$ rpki-client -vvf rpki.apnic.net/member_repository/A9192E6F/62EB1DFE26B811EC9F205B1EC4F9AE02/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.mft File: k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.mft (raw, json) Hash identifier: jkrd1Fcjkccv3ZUzixLpx9qzxbW8bKC7ntP+RmuYhfo= Subject key identifier: B3:60:40:D3:5D:6D:8B:12:BF:66:0F:0A:F1:3A:CA:FE:0B:AB:E3:98 Authority key identifier: 93:F4:9D:D3:ED:C9:D5:92:71:AF:E1:31:3C:92:1D:E6:6C:22:20:64 Certificate issuer: /CN=A9192E6F/serialNumber=93F49DD3EDC9D59271AFE1313C921DE66C222064 Certificate serial: 04B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192E6F/62EB1DFE26B811EC9F205B1EC4F9AE02/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.mft Manifest number: 04AE Signing time: Wed 16 Apr 2025 23:32:33 +0000 Manifest this update: Wed 16 Apr 2025 23:32:32 +0000 Manifest next update: Wed 23 Apr 2025 23:32:32 +0000 Files and hashes: 1: k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.crl (hash: gbQiFYK51+MDoOmmnNs0ucyeItK4cD7X8NmJgztL8Hw=) 2: 1443F7BA200411EE84DAD06BC4F9AE02.roa (hash: zLQo77q+5IMP6DcnXVEpDBCRchvfQ2yuvBtuKyjQHYY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192E6F/62EB1DFE26B811EC9F205B1EC4F9AE02/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.crl rsync://rpki.apnic.net/member_repository/A9192E6F/62EB1DFE26B811EC9F205B1EC4F9AE02/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 23:32:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1203 (0x4b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192E6F, serialNumber=93F49DD3EDC9D59271AFE1313C921DE66C222064 Validity Not Before: Apr 16 23:32:32 2025 GMT Not After : Apr 23 23:32:32 2025 GMT Subject: CN=68003e10-9268 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:b7:af:d2:c9:25:5f:7a:95:39:da:04:64:44: e1:8a:20:5d:37:68:c3:3a:69:c4:6d:94:9e:ad:d8: 0c:25:a2:a7:8a:1e:d7:e3:e8:d5:ad:e3:ba:fa:22: f1:b4:50:05:a9:80:3c:d2:7c:c9:09:67:be:ef:a7: 51:67:fa:bc:ee:26:ac:3b:2e:b3:57:fa:20:57:11: 34:f1:cc:61:9a:a6:8c:08:91:1c:f9:7c:7a:4a:3b: 94:be:0e:b7:62:07:df:f9:d9:46:7f:67:58:64:4a: d1:7d:25:44:66:d3:66:0e:77:d2:85:53:27:90:fa: b0:d7:4b:be:44:24:13:1b:95:fd:20:54:bd:53:da: a9:7c:4e:cb:42:74:80:0f:6d:92:74:19:2d:25:3d: 6a:45:97:ee:c5:d0:c2:70:25:fe:da:bf:df:2f:4f: 16:b2:19:c6:a2:a4:68:29:8f:5f:1f:47:71:ac:f6: 41:cc:98:f4:5c:73:e2:d2:13:b4:e7:e6:ae:18:6a: a0:1f:7b:d3:4e:b7:b6:b4:0d:fd:62:4b:61:95:61: b3:6a:65:f7:5c:6b:72:ee:33:fb:d6:cf:6f:2c:77: 11:b7:e7:a8:bc:ad:22:3e:10:94:63:1f:9d:ab:47: 5d:b0:cb:9e:74:ed:6d:9d:6c:08:a2:5d:3b:da:41: 04:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:60:40:D3:5D:6D:8B:12:BF:66:0F:0A:F1:3A:CA:FE:0B:AB:E3:98 X509v3 Authority Key Identifier: keyid:93:F4:9D:D3:ED:C9:D5:92:71:AF:E1:31:3C:92:1D:E6:6C:22:20:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192E6F/62EB1DFE26B811EC9F205B1EC4F9AE02/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192E6F/62EB1DFE26B811EC9F205B1EC4F9AE02/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:88:12:04:bd:6b:2f:0d:e1:b1:34:4b:28:65:4d:38:0d:ee: fe:57:d1:fb:25:2b:95:4e:74:34:8b:ba:27:ee:69:94:ea:82: 23:58:de:c5:b7:9b:84:de:82:62:00:97:5f:ae:84:e8:2e:dc: b9:5b:b9:93:e7:5b:9a:00:e9:e8:c6:88:6c:88:56:34:e0:a4: 83:20:e1:bc:a8:7f:72:0a:e7:e0:17:f9:e4:eb:df:eb:6f:94: 7d:97:1d:42:9f:a1:b5:ec:26:93:a1:96:7b:48:1d:ac:51:0b: 8a:ad:e7:73:8f:10:7b:b7:cb:03:af:26:c1:88:7f:0c:dd:54: 59:38:47:d3:30:7c:55:cb:b6:32:6f:fc:a4:1e:22:18:35:b6: e2:8a:cd:ac:19:67:86:2c:3b:35:ff:8b:d6:41:08:d5:7e:00: fe:4e:8e:07:ce:04:ed:bc:5a:3a:96:e1:4a:f8:96:43:ec:a3: 6e:38:81:b3:ff:08:ef:3c:95:1c:b4:d3:ee:fb:8a:65:99:3a: 34:c4:3a:a7:88:53:a7:b3:0d:5b:fe:86:05:34:25:49:e7:91: 51:14:80:70:b3:27:5d:37:63:ca:7c:34:bf:67:4c:49:b9:b9: 4b:73:fb:5e:a0:43:04:18:09:9d:f7:a9:64:ab:0c:ba:ec:e2: fd:3b:e1:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJFNkYxMTAvBgNVBAUTKDkzRjQ5REQzRURDOUQ1OTI3MUFGRTEzMTNDOTIxREU2 NkMyMjIwNjQwHhcNMjUwNDE2MjMzMjMyWhcNMjUwNDIzMjMzMjMyWjAYMRYwFAYD VQQDEw02ODAwM2UxMC05MjY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Lev0sklX3qVOdoEZEThiiBdN2jDOmnEbZSerdgMJaKnih7X4+jVreO6+iLx tFAFqYA80nzJCWe+76dRZ/q87iasOy6zV/ogVxE08cxhmqaMCJEc+Xx6SjuUvg63 Ygff+dlGf2dYZErRfSVEZtNmDnfShVMnkPqw10u+RCQTG5X9IFS9U9qpfE7LQnSA D22SdBktJT1qRZfuxdDCcCX+2r/fL08WshnGoqRoKY9fH0dxrPZBzJj0XHPi0hO0 5+auGGqgH3vTTre2tA39YkthlWGzamX3XGty7jP71s9vLHcRt+eovK0iPhCUYx+d q0ddsMuedO1tnWwIol072kEEHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLNgQNNd bYsSv2YPCvE6yv4Lq+OYMB8GA1UdIwQYMBaAFJP0ndPtydWSca/hMTySHeZsIiBk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkU2Ri82MkVCMURGRTI2 QjgxMUVDOUYyMDVCMUVDNEY5QUUwMi9rX1NkMC0zSjFaSnhyLUV4UEpJZDVtd2lJ R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tfU2QwLTNKMVpKeHItRXhQSklkNW13aUlHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MkU2Ri82MkVCMURGRTI2QjgxMUVDOUYyMDVCMUVDNEY5QUUwMi9rX1NkMC0zSjFa SnhyLUV4UEpJZDVtd2lJR1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5iBIEvWsvDeGxNEsoZU04De7+V9H7JSuVTnQ0i7on7mmU6oIjWN7F t5uE3oJiAJdfroToLty5W7mT51uaAOnoxohsiFY04KSDIOG8qH9yCufgF/nk69/r b5R9lx1Cn6G17CaToZZ7SB2sUQuKredzjxB7t8sDrybBiH8M3VRZOEfTMHxVy7Yy b/ykHiIYNbbiis2sGWeGLDs1/4vWQQjVfgD+To4HzgTtvFo6luFK+JZD7KNuOIGz /wjvPJUctNPu+4plmTo0xDqniFOnsw1b/oYFNCVJ55FRFIBwsyddN2PKfDS/Z0xJ ublLc/teoEMEGAmd96lkqwy67OL9O+HW -----END CERTIFICATE-----Generated at Sat Apr 19 00:41:04 2025 by rpki-client