$ rpki-client -vvf rpki.apnic.net/member_repository/A919F525/E187177684ED11EFB9FF2D5AC4F9AE02/Kz24XvlSI40ZLc8XDua-scjbA6k.mft File: Kz24XvlSI40ZLc8XDua-scjbA6k.mft (raw, json) Hash identifier: G8d+VtLno8C2SCwL4FdQPF39uNsEx3wLHbJ5s50roYM= Subject key identifier: 34:E9:42:8A:0C:0F:C2:E3:E4:1D:5C:AD:6D:E3:DA:6A:05:50:49:DD Authority key identifier: 2B:3D:B8:5E:F9:52:23:8D:19:2D:CF:17:0E:E6:BE:B1:C8:DB:03:A9 Certificate issuer: /CN=A919F525/serialNumber=2B3DB85EF952238D192DCF170EE6BEB1C8DB03A9 Certificate serial: 7A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kz24XvlSI40ZLc8XDua-scjbA6k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F525/E187177684ED11EFB9FF2D5AC4F9AE02/Kz24XvlSI40ZLc8XDua-scjbA6k.mft Manifest number: 76 Signing time: Sun 11 May 2025 05:35:05 +0000 Manifest this update: Sun 11 May 2025 05:35:04 +0000 Manifest next update: Sun 18 May 2025 05:35:04 +0000 Files and hashes: 1: Kz24XvlSI40ZLc8XDua-scjbA6k.crl (hash: eTMbig+kDbiPNEakK2JFY65KKkFobs0aUTbwxYfVy7M=) 2: 4AFF817484EF11EFBDCD721DC4F9AE02.roa (hash: VYuqdxkeY8VDCaP9z9fc7NoqICt3B9Gb1p23SFkZpM0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F525/E187177684ED11EFB9FF2D5AC4F9AE02/Kz24XvlSI40ZLc8XDua-scjbA6k.crl rsync://rpki.apnic.net/member_repository/A919F525/E187177684ED11EFB9FF2D5AC4F9AE02/Kz24XvlSI40ZLc8XDua-scjbA6k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kz24XvlSI40ZLc8XDua-scjbA6k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 05:35:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 122 (0x7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F525, serialNumber=2B3DB85EF952238D192DCF170EE6BEB1C8DB03A9 Validity Not Before: May 11 05:35:04 2025 GMT Not After : May 18 05:35:04 2025 GMT Subject: CN=68203708-6769 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ac:59:a6:64:66:51:bc:40:7a:3d:43:2d:44: 91:3e:d8:40:a3:7e:13:a5:2b:7c:f5:f2:68:bb:b7: 90:e4:33:30:7e:a5:5a:fa:ce:f4:ab:19:d5:f8:c7: e3:3e:00:a0:ec:c5:c7:de:ef:ab:2f:3f:79:25:e8: 8a:b6:a7:10:04:80:de:a9:b4:ca:af:a7:1a:02:5f: 39:05:67:78:3d:6c:8a:1e:7d:a7:a9:c0:bf:0a:f9: 88:7b:09:87:10:8d:a1:f4:a0:eb:40:e2:c5:ca:7c: 54:d7:28:84:98:46:5f:74:fc:f9:13:e3:49:0b:98: 00:f3:f9:10:41:59:e7:78:27:6b:42:d9:69:67:81: f1:a1:95:44:13:bc:4b:14:70:9a:e7:ad:31:41:36: d7:87:27:fd:79:7d:9f:03:4f:18:9b:a0:1a:b7:8e: ea:f9:df:46:03:4b:7f:17:23:a5:41:fa:17:a6:05: f3:b0:d0:a7:19:ae:01:10:b5:d8:db:24:c3:6d:93: 0a:bc:a1:78:b9:6e:0a:28:fb:4d:82:cb:f8:17:a5: dd:68:fe:c1:dd:0b:f8:9c:a1:03:b7:9b:00:69:8b: 61:99:fe:7e:4e:98:f7:a8:c3:7f:c4:de:7e:e4:26: 58:fd:66:a6:b7:3d:32:b8:2c:50:fc:70:a0:0a:44: 5c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:E9:42:8A:0C:0F:C2:E3:E4:1D:5C:AD:6D:E3:DA:6A:05:50:49:DD X509v3 Authority Key Identifier: keyid:2B:3D:B8:5E:F9:52:23:8D:19:2D:CF:17:0E:E6:BE:B1:C8:DB:03:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F525/E187177684ED11EFB9FF2D5AC4F9AE02/Kz24XvlSI40ZLc8XDua-scjbA6k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kz24XvlSI40ZLc8XDua-scjbA6k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F525/E187177684ED11EFB9FF2D5AC4F9AE02/Kz24XvlSI40ZLc8XDua-scjbA6k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:5b:95:b1:39:5c:4f:d0:97:2c:bf:06:6e:c4:70:40:da:fd: a0:c7:4b:37:7e:bc:46:c7:38:d8:d3:32:1f:f6:e2:cc:cf:03: 36:1e:9d:10:19:2a:9a:be:9b:41:a2:47:6d:2d:88:db:fa:15: ad:4c:24:8b:59:43:4a:56:2c:00:4c:9f:e7:c5:90:b3:2b:b2: af:31:ee:e9:5d:e9:47:db:ab:1f:a0:7f:69:36:cf:d4:24:29: 39:2b:47:ce:00:cd:2a:70:4d:8c:af:a0:30:14:9a:cb:2f:3a: 7d:d9:cf:47:45:66:34:11:86:2f:b0:12:4c:a4:f8:67:8f:98: 0c:58:8d:7a:2d:71:c0:dd:41:75:5a:b9:d6:ae:d5:b8:ff:f6: 60:67:13:52:6d:77:ac:71:dc:01:95:5a:1c:25:90:57:c3:8c: 17:db:50:78:88:d2:c8:be:51:77:72:a2:27:95:71:4c:5a:3b: 4c:77:56:1d:a6:9c:bc:b2:ce:0d:20:55:26:e9:d1:13:e9:f7: 2a:c0:ec:9e:2d:0c:e1:27:c9:f5:35:a2:c1:37:e6:84:72:85: 6d:a6:fa:3d:7b:d9:a4:d0:de:0e:e7:20:8c:d7:ce:2f:5d:e8: d7:45:cb:35:70:15:4f:db:4e:97:df:f2:cd:36:5e:50:af:fd: b8:8b:2e:0f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBejANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RjUyNTExMC8GA1UEBRMoMkIzREI4NUVGOTUyMjM4RDE5MkRDRjE3MEVFNkJFQjFD OERCMDNBOTAeFw0yNTA1MTEwNTM1MDRaFw0yNTA1MTgwNTM1MDRaMBgxFjAUBgNV BAMTDTY4MjAzNzA4LTY3NjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBrFmmZGZRvEB6PUMtRJE+2ECjfhOlK3z18mi7t5DkMzB+pVr6zvSrGdX4x+M+ AKDsxcfe76svP3kl6Iq2pxAEgN6ptMqvpxoCXzkFZ3g9bIoefaepwL8K+Yh7CYcQ jaH0oOtA4sXKfFTXKISYRl90/PkT40kLmADz+RBBWed4J2tC2WlngfGhlUQTvEsU cJrnrTFBNteHJ/15fZ8DTxiboBq3jur530YDS38XI6VB+hemBfOw0KcZrgEQtdjb JMNtkwq8oXi5bgoo+02Cy/gXpd1o/sHdC/icoQO3mwBpi2GZ/n5OmPeow3/E3n7k Jlj9Zqa3PTK4LFD8cKAKRFx3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNOlCigwP wuPkHVytbePaagVQSd0wHwYDVR0jBBgwFoAUKz24XvlSI40ZLc8XDua+scjbA6kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlGNTI1L0UxODcxNzc2ODRF RDExRUZCOUZGMkQ1QUM0RjlBRTAyL0t6MjRYdmxTSTQwWkxjOFhEdWEtc2NqYkE2 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvS3oyNFh2bFNJNDBaTGM4WER1YS1zY2piQTZrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlG NTI1L0UxODcxNzc2ODRFRDExRUZCOUZGMkQ1QUM0RjlBRTAyL0t6MjRYdmxTSTQw WkxjOFhEdWEtc2NqYkE2ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFJblbE5XE/Qlyy/Bm7EcEDa/aDHSzd+vEbHONjTMh/24szPAzYenRAZ Kpq+m0GiR20tiNv6Fa1MJItZQ0pWLABMn+fFkLMrsq8x7uld6Ufbqx+gf2k2z9Qk KTkrR84AzSpwTYyvoDAUmssvOn3Zz0dFZjQRhi+wEkyk+GePmAxYjXotccDdQXVa udau1bj/9mBnE1Jtd6xx3AGVWhwlkFfDjBfbUHiI0si+UXdyoieVcUxaO0x3Vh2m nLyyzg0gVSbp0RPp9yrA7J4tDOEnyfU1osE35oRyhW2m+j172aTQ3g7nIIzXzi9d 6NdFyzVwFU/bTpff8s02XlCv/biLLg8= -----END CERTIFICATE-----Generated at Mon May 12 19:08:31 2025 by rpki-client