$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/Ktu3GxFSPKM5Ll832dx2shHb4IM.mft File: Ktu3GxFSPKM5Ll832dx2shHb4IM.mft (raw, json) Hash identifier: 4NmHHRSzg/tisyKi1WmnIsiVEMmdHtUbz3vvTRFgOjE= Subject key identifier: 4B:6A:0C:C3:BE:51:6C:9E:7C:A8:48:25:E8:0B:E3:37:AD:A3:88:BE Authority key identifier: 2A:DB:B7:1B:11:52:3C:A3:39:2E:5F:37:D9:DC:76:B2:11:DB:E0:83 Certificate issuer: /CN=A91C8347/serialNumber=2ADBB71B11523CA3392E5F37D9DC76B211DBE083 Certificate serial: F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ktu3GxFSPKM5Ll832dx2shHb4IM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/Ktu3GxFSPKM5Ll832dx2shHb4IM.mft Manifest number: DF Signing time: Fri 09 May 2025 04:48:46 +0000 Manifest this update: Fri 09 May 2025 04:48:46 +0000 Manifest next update: Fri 16 May 2025 04:48:46 +0000 Files and hashes: 1: Ktu3GxFSPKM5Ll832dx2shHb4IM.crl (hash: EBBZFJz7suNjjS+kq/yjqJ6rSTOwotLANoCrRp1RCmQ=) 2: 34C7EB4010F411EFB4CD9614C4F9AE02.roa (hash: fhHN+wika6qw4BQ5YkJmWVk33R5FKnY5aL2UuUzBHhw=) 3: F4777FBEEDDA11EF9731160CC4F9AE02.roa (hash: /1+2xPWqZMP3cO+rD339mV/1/rVWVDweL8VvbjIWd3Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/Ktu3GxFSPKM5Ll832dx2shHb4IM.crl rsync://rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/Ktu3GxFSPKM5Ll832dx2shHb4IM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ktu3GxFSPKM5Ll832dx2shHb4IM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 04:48:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 241 (0xf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8347, serialNumber=2ADBB71B11523CA3392E5F37D9DC76B211DBE083 Validity Not Before: May 9 04:48:46 2025 GMT Not After : May 16 04:48:46 2025 GMT Subject: CN=681d892e-3d19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:13:21:4e:cb:b6:f0:24:02:dc:6b:5f:1d:91: 53:0d:c4:ab:74:fc:4e:1a:39:f6:2b:3d:e8:c6:f6: 11:18:2d:2d:ed:5c:88:90:57:21:ad:9c:60:f8:60: 2c:ae:8b:75:0e:fb:e3:39:eb:d5:6a:34:74:1d:94: 7a:29:2d:ad:c9:ce:97:4a:d3:c1:24:6c:c0:fd:e4: 10:f8:09:5e:ca:0b:6b:8d:cb:c9:14:1f:b8:d9:b7: 6c:67:c7:dd:c6:7a:e0:d4:59:47:94:fd:fc:ea:2d: e8:c7:1b:e0:d5:dd:32:c1:95:f7:a0:d8:3b:ff:33: 79:36:8e:f5:c2:72:3b:5b:be:1a:00:ef:db:b1:64: 5d:9f:cc:e1:49:01:89:11:6c:70:81:8a:07:38:39: 25:24:28:c2:11:79:5b:5d:2d:31:a3:37:20:8f:07: 1c:87:e8:a1:3d:09:53:ec:cc:01:09:bc:eb:52:e3: e9:e3:46:2a:17:af:32:5d:61:04:20:c1:3b:7a:21: 1b:b7:56:da:82:f7:89:d8:51:5f:11:09:96:f3:61: 86:4f:b5:a4:ac:26:05:df:4d:11:30:86:9a:da:90: 45:e7:0b:7e:b4:38:10:66:aa:52:09:57:9b:8b:2a: 11:85:27:10:07:6a:3d:af:ca:cd:b0:25:bc:31:b0: b0:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:6A:0C:C3:BE:51:6C:9E:7C:A8:48:25:E8:0B:E3:37:AD:A3:88:BE X509v3 Authority Key Identifier: keyid:2A:DB:B7:1B:11:52:3C:A3:39:2E:5F:37:D9:DC:76:B2:11:DB:E0:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/Ktu3GxFSPKM5Ll832dx2shHb4IM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ktu3GxFSPKM5Ll832dx2shHb4IM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/Ktu3GxFSPKM5Ll832dx2shHb4IM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:0e:96:44:3d:72:55:a8:62:ed:8a:21:bd:41:8e:ea:b1:6d: cb:03:9f:da:d8:f4:5a:16:9b:44:38:9a:c2:16:8b:c7:71:5a: eb:8c:6d:de:ea:c3:8e:0d:29:ad:af:68:6d:ba:ee:bd:ba:a1: 11:37:fa:d1:3a:4f:30:0a:6e:26:f1:d1:5f:2b:73:0e:a3:3f: 38:7a:f2:60:78:85:99:06:73:9f:56:be:4d:6d:d5:92:9b:fe: 0e:7e:54:f8:c0:51:c9:f6:43:85:f9:6e:e9:68:4c:13:9f:90: 6b:4c:ff:d0:15:7a:17:b8:60:0d:1d:69:14:32:81:1e:fb:4d: 54:95:5d:33:bb:e2:10:f5:af:b9:87:54:64:39:03:96:0c:67: 55:6c:19:46:d4:1b:08:f8:f0:13:80:85:44:c2:ba:54:cc:ca: 91:89:3a:bc:d3:ce:95:09:97:67:5a:88:62:20:04:7f:fa:9e: 51:e2:4f:25:93:12:c8:c4:17:a2:5b:33:36:4b:69:a5:f9:29: 38:29:fe:4f:12:52:aa:ca:6b:e6:94:ee:7e:85:1d:69:6a:4c: 8b:35:5a:1b:b2:30:b8:b3:bb:4f:dc:ec:cd:f3:17:cd:d3:9f: 33:bc:2b:d8:25:46:10:2d:3b:4f:13:ab:21:8b:40:20:d1:fe: 07:6a:e3:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzgzNDcxMTAvBgNVBAUTKDJBREJCNzFCMTE1MjNDQTMzOTJFNUYzN0Q5REM3NkIy MTFEQkUwODMwHhcNMjUwNTA5MDQ0ODQ2WhcNMjUwNTE2MDQ0ODQ2WjAYMRYwFAYD VQQDEw02ODFkODkyZS0zZDE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvRMhTsu28CQC3GtfHZFTDcSrdPxOGjn2Kz3oxvYRGC0t7VyIkFchrZxg+GAs rot1DvvjOevVajR0HZR6KS2tyc6XStPBJGzA/eQQ+AleygtrjcvJFB+42bdsZ8fd xnrg1FlHlP386i3oxxvg1d0ywZX3oNg7/zN5No71wnI7W74aAO/bsWRdn8zhSQGJ EWxwgYoHODklJCjCEXlbXS0xozcgjwcch+ihPQlT7MwBCbzrUuPp40YqF68yXWEE IME7eiEbt1bagveJ2FFfEQmW82GGT7WkrCYF300RMIaa2pBF5wt+tDgQZqpSCVeb iyoRhScQB2o9r8rNsCW8MbCwWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEtqDMO+ UWyefKhIJegL4zeto4i+MB8GA1UdIwQYMBaAFCrbtxsRUjyjOS5fN9ncdrIR2+CD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODM0Ny9DM0U3MjE5MEY5 QTkxMUVFQTgyQTc5MUFDNEY5QUUwMi9LdHUzR3hGU1BLTTVMbDgzMmR4MnNoSGI0 SU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0t0dTNHeEZTUEtNNUxsODMyZHgyc2hIYjRJTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODM0Ny9DM0U3MjE5MEY5QTkxMUVFQTgyQTc5MUFDNEY5QUUwMi9LdHUzR3hGU1BL TTVMbDgzMmR4MnNoSGI0SU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7DpZEPXJVqGLtiiG9QY7qsW3LA5/a2PRaFptEOJrCFovHcVrrjG3e 6sOODSmtr2htuu69uqERN/rROk8wCm4m8dFfK3MOoz84evJgeIWZBnOfVr5NbdWS m/4OflT4wFHJ9kOF+W7paEwTn5BrTP/QFXoXuGANHWkUMoEe+01UlV0zu+IQ9a+5 h1RkOQOWDGdVbBlG1BsI+PATgIVEwrpUzMqRiTq8086VCZdnWohiIAR/+p5R4k8l kxLIxBeiWzM2S2ml+Sk4Kf5PElKqymvmlO5+hR1pakyLNVobsjC4s7tP3OzN8xfN 058zvCvYJUYQLTtPE6shi0Ag0f4HauN2 -----END CERTIFICATE-----Generated at Sat May 10 14:48:51 2025 by rpki-client