$ rpki-client -vvf rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft File: KZYjJd4LreTcndvFdq4ncBK8N1g.mft (raw, json) Hash identifier: EeopIv0h6tYAo5wgcq2htaMKHITV+QhbXZClgXJ7W9c= Subject key identifier: 64:7D:9E:A9:FD:E5:6E:F2:63:DB:E5:44:F4:47:2C:97:64:F3:F8:F9 Authority key identifier: 29:96:23:25:DE:0B:AD:E4:DC:9D:DB:C5:76:AE:27:70:12:BC:37:58 Certificate issuer: /CN=A914DA2D/serialNumber=29962325DE0BADE4DC9DDBC576AE277012BC3758 Certificate serial: 1A5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KZYjJd4LreTcndvFdq4ncBK8N1g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft Manifest number: 1A3F Signing time: Fri 30 May 2025 16:33:17 +0000 Manifest this update: Fri 30 May 2025 16:33:17 +0000 Manifest next update: Fri 06 Jun 2025 16:33:17 +0000 Files and hashes: 1: KZYjJd4LreTcndvFdq4ncBK8N1g.crl (hash: aAMDE8Ft2TdELtNZ4xCbXfbwfyqmnEgjDVlXctOJAYE=) 2: B201496EF3A311EC8804FE09C4F9AE02.roa (hash: 1W3bZjmYo4y/faIyWLiaDn4cNEWTqd/xhoIAZdOleqM=) 3: 442A935E2F1F11F0A35F5757C4F9AE02.roa (hash: hBSO24ULXhKu94YR3RfqFp/a4boCJIBAaE6mmtZ9Bvs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.crl rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KZYjJd4LreTcndvFdq4ncBK8N1g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:33:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6751 (0x1a5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DA2D, serialNumber=29962325DE0BADE4DC9DDBC576AE277012BC3758 Validity Not Before: May 30 16:33:17 2025 GMT Not After : Jun 6 16:33:17 2025 GMT Subject: CN=6839ddcd-245d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:3c:92:4d:25:cc:ae:b5:fe:7a:b4:d3:a0:ff: 15:b8:73:b8:61:8c:14:da:10:96:70:3f:b8:f2:fe: 8e:36:b0:f9:7e:a6:42:84:db:b4:a3:ef:e3:54:ff: 1f:e7:34:c3:9c:73:f9:ce:63:86:fa:64:f6:9d:1c: fe:c0:91:64:6f:c5:49:22:ad:87:ff:da:07:4e:cf: 8e:c3:61:9c:2a:a5:46:17:4f:79:aa:48:3c:9a:fc: e5:1c:09:e4:7b:6f:ca:43:f8:d8:47:83:8d:ce:2d: 10:42:64:aa:b9:c2:d8:7a:f6:ad:9e:f0:e2:38:58: 25:44:75:d0:c0:b1:1b:0f:18:8b:01:1b:7a:8c:e6: 44:52:b5:31:4e:97:3e:09:72:f6:81:00:00:a6:48: e1:82:93:9b:2b:ff:dd:74:f3:e6:4b:ef:b6:80:63: 52:ed:54:2a:3c:8d:02:32:5e:3d:2c:ca:96:cc:e1: ee:db:84:ff:32:ad:6d:48:a5:48:6c:86:5b:48:8f: 78:e6:dc:17:9c:70:54:28:0d:29:53:42:4b:5f:7c: dd:b1:7b:ea:17:3d:69:d1:e1:f7:0e:3d:ba:78:bf: ea:4c:3c:c0:9c:e0:14:90:07:91:a5:20:f4:87:b9: aa:5c:ed:a7:b1:31:33:f9:30:8f:41:7a:f7:6e:00: e0:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:7D:9E:A9:FD:E5:6E:F2:63:DB:E5:44:F4:47:2C:97:64:F3:F8:F9 X509v3 Authority Key Identifier: keyid:29:96:23:25:DE:0B:AD:E4:DC:9D:DB:C5:76:AE:27:70:12:BC:37:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KZYjJd4LreTcndvFdq4ncBK8N1g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:88:e5:1e:5e:df:6c:89:6d:07:97:f7:0f:87:c8:06:9b:88: 9b:ed:8c:1f:19:d1:c3:2a:dd:6f:d3:b5:92:24:71:97:f4:6a: a0:d8:c8:2a:e6:fd:ee:3f:70:ee:a4:a8:0a:46:16:db:78:2f: bf:4b:7a:d8:b1:47:82:e8:fd:4e:e9:50:92:21:a8:bb:0c:1f: 1c:20:06:ee:b2:ab:ec:dd:e5:f4:5e:67:56:c2:b1:12:78:9a: 8e:09:29:4a:b4:bc:21:34:11:af:14:33:0c:4c:90:08:e8:dc: fb:66:df:04:48:25:7b:92:68:a7:dd:d6:48:f8:99:d2:54:50: bf:a9:75:6f:a3:82:61:11:4b:da:b4:c9:e5:8d:9f:92:b9:05: 59:f6:6f:91:d5:ee:da:0e:04:39:97:96:41:83:a6:a8:2e:39: 20:38:45:66:c8:4e:3f:26:cc:3f:b1:ba:bf:ee:b4:f5:d9:3f: 25:85:83:35:35:9b:b1:71:11:50:07:6d:30:78:5f:51:3d:4c: ea:f6:31:ed:a1:be:72:84:6e:96:4b:8f:ec:75:e7:b7:9a:0a: 64:fa:9d:32:08:a8:01:1e:70:81:53:cc:3e:9a:4a:3c:f1:ab: d0:dc:2f:a4:75:2c:dc:19:dd:a8:27:4c:7a:2f:f7:4e:d1:fb: 08:66:d5:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGl8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NERBMkQxMTAvBgNVBAUTKDI5OTYyMzI1REUwQkFERTREQzlEREJDNTc2QUUyNzcw MTJCQzM3NTgwHhcNMjUwNTMwMTYzMzE3WhcNMjUwNjA2MTYzMzE3WjAYMRYwFAYD VQQDEw02ODM5ZGRjZC0yNDVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsDySTSXMrrX+erTToP8VuHO4YYwU2hCWcD+48v6ONrD5fqZChNu0o+/jVP8f 5zTDnHP5zmOG+mT2nRz+wJFkb8VJIq2H/9oHTs+Ow2GcKqVGF095qkg8mvzlHAnk e2/KQ/jYR4ONzi0QQmSqucLYevatnvDiOFglRHXQwLEbDxiLARt6jOZEUrUxTpc+ CXL2gQAApkjhgpObK//ddPPmS++2gGNS7VQqPI0CMl49LMqWzOHu24T/Mq1tSKVI bIZbSI945twXnHBUKA0pU0JLX3zdsXvqFz1p0eH3Dj26eL/qTDzAnOAUkAeRpSD0 h7mqXO2nsTEz+TCPQXr3bgDgAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGR9nqn9 5W7yY9vlRPRHLJdk8/j5MB8GA1UdIwQYMBaAFCmWIyXeC63k3J3bxXauJ3ASvDdY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REEyRC84MzgzNjIwQTUw RDUxMUU3OUVDRTQwMTNDNEY5QUUwMi9LWllqSmQ0THJlVGNuZHZGZHE0bmNCSzhO MWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0taWWpKZDRMcmVUY25kdkZkcTRuY0JLOE4xZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 REEyRC84MzgzNjIwQTUwRDUxMUU3OUVDRTQwMTNDNEY5QUUwMi9LWllqSmQ0THJl VGNuZHZGZHE0bmNCSzhOMWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1iOUeXt9siW0Hl/cPh8gGm4ib7YwfGdHDKt1v07WSJHGX9Gqg2Mgq 5v3uP3DupKgKRhbbeC+/S3rYsUeC6P1O6VCSIai7DB8cIAbusqvs3eX0XmdWwrES eJqOCSlKtLwhNBGvFDMMTJAI6Nz7Zt8ESCV7kmin3dZI+JnSVFC/qXVvo4JhEUva tMnljZ+SuQVZ9m+R1e7aDgQ5l5ZBg6aoLjkgOEVmyE4/Jsw/sbq/7rT12T8lhYM1 NZuxcRFQB20weF9RPUzq9jHtob5yhG6WS4/sdee3mgpk+p0yCKgBHnCBU8w+mko8 8avQ3C+kdSzcGd2oJ0x6L/dO0fsIZtUD -----END CERTIFICATE-----Generated at Sat May 31 16:53:49 2025 by rpki-client