$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD6E4/ABE7E0561E0E11EE9170F429C4F9AE02/keKklwM5j7IArA6fpHZpFddL-eU.mft File: keKklwM5j7IArA6fpHZpFddL-eU.mft (raw, json) Hash identifier: mSj/3wMH+xM36WURi9ifoReUUBORbhFlGl53G/Qx6f8= Subject key identifier: 57:DD:08:00:4C:ED:B4:EB:C4:A4:4B:C6:E2:AA:34:10:88:22:50:4F Authority key identifier: 91:E2:A4:97:03:39:8F:B2:00:AC:0E:9F:A4:76:69:15:D7:4B:F9:E5 Certificate issuer: /CN=A91FD6E4/serialNumber=91E2A49703398FB200AC0E9FA4766915D74BF9E5 Certificate serial: 015E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keKklwM5j7IArA6fpHZpFddL-eU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD6E4/ABE7E0561E0E11EE9170F429C4F9AE02/keKklwM5j7IArA6fpHZpFddL-eU.mft Manifest number: 015B Signing time: Sun 11 May 2025 02:57:47 +0000 Manifest this update: Sun 11 May 2025 02:57:47 +0000 Manifest next update: Sun 18 May 2025 02:57:47 +0000 Files and hashes: 1: keKklwM5j7IArA6fpHZpFddL-eU.crl (hash: IY5YJhGBybEcle2CcKf5ox3iEqsTXHwu0ARH2hUDVBo=) 2: 345AD30E1E1311EE846A3261C4F9AE02.roa (hash: zTYXuX3GDZ63v54RvQHdui7ccszwzNrfqOTF6/FnToE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD6E4/ABE7E0561E0E11EE9170F429C4F9AE02/keKklwM5j7IArA6fpHZpFddL-eU.crl rsync://rpki.apnic.net/member_repository/A91FD6E4/ABE7E0561E0E11EE9170F429C4F9AE02/keKklwM5j7IArA6fpHZpFddL-eU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keKklwM5j7IArA6fpHZpFddL-eU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:57:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 350 (0x15e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD6E4, serialNumber=91E2A49703398FB200AC0E9FA4766915D74BF9E5 Validity Not Before: May 11 02:57:47 2025 GMT Not After : May 18 02:57:47 2025 GMT Subject: CN=6820122b-1c23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:ce:28:6f:6f:7e:51:ce:cf:77:00:40:59:76: d3:ba:70:c7:fa:f8:ba:0f:58:6b:5a:68:f0:07:9b: ee:81:91:cd:a7:fc:8c:55:bd:2f:4c:03:9a:1d:0d: 8f:d1:bf:2f:5f:00:54:f4:8e:4c:86:0d:19:b9:0a: 72:c6:6d:5f:43:59:28:9e:7d:68:82:3c:1e:d1:7b: 62:a2:f7:20:df:c0:f5:cc:0e:75:36:54:32:9c:a1: 9b:49:c3:b1:05:16:31:43:64:af:22:93:89:07:a8: ab:e4:86:a4:a2:74:66:21:81:42:8a:3f:bb:27:ca: 9e:a6:72:cb:bb:8d:ab:8a:37:cb:a7:90:36:dd:5a: 0a:43:de:b1:cd:38:1c:6a:e5:0d:50:36:ff:8e:10: a7:9c:d8:f5:68:c6:0c:7d:f7:62:f9:d9:d6:86:0b: 29:6e:7a:8b:79:2f:59:fa:e9:04:50:02:92:eb:f7: 82:d4:5d:c3:a2:94:cb:0e:70:9d:d4:eb:81:3f:19: 4b:df:15:c2:b4:1d:f8:8e:b8:df:7f:c9:11:9f:2e: 36:72:50:03:ef:3d:5c:db:40:e3:9f:fe:a6:14:a7: 7a:41:41:ca:5e:25:5b:f7:d9:0f:20:6e:2a:e5:fa: c6:e7:49:da:ef:94:d8:74:f8:b8:f8:60:2f:ea:81: 37:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:DD:08:00:4C:ED:B4:EB:C4:A4:4B:C6:E2:AA:34:10:88:22:50:4F X509v3 Authority Key Identifier: keyid:91:E2:A4:97:03:39:8F:B2:00:AC:0E:9F:A4:76:69:15:D7:4B:F9:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD6E4/ABE7E0561E0E11EE9170F429C4F9AE02/keKklwM5j7IArA6fpHZpFddL-eU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keKklwM5j7IArA6fpHZpFddL-eU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD6E4/ABE7E0561E0E11EE9170F429C4F9AE02/keKklwM5j7IArA6fpHZpFddL-eU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:98:53:bf:5c:bf:92:3c:e7:80:9d:68:d8:af:17:ed:3b:f3: f4:08:0e:c8:c4:3d:15:f8:8a:0a:a4:3c:6f:c0:48:92:c4:4d: 2b:2c:ff:25:be:c9:96:17:b0:f5:e9:4d:b0:d3:7b:1d:f1:b1: b1:fd:b8:1c:34:e4:4f:be:48:db:96:09:47:57:73:01:7c:51: e6:24:f2:f5:aa:ef:e7:79:66:ad:95:22:d0:4c:18:0d:86:76: d3:d6:6d:ef:74:14:29:9c:dc:58:a5:93:93:d7:f3:49:88:27: 3d:76:67:45:7e:a0:2a:1a:f7:ee:24:bd:ef:02:e3:5c:37:e2: 03:00:2a:dc:ca:b8:c3:ab:b6:10:d9:1e:d4:d4:a4:e3:89:e0: f0:69:f3:ab:8e:dd:2f:a1:a4:aa:f0:be:9e:b8:8a:b5:2b:f0: 83:eb:b6:36:90:75:23:d1:41:dd:90:1a:63:5a:82:5a:44:7c: 6d:35:93:c4:44:b6:6a:3e:59:1d:4c:72:a9:b2:63:36:17:3d: 1b:77:b6:53:77:e1:f5:c1:88:01:1e:7c:66:f4:a9:9d:f4:45: 96:bd:21:55:69:70:74:b7:06:c9:9e:86:c5:48:a0:bd:03:48: 36:17:99:99:93:d7:df:66:c2:37:79:d2:1d:e2:a5:02:fd:62: 86:8f:b7:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQ2RTQxMTAvBgNVBAUTKDkxRTJBNDk3MDMzOThGQjIwMEFDMEU5RkE0NzY2OTE1 RDc0QkY5RTUwHhcNMjUwNTExMDI1NzQ3WhcNMjUwNTE4MDI1NzQ3WjAYMRYwFAYD VQQDEw02ODIwMTIyYi0xYzIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA484ob29+Uc7PdwBAWXbTunDH+vi6D1hrWmjwB5vugZHNp/yMVb0vTAOaHQ2P 0b8vXwBU9I5Mhg0ZuQpyxm1fQ1konn1ogjwe0Xtiovcg38D1zA51NlQynKGbScOx BRYxQ2SvIpOJB6ir5IakonRmIYFCij+7J8qepnLLu42rijfLp5A23VoKQ96xzTgc auUNUDb/jhCnnNj1aMYMffdi+dnWhgspbnqLeS9Z+ukEUAKS6/eC1F3DopTLDnCd 1OuBPxlL3xXCtB34jrjff8kRny42clAD7z1c20Djn/6mFKd6QUHKXiVb99kPIG4q 5frG50na75TYdPi4+GAv6oE3WQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFfdCABM 7bTrxKRLxuKqNBCIIlBPMB8GA1UdIwQYMBaAFJHipJcDOY+yAKwOn6R2aRXXS/nl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDZFNC9BQkU3RTA1NjFF MEUxMUVFOTE3MEY0MjlDNEY5QUUwMi9rZUtrbHdNNWo3SUFyQTZmcEhacEZkZEwt ZVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tlS2tsd001ajdJQXJBNmZwSFpwRmRkTC1lVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDZFNC9BQkU3RTA1NjFFMEUxMUVFOTE3MEY0MjlDNEY5QUUwMi9rZUtrbHdNNWo3 SUFyQTZmcEhacEZkZEwtZVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhmFO/XL+SPOeAnWjYrxftO/P0CA7IxD0V+IoKpDxvwEiSxE0rLP8l vsmWF7D16U2w03sd8bGx/bgcNORPvkjblglHV3MBfFHmJPL1qu/neWatlSLQTBgN hnbT1m3vdBQpnNxYpZOT1/NJiCc9dmdFfqAqGvfuJL3vAuNcN+IDACrcyrjDq7YQ 2R7U1KTjieDwafOrjt0voaSq8L6euIq1K/CD67Y2kHUj0UHdkBpjWoJaRHxtNZPE RLZqPlkdTHKpsmM2Fz0bd7ZTd+H1wYgBHnxm9Kmd9EWWvSFVaXB0twbJnobFSKC9 A0g2F5mZk9ffZsI3edId4qUC/WKGj7fm -----END CERTIFICATE-----Generated at Sun May 11 19:09:10 2025 by rpki-client