$ rpki-client -vvf rpki.apnic.net/member_repository/A91C744F/B7F9385E22B711EB8C37033CC4F9AE02/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.mft File: KJ6yPyjJzyP6W5GKZQy4QoBQMHs.mft (raw, json) Hash identifier: dpAY2epRV9EO9Z2gZIUWS0Rx+u/7y6RVKH802BTEM6Q= Subject key identifier: DD:28:16:54:6C:0A:18:72:AF:94:3A:B8:36:EB:B4:74:0D:F2:2E:12 Authority key identifier: 28:9E:B2:3F:28:C9:CF:23:FA:5B:91:8A:65:0C:B8:42:80:50:30:7B Certificate issuer: /CN=A91C744F/serialNumber=289EB23F28C9CF23FA5B918A650CB8428050307B Certificate serial: 0770 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C744F/B7F9385E22B711EB8C37033CC4F9AE02/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.mft Manifest number: 075B Signing time: Sun 04 May 2025 21:21:13 +0000 Manifest this update: Sun 04 May 2025 21:21:12 +0000 Manifest next update: Sun 11 May 2025 21:21:12 +0000 Files and hashes: 1: KJ6yPyjJzyP6W5GKZQy4QoBQMHs.crl (hash: ZF0wkZPcBSYHv0STfWJX/5TfIoRavW7tquwMu+8OBSk=) 2: E7EFEDC07C1F11EB95B6492DC4F9AE02.roa (hash: PfwMudypLXBG0l/8zURzPSjDmL/lqt08xsdYYn3A5t8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C744F/B7F9385E22B711EB8C37033CC4F9AE02/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.crl rsync://rpki.apnic.net/member_repository/A91C744F/B7F9385E22B711EB8C37033CC4F9AE02/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 21:21:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1904 (0x770) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C744F, serialNumber=289EB23F28C9CF23FA5B918A650CB8428050307B Validity Not Before: May 4 21:21:12 2025 GMT Not After : May 11 21:21:12 2025 GMT Subject: CN=6817da49-4c67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:29:60:5c:ef:a8:c8:eb:da:ca:50:f1:06:35: eb:04:15:90:4a:a6:78:e5:61:84:53:2c:80:9b:91: 25:e8:14:10:d2:0d:e1:8b:4f:5d:4d:53:c8:ca:ed: 22:00:fc:02:04:34:38:2b:ef:5b:a2:63:41:94:94: b6:c5:e2:33:82:15:c8:e1:37:3d:e9:41:db:7a:85: ab:59:16:57:56:b3:da:db:6f:82:d4:fa:a8:81:f9: 04:76:0c:9b:75:40:42:08:09:a0:94:fe:10:da:0b: a2:b9:ab:d3:3b:1c:ff:81:27:74:a7:ae:13:2d:b7: 54:ad:51:b6:7b:85:c6:e3:3a:52:4b:4d:61:13:6c: 74:6a:54:25:2c:80:08:46:b3:5b:7e:74:f6:72:fc: 07:96:c7:a5:2f:e7:1f:46:be:2f:57:58:f2:84:1b: e3:df:b2:6f:9c:d1:f0:6a:31:4d:20:bf:31:07:25: 24:aa:6e:52:6c:cc:60:85:c5:83:0c:c0:6e:67:08: 47:82:b7:57:fd:91:98:e7:9a:29:df:5d:d5:4e:ee: 25:2a:12:2a:3a:d0:d4:dc:59:49:3e:32:32:5d:a3: 96:2b:45:6d:2e:00:6b:84:4e:15:97:dd:05:75:d9: c3:cf:d1:69:9b:11:e6:b7:bd:5a:42:e7:d7:e9:4c: a0:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:28:16:54:6C:0A:18:72:AF:94:3A:B8:36:EB:B4:74:0D:F2:2E:12 X509v3 Authority Key Identifier: keyid:28:9E:B2:3F:28:C9:CF:23:FA:5B:91:8A:65:0C:B8:42:80:50:30:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C744F/B7F9385E22B711EB8C37033CC4F9AE02/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C744F/B7F9385E22B711EB8C37033CC4F9AE02/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:0c:ef:b7:79:96:3c:ae:f1:6b:17:6a:b2:8f:cb:96:60:0f: dc:2b:6a:6c:9a:1f:0e:c2:9b:64:7c:d0:08:7b:a5:05:61:95: b7:c1:b8:e6:21:78:5e:d4:3e:89:2b:e3:3e:55:ab:5d:67:bc: 16:00:ef:c6:ef:8f:63:20:42:30:45:c5:f2:55:fa:71:8b:b6: ee:6e:af:ef:b7:4d:e7:97:05:c6:b4:d0:bd:f5:f3:e5:92:85: a2:66:f2:01:8c:3a:4a:ca:bb:5d:70:e5:57:04:3a:f3:32:75: ff:ff:23:7f:23:20:6d:d1:1e:b2:c0:c9:14:55:ab:ad:57:4f: d2:2a:f7:07:77:aa:70:6f:91:13:ad:ff:24:6f:73:32:12:6b: c1:4c:40:cb:72:9f:29:bc:34:17:d2:d1:de:59:db:02:ae:12: 06:3c:b4:42:b4:b5:98:f0:c2:6a:66:2e:51:71:75:d3:22:2f: 69:0a:0a:52:99:ec:8d:15:ad:b8:a4:53:f1:66:62:cd:04:11: 8e:4e:fe:70:92:36:ef:28:3d:e8:98:9a:7f:ce:70:96:4f:7f: 6c:37:c3:d1:f0:05:c9:40:a9:c2:52:b2:bc:65:31:30:66:29: 06:47:5d:5c:ac:17:10:cf:d7:8f:3b:31:70:ef:de:ba:ab:97: 69:4a:67:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB3AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc0NEYxMTAvBgNVBAUTKDI4OUVCMjNGMjhDOUNGMjNGQTVCOTE4QTY1MENCODQy ODA1MDMwN0IwHhcNMjUwNTA0MjEyMTEyWhcNMjUwNTExMjEyMTEyWjAYMRYwFAYD VQQDEw02ODE3ZGE0OS00YzY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwilgXO+oyOvaylDxBjXrBBWQSqZ45WGEUyyAm5El6BQQ0g3hi09dTVPIyu0i APwCBDQ4K+9bomNBlJS2xeIzghXI4Tc96UHbeoWrWRZXVrPa22+C1PqogfkEdgyb dUBCCAmglP4Q2guiuavTOxz/gSd0p64TLbdUrVG2e4XG4zpSS01hE2x0alQlLIAI RrNbfnT2cvwHlselL+cfRr4vV1jyhBvj37JvnNHwajFNIL8xByUkqm5SbMxghcWD DMBuZwhHgrdX/ZGY55op313VTu4lKhIqOtDU3FlJPjIyXaOWK0VtLgBrhE4Vl90F ddnDz9FpmxHmt71aQufX6UygxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN0oFlRs Chhyr5Q6uDbrtHQN8i4SMB8GA1UdIwQYMBaAFCiesj8oyc8j+luRimUMuEKAUDB7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzQ0Ri9CN0Y5Mzg1RTIy QjcxMUVCOEMzNzAzM0NDNEY5QUUwMi9LSjZ5UHlqSnp5UDZXNUdLWlF5NFFvQlFN SHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tKNnlQeWpKenlQNlc1R0taUXk0UW9CUU1Icy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzQ0Ri9CN0Y5Mzg1RTIyQjcxMUVCOEMzNzAzM0NDNEY5QUUwMi9LSjZ5UHlqSnp5 UDZXNUdLWlF5NFFvQlFNSHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3DO+3eZY8rvFrF2qyj8uWYA/cK2psmh8OwptkfNAIe6UFYZW3wbjm IXhe1D6JK+M+VatdZ7wWAO/G749jIEIwRcXyVfpxi7bubq/vt03nlwXGtNC99fPl koWiZvIBjDpKyrtdcOVXBDrzMnX//yN/IyBt0R6ywMkUVautV0/SKvcHd6pwb5ET rf8kb3MyEmvBTEDLcp8pvDQX0tHeWdsCrhIGPLRCtLWY8MJqZi5RcXXTIi9pCgpS meyNFa24pFPxZmLNBBGOTv5wkjbvKD3omJp/znCWT39sN8PR8AXJQKnCUrK8ZTEw ZikGR11crBcQz9ePOzFw7966q5dpSmfy -----END CERTIFICATE-----Generated at Mon May 5 06:26:59 2025 by rpki-client