$ rpki-client -vvf rpki.apnic.net/member_repository/A912F3B6/50F011C848BA11EFBD45163DC4F9AE02/KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.mft File: KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.mft (raw, json) Hash identifier: 878lndxvaVSabwTMxLpRF5JO++/uwaG5/2rmbHSJMbQ= Subject key identifier: 60:01:18:DC:7E:FA:0E:09:57:34:01:BB:85:9E:8E:66:8D:9D:BE:4C Authority key identifier: 2B:13:1A:A1:0D:7E:6B:FE:A3:67:E8:1B:73:D7:FD:B0:AC:01:D6:78 Certificate issuer: /CN=A912F3B6/serialNumber=2B131AA10D7E6BFEA367E81B73D7FDB0AC01D678 Certificate serial: 97 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F3B6/50F011C848BA11EFBD45163DC4F9AE02/KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.mft Manifest number: 91 Signing time: Thu 17 Apr 2025 05:19:32 +0000 Manifest this update: Thu 17 Apr 2025 05:19:32 +0000 Manifest next update: Thu 24 Apr 2025 05:19:32 +0000 Files and hashes: 1: KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.crl (hash: XzKWwJOrfIBGU1U7owrkbBqTAsq2B5SonX4Y5XvsUgM=) 2: D91E3ADC498E11EF908FD222C4F9AE02.roa (hash: +ehd8KtxPwFaqFNVmOCKeYgOq8q50OL3e4iQXY+Px88=) 3: D9C5B55A498E11EF908FD222C4F9AE02.roa (hash: IYR9mQ1VQUiO08kcI4RHdp/FLN6UHawsT13ESG27pvs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F3B6/50F011C848BA11EFBD45163DC4F9AE02/KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.crl rsync://rpki.apnic.net/member_repository/A912F3B6/50F011C848BA11EFBD45163DC4F9AE02/KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Apr 2025 05:19:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 151 (0x97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F3B6, serialNumber=2B131AA10D7E6BFEA367E81B73D7FDB0AC01D678 Validity Not Before: Apr 17 05:19:32 2025 GMT Not After : Apr 24 05:19:32 2025 GMT Subject: CN=68008f64-f6c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:bd:d0:17:50:de:b5:39:f3:5a:0b:e3:e8:cf: 42:07:d7:fa:98:53:3d:92:86:ad:f3:55:0e:46:1c: 77:b1:80:60:98:22:71:ad:ba:a0:13:76:f6:0d:38: 94:10:a7:53:0c:e8:35:df:40:62:eb:da:cd:2d:9c: ae:3e:19:25:29:b5:d2:72:a6:a5:4d:4d:0e:6b:15: de:f7:77:6b:ad:e2:f8:2f:10:7c:71:ea:c7:ad:94: 97:b7:c3:d7:b8:ad:2d:13:c7:ac:30:7f:37:ab:b9: e5:ca:e8:6e:ec:8d:81:d3:00:a3:19:49:bb:43:ed: d7:a5:ce:f0:51:1f:92:60:28:2e:2a:db:73:1b:26: f9:de:72:23:d2:5a:e5:ef:f7:31:60:cd:9d:0e:7c: 39:f4:2f:d5:50:80:e8:58:7b:55:dd:52:10:40:fb: 20:a0:de:56:e5:94:99:fb:3e:20:7d:2c:01:e1:51: a7:68:45:16:95:e8:e6:66:2e:c8:79:8d:77:8b:46: 0f:5c:ab:35:2e:df:07:dc:77:9c:f4:aa:bf:53:64: f3:d7:23:d1:0c:12:60:c4:8f:ad:23:54:88:1d:8e: bd:b8:3c:1e:52:94:a2:da:fa:7e:ca:82:ff:a5:34: d9:7c:32:c2:82:cb:f6:6e:c8:8e:e6:c0:3f:bc:2c: 5d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:01:18:DC:7E:FA:0E:09:57:34:01:BB:85:9E:8E:66:8D:9D:BE:4C X509v3 Authority Key Identifier: keyid:2B:13:1A:A1:0D:7E:6B:FE:A3:67:E8:1B:73:D7:FD:B0:AC:01:D6:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F3B6/50F011C848BA11EFBD45163DC4F9AE02/KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F3B6/50F011C848BA11EFBD45163DC4F9AE02/KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:2c:5a:84:00:48:7e:43:55:93:3d:f0:76:8e:17:3d:da:36: fb:1d:00:33:aa:18:69:ea:b2:af:de:9d:58:29:de:da:a8:8c: bc:1e:13:28:79:c9:ea:5c:26:7d:f1:80:38:ac:10:c7:31:6f: 39:7a:d0:b9:8c:ab:b1:eb:34:bf:d3:c4:43:df:16:40:1a:b7: 21:96:73:f4:77:6e:0c:e1:8b:99:86:c7:91:17:6b:01:dd:13: 82:c0:73:76:cb:47:d3:50:0d:23:41:48:8a:20:79:27:a6:82: c0:26:27:36:ff:86:e9:00:a1:66:0e:4d:c7:f6:c4:5e:93:02: d7:5c:a8:14:41:03:61:63:b2:b5:7a:de:b9:40:a8:0d:0b:ee: b5:04:4a:e8:25:a4:d3:ba:e2:5e:e0:f6:4d:74:fc:c5:60:53: e9:95:24:38:7d:e9:d7:7c:dc:87:71:3c:ce:f7:ec:ec:8f:4b: 80:c2:e6:c6:b5:e6:bf:94:30:08:ea:c3:b1:2a:ee:f8:be:ce: b8:29:8a:8b:43:75:f8:1f:0a:4c:b7:5b:1d:ba:11:49:79:db: fd:6f:87:02:37:d9:ab:e0:12:93:45:b5:8b:fa:ab:5c:84:54: be:88:09:55:e7:b3:f4:2e:83:87:d5:fd:06:40:66:46:41:d4: c1:c4:ba:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYzQjYxMTAvBgNVBAUTKDJCMTMxQUExMEQ3RTZCRkVBMzY3RTgxQjczRDdGREIw QUMwMUQ2NzgwHhcNMjUwNDE3MDUxOTMyWhcNMjUwNDI0MDUxOTMyWjAYMRYwFAYD VQQDEw02ODAwOGY2NC1mNmMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwb3QF1DetTnzWgvj6M9CB9f6mFM9koat81UORhx3sYBgmCJxrbqgE3b2DTiU EKdTDOg130Bi69rNLZyuPhklKbXScqalTU0OaxXe93drreL4LxB8cerHrZSXt8PX uK0tE8esMH83q7nlyuhu7I2B0wCjGUm7Q+3Xpc7wUR+SYCguKttzGyb53nIj0lrl 7/cxYM2dDnw59C/VUIDoWHtV3VIQQPsgoN5W5ZSZ+z4gfSwB4VGnaEUWlejmZi7I eY13i0YPXKs1Lt8H3Hec9Kq/U2Tz1yPRDBJgxI+tI1SIHY69uDweUpSi2vp+yoL/ pTTZfDLCgsv2bsiO5sA/vCxdNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGABGNx+ +g4JVzQBu4WejmaNnb5MMB8GA1UdIwQYMBaAFCsTGqENfmv+o2foG3PX/bCsAdZ4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjNCNi81MEYwMTFDODQ4 QkExMUVGQkQ0NTE2M0RDNEY5QUUwMi9LeE1hb1ExLWFfNmpaLWdiYzlmOXNLd0Ix bmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0t4TWFvUTEtYV82alotZ2JjOWY5c0t3QjFuZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjNCNi81MEYwMTFDODQ4QkExMUVGQkQ0NTE2M0RDNEY5QUUwMi9LeE1hb1ExLWFf NmpaLWdiYzlmOXNLd0IxbmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMLFqEAEh+Q1WTPfB2jhc92jb7HQAzqhhp6rKv3p1YKd7aqIy8HhMo ecnqXCZ98YA4rBDHMW85etC5jKux6zS/08RD3xZAGrchlnP0d24M4YuZhseRF2sB 3ROCwHN2y0fTUA0jQUiKIHknpoLAJic2/4bpAKFmDk3H9sRekwLXXKgUQQNhY7K1 et65QKgNC+61BEroJaTTuuJe4PZNdPzFYFPplSQ4fenXfNyHcTzO9+zsj0uAwubG tea/lDAI6sOxKu74vs64KYqLQ3X4HwpMt1sduhFJedv9b4cCN9mr4BKTRbWL+qtc hFS+iAlV57P0LoOH1f0GQGZGQdTBxLq/ -----END CERTIFICATE-----Generated at Fri Apr 18 19:19:52 2025 by rpki-client