$ rpki-client -vvf rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.mft File: Kprva8EpkUyguRBcknHerznbyGY.mft (raw, json) Hash identifier: H5ZPFNbhjY9H/R1OI+KtQfyWMr4w7kPV+sTShL88YR4= Subject key identifier: C8:D9:09:BD:8F:83:D4:A2:D3:3C:5C:3E:43:C8:71:92:95:A0:87:E6 Authority key identifier: 2A:9A:EF:6B:C1:29:91:4C:A0:B9:10:5C:92:71:DE:AF:39:DB:C8:66 Certificate issuer: /CN=A9147C4C/serialNumber=2A9AEF6BC129914CA0B9105C9271DEAF39DBC866 Certificate serial: 08C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kprva8EpkUyguRBcknHerznbyGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.mft Manifest number: 08B0 Signing time: Fri 30 May 2025 20:44:54 +0000 Manifest this update: Fri 30 May 2025 20:44:54 +0000 Manifest next update: Fri 06 Jun 2025 20:44:54 +0000 Files and hashes: 1: Kprva8EpkUyguRBcknHerznbyGY.crl (hash: Vf3keTrUfrnHEDtSLMwOJS3RelgBa9V5F0c4Y+2uPo0=) 2: 6211D40A941F11EEA7C3E86FC4F9AE02.roa (hash: VzIcL9cwYPKsctz7TXhlKtxDnAxMW1Nmzyb+yo8dVqU=) 3: 9FB96E16929A11EE8CC5D033C4F9AE02.roa (hash: EsEKbWC4WA6ZCtUbUMwn5+A+yLzgnyso48+dg3mdnLg=) 4: 62CDEE42941F11EEA7C3E86FC4F9AE02.roa (hash: jWUv93OFgLRobJCPDshPuiIM7/E47gD5EueqYHT3EYA=) 5: 48E4C546941F11EE8517B26FC4F9AE02.roa (hash: Q3bzBf2Cm0H9fJSOzDe2WKkPLnodIQtsL1N0gyfPp9c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.crl rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kprva8EpkUyguRBcknHerznbyGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:44:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2248 (0x8c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147C4C, serialNumber=2A9AEF6BC129914CA0B9105C9271DEAF39DBC866 Validity Not Before: May 30 20:44:54 2025 GMT Not After : Jun 6 20:44:54 2025 GMT Subject: CN=683a18c6-d8a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:5b:52:01:78:e2:d3:d2:b7:a5:30:ce:b6:31: 42:e2:4c:a6:5e:28:82:32:4a:95:6a:91:46:ef:71: 2b:df:8b:e4:7f:24:a1:f3:89:4f:8f:b9:39:28:93: 4c:95:02:eb:b3:97:7a:2b:e7:34:50:e7:ec:8e:0f: df:1e:11:23:01:81:63:8d:0e:6c:30:07:6c:8c:f8: 53:4b:cc:9a:9f:a2:9b:f3:84:82:c1:32:3e:28:90: c9:e0:a1:db:52:25:d5:ca:ee:df:be:d7:16:b7:22: 9a:b3:84:51:05:03:41:8b:19:7f:12:d2:36:78:46: 4f:a2:75:06:36:81:f0:b5:b7:ea:75:c0:62:f2:c3: 09:1c:36:ff:b9:ce:a1:5a:cb:75:6b:67:41:df:a6: 27:90:ff:45:5e:80:5e:5d:f4:21:a3:6b:0c:b1:e4: 43:e9:1e:89:e2:92:1f:50:21:7e:c2:5d:79:af:e3: 41:e5:42:b5:4c:76:db:13:4b:e9:86:b2:2f:c5:af: 9d:c6:b2:ef:04:24:4c:eb:95:3e:2d:6b:2c:2d:11: 41:8e:69:e1:a2:22:9a:5c:57:00:4c:1a:f6:a4:8e: 8d:d3:4c:08:e5:bd:a6:8b:c6:30:2b:f0:a4:ef:dd: 23:4c:37:c3:0e:0d:78:a0:43:56:57:1c:79:f7:ae: 7b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:D9:09:BD:8F:83:D4:A2:D3:3C:5C:3E:43:C8:71:92:95:A0:87:E6 X509v3 Authority Key Identifier: keyid:2A:9A:EF:6B:C1:29:91:4C:A0:B9:10:5C:92:71:DE:AF:39:DB:C8:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kprva8EpkUyguRBcknHerznbyGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:e3:6b:63:77:b6:e3:5d:63:ed:1e:46:14:28:58:b2:41:dd: c8:eb:66:42:a1:cd:29:aa:e9:d0:b2:7e:ca:01:b1:c5:3c:75: d3:c6:2e:36:35:ca:e6:f3:ba:a3:aa:92:02:2b:7b:76:61:92: d4:09:ad:2e:b5:a1:11:a6:f6:71:75:f9:9b:84:de:d1:99:a6: f9:83:77:2b:a4:9c:bf:7b:6b:66:d8:f3:e6:c3:28:20:a6:9b: 98:94:0b:8a:95:c2:d1:72:83:90:96:27:c0:36:2c:74:0f:35: af:b7:a5:d2:35:67:28:d7:70:47:e4:56:32:24:28:47:b4:a8: 01:cd:02:3d:9e:73:6a:34:06:cf:61:42:dd:98:ec:17:3e:f5: b2:61:6d:92:49:fd:5f:bc:4d:73:f5:0d:f4:39:4e:b7:0d:a7: a2:6d:83:6a:8e:bf:ef:49:9d:64:f1:ca:11:5d:04:ee:97:1e: 63:9f:1b:0e:4b:44:a6:e4:b4:87:8b:23:22:39:27:ec:56:3e: 6b:1d:f6:d9:91:f1:af:fa:66:d8:a6:67:7b:de:f5:fb:be:f5: a0:29:0e:23:92:2c:7b:b5:c7:6d:77:d0:91:03:fa:6f:c5:b6: 2d:59:e1:e5:4d:e3:26:ff:b5:a9:86:0c:5a:9e:65:3a:42:53: 63:a4:05:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDdDNEMxMTAvBgNVBAUTKDJBOUFFRjZCQzEyOTkxNENBMEI5MTA1QzkyNzFERUFG MzlEQkM4NjYwHhcNMjUwNTMwMjA0NDU0WhcNMjUwNjA2MjA0NDU0WjAYMRYwFAYD VQQDEw02ODNhMThjNi1kOGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy1tSAXji09K3pTDOtjFC4kymXiiCMkqVapFG73Er34vkfySh84lPj7k5KJNM lQLrs5d6K+c0UOfsjg/fHhEjAYFjjQ5sMAdsjPhTS8yan6Kb84SCwTI+KJDJ4KHb UiXVyu7fvtcWtyKas4RRBQNBixl/EtI2eEZPonUGNoHwtbfqdcBi8sMJHDb/uc6h Wst1a2dB36YnkP9FXoBeXfQho2sMseRD6R6J4pIfUCF+wl15r+NB5UK1THbbE0vp hrIvxa+dxrLvBCRM65U+LWssLRFBjmnhoiKaXFcATBr2pI6N00wI5b2mi8YwK/Ck 790jTDfDDg14oENWVxx59657jQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMjZCb2P g9Si0zxcPkPIcZKVoIfmMB8GA1UdIwQYMBaAFCqa72vBKZFMoLkQXJJx3q8528hm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0M0Qy9DQ0IyMDM1NEI5 RTIxMUVBQkM1NTRCODNDNEY5QUUwMi9LcHJ2YThFcGtVeWd1UkJja25IZXJ6bmJ5 R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0twcnZhOEVwa1V5Z3VSQmNrbkhlcnpuYnlHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 N0M0Qy9DQ0IyMDM1NEI5RTIxMUVBQkM1NTRCODNDNEY5QUUwMi9LcHJ2YThFcGtV eWd1UkJja25IZXJ6bmJ5R1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBV42tjd7bjXWPtHkYUKFiyQd3I62ZCoc0pqunQsn7KAbHFPHXTxi42 Ncrm87qjqpICK3t2YZLUCa0utaERpvZxdfmbhN7Rmab5g3crpJy/e2tm2PPmwygg ppuYlAuKlcLRcoOQlifANix0DzWvt6XSNWco13BH5FYyJChHtKgBzQI9nnNqNAbP YULdmOwXPvWyYW2SSf1fvE1z9Q30OU63DaeibYNqjr/vSZ1k8coRXQTulx5jnxsO S0Sm5LSHiyMiOSfsVj5rHfbZkfGv+mbYpmd73vX7vvWgKQ4jkix7tcdtd9CRA/pv xbYtWeHlTeMm/7WphgxanmU6QlNjpAVc -----END CERTIFICATE-----Generated at Sat May 31 17:16:10 2025 by rpki-client