwQYMBaAFJIS7qK5GjJmD3UnH+yFibMJw4nw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTlGNS82QTNEQjU3ODlG NzkxMUVDOUNCNDdBMEFDNEY5QUUwMi9raEx1b3JrYU1tWVBkU2NmN0lXSnN3bkRp ZkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2toTHVvcmthTW1ZUGRTY2Y3SVdKc3duRGlmQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTlGNS82QTNEQjU3ODlGNzkxMUVDOUNCNDdBMEFDNEY5QUUwMi9raEx1b3JrYU1t WVBkU2NmN0lXSnN3bkRpZkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZ6SUFxHa4EiVQQ5rkvFf9FOPOzLTxCL87RXgPmLBgeRJRkMqfOdyF 8/I8FnasZ9YzRiAnjUcrm3P8asj4yiPMYz2fhE+KzhAIu/Z/zpDpBCnV8zNVUrdN kHIR4yZQXp3UbGGddvzLkargi44kcrmYGbzQdImTOBsWOEJlARRRX3Pqw2q+c4rr 7e4cXb8D/qxIV6/smS2XQf/t01v2PqP4BU5eQvNJ+J6onD8ch0PTBbQaASSjZjMT EDsBHWDiNZrYFrd+DylE+P6162ePTlDWeXOzRfTAPQBaugudhqyWBa4QOqqTfYXY 7QuY1c+q1opkzZBTIFDDxhnQDVw57s6d -----END CERTIFICATE-----Generated at Mon May 12 04:34:19 2025 by rpki-client