$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft File: kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft (raw, json) Hash identifier: QM38Q6YduMUf0F27/eBLuCxMaAheRGbvtXRcZ+KPAgY= Subject key identifier: 31:4F:AD:BF:27:73:C1:7C:9B:4E:78:3C:75:7D:8D:60:9D:C1:4B:8C Authority key identifier: 92:0E:C6:FC:36:57:D3:FB:00:98:82:59:8C:98:6A:74:F5:55:58:DF Certificate issuer: /CN=A91EF163/serialNumber=920EC6FC3657D3FB009882598C986A74F55558DF Certificate serial: 16A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kg7G_DZX0_sAmIJZjJhqdPVVWN8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft Manifest number: 168F Signing time: Mon 12 May 2025 16:37:12 +0000 Manifest this update: Mon 12 May 2025 16:37:11 +0000 Manifest next update: Mon 19 May 2025 16:37:11 +0000 Files and hashes: 1: kg7G_DZX0_sAmIJZjJhqdPVVWN8.crl (hash: bZ7KmdIGD/aYjN/viPca6VUxV9mgsiU90edOa4XknyI=) 2: 47F9786C171B11ECB022FD54C4F9AE02.roa (hash: sOJSfPhONuIwfnLzU2bf0wUh3TAZgenPqffj0l4T340=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.crl rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kg7G_DZX0_sAmIJZjJhqdPVVWN8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 16:37:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5797 (0x16a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF163, serialNumber=920EC6FC3657D3FB009882598C986A74F55558DF Validity Not Before: May 12 16:37:11 2025 GMT Not After : May 19 16:37:11 2025 GMT Subject: CN=682223b7-df5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:87:59:1e:30:5d:e1:2f:71:86:e8:20:24:79: 77:7f:a2:d1:0f:22:16:32:d6:eb:d8:71:1a:d1:e5: c3:1d:e0:38:95:be:15:22:cc:f3:19:a7:e2:68:89: d2:39:2e:b1:f3:54:d4:d6:1f:f7:69:ce:6c:6c:f5: 0c:6c:14:b5:88:0b:ac:a4:e2:28:17:79:79:cb:11: 03:ff:28:72:64:ab:6d:f0:99:5d:74:ac:03:fb:2f: 87:30:ad:73:80:64:f5:98:8b:9b:55:31:7e:aa:18: 16:8e:64:44:3a:42:a8:1c:13:c5:7a:76:47:59:76: 3b:23:71:c3:5a:a4:8f:70:4d:fd:bb:75:ae:b0:79: 74:7b:dd:d5:c4:c2:69:41:a5:33:0c:51:5d:10:31: 6f:66:e1:89:69:ac:c3:86:d6:cf:98:d6:36:f4:0c: 7e:7b:25:49:39:d1:37:e5:61:de:ca:70:25:e6:d4: df:d2:4e:08:54:c6:12:28:66:4e:87:d7:a3:29:f3: d2:6f:8d:b4:36:95:bc:74:71:e4:28:df:a0:73:35: 93:d5:ae:f3:b2:91:52:2a:11:24:85:7a:5b:21:58: 59:ad:a9:2a:99:0d:29:8e:1c:8c:b8:46:04:2f:68: 15:9b:92:7b:b1:6c:5c:56:15:68:26:10:f5:48:39: 8b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:4F:AD:BF:27:73:C1:7C:9B:4E:78:3C:75:7D:8D:60:9D:C1:4B:8C X509v3 Authority Key Identifier: keyid:92:0E:C6:FC:36:57:D3:FB:00:98:82:59:8C:98:6A:74:F5:55:58:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kg7G_DZX0_sAmIJZjJhqdPVVWN8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:0c:84:22:ea:4b:22:8c:1c:9e:1e:f2:d2:6e:6c:6c:a0:21: 70:75:00:d1:46:52:d9:ac:9d:95:bb:0c:e4:3c:7c:47:33:cb: 98:1f:9e:d7:56:4e:45:fc:47:55:2c:3a:65:a0:a0:cf:65:8d: 4c:ba:e8:a9:30:fe:be:c7:0f:66:b9:71:62:6f:be:53:a4:b0: 47:65:82:15:6b:93:f0:92:f4:10:e6:5e:9d:53:13:92:d4:19: 2a:a5:5e:ce:7f:61:17:56:83:a2:96:d1:f8:7e:09:7e:de:3d: 9f:c1:cd:22:f0:f9:df:23:8d:97:f0:be:40:4e:44:66:30:5a: 7e:6a:6a:a9:fe:f5:02:ac:a8:0b:4b:98:a1:dc:72:55:e4:ab: f5:02:08:74:67:1b:cd:d5:2a:20:93:87:3d:25:a5:7b:98:35: 3e:61:c1:7f:4b:b7:9d:bb:41:fd:1b:fc:ad:77:34:09:1b:e8: ce:1f:75:7e:15:80:5d:85:93:c8:86:4a:a5:cc:b5:f9:39:26: ca:cd:d8:4f:24:39:84:c4:9d:b2:59:eb:20:2b:ba:cb:ec:ae: 05:0e:6f:72:5a:b3:13:c6:5e:e9:87:08:ff:d7:95:ff:ff:9d: 49:c3:f0:d0:5d:c9:fb:0b:17:f3:0d:b0:6c:59:57:62:da:be: 2a:2c:e4:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFqUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYxNjMxMTAvBgNVBAUTKDkyMEVDNkZDMzY1N0QzRkIwMDk4ODI1OThDOTg2QTc0 RjU1NTU4REYwHhcNMjUwNTEyMTYzNzExWhcNMjUwNTE5MTYzNzExWjAYMRYwFAYD VQQDEw02ODIyMjNiNy1kZjVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0odZHjBd4S9xhuggJHl3f6LRDyIWMtbr2HEa0eXDHeA4lb4VIszzGafiaInS OS6x81TU1h/3ac5sbPUMbBS1iAuspOIoF3l5yxED/yhyZKtt8JlddKwD+y+HMK1z gGT1mIubVTF+qhgWjmREOkKoHBPFenZHWXY7I3HDWqSPcE39u3WusHl0e93VxMJp QaUzDFFdEDFvZuGJaazDhtbPmNY29Ax+eyVJOdE35WHeynAl5tTf0k4IVMYSKGZO h9ejKfPSb420NpW8dHHkKN+gczWT1a7zspFSKhEkhXpbIVhZrakqmQ0pjhyMuEYE L2gVm5J7sWxcVhVoJhD1SDmLrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDFPrb8n c8F8m054PHV9jWCdwUuMMB8GA1UdIwQYMBaAFJIOxvw2V9P7AJiCWYyYanT1VVjf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjE2My8wMjlBRjk4NjAw NzYxMUU4QjM1OTlEMTdDNEY5QUUwMi9rZzdHX0RaWDBfc0FtSUpaakpocWRQVlZX TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tnN0dfRFpYMF9zQW1JSlpqSmhxZFBWVldOOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjE2My8wMjlBRjk4NjAwNzYxMUU4QjM1OTlEMTdDNEY5QUUwMi9rZzdHX0RaWDBf c0FtSUpaakpocWRQVlZXTjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9DIQi6ksijByeHvLSbmxsoCFwdQDRRlLZrJ2VuwzkPHxHM8uYH57X Vk5F/EdVLDploKDPZY1MuuipMP6+xw9muXFib75TpLBHZYIVa5PwkvQQ5l6dUxOS 1BkqpV7Of2EXVoOiltH4fgl+3j2fwc0i8PnfI42X8L5ATkRmMFp+amqp/vUCrKgL S5ih3HJV5Kv1Agh0ZxvN1Sogk4c9JaV7mDU+YcF/S7edu0H9G/ytdzQJG+jOH3V+ FYBdhZPIhkqlzLX5OSbKzdhPJDmExJ2yWesgK7rL7K4FDm9yWrMTxl7phwj/15X/ /51Jw/DQXcn7CxfzDbBsWVdi2r4qLOQb -----END CERTIFICATE-----Generated at Tue May 13 18:41:28 2025 by rpki-client