$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.mft File: kj-024ZZxeCui93HGpK2o3Ay89Q.mft (raw, json) Hash identifier: PmJAN+UH5fMkkfORRsU5qUhly4fUpwF7gPi7o2uORm8= Subject key identifier: DC:CD:09:3C:27:7A:02:AF:26:3D:B7:9F:4C:1F:28:3A:5C:A1:88:79 Authority key identifier: 92:3F:B4:DB:86:59:C5:E0:AE:8B:DD:C7:1A:92:B6:A3:70:32:F3:D4 Certificate issuer: /CN=A91AA8E4/serialNumber=923FB4DB8659C5E0AE8BDDC71A92B6A37032F3D4 Certificate serial: 08BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kj-024ZZxeCui93HGpK2o3Ay89Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.mft Manifest number: 08B5 Signing time: Fri 16 May 2025 20:47:52 +0000 Manifest this update: Fri 16 May 2025 20:47:51 +0000 Manifest next update: Fri 23 May 2025 20:47:51 +0000 Files and hashes: 1: kj-024ZZxeCui93HGpK2o3Ay89Q.crl (hash: ui17phdoXwK0Lj1ANWydSNJtS0rN4xWy1mve0t3ZqfI=) 2: E76ABE9EB51811EAA9D89B43C4F9AE02.roa (hash: ttXfxcVj6+WhtbE63+vyOYQl4F7FNyy4bCidNx2zj30=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.crl rsync://rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kj-024ZZxeCui93HGpK2o3Ay89Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 20:47:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2235 (0x8bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA8E4, serialNumber=923FB4DB8659C5E0AE8BDDC71A92B6A37032F3D4 Validity Not Before: May 16 20:47:51 2025 GMT Not After : May 23 20:47:51 2025 GMT Subject: CN=6827a477-169b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b2:55:37:04:00:21:c7:d8:3e:a1:40:8b:9f: db:5c:5c:47:75:e0:29:9e:42:f3:74:68:e9:32:cf: a9:21:03:a9:47:66:62:dc:a8:10:a5:1c:31:e5:10: 9c:66:61:54:e3:a2:4d:84:cb:3b:51:9e:fa:28:ce: bf:cd:b1:23:90:40:ac:e5:96:53:82:29:cd:d2:20: fb:3d:6c:a6:3f:9b:82:ff:5c:09:9f:9a:23:da:36: c8:b8:6a:fd:67:3a:49:c1:20:bc:5d:8f:03:dc:fb: e5:32:80:97:d9:56:c4:db:16:24:1b:53:63:a8:5e: 1a:5e:06:13:98:ac:47:a4:37:9f:b8:02:60:00:98: f0:14:13:eb:55:a7:05:09:e0:a3:1b:a2:2b:61:08: c5:ac:78:e2:1f:69:b5:56:0d:1f:4d:19:ff:d3:ad: df:6a:f1:8f:6b:90:7b:67:07:ad:fe:2b:31:82:be: fe:df:88:a0:ab:5f:20:91:9f:35:db:a7:cf:14:90: 04:5a:72:3f:34:2b:88:1e:5e:8c:4e:1c:54:08:e4: 97:83:c4:bf:05:d5:29:81:95:2d:af:e4:87:1d:85: 26:05:47:e4:4d:6e:38:13:35:51:06:e2:45:07:97: 65:9a:22:49:46:39:13:7f:0f:5e:3f:65:34:07:fa: 38:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:CD:09:3C:27:7A:02:AF:26:3D:B7:9F:4C:1F:28:3A:5C:A1:88:79 X509v3 Authority Key Identifier: keyid:92:3F:B4:DB:86:59:C5:E0:AE:8B:DD:C7:1A:92:B6:A3:70:32:F3:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kj-024ZZxeCui93HGpK2o3Ay89Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:d7:5e:ce:f6:40:2a:18:18:35:44:bd:7e:3b:4d:5c:c6:c2: ef:fd:af:f6:21:a7:c5:1a:55:f0:d4:c7:18:36:8a:ac:53:c1: cc:93:04:0d:45:0b:b4:ce:16:4e:a9:56:51:22:86:d3:6a:70: 82:1c:3f:1d:65:80:fb:ed:a6:b3:b0:fc:30:69:a9:bc:bc:df: fb:53:41:fb:c6:c4:97:66:a8:bf:40:8a:e2:b7:92:7f:30:4f: fb:55:2e:6c:3d:df:26:70:06:21:92:06:10:78:a4:24:55:bb: 18:0d:e4:42:c2:65:44:50:ea:43:14:46:03:2a:aa:58:87:53: 3d:4a:3e:c4:50:21:c1:c3:53:97:31:02:fc:ac:61:7a:e6:51: bc:68:d0:9a:71:a7:1d:f9:1a:f8:36:88:e3:ab:7a:31:62:b3: 9d:62:78:46:2e:e5:88:23:43:d2:9d:1c:5e:0d:39:b1:9e:98: a9:aa:9f:20:a7:0a:66:34:5a:4e:ef:22:bf:2e:bc:4a:91:22: e2:f3:26:be:1e:79:2b:fe:83:1d:62:35:20:81:97:5c:cc:70: b2:de:8e:1c:41:df:7f:61:1e:c4:2e:3d:a6:f7:13:fd:bd:a7: e6:52:3e:d8:16:f1:d2:61:71:ef:11:b1:3a:5a:bd:c8:6d:cc: 5d:9a:58:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCLswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUE4RTQxMTAvBgNVBAUTKDkyM0ZCNERCODY1OUM1RTBBRThCRERDNzFBOTJCNkEz NzAzMkYzRDQwHhcNMjUwNTE2MjA0NzUxWhcNMjUwNTIzMjA0NzUxWjAYMRYwFAYD VQQDEw02ODI3YTQ3Ny0xNjliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArbJVNwQAIcfYPqFAi5/bXFxHdeApnkLzdGjpMs+pIQOpR2Zi3KgQpRwx5RCc ZmFU46JNhMs7UZ76KM6/zbEjkECs5ZZTginN0iD7PWymP5uC/1wJn5oj2jbIuGr9 ZzpJwSC8XY8D3PvlMoCX2VbE2xYkG1NjqF4aXgYTmKxHpDefuAJgAJjwFBPrVacF CeCjG6IrYQjFrHjiH2m1Vg0fTRn/063favGPa5B7Zwet/isxgr7+34igq18gkZ81 26fPFJAEWnI/NCuIHl6MThxUCOSXg8S/BdUpgZUtr+SHHYUmBUfkTW44EzVRBuJF B5dlmiJJRjkTfw9eP2U0B/o4JQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNzNCTwn egKvJj23n0wfKDpcoYh5MB8GA1UdIwQYMBaAFJI/tNuGWcXgrovdxxqStqNwMvPU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQThFNC9DNDI1RjUyNkI0 RjkxMUVBODVFNjAwNTlDNEY5QUUwMi9rai0wMjRaWnhlQ3VpOTNIR3BLMm8zQXk4 OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tqLTAyNFpaeGVDdWk5M0hHcEsybzNBeTg5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QThFNC9DNDI1RjUyNkI0RjkxMUVBODVFNjAwNTlDNEY5QUUwMi9rai0wMjRaWnhl Q3VpOTNIR3BLMm8zQXk4OVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBB117O9kAqGBg1RL1+O01cxsLv/a/2IafFGlXw1McYNoqsU8HMkwQN RQu0zhZOqVZRIobTanCCHD8dZYD77aazsPwwaam8vN/7U0H7xsSXZqi/QIrit5J/ ME/7VS5sPd8mcAYhkgYQeKQkVbsYDeRCwmVEUOpDFEYDKqpYh1M9Sj7EUCHBw1OX MQL8rGF65lG8aNCacacd+Rr4Nojjq3oxYrOdYnhGLuWII0PSnRxeDTmxnpipqp8g pwpmNFpO7yK/LrxKkSLi8ya+Hnkr/oMdYjUggZdczHCy3o4cQd9/YR7ELj2m9xP9 vafmUj7YFvHSYXHvEbE6Wr3IbcxdmlhV -----END CERTIFICATE-----Generated at Sat May 17 03:38:39 2025 by rpki-client