$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.mft File: kKozD4l2v2xASeZzwoIf0pHUO8E.mft (raw, json) Hash identifier: HM24H9J52YDR7CI/PvIXqfj4P2ldS+KcCv3qa/ZRba8= Subject key identifier: FB:21:C0:AF:CD:79:59:A4:DD:A8:2B:94:07:E5:72:CA:07:C6:CB:4F Authority key identifier: 90:AA:33:0F:89:76:BF:6C:40:49:E6:73:C2:82:1F:D2:91:D4:3B:C1 Certificate issuer: /CN=A91AE85E/serialNumber=90AA330F8976BF6C4049E673C2821FD291D43BC1 Certificate serial: 054C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kKozD4l2v2xASeZzwoIf0pHUO8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.mft Manifest number: 054C Signing time: Mon 12 May 2025 14:18:08 +0000 Manifest this update: Mon 12 May 2025 14:18:07 +0000 Manifest next update: Mon 19 May 2025 14:18:07 +0000 Files and hashes: 1: kKozD4l2v2xASeZzwoIf0pHUO8E.crl (hash: VUMGm3qfznHz4TOyYLSKZ6cuNzeD5v5kspJEveQZqtQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.crl rsync://rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kKozD4l2v2xASeZzwoIf0pHUO8E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 14:18:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1356 (0x54c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE85E, serialNumber=90AA330F8976BF6C4049E673C2821FD291D43BC1 Validity Not Before: May 12 14:18:07 2025 GMT Not After : May 19 14:18:07 2025 GMT Subject: CN=6822031f-c77b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:37:aa:bc:84:38:80:5a:e4:74:6c:ad:d7:f0: 27:64:e2:ce:34:22:c6:91:9b:bf:39:57:ab:3a:e0: b1:8d:e0:c0:fc:91:ab:a0:2e:7f:f1:5f:0f:90:e7: 76:e6:c3:f4:94:bf:6c:1d:08:27:bf:3d:08:3f:eb: 84:3a:9e:86:c9:82:06:b4:6c:98:85:96:64:2d:20: 87:a3:f7:a3:ab:fc:e1:29:8c:63:68:5e:61:47:92: fb:42:b1:6c:b8:cd:19:72:a7:b4:92:c8:ed:f1:36: 14:e5:17:f9:eb:80:9f:b5:26:2f:00:3e:e2:90:12: 30:57:cd:2e:06:5a:33:e1:36:07:a7:b2:3c:64:3e: 56:2d:6d:04:7b:3b:b3:23:af:5e:ca:c7:4e:f7:83: d8:e2:ac:ce:d6:e1:2e:8c:ad:da:06:04:13:80:f2: 38:cb:b1:2c:b6:50:65:7b:e3:85:8c:fe:9a:72:81: 1a:bb:8e:cf:ae:79:4b:ba:70:e5:d7:5e:e6:1e:92: 92:1a:53:58:78:2f:86:40:7e:82:be:79:3d:ad:20: f9:87:0e:58:54:e4:fd:be:b0:51:83:32:44:76:e7: 8f:49:db:9b:c4:2a:63:36:58:fe:48:fb:86:40:39: 7d:7d:2f:e3:78:d7:0e:62:ee:ce:cf:de:e5:36:1e: a0:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:21:C0:AF:CD:79:59:A4:DD:A8:2B:94:07:E5:72:CA:07:C6:CB:4F X509v3 Authority Key Identifier: keyid:90:AA:33:0F:89:76:BF:6C:40:49:E6:73:C2:82:1F:D2:91:D4:3B:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kKozD4l2v2xASeZzwoIf0pHUO8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:bc:22:5a:92:98:c5:4e:ab:5c:60:54:e1:99:7c:79:4b:cc: 25:08:fc:63:4b:1f:df:04:a0:1e:2a:ef:63:c1:30:b2:9d:53: e4:59:33:0a:9c:07:eb:7b:51:17:46:f6:b5:c7:9c:20:63:17: 36:c7:7b:d5:8d:b2:53:f5:d6:42:d9:e2:ab:51:de:7f:2a:30: 4b:8a:96:06:e5:b4:96:98:ec:80:cd:e1:97:1a:d3:d4:c5:45: 26:a0:0b:5e:d0:64:4b:98:0f:93:45:99:cd:f3:14:a0:c5:20: 8d:ac:0e:5c:f9:83:3d:8b:ad:ff:e1:0a:57:22:2d:39:fd:a3: 0c:33:36:04:21:33:9a:bd:af:58:25:6d:77:fb:d3:9f:73:78: 88:a5:b9:f8:1a:ac:03:d1:43:1a:1b:33:40:fe:b5:8e:52:34: 2e:75:9a:02:df:25:dc:3c:83:37:25:7f:78:ed:34:7c:2c:d9: 5d:b7:3c:a8:e5:48:ac:77:08:8b:c3:58:9a:8d:f0:4b:40:3a: 12:d1:55:9c:36:b5:d8:4e:28:94:d2:8a:28:92:e4:30:39:4d: 75:fc:87:ac:40:4b:a0:da:03:f3:3d:66:f8:f3:ee:45:b8:25: cc:b3:15:56:78:72:59:36:14:37:dc:84:33:b9:a7:1e:37:f9: 9e:b5:75:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU4NUUxMTAvBgNVBAUTKDkwQUEzMzBGODk3NkJGNkM0MDQ5RTY3M0MyODIxRkQy OTFENDNCQzEwHhcNMjUwNTEyMTQxODA3WhcNMjUwNTE5MTQxODA3WjAYMRYwFAYD VQQDEw02ODIyMDMxZi1jNzdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmDeqvIQ4gFrkdGyt1/AnZOLONCLGkZu/OVerOuCxjeDA/JGroC5/8V8PkOd2 5sP0lL9sHQgnvz0IP+uEOp6GyYIGtGyYhZZkLSCHo/ejq/zhKYxjaF5hR5L7QrFs uM0Zcqe0ksjt8TYU5Rf564CftSYvAD7ikBIwV80uBloz4TYHp7I8ZD5WLW0Eezuz I69eysdO94PY4qzO1uEujK3aBgQTgPI4y7EstlBle+OFjP6acoEau47PrnlLunDl 117mHpKSGlNYeC+GQH6Cvnk9rSD5hw5YVOT9vrBRgzJEduePSdubxCpjNlj+SPuG QDl9fS/jeNcOYu7Oz97lNh6gKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPshwK/N eVmk3agrlAflcsoHxstPMB8GA1UdIwQYMBaAFJCqMw+Jdr9sQEnmc8KCH9KR1DvB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTg1RS8xQTE2RUI4NkYz RUExMUVCQjI1OEJBN0JDNEY5QUUwMi9rS296RDRsMnYyeEFTZVp6d29JZjBwSFVP OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2tLb3pENGwydjJ4QVNlWnp3b0lmMHBIVU84RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTg1RS8xQTE2RUI4NkYzRUExMUVCQjI1OEJBN0JDNEY5QUUwMi9rS296RDRsMnYy eEFTZVp6d29JZjBwSFVPOEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7vCJakpjFTqtcYFThmXx5S8wlCPxjSx/fBKAeKu9jwTCynVPkWTMK nAfre1EXRva1x5wgYxc2x3vVjbJT9dZC2eKrUd5/KjBLipYG5bSWmOyAzeGXGtPU xUUmoAte0GRLmA+TRZnN8xSgxSCNrA5c+YM9i63/4QpXIi05/aMMMzYEITOava9Y JW13+9Ofc3iIpbn4GqwD0UMaGzNA/rWOUjQudZoC3yXcPIM3JX947TR8LNldtzyo 5UisdwiLw1iajfBLQDoS0VWcNrXYTiiU0oookuQwOU11/IesQEug2gPzPWb48+5F uCXMsxVWeHJZNhQ33IQzuaceN/metXUy -----END CERTIFICATE-----Generated at Mon May 12 19:38:12 2025 by rpki-client