$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE323/9E61E424525F11EE80BA0D74C4F9AE02/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.mft File: kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.mft (raw, json) Hash identifier: WxECfLimUcHhqNLVgghs+sw7YcPuMVqeVn99a9Shv94= Subject key identifier: A2:BA:2C:7E:EF:C6:24:EC:A7:99:7D:24:7D:58:A8:1E:74:02:BF:EE Authority key identifier: 93:04:23:4E:73:90:49:14:3A:85:91:A3:74:5A:53:E4:B9:2A:D8:D8 Certificate issuer: /CN=A91DE323/serialNumber=9304234E739049143A8591A3745A53E4B92AD8D8 Certificate serial: 014A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE323/9E61E424525F11EE80BA0D74C4F9AE02/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.mft Manifest number: 0143 Signing time: Thu 15 May 2025 03:48:05 +0000 Manifest this update: Thu 15 May 2025 03:48:05 +0000 Manifest next update: Thu 22 May 2025 03:48:05 +0000 Files and hashes: 1: kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.crl (hash: LEi6DD4ekQM+Q9JbQbQIr0Oj+i4o6A36I3mLdYTWOYs=) 2: 3AB9E692C0D211EEB7BBBE4FC4F9AE02.roa (hash: A0mC9X2UnmVuFudZOyuXLKDdp8UzNcimAQJMyA4hcow=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE323/9E61E424525F11EE80BA0D74C4F9AE02/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.crl rsync://rpki.apnic.net/member_repository/A91DE323/9E61E424525F11EE80BA0D74C4F9AE02/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 03:48:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 330 (0x14a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE323, serialNumber=9304234E739049143A8591A3745A53E4B92AD8D8 Validity Not Before: May 15 03:48:05 2025 GMT Not After : May 22 03:48:05 2025 GMT Subject: CN=682563f5-6057 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:3c:bc:0d:5a:14:c7:0e:86:13:df:22:fa:3b: 6e:7d:98:11:d3:2d:bc:2b:03:b4:83:f3:c8:51:c0: 7f:75:7c:76:fc:e1:7a:a5:1e:4e:7a:d7:0b:99:07: 37:ee:bc:ae:69:bc:07:10:84:6b:34:1c:ca:26:b3: 67:0a:04:63:62:01:b3:da:76:b0:e0:77:10:d1:73: 09:fd:5a:5c:8e:ca:ee:37:d5:10:60:96:06:e2:a9: 5c:74:01:88:25:f1:0f:50:4e:f2:f5:c0:44:fb:ec: fc:57:46:c7:15:80:de:45:66:ea:39:fb:10:ad:5c: 17:64:74:b9:b8:be:bc:91:3f:ac:72:24:87:51:2d: 1e:49:94:a3:4a:7c:38:d4:d3:9f:91:60:73:81:55: 53:d4:a6:a4:10:d4:08:80:c4:f9:d1:b7:07:57:fd: 1a:81:69:2a:11:e4:af:fc:71:7b:4d:d7:0a:ee:4c: df:85:07:55:a7:90:80:1a:cf:1f:ff:51:e5:fb:69: 63:c1:fc:af:53:b4:1d:6e:b2:40:e5:1d:53:56:c8: 68:22:cb:0b:b7:0a:44:3d:af:a1:8c:ca:3a:f4:3c: d7:a9:80:73:0d:c4:02:f9:e5:95:54:3e:24:2a:cc: 8e:3b:e9:f2:77:f3:09:6a:1d:e1:22:30:5b:eb:74: aa:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:BA:2C:7E:EF:C6:24:EC:A7:99:7D:24:7D:58:A8:1E:74:02:BF:EE X509v3 Authority Key Identifier: keyid:93:04:23:4E:73:90:49:14:3A:85:91:A3:74:5A:53:E4:B9:2A:D8:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE323/9E61E424525F11EE80BA0D74C4F9AE02/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE323/9E61E424525F11EE80BA0D74C4F9AE02/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:db:ba:f1:83:25:c0:ef:c2:d0:e0:4d:bf:60:70:15:bf:e6: bd:60:52:82:bc:ab:68:71:e2:ea:35:ce:6e:09:2f:82:32:66: b5:ab:12:e8:88:de:bc:a5:0b:cf:09:d5:27:91:17:b1:95:ee: db:73:f0:f5:5c:f7:37:25:0d:05:87:d7:01:1a:ef:86:b1:89: d4:88:ab:be:15:00:9a:e0:85:90:9a:d1:8d:d2:7c:0c:f9:a0: ba:3e:d7:c6:4c:f3:50:cc:ff:35:66:5f:3d:27:f8:5e:2b:d7: b7:b5:57:6d:95:25:72:00:be:de:6c:99:39:2b:b5:3e:80:1c: 33:7e:f7:e5:47:35:65:12:01:f0:80:19:8f:99:1c:63:10:65: 9f:03:35:51:10:76:ab:4c:ca:ac:d0:f7:a1:88:8e:16:f3:e6: d8:70:6f:30:e0:d6:13:d4:da:7b:4e:6f:32:72:67:a8:39:68: 1f:d6:1b:db:f4:8f:8a:fa:13:24:e3:23:ef:c5:f5:39:96:2c: 2d:18:0e:46:74:5c:84:b8:39:49:03:fa:2c:f1:67:40:77:a4: c4:69:ce:11:f2:db:6b:39:90:9d:ba:48:4a:6e:3c:73:7a:42: 2d:9a:e2:68:08:3e:24:2f:46:28:3e:bc:0a:4a:e5:7c:c8:ea: 4f:50:f5:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REUzMjMxMTAvBgNVBAUTKDkzMDQyMzRFNzM5MDQ5MTQzQTg1OTFBMzc0NUE1M0U0 QjkyQUQ4RDgwHhcNMjUwNTE1MDM0ODA1WhcNMjUwNTIyMDM0ODA1WjAYMRYwFAYD VQQDEw02ODI1NjNmNS02MDU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkjy8DVoUxw6GE98i+jtufZgR0y28KwO0g/PIUcB/dXx2/OF6pR5OetcLmQc3 7ryuabwHEIRrNBzKJrNnCgRjYgGz2naw4HcQ0XMJ/VpcjsruN9UQYJYG4qlcdAGI JfEPUE7y9cBE++z8V0bHFYDeRWbqOfsQrVwXZHS5uL68kT+sciSHUS0eSZSjSnw4 1NOfkWBzgVVT1KakENQIgMT50bcHV/0agWkqEeSv/HF7TdcK7kzfhQdVp5CAGs8f /1Hl+2ljwfyvU7QdbrJA5R1TVshoIssLtwpEPa+hjMo69DzXqYBzDcQC+eWVVD4k KsyOO+nyd/MJah3hIjBb63SqdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKK6LH7v xiTsp5l9JH1YqB50Ar/uMB8GA1UdIwQYMBaAFJMEI05zkEkUOoWRo3RaU+S5KtjY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTMyMy85RTYxRTQyNDUy NUYxMUVFODBCQTBENzRDNEY5QUUwMi9rd1FqVG5PUVNSUTZoWkdqZEZwVDVMa3Ey TmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2t3UWpUbk9RU1JRNmhaR2pkRnBUNUxrcTJOZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTMyMy85RTYxRTQyNDUyNUYxMUVFODBCQTBENzRDNEY5QUUwMi9rd1FqVG5PUVNS UTZoWkdqZEZwVDVMa3EyTmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCp27rxgyXA78LQ4E2/YHAVv+a9YFKCvKtoceLqNc5uCS+CMma1qxLo iN68pQvPCdUnkRexle7bc/D1XPc3JQ0Fh9cBGu+GsYnUiKu+FQCa4IWQmtGN0nwM +aC6PtfGTPNQzP81Zl89J/heK9e3tVdtlSVyAL7ebJk5K7U+gBwzfvflRzVlEgHw gBmPmRxjEGWfAzVREHarTMqs0PehiI4W8+bYcG8w4NYT1Np7Tm8ycmeoOWgf1hvb 9I+K+hMk4yPvxfU5liwtGA5GdFyEuDlJA/os8WdAd6TEac4R8ttrOZCdukhKbjxz ekItmuJoCD4kL0YoPrwKSuV8yOpPUPVb -----END CERTIFICATE-----Generated at Fri May 16 17:47:35 2025 by rpki-client