$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft File: kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft (raw, json) Hash identifier: b8dNwLEc1DCnlu12knycQp6aiFEJEx5EjzJ4DPn+xLg= Subject key identifier: A9:96:55:EA:3D:76:F3:B0:6F:69:55:95:7E:5E:10:F2:68:AE:5C:3F Authority key identifier: 92:0E:C6:FC:36:57:D3:FB:00:98:82:59:8C:98:6A:74:F5:55:58:DF Certificate issuer: /CN=A91EF163/serialNumber=920EC6FC3657D3FB009882598C986A74F55558DF Certificate serial: 168F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kg7G_DZX0_sAmIJZjJhqdPVVWN8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft Manifest number: 167A Signing time: Fri 04 Apr 2025 16:46:16 +0000 Manifest this update: Fri 04 Apr 2025 16:46:16 +0000 Manifest next update: Fri 11 Apr 2025 16:46:16 +0000 Files and hashes: 1: kg7G_DZX0_sAmIJZjJhqdPVVWN8.crl (hash: XuDeDIqouAbrON6hzia7n6RxdR7wvUxVRc2eqOH9fFs=) 2: 47F9786C171B11ECB022FD54C4F9AE02.roa (hash: 9LkXl9QxDSxbtZYyZ8LFVmO6uJfg1+QNK1ML8GwAiHg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.crl rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kg7G_DZX0_sAmIJZjJhqdPVVWN8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 16:46:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5775 (0x168f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF163 Validity Not Before: Apr 4 16:46:16 2025 GMT Not After : Apr 11 16:46:16 2025 GMT Subject: CN=67f00cd8-4d88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:8f:e6:9d:0f:fc:aa:0e:27:33:b7:8b:0c:d1: 2c:e4:35:e0:cc:06:48:a7:03:76:ee:9b:6d:1c:a2: 64:45:4c:a2:9e:4b:20:df:62:c2:77:26:c9:8e:c4: 7d:87:0b:3f:25:af:0c:9f:62:4d:e7:22:d9:da:2b: 96:45:b5:3a:63:5d:f4:22:fc:2b:45:eb:7b:10:54: a3:48:9f:22:66:9e:73:c2:b0:e0:95:f9:ea:b4:b1: c3:0f:cc:b9:3a:22:4b:a5:9f:c1:e9:7a:c5:0b:e6: 04:fe:98:a2:8f:1a:8c:6c:4b:95:b3:9f:f8:b0:54: a0:ca:4e:e1:03:eb:f5:8c:78:b8:1e:f6:46:05:9f: 24:39:b2:42:e9:1a:64:38:dd:b3:27:01:eb:66:d8: 07:35:b4:54:d7:cc:aa:59:1d:5e:a7:a8:ab:c5:d4: 17:6e:fa:71:30:ec:b1:40:5b:43:52:86:9b:49:ce: ec:85:95:e6:2d:57:b9:d2:35:57:db:90:53:d1:08: 77:43:ff:64:58:45:e0:eb:1a:be:b4:f9:eb:ca:aa: f9:45:2d:af:0d:85:1a:f1:02:45:5f:0c:5d:26:4d: cd:41:27:8a:71:93:94:70:d2:e6:37:a3:20:3f:ff: e9:3a:1a:cb:d4:de:fc:b2:17:79:96:9a:aa:b2:df: 94:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:96:55:EA:3D:76:F3:B0:6F:69:55:95:7E:5E:10:F2:68:AE:5C:3F X509v3 Authority Key Identifier: keyid:92:0E:C6:FC:36:57:D3:FB:00:98:82:59:8C:98:6A:74:F5:55:58:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kg7G_DZX0_sAmIJZjJhqdPVVWN8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:87:95:05:f2:c7:b9:0f:ac:c4:ae:bd:46:0f:da:79:19:ee: 81:da:5b:b3:5f:11:b0:e9:d6:8f:43:89:a7:2f:27:ca:3c:ef: 86:df:25:e4:a2:37:43:c7:45:d7:8c:d6:b8:cb:2e:32:9c:9c: d4:17:4c:17:51:ac:67:2a:2c:5c:47:e3:a8:2e:b8:22:c5:0c: 06:0f:76:92:0e:3c:33:1b:9e:91:09:dd:63:44:3c:e8:f3:87: 8b:c6:0e:ce:b1:48:90:80:68:ad:6e:dc:49:6c:2a:f8:bb:b6: cc:39:42:c3:fb:29:b6:21:dd:8e:1e:84:69:18:68:3f:ee:15: 16:28:e4:49:28:ca:9a:92:cf:18:1d:08:fc:18:e2:31:13:35: 21:c0:ee:7b:44:c4:cf:73:6a:6c:ef:7d:b1:a5:f8:a7:5f:72: 59:30:56:46:1b:da:40:cb:f1:d1:08:f0:9d:65:3e:78:87:f0: ad:7c:88:bb:5c:a0:69:f0:51:81:ad:d7:c7:20:7c:67:9f:ee: 46:1d:f7:6f:fa:13:47:09:b5:f2:5c:73:97:9c:e3:aa:a1:3d: 47:1e:73:db:c8:26:74:00:e1:a7:4e:6f:e0:75:f5:a5:1e:9d: 63:03:b0:fe:a5:96:2a:2e:90:04:2f:33:dd:33:14:27:c9:c4: 37:c9:f8:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFo8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYxNjMxMTAvBgNVBAUTKDkyMEVDNkZDMzY1N0QzRkIwMDk4ODI1OThDOTg2QTc0 RjU1NTU4REYwHhcNMjUwNDA0MTY0NjE2WhcNMjUwNDExMTY0NjE2WjAYMRYwFAYD VQQDEw02N2YwMGNkOC00ZDg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8Y/mnQ/8qg4nM7eLDNEs5DXgzAZIpwN27pttHKJkRUyinksg32LCdybJjsR9 hws/Ja8Mn2JN5yLZ2iuWRbU6Y130IvwrRet7EFSjSJ8iZp5zwrDglfnqtLHDD8y5 OiJLpZ/B6XrFC+YE/piijxqMbEuVs5/4sFSgyk7hA+v1jHi4HvZGBZ8kObJC6Rpk ON2zJwHrZtgHNbRU18yqWR1ep6irxdQXbvpxMOyxQFtDUoabSc7shZXmLVe50jVX 25BT0Qh3Q/9kWEXg6xq+tPnryqr5RS2vDYUa8QJFXwxdJk3NQSeKcZOUcNLmN6Mg P//pOhrL1N78shd5lpqqst+UawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKmWVeo9 dvOwb2lVlX5eEPJorlw/MB8GA1UdIwQYMBaAFJIOxvw2V9P7AJiCWYyYanT1VVjf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjE2My8wMjlBRjk4NjAw NzYxMUU4QjM1OTlEMTdDNEY5QUUwMi9rZzdHX0RaWDBfc0FtSUpaakpocWRQVlZX TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tnN0dfRFpYMF9zQW1JSlpqSmhxZFBWVldOOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjE2My8wMjlBRjk4NjAwNzYxMUU4QjM1OTlEMTdDNEY5QUUwMi9rZzdHX0RaWDBf c0FtSUpaakpocWRQVlZXTjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgh5UF8se5D6zErr1GD9p5Ge6B2luzXxGw6daPQ4mnLyfKPO+G3yXk ojdDx0XXjNa4yy4ynJzUF0wXUaxnKixcR+OoLrgixQwGD3aSDjwzG56RCd1jRDzo 84eLxg7OsUiQgGitbtxJbCr4u7bMOULD+ym2Id2OHoRpGGg/7hUWKORJKMqaks8Y HQj8GOIxEzUhwO57RMTPc2ps732xpfinX3JZMFZGG9pAy/HRCPCdZT54h/CtfIi7 XKBp8FGBrdfHIHxnn+5GHfdv+hNHCbXyXHOXnOOqoT1HHnPbyCZ0AOGnTm/gdfWl Hp1jA7D+pZYqLpAELzPdMxQnycQ3yfi4 -----END CERTIFICATE-----Generated at Sun Apr 6 18:33:06 2025 by rpki-client