$ rpki-client -vvf rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.mft File: kXcqmmw5cZ-KbmlxY21ITt5DplA.mft (raw, json) Hash identifier: F8fpYFmumWMORqaTnmpVAwtqR7UI5OmSjrKaXZ1kY8I= Subject key identifier: 2D:6C:1C:06:9A:31:82:8D:82:A4:E0:E0:53:B2:3B:AF:9C:09:00:EB Authority key identifier: 91:77:2A:9A:6C:39:71:9F:8A:6E:69:71:63:6D:48:4E:DE:43:A6:50 Certificate issuer: /CN=A9122C94/serialNumber=91772A9A6C39719F8A6E6971636D484EDE43A650 Certificate serial: 0606 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kXcqmmw5cZ-KbmlxY21ITt5DplA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.mft Manifest number: 05FF Signing time: Tue 08 Apr 2025 21:26:07 +0000 Manifest this update: Tue 08 Apr 2025 21:26:07 +0000 Manifest next update: Tue 15 Apr 2025 21:26:07 +0000 Files and hashes: 1: kXcqmmw5cZ-KbmlxY21ITt5DplA.crl (hash: RYS+ift+4O8LWHKsXfblnfCzk6DTJ7soIQ5iD7bN7PU=) 2: DFA876BAA1D011EB909F3352C4F9AE02.roa (hash: iU7wUJ3hXR1AJP4W6iQ9Q4xhVfpuGa8z3zC49Uy6j+E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.crl rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kXcqmmw5cZ-KbmlxY21ITt5DplA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Apr 2025 21:26:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1542 (0x606) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122C94 Validity Not Before: Apr 8 21:26:07 2025 GMT Not After : Apr 15 21:26:07 2025 GMT Subject: CN=67f5946f-868d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d3:49:92:9a:94:f1:2c:85:60:c1:95:51:39: f0:0c:ac:7b:75:de:b4:3b:78:2c:91:30:69:14:88: 8f:8e:82:e0:42:8f:50:5e:0e:f6:1d:67:6b:ed:bf: 3a:ba:24:a8:a5:f2:59:7d:5c:74:3f:31:14:0c:f3: 3b:7b:03:2d:14:e2:28:1e:db:49:70:0f:96:4e:b6: 1a:7c:bf:e4:9c:14:7a:4f:95:0b:21:26:d5:cd:a6: 4b:e1:c1:bc:1d:3c:b7:f8:90:fd:0a:aa:92:a9:53: 7b:26:44:c2:cf:f4:a7:7b:d0:e2:ad:b5:66:6e:fd: 55:7a:5f:ab:b6:e7:31:11:a1:39:2d:b8:41:a1:d5: 74:91:99:f0:2d:ed:91:32:11:79:be:62:b4:05:6c: 61:d1:23:50:77:e5:2c:65:10:dc:cc:a2:dc:0c:01: ef:72:17:27:04:c3:2e:75:b9:a2:42:a3:de:ac:0e: a7:6f:72:2e:d5:a4:a4:a5:d7:8e:2b:0f:70:35:69: f8:94:42:89:1b:80:77:f4:63:62:d6:5b:e1:40:9f: 55:d0:43:ac:fb:05:e6:41:66:5f:fa:98:cf:0c:88: 1f:94:21:79:da:19:09:2e:4b:bd:23:ce:85:f3:02: f8:ee:d5:7b:d9:50:d4:c2:eb:33:57:0e:48:32:57: 45:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:6C:1C:06:9A:31:82:8D:82:A4:E0:E0:53:B2:3B:AF:9C:09:00:EB X509v3 Authority Key Identifier: keyid:91:77:2A:9A:6C:39:71:9F:8A:6E:69:71:63:6D:48:4E:DE:43:A6:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kXcqmmw5cZ-KbmlxY21ITt5DplA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:b1:85:c6:3a:a4:37:82:34:73:df:4b:c5:48:be:d6:cc:8a: ef:1f:e3:b3:84:3d:d2:c1:50:83:be:83:5f:77:2e:4d:d8:6d: 67:1a:e1:36:d3:d0:af:24:67:52:20:59:b7:be:92:fc:40:63: 2e:df:c7:af:ac:3b:78:a3:08:52:6d:a3:92:27:dc:c8:52:a8: 12:48:53:bb:42:42:67:a6:4a:8b:75:80:06:35:82:44:35:35: 55:af:a2:ff:3e:07:7e:ac:66:a1:89:62:87:84:a9:db:8b:e8: f8:32:8b:80:a0:3f:67:3a:1c:98:65:00:43:1c:51:da:c3:ee: c7:92:83:3f:bb:5b:94:66:e5:20:c0:93:d9:7e:2e:a1:be:dd: c0:2d:df:bc:70:b4:6f:66:cd:43:39:a0:6a:f7:d1:9a:9c:f4: d0:3d:c2:27:67:28:98:00:fa:d0:db:44:f4:73:71:85:05:37: 9e:3a:be:4b:c5:3c:61:9f:3c:43:07:74:ec:2a:3d:60:a3:c1: d2:a4:50:d2:8b:7a:df:30:04:f8:34:81:45:ef:ef:04:46:27: 2b:21:10:af:e8:40:0c:24:1b:3c:33:41:60:d3:91:96:b7:5b: 29:e9:cb:05:52:d0:b5:9e:d6:8d:f5:27:23:d7:06:99:15:f2: 7b:ac:75:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJDOTQxMTAvBgNVBAUTKDkxNzcyQTlBNkMzOTcxOUY4QTZFNjk3MTYzNkQ0ODRF REU0M0E2NTAwHhcNMjUwNDA4MjEyNjA3WhcNMjUwNDE1MjEyNjA3WjAYMRYwFAYD VQQDEw02N2Y1OTQ2Zi04NjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtdNJkpqU8SyFYMGVUTnwDKx7dd60O3gskTBpFIiPjoLgQo9QXg72HWdr7b86 uiSopfJZfVx0PzEUDPM7ewMtFOIoHttJcA+WTrYafL/knBR6T5ULISbVzaZL4cG8 HTy3+JD9CqqSqVN7JkTCz/Sne9DirbVmbv1Vel+rtucxEaE5LbhBodV0kZnwLe2R MhF5vmK0BWxh0SNQd+UsZRDczKLcDAHvchcnBMMudbmiQqPerA6nb3Iu1aSkpdeO Kw9wNWn4lEKJG4B39GNi1lvhQJ9V0EOs+wXmQWZf+pjPDIgflCF52hkJLku9I86F 8wL47tV72VDUwuszVw5IMldFlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC1sHAaa MYKNgqTg4FOyO6+cCQDrMB8GA1UdIwQYMBaAFJF3KppsOXGfim5pcWNtSE7eQ6ZQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkM5NC82QUUyMDJBNkEx RDAxMUVCOTJBMkRGMjlDNEY5QUUwMi9rWGNxbW13NWNaLUtibWx4WTIxSVR0NURw bEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2tYY3FtbXc1Y1otS2JtbHhZMjFJVHQ1RHBsQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkM5NC82QUUyMDJBNkExRDAxMUVCOTJBMkRGMjlDNEY5QUUwMi9rWGNxbW13NWNa LUtibWx4WTIxSVR0NURwbEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBysYXGOqQ3gjRz30vFSL7WzIrvH+OzhD3SwVCDvoNfdy5N2G1nGuE2 09CvJGdSIFm3vpL8QGMu38evrDt4owhSbaOSJ9zIUqgSSFO7QkJnpkqLdYAGNYJE NTVVr6L/Pgd+rGahiWKHhKnbi+j4MouAoD9nOhyYZQBDHFHaw+7HkoM/u1uUZuUg wJPZfi6hvt3ALd+8cLRvZs1DOaBq99GanPTQPcInZyiYAPrQ20T0c3GFBTeeOr5L xTxhnzxDB3TsKj1go8HSpFDSi3rfMAT4NIFF7+8ERicrIRCv6EAMJBs8M0Fg05GW t1sp6csFUtC1ntaN9Scj1waZFfJ7rHV4 -----END CERTIFICATE-----Generated at Thu Apr 10 23:21:09 2025 by rpki-client