$ rpki-client -vvf rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.mft File: kzrI56xL07WCmJ_Mty_JJ9cWQks.mft (raw, json) Hash identifier: LIBGHIqoO2VYta0HtLo8iOEPLvnEMLiCWjtSnstIhI4= Subject key identifier: D0:34:06:2F:BD:FE:BA:7D:12:7F:73:A9:21:8A:2A:E6:A8:82:49:7D Authority key identifier: 93:3A:C8:E7:AC:4B:D3:B5:82:98:9F:CC:B7:2F:C9:27:D7:16:42:4B Certificate issuer: /CN=A91C79E1/serialNumber=933AC8E7AC4BD3B582989FCCB72FC927D716424B Certificate serial: 0816 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzrI56xL07WCmJ_Mty_JJ9cWQks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.mft Manifest number: 0810 Signing time: Fri 16 May 2025 21:10:46 +0000 Manifest this update: Fri 16 May 2025 21:10:46 +0000 Manifest next update: Fri 23 May 2025 21:10:46 +0000 Files and hashes: 1: kzrI56xL07WCmJ_Mty_JJ9cWQks.crl (hash: JsfPayfcji7NmPXN7G/mrEFHwdDWPg0tQDKs4GeXALY=) 2: 26D0F9B82A6611ECB12FB439C4F9AE02.roa (hash: o8uKSFAZOoKiAV/aw+gEXp611EqrXFJMlAGF3VnwD9c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.crl rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzrI56xL07WCmJ_Mty_JJ9cWQks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 21:10:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2070 (0x816) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C79E1, serialNumber=933AC8E7AC4BD3B582989FCCB72FC927D716424B Validity Not Before: May 16 21:10:46 2025 GMT Not After : May 23 21:10:46 2025 GMT Subject: CN=6827a9d6-3a4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:50:5c:0d:09:78:38:e8:af:3c:00:9b:dc:e8: 7c:fb:86:7c:ef:9b:8d:5e:1e:00:20:20:d1:6c:9e: b3:31:0e:77:bb:1f:90:70:a6:2a:a0:82:95:f4:06: 70:d8:6f:cf:8d:e3:5d:9d:e0:19:90:dd:7c:c0:bf: f7:13:4c:a2:c2:58:1f:31:17:e2:6b:6d:af:8b:9e: 6d:f5:03:20:79:4b:e3:66:56:2b:22:e5:af:8b:39: 53:f0:3d:9f:06:ec:1d:11:1d:ec:9d:d7:ca:1f:b5: 90:88:aa:e6:f5:39:be:fb:93:39:e4:6e:f4:c6:2f: 40:4e:a5:b6:57:7e:b8:c0:52:5d:0d:a7:0f:4c:3c: fe:7a:2e:36:bb:b8:a0:ed:5b:1a:cf:2c:65:73:7c: 3e:d7:46:2d:36:d7:c9:fa:30:ce:a1:89:43:57:db: 0d:fc:71:da:19:43:0a:9e:a4:65:b7:2e:a5:a3:f2: ec:55:b9:c0:b9:8e:fc:44:c3:05:50:41:67:62:3d: f7:61:38:29:e9:1e:f4:9a:81:a2:5e:56:5b:91:32: 33:3c:09:21:9a:79:39:45:97:c5:27:7f:74:fe:65: 4f:ec:79:86:fc:93:fb:f4:66:24:8b:7b:23:bd:e1: d5:31:67:dc:40:42:54:02:05:86:ad:de:52:f7:4d: d8:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:34:06:2F:BD:FE:BA:7D:12:7F:73:A9:21:8A:2A:E6:A8:82:49:7D X509v3 Authority Key Identifier: keyid:93:3A:C8:E7:AC:4B:D3:B5:82:98:9F:CC:B7:2F:C9:27:D7:16:42:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzrI56xL07WCmJ_Mty_JJ9cWQks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:ae:73:93:a3:60:65:98:fe:ba:35:e1:2d:6b:3b:e5:41:56: 25:90:da:20:a0:c4:c5:9c:70:aa:b2:1a:cb:7d:a8:99:65:98: 21:ed:05:52:d1:29:49:75:d2:36:37:46:59:58:e5:c5:96:dd: 11:23:ed:af:e2:77:22:85:ee:f9:26:f4:1f:a8:0c:8b:be:79: 2d:2e:c1:7a:ec:0a:69:3b:8d:43:6c:40:f4:26:4f:4c:be:c0: d6:c3:54:2f:97:df:ed:d5:6c:dc:1e:2f:45:ac:55:b4:df:b5: c8:1b:19:14:54:8b:44:ad:41:6c:92:04:09:a8:3a:87:e5:7b: ca:f3:77:54:5c:2d:7f:aa:87:ed:b8:21:2d:ba:53:25:12:5e: d9:b2:f0:9a:6c:bb:c2:9d:8a:8b:5a:17:fa:4b:6e:35:a7:ef: fb:3a:4d:21:11:c0:e4:19:27:22:ea:41:27:8a:ff:fc:36:f9: 16:a7:f4:b7:10:03:3c:0e:ac:56:7e:0c:0c:97:5b:c3:c7:9f: e5:35:9a:6a:d7:67:01:de:6d:83:e6:6b:9b:7a:6a:29:7b:4b: a0:50:a9:32:47:f5:3b:08:2d:42:40:32:0e:51:d9:62:b5:80: a9:0e:d3:89:47:48:35:8c:ae:df:bf:3a:52:3a:c5:dd:7c:e8: b4:35:fd:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc5RTExMTAvBgNVBAUTKDkzM0FDOEU3QUM0QkQzQjU4Mjk4OUZDQ0I3MkZDOTI3 RDcxNjQyNEIwHhcNMjUwNTE2MjExMDQ2WhcNMjUwNTIzMjExMDQ2WjAYMRYwFAYD VQQDEw02ODI3YTlkNi0zYTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvFBcDQl4OOivPACb3Oh8+4Z875uNXh4AICDRbJ6zMQ53ux+QcKYqoIKV9AZw 2G/PjeNdneAZkN18wL/3E0yiwlgfMRfia22vi55t9QMgeUvjZlYrIuWvizlT8D2f BuwdER3sndfKH7WQiKrm9Tm++5M55G70xi9ATqW2V364wFJdDacPTDz+ei42u7ig 7Vsazyxlc3w+10YtNtfJ+jDOoYlDV9sN/HHaGUMKnqRlty6lo/LsVbnAuY78RMMF UEFnYj33YTgp6R70moGiXlZbkTIzPAkhmnk5RZfFJ390/mVP7HmG/JP79GYki3sj veHVMWfcQEJUAgWGrd5S903YGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNA0Bi+9 /rp9En9zqSGKKuaogkl9MB8GA1UdIwQYMBaAFJM6yOesS9O1gpifzLcvySfXFkJL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzlFMS82NTU2RjhEQUQ3 ODQxMUVBOUM1RDk2NDBDNEY5QUUwMi9renJJNTZ4TDA3V0NtSl9NdHlfSko5Y1dR a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2t6ckk1NnhMMDdXQ21KX010eV9KSjljV1Frcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzlFMS82NTU2RjhEQUQ3ODQxMUVBOUM1RDk2NDBDNEY5QUUwMi9renJJNTZ4TDA3 V0NtSl9NdHlfSko5Y1dRa3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3rnOTo2BlmP66NeEtazvlQVYlkNogoMTFnHCqshrLfaiZZZgh7QVS 0SlJddI2N0ZZWOXFlt0RI+2v4ncihe75JvQfqAyLvnktLsF67AppO41DbED0Jk9M vsDWw1Qvl9/t1WzcHi9FrFW037XIGxkUVItErUFskgQJqDqH5XvK83dUXC1/qoft uCEtulMlEl7ZsvCabLvCnYqLWhf6S241p+/7Ok0hEcDkGSci6kEniv/8NvkWp/S3 EAM8DqxWfgwMl1vDx5/lNZpq12cB3m2D5mubemope0ugUKkyR/U7CC1CQDIOUdli tYCpDtOJR0g1jK7fvzpSOsXdfOi0Nf0w -----END CERTIFICATE-----Generated at Sat May 17 22:57:57 2025 by rpki-client