$ rpki-client -vvf rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft File: Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft (raw, json) Hash identifier: No/n/NQUb8WePNzXzgYL+wAhvu90YQ7WC1tMbxeyBIA= Subject key identifier: 0D:8C:6F:4B:75:B1:E3:B3:93:ED:80:F8:DF:C0:CD:56:7F:32:01:0D Authority key identifier: 2A:47:75:37:F3:23:EF:B5:9D:BD:8D:BE:B3:AF:AB:1F:15:82:F5:46 Certificate issuer: /CN=A916DDB4/serialNumber=2A477537F323EFB59DBD8DBEB3AFAB1F1582F546 Certificate serial: 05E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft Manifest number: 05DB Signing time: Fri 30 May 2025 23:11:53 +0000 Manifest this update: Fri 30 May 2025 23:11:53 +0000 Manifest next update: Fri 06 Jun 2025 23:11:53 +0000 Files and hashes: 1: Kkd1N_Mj77WdvY2-s6-rHxWC9UY.crl (hash: eNRndqNFj8fYJKlKL+4P0NLEUWT2tO83lr6TXivzbD4=) 2: B951F87ABE6D11EF933FE870C4F9AE02.roa (hash: z/OvD5EQcBmWZhdA8ip/E6h0FRzhkXq6osJ4yXLXzHc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.crl rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:11:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1506 (0x5e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DDB4, serialNumber=2A477537F323EFB59DBD8DBEB3AFAB1F1582F546 Validity Not Before: May 30 23:11:53 2025 GMT Not After : Jun 6 23:11:53 2025 GMT Subject: CN=683a3b39-61cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:16:55:fe:c3:e1:12:73:ee:5f:b0:69:65:25: f1:97:ed:3f:91:24:71:ec:4a:31:b1:84:38:ca:c6: 3b:cc:a2:02:96:12:ae:30:de:9d:fb:27:29:d8:b9: 18:c5:08:be:e3:f9:93:fb:a0:97:2c:72:fa:ba:90: ed:32:30:14:a0:9a:1e:e9:5d:fe:7c:cc:18:53:0f: b0:ad:dd:20:75:a6:d6:d6:cc:e5:bb:db:91:84:1e: 85:ed:fc:8d:b9:6d:76:10:a7:21:bf:44:2c:6b:a1: d1:78:80:ef:a5:9f:b4:d7:dc:6f:fc:0d:f2:2f:a2: f8:6e:19:39:af:12:e3:f2:f9:76:dc:44:03:ed:81: 66:68:5b:19:52:49:f3:17:32:61:f1:ff:d8:34:82: 8e:87:20:27:d3:d6:8c:b5:34:9b:e0:ae:f2:01:a7: b5:0b:fd:77:cb:62:0c:d5:ff:03:7b:5a:4c:d0:e1: e0:35:d6:74:cc:e7:59:b0:6a:15:4c:30:cc:4e:51: c6:b0:c6:77:ae:9e:df:c2:ca:4f:73:ee:e0:74:25: b1:c9:69:a8:d8:b2:13:8c:33:6b:a4:91:e1:33:90: 3c:2d:2e:f6:3e:f6:ce:5f:ca:d0:e5:64:fb:c3:71: 2f:7b:5a:84:96:df:70:0b:56:e3:ab:88:0e:e2:08: 0a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:8C:6F:4B:75:B1:E3:B3:93:ED:80:F8:DF:C0:CD:56:7F:32:01:0D X509v3 Authority Key Identifier: keyid:2A:47:75:37:F3:23:EF:B5:9D:BD:8D:BE:B3:AF:AB:1F:15:82:F5:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:1b:31:b5:78:f6:7c:ac:35:f5:4f:0a:58:8f:69:b1:6f:a4: 71:7b:fc:23:6f:c6:51:f2:68:92:6a:7d:60:55:3c:17:ab:c0: d1:6f:ca:46:89:fa:ed:fb:d4:6c:03:28:28:bd:1a:9f:d4:ef: f2:43:1c:2a:bb:08:0d:62:d6:96:75:ae:90:a2:3e:2d:82:bf: e7:b3:86:ec:ec:77:76:f7:ee:6f:e1:8c:ed:70:66:5c:78:25: e4:14:a5:5e:52:5c:7f:0d:e3:2e:96:9e:e8:ad:ef:23:ed:c6: b2:66:76:eb:5e:6a:a8:cd:48:e0:63:de:56:fd:85:c9:9d:0c: 0b:35:9f:40:1b:48:21:7f:99:b6:5f:2e:64:89:06:43:f8:62: 42:fa:24:8e:d7:bf:13:71:4c:e1:d4:94:26:0e:07:9b:74:f0: 61:77:b3:09:2d:80:72:09:0f:77:ec:ff:07:d9:60:bc:70:9b: 82:06:d1:73:c2:e1:b8:54:f2:ab:32:ff:52:75:78:cb:2d:62: ad:47:d4:f2:5e:b5:ca:ba:08:b3:f7:0e:9f:cd:53:48:5e:e7: 08:1e:0e:92:43:25:31:1f:bd:3e:5c:46:86:e7:4e:3e:94:71: d2:54:eb:41:9b:eb:63:38:c5:56:44:fb:c1:33:ec:b7:0c:f9: fe:b6:b6:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBeIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkREQjQxMTAvBgNVBAUTKDJBNDc3NTM3RjMyM0VGQjU5REJEOERCRUIzQUZBQjFG MTU4MkY1NDYwHhcNMjUwNTMwMjMxMTUzWhcNMjUwNjA2MjMxMTUzWjAYMRYwFAYD VQQDEw02ODNhM2IzOS02MWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtBZV/sPhEnPuX7BpZSXxl+0/kSRx7EoxsYQ4ysY7zKIClhKuMN6d+ycp2LkY xQi+4/mT+6CXLHL6upDtMjAUoJoe6V3+fMwYUw+wrd0gdabW1szlu9uRhB6F7fyN uW12EKchv0Qsa6HReIDvpZ+019xv/A3yL6L4bhk5rxLj8vl23EQD7YFmaFsZUknz FzJh8f/YNIKOhyAn09aMtTSb4K7yAae1C/13y2IM1f8De1pM0OHgNdZ0zOdZsGoV TDDMTlHGsMZ3rp7fwspPc+7gdCWxyWmo2LITjDNrpJHhM5A8LS72PvbOX8rQ5WT7 w3Eve1qElt9wC1bjq4gO4ggKfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA2Mb0t1 seOzk+2A+N/AzVZ/MgENMB8GA1UdIwQYMBaAFCpHdTfzI++1nb2NvrOvqx8VgvVG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RERCNC9BNjAwODMxNkI5 MzIxMUVCQjk1RDA2M0NDNEY5QUUwMi9La2QxTl9Najc3V2R2WTItczYtckh4V0M5 VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0trZDFOX01qNzdXZHZZMi1zNi1ySHhXQzlVWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RERCNC9BNjAwODMxNkI5MzIxMUVCQjk1RDA2M0NDNEY5QUUwMi9La2QxTl9Najc3 V2R2WTItczYtckh4V0M5VVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjGzG1ePZ8rDX1TwpYj2mxb6Rxe/wjb8ZR8miSan1gVTwXq8DRb8pG ifrt+9RsAygovRqf1O/yQxwquwgNYtaWda6Qoj4tgr/ns4bs7Hd29+5v4YztcGZc eCXkFKVeUlx/DeMulp7ore8j7cayZnbrXmqozUjgY95W/YXJnQwLNZ9AG0ghf5m2 Xy5kiQZD+GJC+iSO178TcUzh1JQmDgebdPBhd7MJLYByCQ937P8H2WC8cJuCBtFz wuG4VPKrMv9SdXjLLWKtR9TyXrXKugiz9w6fzVNIXucIHg6SQyUxH70+XEaG504+ lHHSVOtBm+tjOMVWRPvBM+y3DPn+trbp -----END CERTIFICATE-----Generated at Sat May 31 17:00:17 2025 by rpki-client