$ rpki-client -vvf rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft File: kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft (raw, json) Hash identifier: cCMCEaK1rmgDZ7J3G2zKxDipJxhKeQFsAzfGU5rH//w= Subject key identifier: D4:52:1C:C7:B8:A4:AD:BB:43:05:7F:FB:3F:6E:4F:9A:31:B0:76:31 Authority key identifier: 92:29:19:95:35:EB:EE:44:72:A2:2F:C5:19:5B:0A:7E:FF:CB:66:84 Certificate issuer: /CN=A91B952E/serialNumber=9229199535EBEE4472A22FC5195B0A7EFFCB6684 Certificate serial: 0426 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kikZlTXr7kRyoi_FGVsKfv_LZoQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft Manifest number: 0421 Signing time: Mon 21 Apr 2025 00:01:51 +0000 Manifest this update: Mon 21 Apr 2025 00:01:50 +0000 Manifest next update: Mon 28 Apr 2025 00:01:50 +0000 Files and hashes: 1: kikZlTXr7kRyoi_FGVsKfv_LZoQ.crl (hash: kkuEL4TAegAMYs0ZJz3GgzTjFFtVLhpBYWFkTVRlH8E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.crl rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kikZlTXr7kRyoi_FGVsKfv_LZoQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1062 (0x426) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B952E, serialNumber=9229199535EBEE4472A22FC5195B0A7EFFCB6684 Validity Not Before: Apr 21 00:01:50 2025 GMT Not After : Apr 28 00:01:50 2025 GMT Subject: CN=68058aef-390d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:85:15:c0:ad:5e:81:6f:c5:fc:22:34:ea:83: 64:bf:7d:ac:25:d3:6d:09:4e:19:58:9c:13:e5:e4: a0:32:93:06:d9:84:de:0e:a5:f3:84:f3:10:5e:d0: d0:7a:97:a7:40:b0:9c:26:5f:ce:af:10:a7:55:0e: 92:39:00:50:0c:80:3c:17:af:b8:95:ed:a2:5c:32: 7a:e0:e1:ed:b8:c5:77:41:03:60:5f:04:17:cf:ae: f2:a5:9c:0f:d0:21:28:e5:76:0d:ab:02:06:8d:2b: 9d:f3:a4:2d:4d:9d:bd:a5:a2:b0:8c:59:11:47:93: bd:e2:5a:f7:9d:26:6f:5f:e2:e4:06:9e:ba:77:c0: dc:62:de:16:99:74:be:75:0a:57:36:22:ce:12:68: 6d:f4:23:df:06:aa:70:c8:dd:9d:f9:3d:9a:bc:61: 13:05:24:46:d8:2f:cd:43:2f:15:f9:6b:af:b8:ac: 76:9b:47:0e:38:89:3d:b3:05:14:ea:c4:09:13:00: 02:ff:50:72:f5:3b:1e:df:7b:fd:72:0b:0d:d7:cb: d3:3e:99:83:9f:93:05:57:1f:62:1c:c9:42:34:57: cd:8b:77:00:2c:c5:74:76:5f:38:c9:1d:95:9f:ab: a1:ca:55:69:56:0b:47:18:ed:2d:b1:63:b3:c7:3c: 53:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:52:1C:C7:B8:A4:AD:BB:43:05:7F:FB:3F:6E:4F:9A:31:B0:76:31 X509v3 Authority Key Identifier: keyid:92:29:19:95:35:EB:EE:44:72:A2:2F:C5:19:5B:0A:7E:FF:CB:66:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kikZlTXr7kRyoi_FGVsKfv_LZoQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:41:a9:ee:61:28:12:fc:3c:0c:24:f4:b0:bd:77:89:c0:83: d9:d8:01:2d:eb:7e:09:06:08:4e:57:b0:66:9d:c5:b5:33:e9: 0a:81:5b:d1:e9:32:32:01:24:10:4d:1d:3f:86:78:8b:33:4b: a3:d6:d3:a6:a5:0c:72:60:b9:7e:6b:28:6c:60:29:33:e1:ed: f2:2c:4f:20:6e:d1:f7:5f:99:a6:ce:91:a7:7d:83:ff:d8:4c: ef:19:e8:1b:4f:ed:c4:8e:9f:5b:96:96:da:e2:17:3c:45:ae: 95:07:05:e8:65:fb:35:86:b6:f1:a4:c0:0e:bc:53:f3:b4:58: 94:f9:cd:b3:ac:e8:24:2c:76:e5:34:ef:5d:2c:d4:fb:f0:ba: bb:24:dd:74:2c:43:6e:cc:bc:b3:08:3e:78:03:00:d3:89:6e: 0c:be:22:ef:87:6b:f6:42:33:44:76:24:22:80:36:0e:c8:47: 63:fc:9c:d1:e2:e3:7b:54:dd:d2:43:b9:20:93:a5:dc:ae:7d: 7b:ce:51:91:df:80:ca:b9:c3:2c:90:c8:a9:18:9d:f2:74:7e: 2e:67:72:18:b3:6f:77:80:86:68:37:03:3b:98:e1:18:8b:37: 88:49:7a:c6:0b:e5:06:27:92:0f:c5:c5:7d:44:2b:78:aa:60: 61:85:1f:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjk1MkUxMTAvBgNVBAUTKDkyMjkxOTk1MzVFQkVFNDQ3MkEyMkZDNTE5NUIwQTdF RkZDQjY2ODQwHhcNMjUwNDIxMDAwMTUwWhcNMjUwNDI4MDAwMTUwWjAYMRYwFAYD VQQDEw02ODA1OGFlZi0zOTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsIUVwK1egW/F/CI06oNkv32sJdNtCU4ZWJwT5eSgMpMG2YTeDqXzhPMQXtDQ epenQLCcJl/OrxCnVQ6SOQBQDIA8F6+4le2iXDJ64OHtuMV3QQNgXwQXz67ypZwP 0CEo5XYNqwIGjSud86QtTZ29paKwjFkRR5O94lr3nSZvX+LkBp66d8DcYt4WmXS+ dQpXNiLOEmht9CPfBqpwyN2d+T2avGETBSRG2C/NQy8V+WuvuKx2m0cOOIk9swUU 6sQJEwAC/1By9Tse33v9cgsN18vTPpmDn5MFVx9iHMlCNFfNi3cALMV0dl84yR2V n6uhylVpVgtHGO0tsWOzxzxTiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNRSHMe4 pK27QwV/+z9uT5oxsHYxMB8GA1UdIwQYMBaAFJIpGZU16+5EcqIvxRlbCn7/y2aE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTUyRS84M0NGODExNjYw RTQxMUVDQUQxODhEMzRDNEY5QUUwMi9raWtabFRYcjdrUnlvaV9GR1ZzS2Z2X0xa b1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tpa1psVFhyN2tSeW9pX0ZHVnNLZnZfTFpvUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTUyRS84M0NGODExNjYwRTQxMUVDQUQxODhEMzRDNEY5QUUwMi9raWtabFRYcjdr UnlvaV9GR1ZzS2Z2X0xab1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAQanuYSgS/DwMJPSwvXeJwIPZ2AEt634JBghOV7BmncW1M+kKgVvR 6TIyASQQTR0/hniLM0uj1tOmpQxyYLl+ayhsYCkz4e3yLE8gbtH3X5mmzpGnfYP/ 2EzvGegbT+3Ejp9blpba4hc8Ra6VBwXoZfs1hrbxpMAOvFPztFiU+c2zrOgkLHbl NO9dLNT78Lq7JN10LENuzLyzCD54AwDTiW4MviLvh2v2QjNEdiQigDYOyEdj/JzR 4uN7VN3SQ7kgk6Xcrn17zlGR34DKucMskMipGJ3ydH4uZ3IYs293gIZoNwM7mOEY izeISXrGC+UGJ5IPxcV9RCt4qmBhhR+D -----END CERTIFICATE-----Generated at Tue Apr 22 21:25:35 2025 by rpki-client