$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1103/2095AA621A0711E8BE24A558C4F9AE02/KdzyaXujSl1MV_LtlnGNAxu8VjA.mft File: KdzyaXujSl1MV_LtlnGNAxu8VjA.mft (raw, json) Hash identifier: YB+0ldhL5cKOmZ2AroHsGNVAvasIxF8SiCH1iOp8FEQ= Subject key identifier: A6:A1:4D:31:F3:F8:FC:3F:D1:FD:0F:A9:23:1A:82:7D:F5:B9:CE:61 Authority key identifier: 29:DC:F2:69:7B:A3:4A:5D:4C:57:F2:ED:96:71:8D:03:1B:BC:56:30 Certificate issuer: /CN=A91A1103/serialNumber=29DCF2697BA34A5D4C57F2ED96718D031BBC5630 Certificate serial: 1603 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KdzyaXujSl1MV_LtlnGNAxu8VjA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1103/2095AA621A0711E8BE24A558C4F9AE02/KdzyaXujSl1MV_LtlnGNAxu8VjA.mft Manifest number: 15F9 Signing time: Mon 12 May 2025 16:42:07 +0000 Manifest this update: Mon 12 May 2025 16:42:07 +0000 Manifest next update: Mon 19 May 2025 16:42:07 +0000 Files and hashes: 1: KdzyaXujSl1MV_LtlnGNAxu8VjA.crl (hash: cEmjYw3B/SoXoXBS7Xuh99HIPKHwT0Dfx7fo9aUQido=) 2: 1C85059C1EB911E88533FA4EC4F9AE02.roa (hash: RqHN2PwZe21iOjQw65O1dXW58VJkxhmOGxQkFQUXslk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1103/2095AA621A0711E8BE24A558C4F9AE02/KdzyaXujSl1MV_LtlnGNAxu8VjA.crl rsync://rpki.apnic.net/member_repository/A91A1103/2095AA621A0711E8BE24A558C4F9AE02/KdzyaXujSl1MV_LtlnGNAxu8VjA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KdzyaXujSl1MV_LtlnGNAxu8VjA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 16:42:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5635 (0x1603) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1103, serialNumber=29DCF2697BA34A5D4C57F2ED96718D031BBC5630 Validity Not Before: May 12 16:42:07 2025 GMT Not After : May 19 16:42:07 2025 GMT Subject: CN=682224df-667e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b8:6f:c6:3d:47:37:9e:3d:ce:c7:61:a2:17: e9:89:be:1d:16:94:d0:50:da:eb:fd:51:2c:3c:86: d0:ee:85:90:20:9a:58:39:8d:fa:d1:b4:3a:80:b7: 7d:11:13:82:5e:b8:97:7f:79:e0:51:6f:a5:7a:18: 40:e0:93:85:18:d3:cb:f0:6d:59:e3:f0:9a:26:3c: 92:cd:1c:b5:6f:5e:a0:f2:b1:dc:a7:ae:92:4e:06: 5d:fc:73:03:91:89:13:dc:a2:45:6a:ff:6c:4c:1b: c9:d5:13:c0:ea:da:0b:1a:b0:0b:49:27:cf:93:c1: e3:3d:5e:5c:83:b4:63:09:fd:fa:70:ef:c4:f9:af: 54:d8:f6:ed:93:52:52:92:6c:e3:73:48:10:ae:60: 7c:13:f6:ac:8f:b7:d7:a8:70:7f:4c:63:57:df:b0: 57:53:85:ed:6a:5c:31:da:47:51:48:05:0b:6b:8c: f2:6d:21:87:42:38:37:cc:8d:63:85:5b:f2:99:10: 26:57:8f:63:49:f7:c8:17:12:a1:c9:50:a5:ec:a8: b5:ea:ba:d2:d5:e6:5e:2a:00:99:64:47:3b:22:f4: 8e:72:7c:13:4c:75:d5:f6:96:99:6a:7c:34:89:da: 6f:bf:1a:a2:17:56:cb:d0:02:0a:44:2a:84:a1:36: 92:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:A1:4D:31:F3:F8:FC:3F:D1:FD:0F:A9:23:1A:82:7D:F5:B9:CE:61 X509v3 Authority Key Identifier: keyid:29:DC:F2:69:7B:A3:4A:5D:4C:57:F2:ED:96:71:8D:03:1B:BC:56:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1103/2095AA621A0711E8BE24A558C4F9AE02/KdzyaXujSl1MV_LtlnGNAxu8VjA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KdzyaXujSl1MV_LtlnGNAxu8VjA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1103/2095AA621A0711E8BE24A558C4F9AE02/KdzyaXujSl1MV_LtlnGNAxu8VjA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:3c:1a:f9:d9:0a:bd:0b:0a:4a:2e:ef:cb:99:1c:9f:02:9c: 69:32:db:d1:9c:a3:dc:59:ed:74:bd:5b:93:d5:77:18:22:66: ff:3a:94:91:02:ab:5c:1c:de:15:5b:2a:28:53:ef:91:42:68: dc:54:89:f1:07:ba:3f:4b:e1:52:96:88:51:da:45:b0:ca:e3: c3:e6:63:a7:d2:e7:70:49:60:1d:72:20:5b:f3:16:62:dd:de: cb:fd:d1:9a:1e:7b:e5:51:64:ed:63:a3:01:3c:ed:77:99:4b: dd:2f:18:d1:b7:6a:f8:1a:b4:a8:d3:30:df:41:de:5a:35:97: 47:c2:62:8d:ef:7a:b0:e9:e2:54:16:9f:57:1b:38:7d:dc:53: 2b:3a:ca:ce:70:76:75:34:a1:94:b8:d0:cf:8e:50:19:2e:3a: 13:6a:72:e6:b0:57:1a:59:aa:13:11:d6:db:00:f3:6c:5b:11: bb:bd:4e:70:4d:8d:2e:a6:dc:95:e9:7f:fd:0f:23:1e:33:2a: eb:34:db:8c:7b:3c:cd:a7:ec:cc:41:90:b7:4f:00:b4:ca:6f: bb:0f:6b:ff:b4:a8:d0:09:14:14:c2:32:f6:60:59:ac:9f:6f: 5a:09:20:66:bb:90:fc:3a:7a:4e:4c:b9:c0:a4:9b:80:75:37: 87:ba:96:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFgMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTExMDMxMTAvBgNVBAUTKDI5RENGMjY5N0JBMzRBNUQ0QzU3RjJFRDk2NzE4RDAz MUJCQzU2MzAwHhcNMjUwNTEyMTY0MjA3WhcNMjUwNTE5MTY0MjA3WjAYMRYwFAYD VQQDEw02ODIyMjRkZi02NjdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs7hvxj1HN549zsdhohfpib4dFpTQUNrr/VEsPIbQ7oWQIJpYOY360bQ6gLd9 EROCXriXf3ngUW+lehhA4JOFGNPL8G1Z4/CaJjySzRy1b16g8rHcp66STgZd/HMD kYkT3KJFav9sTBvJ1RPA6toLGrALSSfPk8HjPV5cg7RjCf36cO/E+a9U2Pbtk1JS kmzjc0gQrmB8E/asj7fXqHB/TGNX37BXU4Xtalwx2kdRSAULa4zybSGHQjg3zI1j hVvymRAmV49jSffIFxKhyVCl7Ki16rrS1eZeKgCZZEc7IvSOcnwTTHXV9paZanw0 idpvvxqiF1bL0AIKRCqEoTaSbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKahTTHz +Pw/0f0PqSMagn31uc5hMB8GA1UdIwQYMBaAFCnc8ml7o0pdTFfy7ZZxjQMbvFYw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTEwMy8yMDk1QUE2MjFB MDcxMUU4QkUyNEE1NThDNEY5QUUwMi9LZHp5YVh1alNsMU1WX0x0bG5HTkF4dThW akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tkenlhWHVqU2wxTVZfTHRsbkdOQXh1OFZqQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTEwMy8yMDk1QUE2MjFBMDcxMUU4QkUyNEE1NThDNEY5QUUwMi9LZHp5YVh1alNs MU1WX0x0bG5HTkF4dThWakEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpPBr52Qq9CwpKLu/LmRyfApxpMtvRnKPcWe10vVuT1XcYImb/OpSR AqtcHN4VWyooU++RQmjcVInxB7o/S+FSlohR2kWwyuPD5mOn0udwSWAdciBb8xZi 3d7L/dGaHnvlUWTtY6MBPO13mUvdLxjRt2r4GrSo0zDfQd5aNZdHwmKN73qw6eJU Fp9XGzh93FMrOsrOcHZ1NKGUuNDPjlAZLjoTanLmsFcaWaoTEdbbAPNsWxG7vU5w TY0uptyV6X/9DyMeMyrrNNuMezzNp+zMQZC3TwC0ym+7D2v/tKjQCRQUwjL2YFms n29aCSBmu5D8OnpOTLnApJuAdTeHupb+ -----END CERTIFICATE-----Generated at Wed May 14 02:00:55 2025 by rpki-client