$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft File: ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft (raw, json) Hash identifier: dzYQKXiO5TPeIsKjbuCcq46FGLQyAQTzWRmj/Xeptw0= Subject key identifier: 01:22:32:B5:5B:5F:A9:D9:C5:62:B8:FB:1F:F0:57:43:D9:3B:88:EF Authority key identifier: 92:EF:D5:C0:B9:20:1A:7E:D3:96:5F:2D:98:B6:D9:EB:66:29:05:30 Certificate issuer: /CN=A91ED9F9/serialNumber=92EFD5C0B9201A7ED3965F2D98B6D9EB66290530 Certificate serial: F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ku_VwLkgGn7Tll8tmLbZ62YpBTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft Manifest number: EF Signing time: Sun 11 May 2025 04:12:00 +0000 Manifest this update: Sun 11 May 2025 04:11:59 +0000 Manifest next update: Sun 18 May 2025 04:11:59 +0000 Files and hashes: 1: ku_VwLkgGn7Tll8tmLbZ62YpBTA.crl (hash: I+MVhTml+y6kLDCqH/KnDFG9Pkj2sVR0mUk+31aBjyE=) 2: BAE1F274190511F0826DA721C4F9AE02.roa (hash: hkDgEW3xtmdXjSOLRvfpWhXCPRLijL9lQq3GA+lSi2M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.crl rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ku_VwLkgGn7Tll8tmLbZ62YpBTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 04:11:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 244 (0xf4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED9F9, serialNumber=92EFD5C0B9201A7ED3965F2D98B6D9EB66290530 Validity Not Before: May 11 04:11:59 2025 GMT Not After : May 18 04:11:59 2025 GMT Subject: CN=68202390-45f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a2:44:20:1e:6e:29:58:29:f4:db:34:9c:86: 02:23:34:d0:cb:be:c9:0e:32:09:b6:15:05:97:af: 46:2e:e0:e9:db:92:fe:56:af:83:8d:09:a1:69:d9: b8:1a:e3:82:13:3f:82:80:de:04:1f:78:b2:80:dc: a5:70:82:a6:7b:c1:7f:64:66:98:6a:b9:0e:f0:da: 9a:a8:a8:02:b0:42:05:6f:2b:12:3e:ed:f3:10:96: f1:f0:d6:fb:4a:25:84:c9:88:57:60:af:88:9d:09: af:dc:ad:27:5e:dd:4f:b7:57:15:ee:45:87:1f:57: 42:2b:d5:de:9e:93:7c:0a:db:be:54:e6:f3:c5:38: a1:46:50:5c:1e:93:be:fa:8d:b0:f0:83:46:0d:aa: 4e:bb:29:c7:c1:16:68:21:e1:48:98:c8:be:eb:cb: 48:4a:2f:36:0d:62:7b:b6:12:2a:f2:e8:c5:5a:47: f4:b1:ae:54:48:14:fc:16:31:4b:b0:94:52:9b:8f: ed:a1:d5:48:1d:1d:7e:e4:e6:14:0d:0a:1d:1b:7e: 14:8d:08:a6:93:cd:82:0e:9d:c4:bb:24:64:ce:69: 39:27:6e:d6:b0:a6:66:18:9f:dc:30:0c:b8:62:f4: 98:1a:72:5c:15:74:d6:8a:ef:82:cc:9e:5d:71:ba: 7a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:22:32:B5:5B:5F:A9:D9:C5:62:B8:FB:1F:F0:57:43:D9:3B:88:EF X509v3 Authority Key Identifier: keyid:92:EF:D5:C0:B9:20:1A:7E:D3:96:5F:2D:98:B6:D9:EB:66:29:05:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ku_VwLkgGn7Tll8tmLbZ62YpBTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:f3:45:d0:f9:4e:32:69:cf:0d:e6:3b:1d:fc:ca:37:45:9c: 7a:d6:cc:3a:4c:4e:47:f8:04:ec:15:d9:29:f0:f0:0f:9f:c0: 0d:0c:92:cf:8c:04:8b:de:8a:54:27:e1:17:0d:0e:d6:01:2f: 09:7d:ce:d2:a8:e2:18:69:aa:11:b1:72:2c:e9:fd:c1:1d:20: a2:0b:78:04:ae:ee:2d:f2:bb:cb:fe:31:0c:7a:bf:97:2d:d0: 22:f9:51:2d:2c:1f:94:86:07:af:d0:1c:3c:e3:92:0f:da:6f: 52:1c:8e:fd:29:ea:a0:93:51:03:e3:1a:58:11:25:e5:90:f1: 49:82:c3:c4:95:a3:42:02:d6:55:08:8e:eb:dd:01:9b:1f:7b: b1:f7:d7:70:d4:fb:0d:37:73:90:0a:07:6e:70:4f:2a:fd:47: bb:ef:2b:2e:8c:5d:5c:4f:c4:53:e6:99:65:b8:2e:fb:6a:65: 44:dd:e0:0f:83:3c:45:83:0e:a0:60:a8:1f:59:95:3e:b4:ad: da:1c:c4:0b:05:4e:ce:83:c3:6f:78:b3:56:c3:d6:77:fd:61: f6:72:ab:5a:02:ea:8d:04:42:07:8c:aa:c1:5e:11:80:69:c8: 77:69:0f:e6:95:dd:3e:17:35:c1:da:60:14:6a:b0:14:51:6f: 46:91:a2:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQ5RjkxMTAvBgNVBAUTKDkyRUZENUMwQjkyMDFBN0VEMzk2NUYyRDk4QjZEOUVC NjYyOTA1MzAwHhcNMjUwNTExMDQxMTU5WhcNMjUwNTE4MDQxMTU5WjAYMRYwFAYD VQQDEw02ODIwMjM5MC00NWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsqJEIB5uKVgp9Ns0nIYCIzTQy77JDjIJthUFl69GLuDp25L+Vq+DjQmhadm4 GuOCEz+CgN4EH3iygNylcIKme8F/ZGaYarkO8NqaqKgCsEIFbysSPu3zEJbx8Nb7 SiWEyYhXYK+InQmv3K0nXt1Pt1cV7kWHH1dCK9XenpN8Ctu+VObzxTihRlBcHpO+ +o2w8INGDapOuynHwRZoIeFImMi+68tISi82DWJ7thIq8ujFWkf0sa5USBT8FjFL sJRSm4/todVIHR1+5OYUDQodG34UjQimk82CDp3EuyRkzmk5J27WsKZmGJ/cMAy4 YvSYGnJcFXTWiu+CzJ5dcbp6awIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAEiMrVb X6nZxWK4+x/wV0PZO4jvMB8GA1UdIwQYMBaAFJLv1cC5IBp+05ZfLZi22etmKQUw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDlGOS82ODYwRDVBMEM5 NTIxMUVFQjdBRERENEVDNEY5QUUwMi9rdV9Wd0xrZ0duN1RsbDh0bUxiWjYyWXBC VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2t1X1Z3TGtnR243VGxsOHRtTGJaNjJZcEJUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDlGOS82ODYwRDVBMEM5NTIxMUVFQjdBRERENEVDNEY5QUUwMi9rdV9Wd0xrZ0du N1RsbDh0bUxiWjYyWXBCVEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAX80XQ+U4yac8N5jsd/Mo3RZx61sw6TE5H+ATsFdkp8PAPn8ANDJLP jASL3opUJ+EXDQ7WAS8Jfc7SqOIYaaoRsXIs6f3BHSCiC3gEru4t8rvL/jEMer+X LdAi+VEtLB+Uhgev0Bw845IP2m9SHI79Keqgk1ED4xpYESXlkPFJgsPElaNCAtZV CI7r3QGbH3ux99dw1PsNN3OQCgducE8q/Ue77ysujF1cT8RT5plluC77amVE3eAP gzxFgw6gYKgfWZU+tK3aHMQLBU7Og8NveLNWw9Z3/WH2cqtaAuqNBEIHjKrBXhGA ach3aQ/mld0+FzXB2mAUarAUUW9GkaLK -----END CERTIFICATE-----Generated at Sun May 11 22:05:44 2025 by rpki-client