$ rpki-client -vvf rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft File: kcSXberT3od45cDc_yYDlxrC1Ns.mft (raw, json) Hash identifier: UgfdlsKqhvkgBexVj3aSTJ625yvPLYRn+DwfnveRj7s= Subject key identifier: 42:98:DC:D4:83:E1:A4:D7:79:16:A6:92:0C:17:C8:40:A0:01:3E:17 Authority key identifier: 91:C4:97:6D:EA:D3:DE:87:78:E5:C0:DC:FF:26:03:97:1A:C2:D4:DB Certificate issuer: /CN=A9123F84/serialNumber=91C4976DEAD3DE8778E5C0DCFF2603971AC2D4DB Certificate serial: 01C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft Manifest number: 01BA Signing time: Sat 05 Apr 2025 02:33:34 +0000 Manifest this update: Sat 05 Apr 2025 02:33:34 +0000 Manifest next update: Sat 12 Apr 2025 02:33:34 +0000 Files and hashes: 1: kcSXberT3od45cDc_yYDlxrC1Ns.crl (hash: JpDve062TwDuS+nQWLyC3CemTXKfGbX7ZbwGLt/3byY=) 2: 24783DA46F3211EDA3DCF033C4F9AE02.roa (hash: qtI3PzkdqX+ax/bSegc1SLzhSYkSDBIGZPjolcu7R3M=) 3: 24FDC2446F3211EDA3DCF033C4F9AE02.roa (hash: d2+un5XTDgzJbWROr+IzD11y+bXi6HVh7GN60G2Vs5w=) 4: 25DD10F26F3211EDA3DCF033C4F9AE02.roa (hash: sj2URhxZjW3y0qKioZtUw0R7cEojajRcOxadk4cHwRY=) 5: D29F544CFCD711EEB654B271C4F9AE02.roa (hash: IcwXnPB2ehwiVEdMK3NN6Y5gPNM9uX8Kc+jyAk4uAcM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.crl rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 02:33:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 453 (0x1c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123F84 Validity Not Before: Apr 5 02:33:34 2025 GMT Not After : Apr 12 02:33:34 2025 GMT Subject: CN=67f0967e-a9cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:1f:c8:de:e1:30:c9:20:2a:01:64:c3:65:00: d6:27:e6:30:73:ed:85:f2:4e:bb:82:1b:b6:25:3a: cb:f2:9d:be:a2:91:e9:af:0c:45:9e:00:c0:97:14: 93:5c:84:2f:61:71:1d:e8:02:92:f2:01:19:ee:17: ee:19:e6:2a:a1:d6:53:85:1d:ef:72:bc:9b:3b:fd: 00:a7:ba:27:4b:40:1a:66:f8:74:17:a4:24:6d:44: 86:49:e2:ab:4c:88:79:0f:34:7d:9c:95:a6:4f:e5: 15:99:07:d4:f3:12:dc:a3:7e:9e:cc:8b:c7:39:18: 64:c5:86:dd:13:03:b0:4e:0a:63:c1:4c:28:cf:3a: 21:90:92:2a:ec:9f:7f:a8:2a:45:39:48:0d:3a:5b: 34:42:fa:77:f7:c7:30:2a:b7:7b:bb:ac:eb:64:e5: 92:d9:5d:a3:cf:e9:6e:0e:d6:64:af:46:d3:eb:68: a7:7d:d7:13:67:c7:f1:59:00:88:83:1e:62:52:84: 12:74:2a:df:22:ae:78:9a:fd:0e:d7:54:1d:da:21: e9:22:f9:70:fb:3c:d0:53:46:36:c4:75:e3:a4:dc: f3:53:b3:bd:29:e6:6a:bd:d7:4a:20:11:56:28:60: e6:b1:48:18:9a:7e:fd:d0:ca:35:06:ec:08:b3:5d: cc:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:98:DC:D4:83:E1:A4:D7:79:16:A6:92:0C:17:C8:40:A0:01:3E:17 X509v3 Authority Key Identifier: keyid:91:C4:97:6D:EA:D3:DE:87:78:E5:C0:DC:FF:26:03:97:1A:C2:D4:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:04:e0:18:df:32:24:4c:00:ef:0c:aa:88:a3:53:3d:72:2a: 46:27:0e:7f:3b:cd:d6:5c:79:be:e6:b3:ac:df:2c:27:95:44: 72:1a:48:31:a1:b8:68:21:17:c7:a7:84:cd:62:56:ae:25:6a: 1d:34:65:3f:cf:5c:91:21:4f:a3:93:82:de:77:10:73:94:ef: 3a:4b:b3:09:4a:05:7d:90:4f:74:66:81:34:d3:6c:87:e4:a4: 28:f5:c9:fd:b7:ff:62:66:8a:1b:d2:97:20:9a:2b:a4:3d:ba: 65:63:38:5e:34:c2:a3:64:73:4f:bc:39:50:67:07:87:f0:54: 4c:ca:5c:e3:a3:3f:de:99:63:99:15:49:e5:56:0c:27:5f:9f: 5e:ce:4f:d2:07:f7:69:48:09:e1:17:0e:53:2c:60:99:93:28: 49:21:e4:d2:66:68:a8:e6:c2:4c:54:a5:d5:82:66:68:3d:e0: 27:ad:ef:7f:26:7d:80:ce:fa:38:fc:05:47:36:18:a3:a6:0f: 0c:a0:bb:3f:ce:11:61:28:70:9e:2c:9f:7e:a0:6c:04:f3:eb: f7:ec:65:f4:99:26:44:9f:45:86:a0:d3:3f:d1:78:3a:e3:95: 5c:84:75:66:3d:f1:54:67:44:2a:ad:49:3e:9e:b5:06:f8:08: 73:dd:2d:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNGODQxMTAvBgNVBAUTKDkxQzQ5NzZERUFEM0RFODc3OEU1QzBEQ0ZGMjYwMzk3 MUFDMkQ0REIwHhcNMjUwNDA1MDIzMzM0WhcNMjUwNDEyMDIzMzM0WjAYMRYwFAYD VQQDEw02N2YwOTY3ZS1hOWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3x/I3uEwySAqAWTDZQDWJ+Ywc+2F8k67ghu2JTrL8p2+opHprwxFngDAlxST XIQvYXEd6AKS8gEZ7hfuGeYqodZThR3vcrybO/0Ap7onS0AaZvh0F6QkbUSGSeKr TIh5DzR9nJWmT+UVmQfU8xLco36ezIvHORhkxYbdEwOwTgpjwUwozzohkJIq7J9/ qCpFOUgNOls0Qvp398cwKrd7u6zrZOWS2V2jz+luDtZkr0bT62infdcTZ8fxWQCI gx5iUoQSdCrfIq54mv0O11Qd2iHpIvlw+zzQU0Y2xHXjpNzzU7O9KeZqvddKIBFW KGDmsUgYmn790Mo1BuwIs13MKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEKY3NSD 4aTXeRamkgwXyECgAT4XMB8GA1UdIwQYMBaAFJHEl23q096HeOXA3P8mA5cawtTb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0Y4NC9GNDNBM0YwNDZG MkYxMUVEQTg0QTY5MzNDNEY5QUUwMi9rY1NYYmVyVDNvZDQ1Y0RjX3lZRGx4ckMx TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tjU1hiZXJUM29kNDVjRGNfeVlEbHhyQzFOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0Y4NC9GNDNBM0YwNDZGMkYxMUVEQTg0QTY5MzNDNEY5QUUwMi9rY1NYYmVyVDNv ZDQ1Y0RjX3lZRGx4ckMxTnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeBOAY3zIkTADvDKqIo1M9cipGJw5/O83WXHm+5rOs3ywnlURyGkgx obhoIRfHp4TNYlauJWodNGU/z1yRIU+jk4LedxBzlO86S7MJSgV9kE90ZoE002yH 5KQo9cn9t/9iZoob0pcgmiukPbplYzheNMKjZHNPvDlQZweH8FRMylzjoz/emWOZ FUnlVgwnX59ezk/SB/dpSAnhFw5TLGCZkyhJIeTSZmio5sJMVKXVgmZoPeAnre9/ Jn2Azvo4/AVHNhijpg8MoLs/zhFhKHCeLJ9+oGwE8+v37GX0mSZEn0WGoNM/0Xg6 45VchHVmPfFUZ0QqrUk+nrUG+Ahz3S11 -----END CERTIFICATE-----Generated at Sat Apr 5 08:15:37 2025 by rpki-client