$ rpki-client -vvf rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.mft File: kJQ-uOrUTDbtyZEDG_-IuKtlWik.mft (raw, json) Hash identifier: dYj+JSOeVAkwjNEydfY2M/L7mypUFRS+0EKW6b5qEdE= Subject key identifier: 8E:7B:D7:B0:C3:1D:81:9E:82:79:16:06:3A:75:0E:17:3D:21:C5:67 Authority key identifier: 90:94:3E:B8:EA:D4:4C:36:ED:C9:91:03:1B:FF:88:B8:AB:65:5A:29 Certificate issuer: /CN=A9149106/serialNumber=90943EB8EAD44C36EDC991031BFF88B8AB655A29 Certificate serial: 044E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kJQ-uOrUTDbtyZEDG_-IuKtlWik.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.mft Manifest number: 044E Signing time: Sat 31 May 2025 00:24:44 +0000 Manifest this update: Sat 31 May 2025 00:24:44 +0000 Manifest next update: Sat 07 Jun 2025 00:24:44 +0000 Files and hashes: 1: kJQ-uOrUTDbtyZEDG_-IuKtlWik.crl (hash: 3IPiD/KASPUk5SfzFGkzDyaOthG7poWDH4qoNLFoBMQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.crl rsync://rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kJQ-uOrUTDbtyZEDG_-IuKtlWik.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:24:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1102 (0x44e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149106, serialNumber=90943EB8EAD44C36EDC991031BFF88B8AB655A29 Validity Not Before: May 31 00:24:44 2025 GMT Not After : Jun 7 00:24:44 2025 GMT Subject: CN=683a4c4c-28aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a6:d6:ec:64:3e:40:c2:4f:28:bc:b5:6a:b8: 3a:75:65:a4:41:6f:24:cc:8a:1e:eb:09:fb:5c:6f: 9e:19:95:54:f1:97:5b:36:56:95:42:29:ef:db:c7: 33:1d:4c:2e:80:99:b5:1d:ff:1a:a5:76:b0:ca:3f: c0:ae:a5:29:3d:97:4c:b5:eb:e5:d0:4a:f5:bf:ae: 79:8e:2a:f9:a0:86:25:8b:a5:d7:8b:fe:0f:d8:5b: e9:50:62:02:c1:6f:8d:10:96:81:e7:8a:8c:8a:86: 26:b5:6d:4d:62:7c:d1:fa:e6:65:73:86:22:5b:b1: d6:41:18:bc:b8:fb:1d:86:21:9a:3d:ab:98:4c:27: 86:d3:f4:14:e3:f2:56:b8:8e:c6:0b:1b:c6:49:85: 54:86:9b:5e:8a:58:9c:e0:6f:9b:30:d4:af:92:e9: 12:cb:9c:59:de:6a:eb:31:35:57:35:3b:94:fd:57: d6:09:15:fe:91:21:f8:11:5e:8a:5a:fe:ec:a7:1c: 56:c4:07:ce:d4:76:9d:2e:25:27:7a:8f:50:e0:21: 01:85:79:9d:26:8e:0e:e9:07:67:41:99:f6:6e:fd: 66:ca:0d:81:50:8d:c3:9c:75:3e:d0:f1:1a:03:27: 4e:58:2b:ac:fb:eb:8a:79:cd:10:ec:3b:e2:14:3f: 3b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:7B:D7:B0:C3:1D:81:9E:82:79:16:06:3A:75:0E:17:3D:21:C5:67 X509v3 Authority Key Identifier: keyid:90:94:3E:B8:EA:D4:4C:36:ED:C9:91:03:1B:FF:88:B8:AB:65:5A:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kJQ-uOrUTDbtyZEDG_-IuKtlWik.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:6e:e4:3d:cf:73:b4:64:e8:90:48:09:d3:f4:4c:e1:e9:58: c5:3a:30:fb:cd:88:da:7c:d7:c4:ce:a1:e6:94:f3:10:86:cc: c4:28:e2:07:fa:bf:bf:ed:6c:78:66:38:b5:e6:1f:72:fc:6b: b2:07:43:20:65:3d:ca:20:4b:74:18:91:3c:6e:3b:0b:78:b9: 06:cb:ed:7b:bb:ff:7a:7c:c4:ef:27:de:e9:dd:60:8d:ee:94: 1b:db:7f:39:3a:2b:d4:fe:9a:b7:71:0f:09:69:06:3f:80:0c: 3a:76:02:b8:d3:21:6d:de:03:6b:97:d5:51:82:b0:91:38:c2: 61:8b:5e:37:a4:c1:1f:7c:d5:16:08:89:ff:7a:8b:19:d2:8b: 1a:6d:ad:84:aa:b2:ab:d4:c5:ce:54:a5:93:3f:1f:9f:fc:12: b6:f7:0f:9b:0b:d7:ba:e7:26:0d:47:83:19:d7:90:d3:f1:7d: 28:d4:ed:dd:66:c5:f8:52:ca:47:a5:a5:c6:40:1c:ea:ac:2f: 24:1d:67:e5:42:6a:38:36:9a:2d:8a:5d:da:ad:2f:2d:b8:80: b5:4c:f0:89:4f:5b:27:ea:f7:b2:75:99:cb:fd:49:7a:85:e9: 44:16:6d:92:47:78:00:43:0e:4d:9d:3b:9a:40:38:04:0d:3c: 4d:bd:32:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBE4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDkxMDYxMTAvBgNVBAUTKDkwOTQzRUI4RUFENDRDMzZFREM5OTEwMzFCRkY4OEI4 QUI2NTVBMjkwHhcNMjUwNTMxMDAyNDQ0WhcNMjUwNjA3MDAyNDQ0WjAYMRYwFAYD VQQDEw02ODNhNGM0Yy0yOGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2qbW7GQ+QMJPKLy1arg6dWWkQW8kzIoe6wn7XG+eGZVU8ZdbNlaVQinv28cz HUwugJm1Hf8apXawyj/ArqUpPZdMtevl0Er1v655jir5oIYli6XXi/4P2FvpUGIC wW+NEJaB54qMioYmtW1NYnzR+uZlc4YiW7HWQRi8uPsdhiGaPauYTCeG0/QU4/JW uI7GCxvGSYVUhpteilic4G+bMNSvkukSy5xZ3mrrMTVXNTuU/VfWCRX+kSH4EV6K Wv7spxxWxAfO1HadLiUneo9Q4CEBhXmdJo4O6QdnQZn2bv1myg2BUI3DnHU+0PEa AydOWCus++uKec0Q7DviFD870QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI5717DD HYGegnkWBjp1Dhc9IcVnMB8GA1UdIwQYMBaAFJCUPrjq1Ew27cmRAxv/iLirZVop MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTEwNi85NjE3QzA2RTUz NjkxMUVDQTRBNkJDNzhDNEY5QUUwMi9rSlEtdU9yVVREYnR5WkVER18tSXVLdGxX aWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tKUS11T3JVVERidHlaRURHXy1JdUt0bFdpay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTEwNi85NjE3QzA2RTUzNjkxMUVDQTRBNkJDNzhDNEY5QUUwMi9rSlEtdU9yVVRE YnR5WkVER18tSXVLdGxXaWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWbuQ9z3O0ZOiQSAnT9Ezh6VjFOjD7zYjafNfEzqHmlPMQhszEKOIH +r+/7Wx4Zji15h9y/GuyB0MgZT3KIEt0GJE8bjsLeLkGy+17u/96fMTvJ97p3WCN 7pQb2385OivU/pq3cQ8JaQY/gAw6dgK40yFt3gNrl9VRgrCROMJhi143pMEffNUW CIn/eosZ0osaba2EqrKr1MXOVKWTPx+f/BK29w+bC9e65yYNR4MZ15DT8X0o1O3d ZsX4UspHpaXGQBzqrC8kHWflQmo4Npotil3arS8tuIC1TPCJT1sn6veydZnL/Ul6 helEFm2SR3gAQw5NnTuaQDgEDTxNvTL1 -----END CERTIFICATE-----Generated at Sat May 31 17:11:27 2025 by rpki-client