$ rpki-client -vvf rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft File: kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft (raw, json) Hash identifier: kntG3JDhYfxPlWXZVt0jl3uuf+QotwKxnVoc47eq0eE= Subject key identifier: 9D:7C:60:5E:17:B6:53:AA:64:5B:D6:3F:DD:CD:E8:C0:CB:EA:A3:22 Authority key identifier: 92:29:19:95:35:EB:EE:44:72:A2:2F:C5:19:5B:0A:7E:FF:CB:66:84 Certificate issuer: /CN=A91B952E/serialNumber=9229199535EBEE4472A22FC5195B0A7EFFCB6684 Certificate serial: 0432 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kikZlTXr7kRyoi_FGVsKfv_LZoQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft Manifest number: 042D Signing time: Thu 15 May 2025 00:23:56 +0000 Manifest this update: Thu 15 May 2025 00:23:55 +0000 Manifest next update: Thu 22 May 2025 00:23:55 +0000 Files and hashes: 1: kikZlTXr7kRyoi_FGVsKfv_LZoQ.crl (hash: 6RyPLhtgIuPNlMscPCqUWLHxLseOnDwb6YiDmOEVgpQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.crl rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kikZlTXr7kRyoi_FGVsKfv_LZoQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 00:23:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1074 (0x432) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B952E, serialNumber=9229199535EBEE4472A22FC5195B0A7EFFCB6684 Validity Not Before: May 15 00:23:55 2025 GMT Not After : May 22 00:23:55 2025 GMT Subject: CN=6825341c-5f18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:05:b4:71:3d:22:89:50:c9:8e:44:d6:37:74: 5b:28:08:06:47:7d:e9:16:27:19:5b:ea:16:ac:b7: fe:62:fb:74:8e:5c:cd:1b:a4:55:5f:1f:44:8c:06: 5a:ae:d1:9a:fd:32:bf:81:bc:ff:bb:f6:b3:b0:15: a9:b9:fb:d2:c5:62:b6:31:cb:42:bd:a6:61:5f:68: d4:90:1a:58:75:02:1b:87:cd:28:8a:16:4a:3e:db: 23:49:25:4e:52:65:93:84:09:3e:a1:5a:e6:32:93: ac:72:79:c8:9c:a8:70:eb:93:44:a0:25:96:f1:13: 8a:00:e8:67:4d:9e:bd:a1:52:36:36:4b:c8:b7:2a: cc:e3:d0:c0:d0:4c:6c:e1:6f:2b:ff:e8:1d:5e:ab: f8:7b:68:fd:89:ec:da:cd:12:05:88:04:0c:60:0a: d5:f0:a5:84:5b:2d:0e:e3:9d:81:8e:89:99:e4:6c: a1:e9:43:a7:0b:2a:f8:db:68:1c:7c:2b:53:93:08: 51:1e:ca:8c:12:6a:04:9e:7a:7f:22:99:2b:5c:a2: 1d:f4:ae:c1:44:e6:12:08:76:90:11:36:7f:c4:00: df:91:c4:eb:c1:68:92:94:3f:02:d2:e9:bc:0e:45: c9:64:ad:46:bd:cc:af:f5:e2:47:d6:40:2b:50:d4: 4a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:7C:60:5E:17:B6:53:AA:64:5B:D6:3F:DD:CD:E8:C0:CB:EA:A3:22 X509v3 Authority Key Identifier: keyid:92:29:19:95:35:EB:EE:44:72:A2:2F:C5:19:5B:0A:7E:FF:CB:66:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kikZlTXr7kRyoi_FGVsKfv_LZoQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:b2:d4:ad:24:5c:aa:0a:5b:b4:fc:4b:f4:fc:64:2e:77:1c: 94:bd:c1:8a:c2:34:38:2f:af:f2:e3:61:5e:57:62:db:cf:3d: c3:9b:f0:97:39:3a:91:65:07:00:a9:b8:f6:ba:d0:a9:67:16: 5b:df:1c:51:b4:77:16:e6:f8:6c:91:7a:68:b3:21:1e:a2:30: 87:ea:b5:c3:60:f8:13:d7:7b:ed:71:49:cd:c1:4c:cf:de:b3: 6c:41:3a:4c:11:64:a7:e1:e7:82:52:40:99:14:24:7c:ca:e4: 5c:05:95:83:bc:43:7a:71:0c:a1:43:0b:ac:89:9c:b5:69:41: bc:ce:47:cd:45:38:8d:3d:5a:34:e4:7a:e3:9b:f5:8e:71:c3: 8f:84:f9:3a:20:11:05:bb:f3:e0:3f:71:97:1e:80:c9:ca:9b: ff:5c:33:a6:83:15:5a:47:c3:64:4e:cb:ba:47:cc:9a:26:9e: 12:84:77:69:d6:95:9e:26:07:a1:93:11:82:b2:7e:42:cc:0c: 2c:3a:24:19:de:6e:e5:f3:c2:29:a4:90:e6:35:5f:c6:14:9c: 63:87:dc:6b:16:c6:ff:5c:e3:64:19:35:84:78:93:76:af:0f: a0:94:52:1d:3e:d1:40:b4:c1:dd:05:04:ae:60:04:e4:fc:43: 37:90:e3:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjk1MkUxMTAvBgNVBAUTKDkyMjkxOTk1MzVFQkVFNDQ3MkEyMkZDNTE5NUIwQTdF RkZDQjY2ODQwHhcNMjUwNTE1MDAyMzU1WhcNMjUwNTIyMDAyMzU1WjAYMRYwFAYD VQQDEw02ODI1MzQxYy01ZjE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzwW0cT0iiVDJjkTWN3RbKAgGR33pFicZW+oWrLf+Yvt0jlzNG6RVXx9EjAZa rtGa/TK/gbz/u/azsBWpufvSxWK2MctCvaZhX2jUkBpYdQIbh80oihZKPtsjSSVO UmWThAk+oVrmMpOscnnInKhw65NEoCWW8ROKAOhnTZ69oVI2NkvItyrM49DA0Exs 4W8r/+gdXqv4e2j9iezazRIFiAQMYArV8KWEWy0O452BjomZ5Gyh6UOnCyr422gc fCtTkwhRHsqMEmoEnnp/IpkrXKId9K7BROYSCHaQETZ/xADfkcTrwWiSlD8C0um8 DkXJZK1Gvcyv9eJH1kArUNRKXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ18YF4X tlOqZFvWP93N6MDL6qMiMB8GA1UdIwQYMBaAFJIpGZU16+5EcqIvxRlbCn7/y2aE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTUyRS84M0NGODExNjYw RTQxMUVDQUQxODhEMzRDNEY5QUUwMi9raWtabFRYcjdrUnlvaV9GR1ZzS2Z2X0xa b1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tpa1psVFhyN2tSeW9pX0ZHVnNLZnZfTFpvUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTUyRS84M0NGODExNjYwRTQxMUVDQUQxODhEMzRDNEY5QUUwMi9raWtabFRYcjdr UnlvaV9GR1ZzS2Z2X0xab1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/stStJFyqClu0/Ev0/GQudxyUvcGKwjQ4L6/y42FeV2Lbzz3Dm/CX OTqRZQcAqbj2utCpZxZb3xxRtHcW5vhskXposyEeojCH6rXDYPgT13vtcUnNwUzP 3rNsQTpMEWSn4eeCUkCZFCR8yuRcBZWDvEN6cQyhQwusiZy1aUG8zkfNRTiNPVo0 5Hrjm/WOccOPhPk6IBEFu/PgP3GXHoDJypv/XDOmgxVaR8NkTsu6R8yaJp4ShHdp 1pWeJgehkxGCsn5CzAwsOiQZ3m7l88IppJDmNV/GFJxjh9xrFsb/XONkGTWEeJN2 rw+glFIdPtFAtMHdBQSuYATk/EM3kOOC -----END CERTIFICATE-----Generated at Sat May 17 02:02:40 2025 by rpki-client