$ rpki-client -vvf rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.mft File: kRJuhvGMYJQE0ZDymMMs1gn8-nk.mft (raw, json) Hash identifier: M4jQR/rb9H6zSkgZG4wKXNMOfO7ewkxfgDvWszaL/Cc= Subject key identifier: 17:81:A8:E4:AB:43:70:93:F8:1C:88:8A:3A:76:AB:09:D9:C2:35:67 Authority key identifier: 91:12:6E:86:F1:8C:60:94:04:D1:90:F2:98:C3:2C:D6:09:FC:FA:79 Certificate issuer: /CN=A914669D/serialNumber=91126E86F18C609404D190F298C32CD609FCFA79 Certificate serial: 064B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRJuhvGMYJQE0ZDymMMs1gn8-nk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.mft Manifest number: 0646 Signing time: Fri 30 May 2025 22:48:31 +0000 Manifest this update: Fri 30 May 2025 22:48:31 +0000 Manifest next update: Fri 06 Jun 2025 22:48:31 +0000 Files and hashes: 1: kRJuhvGMYJQE0ZDymMMs1gn8-nk.crl (hash: ROaGpDNlMpueaP+EOpluocSlj3NTKsi19ntO8MYLYqk=) 2: E521C8BE8DB011EBBA0A3723C4F9AE02.roa (hash: QIcvi4uK4+sV4KonLrCq7np3/p5FTh38+jPZf45l5Uo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.crl rsync://rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRJuhvGMYJQE0ZDymMMs1gn8-nk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1611 (0x64b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914669D, serialNumber=91126E86F18C609404D190F298C32CD609FCFA79 Validity Not Before: May 30 22:48:31 2025 GMT Not After : Jun 6 22:48:31 2025 GMT Subject: CN=683a35bf-94fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:81:9d:5c:81:62:f6:07:ab:92:44:d3:96:ff: 2f:c5:fa:e9:ea:30:a1:ca:96:3b:2b:3e:a9:09:3e: e0:1d:4d:64:b7:c8:89:2d:a3:11:1d:31:03:9e:b8: 53:16:87:9c:c6:80:2a:07:78:bc:96:cc:44:95:58: b6:0d:03:58:ad:d5:01:b8:1f:35:59:e1:c8:61:8b: 2a:25:83:55:17:60:4e:0a:49:af:0d:f5:62:da:dd: a0:1c:a5:a5:cd:4e:0d:c8:99:d0:79:50:e8:66:9e: 16:b6:c6:6c:88:09:83:6d:9f:8a:37:f6:43:d2:39: 09:50:61:d4:22:a0:25:b1:a2:c3:9d:f3:f5:1f:ad: fb:00:7b:49:81:39:98:a3:b2:af:31:0b:c0:bb:c8: aa:26:54:55:a4:5b:c7:e4:03:fe:d7:42:9a:de:b0: 14:94:58:94:fa:e8:62:c6:3e:76:80:c8:ea:f4:b9: 4d:9a:b2:ef:43:f3:2e:c0:16:82:7f:27:6a:27:3f: 5d:f4:01:eb:af:70:de:b5:d0:8f:d1:ed:4b:f8:7a: df:d5:a0:11:10:1e:0d:39:61:d8:3f:f5:d4:9d:0c: 90:df:63:a6:e4:fa:c0:b9:91:6a:d0:91:a3:5d:63: 60:ce:24:40:58:bf:aa:1e:29:5a:79:6f:1a:1c:a2: af:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:81:A8:E4:AB:43:70:93:F8:1C:88:8A:3A:76:AB:09:D9:C2:35:67 X509v3 Authority Key Identifier: keyid:91:12:6E:86:F1:8C:60:94:04:D1:90:F2:98:C3:2C:D6:09:FC:FA:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRJuhvGMYJQE0ZDymMMs1gn8-nk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:68:81:53:02:2c:9d:81:1a:61:5c:8f:ec:c4:4c:5a:ad:4d: b4:96:65:8f:60:b7:c8:e8:44:83:34:36:53:d8:10:88:05:a2: 02:b4:12:17:3e:8f:f3:d4:1a:f7:50:d8:84:72:f9:b3:ad:65: 63:2c:b2:18:f0:e6:28:52:7d:c9:28:a5:ae:38:b9:0a:a2:6d: 6c:9d:7f:bd:28:e5:f9:c4:66:4a:b0:37:56:08:1a:44:36:09: 14:ad:18:a4:55:55:fa:6a:7c:cd:25:4c:9a:8e:41:20:4e:c7: 84:d5:cd:2e:94:15:05:2c:14:8f:79:c2:60:c5:02:2c:c6:d9: b9:a0:de:07:5b:69:a2:ee:41:85:01:04:a4:4b:9a:49:9f:04: fc:d0:67:b7:a8:d5:c6:7c:9b:4b:0c:df:e1:0e:20:42:69:a9: 45:bb:3c:9c:78:77:81:71:d2:75:b6:f3:5b:7f:a2:38:a1:ed: 6b:d9:f8:76:05:95:d9:cd:81:5e:0c:8c:73:70:9b:83:73:cc: 07:bc:a5:6d:8b:71:50:82:2e:f0:3a:e4:d8:b2:bf:d5:95:34: 08:05:f7:33:69:95:e6:aa:37:70:e1:1a:8f:27:3a:c0:ba:bc: 8e:20:8e:fe:37:19:77:a5:20:5b:11:ef:aa:f6:2c:38:ab:fd: 41:c2:51:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDY2OUQxMTAvBgNVBAUTKDkxMTI2RTg2RjE4QzYwOTQwNEQxOTBGMjk4QzMyQ0Q2 MDlGQ0ZBNzkwHhcNMjUwNTMwMjI0ODMxWhcNMjUwNjA2MjI0ODMxWjAYMRYwFAYD VQQDEw02ODNhMzViZi05NGZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5IGdXIFi9gerkkTTlv8vxfrp6jChypY7Kz6pCT7gHU1kt8iJLaMRHTEDnrhT FoecxoAqB3i8lsxElVi2DQNYrdUBuB81WeHIYYsqJYNVF2BOCkmvDfVi2t2gHKWl zU4NyJnQeVDoZp4WtsZsiAmDbZ+KN/ZD0jkJUGHUIqAlsaLDnfP1H637AHtJgTmY o7KvMQvAu8iqJlRVpFvH5AP+10Ka3rAUlFiU+uhixj52gMjq9LlNmrLvQ/MuwBaC fydqJz9d9AHrr3DetdCP0e1L+Hrf1aAREB4NOWHYP/XUnQyQ32Om5PrAuZFq0JGj XWNgziRAWL+qHilaeW8aHKKvlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBeBqOSr Q3CT+ByIijp2qwnZwjVnMB8GA1UdIwQYMBaAFJESbobxjGCUBNGQ8pjDLNYJ/Pp5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjY5RC9CRjZFMjBBNjhE QUUxMUVCQjI5OEI1MUZDNEY5QUUwMi9rUkp1aHZHTVlKUUUwWkR5bU1NczFnbjgt bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tSSnVodkdNWUpRRTBaRHltTU1zMWduOC1uay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjY5RC9CRjZFMjBBNjhEQUUxMUVCQjI5OEI1MUZDNEY5QUUwMi9rUkp1aHZHTVlK UUUwWkR5bU1NczFnbjgtbmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDaIFTAiydgRphXI/sxExarU20lmWPYLfI6ESDNDZT2BCIBaICtBIX Po/z1Br3UNiEcvmzrWVjLLIY8OYoUn3JKKWuOLkKom1snX+9KOX5xGZKsDdWCBpE NgkUrRikVVX6anzNJUyajkEgTseE1c0ulBUFLBSPecJgxQIsxtm5oN4HW2mi7kGF AQSkS5pJnwT80Ge3qNXGfJtLDN/hDiBCaalFuzyceHeBcdJ1tvNbf6I4oe1r2fh2 BZXZzYFeDIxzcJuDc8wHvKVti3FQgi7wOuTYsr/VlTQIBfczaZXmqjdw4RqPJzrA uryOII7+Nxl3pSBbEe+q9iw4q/1BwlEy -----END CERTIFICATE-----Generated at Sat May 31 17:44:02 2025 by rpki-client