$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft File: kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft (raw, json) Hash identifier: 5v/WtnyfpF9IPSaKQKVonzKBL7QeAdWc8HK/hF2QY84= Subject key identifier: D3:35:F7:33:FE:14:61:48:8D:30:32:82:65:89:6C:38:63:EB:BE:25 Authority key identifier: 91:F2:DE:67:C8:E6:5B:B5:33:ED:8F:3C:64:F3:2D:F9:C6:95:C0:57 Certificate issuer: /CN=A91BC1CE/serialNumber=91F2DE67C8E65BB533ED8F3C64F32DF9C695C057 Certificate serial: 104F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft Manifest number: 1048 Signing time: Sat 10 May 2025 17:16:41 +0000 Manifest this update: Sat 10 May 2025 17:16:40 +0000 Manifest next update: Sat 17 May 2025 17:16:40 +0000 Files and hashes: 1: kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.crl (hash: h6N0G0jEcnWn97D/M//XzEVFcPJ2NCZExnl4qhAJDQ4=) 2: 4178B83237ED11E99B3C9C4AC4F9AE02.roa (hash: Zx1NZFaobsMkPgZlMNZ8S9A1zmjC7C3D22JCgStrQxA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.crl rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 17:16:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4175 (0x104f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC1CE, serialNumber=91F2DE67C8E65BB533ED8F3C64F32DF9C695C057 Validity Not Before: May 10 17:16:40 2025 GMT Not After : May 17 17:16:40 2025 GMT Subject: CN=681f89f9-7c50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d6:70:f0:80:e2:f1:3e:6f:2a:2b:33:3f:75: d2:d7:b2:48:58:4c:10:05:1e:b1:a6:66:e8:3c:4c: 37:4d:b2:de:c3:2c:d3:b9:b8:c1:f8:05:6d:ca:d6: b3:8e:a3:ac:ca:72:fd:10:cc:8a:c3:e9:03:e6:be: c9:64:93:b8:58:88:27:e4:74:a3:30:da:83:35:e1: d5:39:7e:46:d7:83:39:53:ed:f0:39:cc:96:10:37: fb:86:ca:85:eb:33:69:e6:a0:8f:ec:36:53:f9:7a: 3c:ed:9f:ef:51:08:4f:87:58:43:63:f4:42:ee:93: 1d:3f:8a:e4:d8:5b:ec:34:dc:d1:3d:6e:7e:90:9c: 29:e6:22:7a:48:46:ce:5f:c9:e2:7b:85:0a:d6:b0: 81:a6:01:18:90:0b:f2:b4:6e:d2:01:80:f6:3c:3d: bd:82:11:36:8f:57:9c:d5:18:be:61:db:65:ab:a8: 99:1c:f8:64:38:3f:bf:88:72:90:d6:65:24:41:4b: 10:0b:ac:8f:26:b5:a8:2e:8b:a1:df:52:93:84:49: bb:1a:c9:58:90:f0:eb:d0:2b:64:bc:c0:54:af:a6: 11:99:44:ac:4f:7b:20:76:a9:c1:3f:f9:39:fe:58: 64:55:31:55:93:12:63:e1:c4:fc:4a:2b:da:57:ef: b5:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:35:F7:33:FE:14:61:48:8D:30:32:82:65:89:6C:38:63:EB:BE:25 X509v3 Authority Key Identifier: keyid:91:F2:DE:67:C8:E6:5B:B5:33:ED:8F:3C:64:F3:2D:F9:C6:95:C0:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:32:f4:8f:3e:e9:04:31:e4:64:fc:80:9d:3e:ec:27:c7:3e: 2d:a2:69:30:64:d6:26:a5:73:22:bd:a3:a1:6c:3f:03:28:4d: 94:3b:60:91:09:2d:df:fc:17:ee:16:30:08:01:c5:16:ef:13: d0:fb:0c:ce:ac:b5:7a:bf:c3:b3:45:1c:7f:47:42:40:f0:07: 5e:6e:63:21:38:0f:1c:33:66:6f:45:23:0b:37:be:ce:20:75: cd:c5:d7:22:03:ee:ab:c4:fd:0f:92:39:18:0d:ef:75:6d:e2: e8:e1:0e:ac:96:d4:3c:f8:06:e0:8c:35:c2:fe:50:4c:c1:fb: ea:a1:38:5b:65:8c:00:98:be:c7:6a:fe:8b:b0:8a:35:b6:6f: a3:45:70:c5:30:98:f2:fb:24:86:04:27:fa:2c:c6:41:f1:99: 9f:a1:f4:c3:9b:67:f7:a3:c4:27:62:98:fa:24:08:67:a2:47: 7b:e6:19:cb:b6:c0:46:b7:6e:fc:c4:eb:84:22:0c:9f:90:8b: 8b:34:e0:b7:77:17:94:85:eb:17:b9:50:e6:83:de:ad:2e:38: bd:36:d7:17:eb:ee:e9:e1:21:04:c3:1b:26:d7:51:49:7c:b0: 55:63:a6:b3:8b:87:87:ab:d7:67:af:fd:48:a5:94:23:16:35: eb:db:13:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEE8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkMxQ0UxMTAvBgNVBAUTKDkxRjJERTY3QzhFNjVCQjUzM0VEOEYzQzY0RjMyREY5 QzY5NUMwNTcwHhcNMjUwNTEwMTcxNjQwWhcNMjUwNTE3MTcxNjQwWjAYMRYwFAYD VQQDEw02ODFmODlmOS03YzUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAldZw8IDi8T5vKiszP3XS17JIWEwQBR6xpmboPEw3TbLewyzTubjB+AVtytaz jqOsynL9EMyKw+kD5r7JZJO4WIgn5HSjMNqDNeHVOX5G14M5U+3wOcyWEDf7hsqF 6zNp5qCP7DZT+Xo87Z/vUQhPh1hDY/RC7pMdP4rk2FvsNNzRPW5+kJwp5iJ6SEbO X8nie4UK1rCBpgEYkAvytG7SAYD2PD29ghE2j1ec1Ri+Ydtlq6iZHPhkOD+/iHKQ 1mUkQUsQC6yPJrWoLouh31KThEm7GslYkPDr0CtkvMBUr6YRmUSsT3sgdqnBP/k5 /lhkVTFVkxJj4cT8SivaV++1owIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNM19zP+ FGFIjTAygmWJbDhj674lMB8GA1UdIwQYMBaAFJHy3mfI5lu1M+2PPGTzLfnGlcBX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzFDRS8yNEZBNjBFNDM3 RUMxMUU5QTg3NUU4NDhDNEY5QUUwMi9rZkxlWjhqbVc3VXo3WTg4WlBNdC1jYVZ3 RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tmTGVaOGptVzdVejdZODhaUE10LWNhVndGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzFDRS8yNEZBNjBFNDM3RUMxMUU5QTg3NUU4NDhDNEY5QUUwMi9rZkxlWjhqbVc3 VXo3WTg4WlBNdC1jYVZ3RmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMMvSPPukEMeRk/ICdPuwnxz4tomkwZNYmpXMivaOhbD8DKE2UO2CR CS3f/BfuFjAIAcUW7xPQ+wzOrLV6v8OzRRx/R0JA8AdebmMhOA8cM2ZvRSMLN77O IHXNxdciA+6rxP0PkjkYDe91beLo4Q6sltQ8+AbgjDXC/lBMwfvqoThbZYwAmL7H av6LsIo1tm+jRXDFMJjy+ySGBCf6LMZB8ZmfofTDm2f3o8QnYpj6JAhnokd75hnL tsBGt278xOuEIgyfkIuLNOC3dxeUhesXuVDmg96tLji9NtcX6+7p4SEEwxsm11FJ fLBVY6azi4eHq9dnr/1IpZQjFjXr2xM5 -----END CERTIFICATE-----Generated at Mon May 12 12:52:28 2025 by rpki-client