$ rpki-client -vvf rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft File: kcSXberT3od45cDc_yYDlxrC1Ns.mft (raw, json) Hash identifier: 6vx0XIItI10HgruduoxYuipYGi3KPiCDqPXYjV2cFgE= Subject key identifier: 54:BE:DE:98:18:45:15:01:2D:4D:A0:7D:09:02:35:66:4C:BE:AB:27 Authority key identifier: 91:C4:97:6D:EA:D3:DE:87:78:E5:C0:DC:FF:26:03:97:1A:C2:D4:DB Certificate issuer: /CN=A9123F84/serialNumber=91C4976DEAD3DE8778E5C0DCFF2603971AC2D4DB Certificate serial: 01E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft Manifest number: 01D5 Signing time: Sat 31 May 2025 02:32:02 +0000 Manifest this update: Sat 31 May 2025 02:32:01 +0000 Manifest next update: Sat 07 Jun 2025 02:32:01 +0000 Files and hashes: 1: kcSXberT3od45cDc_yYDlxrC1Ns.crl (hash: 67lFvEXJR0rZJgdYfaq9X1JNYMmsVOnWu024HMmOUdw=) 2: 24783DA46F3211EDA3DCF033C4F9AE02.roa (hash: qtI3PzkdqX+ax/bSegc1SLzhSYkSDBIGZPjolcu7R3M=) 3: 24FDC2446F3211EDA3DCF033C4F9AE02.roa (hash: d2+un5XTDgzJbWROr+IzD11y+bXi6HVh7GN60G2Vs5w=) 4: 25DD10F26F3211EDA3DCF033C4F9AE02.roa (hash: sj2URhxZjW3y0qKioZtUw0R7cEojajRcOxadk4cHwRY=) 5: D29F544CFCD711EEB654B271C4F9AE02.roa (hash: IcwXnPB2ehwiVEdMK3NN6Y5gPNM9uX8Kc+jyAk4uAcM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.crl rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:32:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 480 (0x1e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123F84, serialNumber=91C4976DEAD3DE8778E5C0DCFF2603971AC2D4DB Validity Not Before: May 31 02:32:01 2025 GMT Not After : Jun 7 02:32:01 2025 GMT Subject: CN=683a6a22-8d1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:13:76:ba:d9:c4:09:01:fb:ed:94:2e:dd:b9: 1f:81:2b:a1:ea:99:70:1c:d0:20:82:c1:1c:d0:6a: c8:a6:15:f2:3d:cc:b4:2d:8e:93:d2:e0:50:ea:3e: 03:21:60:21:03:1c:32:e4:43:8a:d4:9c:36:42:8c: d6:2a:a9:f2:d5:66:7a:da:cb:b6:52:15:94:bf:4c: 05:0f:d9:85:8e:54:24:ed:51:44:21:3c:65:ec:a0: f4:1d:3c:1c:c5:62:30:50:b1:13:d9:c0:c9:ce:12: a3:51:90:b2:0b:3f:02:1d:e1:ea:1c:ed:a3:50:30: cb:c4:45:18:82:0a:96:b7:c0:c9:56:35:9e:84:3b: ca:bb:4b:6f:c6:69:ae:7e:4b:42:91:3f:4a:9c:ba: d4:fb:8b:7a:65:8d:77:e3:1b:0e:04:72:e8:4a:93: dc:c9:90:a6:0d:bd:eb:ef:be:95:b0:3d:1d:eb:ca: 19:cd:99:bc:88:53:ae:83:28:88:e3:c0:a9:b6:83: 71:bc:92:65:0a:64:86:0b:db:24:ff:7a:5d:4c:d3: d3:c7:cb:c3:a8:84:d6:28:85:80:2d:18:a4:8b:25: 4d:2f:8a:8e:22:73:d3:aa:b6:17:98:25:4d:72:44: 2d:e5:2f:6f:07:5b:6d:10:14:31:45:e0:28:fa:c4: 14:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:BE:DE:98:18:45:15:01:2D:4D:A0:7D:09:02:35:66:4C:BE:AB:27 X509v3 Authority Key Identifier: keyid:91:C4:97:6D:EA:D3:DE:87:78:E5:C0:DC:FF:26:03:97:1A:C2:D4:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:55:89:5c:32:74:59:73:c6:51:28:d5:41:fb:46:a1:52:08: 80:9e:59:f6:ed:47:51:a7:08:76:7d:fe:9f:b1:f3:ec:04:59: a5:c5:1d:56:5a:fc:f8:13:11:f5:22:82:e1:ef:2d:50:d0:41: ee:37:48:a4:97:86:67:58:63:4d:9b:99:ca:14:f8:73:86:d0: 7b:84:b8:47:7f:a8:f5:0c:9b:9e:16:0c:6f:cd:41:42:a4:3a: 95:ac:ed:53:6e:7d:52:6f:ad:9a:b8:b1:46:c4:6e:70:e7:b0: ac:29:de:f6:95:46:3f:7a:c7:23:48:42:16:1d:c6:3e:b0:7e: 76:3f:e5:de:0e:00:c0:04:8f:35:39:cc:99:23:de:6a:86:db: 63:d9:d4:4b:00:1c:47:14:d6:f8:1a:a1:16:b2:3f:32:e2:e4: 7e:4f:c8:d2:68:48:eb:01:c2:d3:11:bf:23:72:99:93:02:d7: cd:79:86:a5:aa:c7:83:c7:c1:08:04:d8:82:d8:27:dd:fd:99: f0:44:ae:e0:12:a4:36:ec:ae:53:15:70:d1:f5:4f:2d:c0:a0: e2:ae:48:1b:94:e3:b0:79:61:e8:28:0e:6f:87:3c:b9:bd:06: b6:fa:10:cf:a6:3f:ac:d3:df:3a:c6:07:f9:1b:3d:f0:b9:fe: 6c:e3:e7:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNGODQxMTAvBgNVBAUTKDkxQzQ5NzZERUFEM0RFODc3OEU1QzBEQ0ZGMjYwMzk3 MUFDMkQ0REIwHhcNMjUwNTMxMDIzMjAxWhcNMjUwNjA3MDIzMjAxWjAYMRYwFAYD VQQDEw02ODNhNmEyMi04ZDFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuRN2utnECQH77ZQu3bkfgSuh6plwHNAggsEc0GrIphXyPcy0LY6T0uBQ6j4D IWAhAxwy5EOK1Jw2QozWKqny1WZ62su2UhWUv0wFD9mFjlQk7VFEITxl7KD0HTwc xWIwULET2cDJzhKjUZCyCz8CHeHqHO2jUDDLxEUYggqWt8DJVjWehDvKu0tvxmmu fktCkT9KnLrU+4t6ZY134xsOBHLoSpPcyZCmDb3r776VsD0d68oZzZm8iFOugyiI 48CptoNxvJJlCmSGC9sk/3pdTNPTx8vDqITWKIWALRikiyVNL4qOInPTqrYXmCVN ckQt5S9vB1ttEBQxReAo+sQUdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFS+3pgY RRUBLU2gfQkCNWZMvqsnMB8GA1UdIwQYMBaAFJHEl23q096HeOXA3P8mA5cawtTb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0Y4NC9GNDNBM0YwNDZG MkYxMUVEQTg0QTY5MzNDNEY5QUUwMi9rY1NYYmVyVDNvZDQ1Y0RjX3lZRGx4ckMx TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tjU1hiZXJUM29kNDVjRGNfeVlEbHhyQzFOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0Y4NC9GNDNBM0YwNDZGMkYxMUVEQTg0QTY5MzNDNEY5QUUwMi9rY1NYYmVyVDNv ZDQ1Y0RjX3lZRGx4ckMxTnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQVYlcMnRZc8ZRKNVB+0ahUgiAnln27UdRpwh2ff6fsfPsBFmlxR1W Wvz4ExH1IoLh7y1Q0EHuN0ikl4ZnWGNNm5nKFPhzhtB7hLhHf6j1DJueFgxvzUFC pDqVrO1Tbn1Sb62auLFGxG5w57CsKd72lUY/escjSEIWHcY+sH52P+XeDgDABI81 OcyZI95qhttj2dRLABxHFNb4GqEWsj8y4uR+T8jSaEjrAcLTEb8jcpmTAtfNeYal qseDx8EIBNiC2Cfd/ZnwRK7gEqQ27K5TFXDR9U8twKDirkgblOOweWHoKA5vhzy5 vQa2+hDPpj+s0986xgf5Gz3wuf5s4+fX -----END CERTIFICATE-----Generated at Sat May 31 15:48:30 2025 by rpki-client