$ rpki-client -vvf rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft File: kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft (raw, json) Hash identifier: k5WD2fi0/9WpWHrJYeFlH+agrlwalvxDvvTXPcsGtUc= Subject key identifier: E6:3B:1E:91:8C:E0:EC:3B:52:FC:80:BF:28:27:85:6E:73:1D:C5:02 Authority key identifier: 91:2F:B5:F7:35:1C:F9:8F:B9:67:45:1F:EE:DA:F4:9F:14:8E:1A:3A Certificate issuer: /CN=A91C779D/serialNumber=912FB5F7351CF98FB967451FEEDAF49F148E1A3A Certificate serial: CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft Manifest number: CB Signing time: Tue 15 Apr 2025 04:34:19 +0000 Manifest this update: Tue 15 Apr 2025 04:34:18 +0000 Manifest next update: Tue 22 Apr 2025 04:34:18 +0000 Files and hashes: 1: kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.crl (hash: 6Vf3H8wmdejybY02NFSna3XBjGSJmHvJdCawdHc3awQ=) 2: 1BC8D5FCE2B211EE946C6541C4F9AE02.roa (hash: iCp30dussETMXyoeph6Ol3mQ5L5KpmSd4EZLSV4J5eE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.crl rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 04:34:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 205 (0xcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C779D, serialNumber=912FB5F7351CF98FB967451FEEDAF49F148E1A3A Validity Not Before: Apr 15 04:34:18 2025 GMT Not After : Apr 22 04:34:18 2025 GMT Subject: CN=67fde1cb-df77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9b:34:b7:57:74:e2:b9:9f:78:3f:74:ed:97: ac:85:50:de:1c:51:97:24:40:f3:dd:e3:1e:a9:c0: ba:46:04:d9:36:0c:ae:87:93:e5:fd:aa:e5:07:0d: 41:12:a1:4e:4a:51:8f:e6:f9:2e:61:3c:e1:59:fb: 9a:cc:92:87:0b:b1:a7:ec:40:ff:2f:4e:e0:82:46: 2f:e4:21:78:f4:61:4b:21:af:4b:e4:0d:24:7c:7b: 73:aa:b3:26:18:f2:f6:03:ae:40:91:91:f6:67:41: 1a:86:c7:59:1c:d1:ae:bb:67:fb:04:3f:ee:90:82: 55:c9:06:91:9e:e9:d4:ae:f1:c3:30:62:0c:d9:58: d1:c3:2f:1b:a1:22:34:a3:73:3e:6f:31:e7:e1:03: 4e:a3:b5:b6:b0:75:bc:49:62:8e:12:e5:1d:f2:9d: cd:eb:1f:5f:3c:ab:04:d5:8f:93:6d:17:73:45:84: 74:95:12:9a:98:f3:bb:92:26:8f:01:15:3c:52:56: ae:7a:ca:e8:58:25:35:12:b6:e3:36:ad:6c:e0:88: a0:5f:ea:03:c0:ea:5d:fc:78:54:0b:ba:9d:68:b5: 5d:ad:c5:70:1c:95:ea:9b:22:68:f3:65:cf:35:b9: 7d:aa:a8:61:5c:f3:30:62:52:58:82:5d:2f:4e:92: 24:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:3B:1E:91:8C:E0:EC:3B:52:FC:80:BF:28:27:85:6E:73:1D:C5:02 X509v3 Authority Key Identifier: keyid:91:2F:B5:F7:35:1C:F9:8F:B9:67:45:1F:EE:DA:F4:9F:14:8E:1A:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:4f:b2:1a:df:f4:5b:56:01:c2:09:2b:64:cd:2e:53:3a:3b: 16:22:f7:24:bc:e1:9c:c9:5c:e8:42:e0:a2:44:d1:14:3f:0b: 80:00:82:7e:b6:d9:79:40:54:7d:d2:82:ad:0a:da:2f:60:0d: f8:21:94:e4:fa:24:c2:cd:dc:22:a6:27:d1:3f:84:68:7a:98: 9b:aa:2f:36:26:46:fc:0c:63:a8:24:fb:83:ce:59:44:5f:16: c1:5c:ee:d0:d6:cc:1f:d5:7b:10:dd:6c:e8:74:e2:da:b7:17: 58:64:87:13:8a:3d:6f:cb:42:9d:e6:c2:65:8a:58:cb:f6:4e: 82:f4:32:4d:c3:77:7a:2a:39:c4:9a:9f:9f:44:e5:79:a9:2d: 0c:ff:f0:1f:a2:0b:b4:4b:94:18:6f:e5:d3:f9:b0:4d:c2:6b: 1d:ec:df:d2:36:19:16:d4:33:a8:69:87:1d:0a:9b:43:4b:30: 3c:a7:1d:43:1b:2a:e8:d0:13:9c:09:cf:f2:f2:22:90:b6:5a: 68:f7:a9:44:ac:11:ba:67:a6:5d:00:a0:57:08:6b:1c:45:8c: 80:68:f0:00:ad:e9:d1:96:27:dc:e7:ef:20:de:3a:d2:4b:b1: 63:24:6a:93:d2:c8:b8:2c:0b:c6:dc:bd:3e:2a:61:c3:8d:5d: f7:31:a3:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc3OUQxMTAvBgNVBAUTKDkxMkZCNUY3MzUxQ0Y5OEZCOTY3NDUxRkVFREFGNDlG MTQ4RTFBM0EwHhcNMjUwNDE1MDQzNDE4WhcNMjUwNDIyMDQzNDE4WjAYMRYwFAYD VQQDEw02N2ZkZTFjYi1kZjc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv5s0t1d04rmfeD907ZeshVDeHFGXJEDz3eMeqcC6RgTZNgyuh5Pl/arlBw1B EqFOSlGP5vkuYTzhWfuazJKHC7Gn7ED/L07ggkYv5CF49GFLIa9L5A0kfHtzqrMm GPL2A65AkZH2Z0EahsdZHNGuu2f7BD/ukIJVyQaRnunUrvHDMGIM2VjRwy8boSI0 o3M+bzHn4QNOo7W2sHW8SWKOEuUd8p3N6x9fPKsE1Y+TbRdzRYR0lRKamPO7kiaP ARU8UlauesroWCU1ErbjNq1s4IigX+oDwOpd/HhUC7qdaLVdrcVwHJXqmyJo82XP Nbl9qqhhXPMwYlJYgl0vTpIkJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOY7HpGM 4Ow7UvyAvygnhW5zHcUCMB8GA1UdIwQYMBaAFJEvtfc1HPmPuWdFH+7a9J8Ujho6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzc5RC80RkQ1OTQyNEUy QUUxMUVFODZGMzNDMUVDNEY5QUUwMi9rUy0xOXpVYy1ZLTVaMFVmN3RyMG54U09H am8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tTLTE5elVjLVktNVowVWY3dHIwbnhTT0dqby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Nzc5RC80RkQ1OTQyNEUyQUUxMUVFODZGMzNDMUVDNEY5QUUwMi9rUy0xOXpVYy1Z LTVaMFVmN3RyMG54U09Ham8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApT7Ia3/RbVgHCCStkzS5TOjsWIvckvOGcyVzoQuCiRNEUPwuAAIJ+ ttl5QFR90oKtCtovYA34IZTk+iTCzdwipifRP4Roepibqi82Jkb8DGOoJPuDzllE XxbBXO7Q1swf1XsQ3WzodOLatxdYZIcTij1vy0Kd5sJliljL9k6C9DJNw3d6KjnE mp+fROV5qS0M//Afogu0S5QYb+XT+bBNwmsd7N/SNhkW1DOoaYcdCptDSzA8px1D Gyro0BOcCc/y8iKQtlpo96lErBG6Z6ZdAKBXCGscRYyAaPAArenRlifc5+8g3jrS S7FjJGqT0si4LAvG3L0+KmHDjV33MaNM -----END CERTIFICATE-----Generated at Wed Apr 16 17:09:12 2025 by rpki-client