$ rpki-client -vvf rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft File: KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft (raw, json) Hash identifier: LSx/czmjKCIZHtCKWNatdtjBw9m1rEVBvnG338Nwbys= Subject key identifier: 56:9E:DB:47:27:B1:56:AA:90:87:71:4D:F9:A5:0C:28:AB:5A:26:4E Authority key identifier: 28:68:2E:C7:23:CC:E3:36:18:5B:33:30:20:13:FF:00:60:DD:E0:9A Certificate issuer: /CN=A91A308F/serialNumber=28682EC723CCE336185B33302013FF0060DDE09A Certificate serial: 0A20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KGguxyPM4zYYWzMwIBP_AGDd4Jo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft Manifest number: 0A1A Signing time: Wed 14 May 2025 19:55:25 +0000 Manifest this update: Wed 14 May 2025 19:55:24 +0000 Manifest next update: Wed 21 May 2025 19:55:24 +0000 Files and hashes: 1: KGguxyPM4zYYWzMwIBP_AGDd4Jo.crl (hash: V1t0hfN4IYRfVr8UaRM95Lgo2aFEoGoLOgCoCbB+PY0=) 2: 6303AF646F8911EA92087E39C4F9AE02.roa (hash: 9EGc7zo1rzNKxXV6Dja051NIq2qalXgFXf2PEqhm154=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.crl rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KGguxyPM4zYYWzMwIBP_AGDd4Jo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 19:55:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2592 (0xa20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A308F, serialNumber=28682EC723CCE336185B33302013FF0060DDE09A Validity Not Before: May 14 19:55:24 2025 GMT Not After : May 21 19:55:24 2025 GMT Subject: CN=6824f52d-7179 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:2e:43:91:48:a8:19:d4:10:36:96:de:1b:a2: 9f:71:a3:ca:26:f8:85:d5:60:a0:dc:d4:c0:06:ea: 67:a5:3d:d4:50:23:ac:33:c5:e5:52:da:42:a1:fc: 83:b2:aa:c3:29:c8:c4:63:a3:a1:62:88:81:34:4f: cb:7c:f8:c8:11:08:06:d4:4e:b2:a9:dd:eb:1c:28: 65:61:76:7b:61:6e:87:5f:f8:52:84:3a:92:0b:c5: cd:d4:27:af:89:a3:88:13:4d:db:23:3d:72:14:02: fa:b7:97:77:bb:c9:9c:95:fc:56:55:32:f1:99:28: 43:3a:5a:c6:fd:1f:58:b7:f5:41:6c:03:80:54:74: a1:f3:e4:70:06:dd:5c:89:5f:70:be:69:ad:22:87: bc:03:68:1f:ed:4a:03:e9:e4:c1:ac:6d:0c:d5:b4: db:96:1e:30:91:65:b3:e0:c0:1c:3d:f7:ac:ba:6a: 6e:f3:dd:14:0e:ea:be:35:2c:84:cf:07:ee:b4:74: f4:e6:87:e9:24:d1:0a:c9:6a:d9:3e:18:4c:f3:9c: 56:40:a3:a2:6c:a9:34:5c:ca:f1:85:96:82:26:db: 29:44:ae:05:37:75:07:fd:24:63:82:06:bd:2f:d8: 65:5a:6c:69:49:87:be:41:35:3e:dc:5f:ff:53:7f: c7:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:9E:DB:47:27:B1:56:AA:90:87:71:4D:F9:A5:0C:28:AB:5A:26:4E X509v3 Authority Key Identifier: keyid:28:68:2E:C7:23:CC:E3:36:18:5B:33:30:20:13:FF:00:60:DD:E0:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KGguxyPM4zYYWzMwIBP_AGDd4Jo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:f2:a9:3f:19:c6:36:c7:cf:de:34:4d:b9:87:9e:9b:04:4c: d3:89:73:d1:62:c2:e8:69:e2:0f:93:a7:0d:be:f9:4a:22:ad: 09:ff:1a:7a:9e:29:e4:b0:25:0f:88:ab:56:d9:7d:f4:92:60: ee:71:fd:ac:96:cb:ed:4e:51:8c:ed:46:d9:69:c7:db:c5:c4: 1a:51:fb:03:0a:f2:bd:15:de:00:32:de:97:d1:97:87:85:a0: 5e:77:5d:77:8d:a2:f0:c6:8d:f9:04:c3:2b:bd:0c:af:42:e8: a8:18:b8:39:f9:20:2a:b3:15:d1:e2:b5:47:a8:72:26:8d:3c: 5d:02:ec:93:f9:ef:fa:0a:35:47:0f:da:b7:06:fe:1a:1a:7f: cd:ba:32:9b:9d:73:a8:1a:9a:dd:ad:e2:6e:08:c0:ac:40:81: ff:93:38:a7:52:79:7e:ed:de:a8:c9:ee:d4:e4:dc:0e:19:5b: fc:dc:13:aa:70:50:15:21:88:c7:ed:83:11:82:b1:4f:e4:01: 5b:2c:33:25:65:a3:58:c4:3a:df:81:81:e0:44:12:13:5c:2d: 49:48:e2:db:8a:fd:3f:c4:72:a9:2e:ac:35:1f:d2:bf:67:58: 69:dd:e2:b0:27:77:c8:96:9a:f9:43:15:f5:bc:90:c2:dc:e7: 61:c1:5e:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCiAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTMwOEYxMTAvBgNVBAUTKDI4NjgyRUM3MjNDQ0UzMzYxODVCMzMzMDIwMTNGRjAw NjBEREUwOUEwHhcNMjUwNTE0MTk1NTI0WhcNMjUwNTIxMTk1NTI0WjAYMRYwFAYD VQQDEw02ODI0ZjUyZC03MTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2i5DkUioGdQQNpbeG6KfcaPKJviF1WCg3NTABupnpT3UUCOsM8XlUtpCofyD sqrDKcjEY6OhYoiBNE/LfPjIEQgG1E6yqd3rHChlYXZ7YW6HX/hShDqSC8XN1Cev iaOIE03bIz1yFAL6t5d3u8mclfxWVTLxmShDOlrG/R9Yt/VBbAOAVHSh8+RwBt1c iV9wvmmtIoe8A2gf7UoD6eTBrG0M1bTblh4wkWWz4MAcPfesumpu890UDuq+NSyE zwfutHT05ofpJNEKyWrZPhhM85xWQKOibKk0XMrxhZaCJtspRK4FN3UH/SRjgga9 L9hlWmxpSYe+QTU+3F//U3/HKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFae20cn sVaqkIdxTfmlDCirWiZOMB8GA1UdIwQYMBaAFChoLscjzOM2GFszMCAT/wBg3eCa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzA4Ri9COUIzNDQ1QzZG ODcxMUVBOTNBOUY5MzNDNEY5QUUwMi9LR2d1eHlQTTR6WVlXek13SUJQX0FHRGQ0 Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tHZ3V4eVBNNHpZWVd6TXdJQlBfQUdEZDRKby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzA4Ri9COUIzNDQ1QzZGODcxMUVBOTNBOUY5MzNDNEY5QUUwMi9LR2d1eHlQTTR6 WVlXek13SUJQX0FHRGQ0Sm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAk8qk/GcY2x8/eNE25h56bBEzTiXPRYsLoaeIPk6cNvvlKIq0J/xp6 ninksCUPiKtW2X30kmDucf2slsvtTlGM7UbZacfbxcQaUfsDCvK9Fd4AMt6X0ZeH haBed113jaLwxo35BMMrvQyvQuioGLg5+SAqsxXR4rVHqHImjTxdAuyT+e/6CjVH D9q3Bv4aGn/NujKbnXOoGprdreJuCMCsQIH/kzinUnl+7d6oye7U5NwOGVv83BOq cFAVIYjH7YMRgrFP5AFbLDMlZaNYxDrfgYHgRBITXC1JSOLbiv0/xHKpLqw1H9K/ Z1hp3eKwJ3fIlpr5QxX1vJDC3OdhwV5L -----END CERTIFICATE-----Generated at Thu May 15 02:32:28 2025 by rpki-client