$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/bKayrB3RewFNtsdnJ50Ixm5O_AU.mft File: bKayrB3RewFNtsdnJ50Ixm5O_AU.mft (raw, json) Hash identifier: 26sE8itisJLK34A2XTWmgj16NxvmjPa0y7H40A7LCS0= Subject key identifier: 88:26:56:FF:7F:6C:EC:7F:78:65:58:C4:BC:21:A5:D2:D0:CD:D3:48 Authority key identifier: 6C:A6:B2:AC:1D:D1:7B:01:4D:B6:C7:67:27:9D:08:C6:6E:4E:FC:05 Certificate issuer: /CN=A91BC6B4/serialNumber=6CA6B2AC1DD17B014DB6C767279D08C66E4EFC05 Certificate serial: 0F85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKayrB3RewFNtsdnJ50Ixm5O_AU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/bKayrB3RewFNtsdnJ50Ixm5O_AU.mft Manifest number: 0F62 Signing time: Fri 04 Apr 2025 17:40:52 +0000 Manifest this update: Fri 04 Apr 2025 17:40:52 +0000 Manifest next update: Fri 11 Apr 2025 17:40:52 +0000 Files and hashes: 1: bKayrB3RewFNtsdnJ50Ixm5O_AU.crl (hash: GR8E+r9Om1ynQpoHmU6jutJlIJoCyhCWcwJFG/JrUak=) 2: 61A85BEE21CF11EBA0C85857C4F9AE02.roa (hash: A3Tpub6p9P/++fbZ37k+IAk9EhP0OOzrI3+cFHFK9sU=) 3: FD22BBAE231F11EB99F53580C4F9AE02.roa (hash: 9qOXZArIIUyJUewjOCf9oYo9vbgS16mz3+p2fdmL0tQ=) 4: 425BF5FE7A4711EBAD125258C4F9AE02.roa (hash: 3q7a1bzBtmZRU9dyvbAJLpQiP+tIpP+39d4X4Gnm4cs=) 5: A850C476026E11EBB2E0E72FC4F9AE02.roa (hash: KYPMpugh4wkqi8c9+YZ4KJfTituHSP1OZb9rD6oRk2Y=) 6: 5FB07B1421CF11EBA0C85857C4F9AE02.roa (hash: Wlp7VJ4S/0DHPTZqsCcIenAV+N4iB3x2c/KGZJRvjlg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/bKayrB3RewFNtsdnJ50Ixm5O_AU.crl rsync://rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/bKayrB3RewFNtsdnJ50Ixm5O_AU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKayrB3RewFNtsdnJ50Ixm5O_AU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 17:40:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3973 (0xf85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC6B4 Validity Not Before: Apr 4 17:40:52 2025 GMT Not After : Apr 11 17:40:52 2025 GMT Subject: CN=67f019a4-c232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5d:61:f9:18:5e:a0:79:b8:39:91:76:66:0b: 63:bf:5d:b6:bc:2c:0c:09:59:8d:b3:b3:e7:e7:3d: 94:4a:ec:ba:c3:26:80:92:0a:17:d7:87:5d:5a:5a: 82:01:cd:69:66:f1:b9:ba:a0:40:86:9a:5e:dd:bc: 28:af:b5:ec:66:f9:88:d3:02:cd:aa:c9:c2:71:74: 36:92:b5:1f:c7:aa:fa:c8:05:fd:13:6c:35:c1:36: 4b:a2:d9:c5:d1:d1:bd:05:5f:38:93:79:02:a8:85: 95:9b:84:7d:3f:91:b5:d7:ee:6f:62:43:f3:93:3a: 48:26:4d:89:a8:4f:11:12:a5:01:57:8c:69:40:82: c6:12:fd:47:bd:59:2d:54:30:1b:a5:64:c4:1c:54: c9:74:bb:3a:16:6f:c7:c1:72:e7:2a:1c:86:a4:7f: 68:df:79:b2:7f:4c:9f:51:11:2c:60:77:7b:bd:f7: 73:a9:fc:54:b6:d3:99:14:f7:d0:ba:97:72:ef:08: 33:01:40:96:8d:6f:d2:39:7c:d2:89:a1:d8:54:d8: 0b:e0:ad:96:d4:35:3a:d0:ea:1d:20:ea:4d:93:34: a9:d4:5c:7a:27:ed:9e:07:a8:b9:62:10:9f:17:a4: ed:ab:0f:a9:d6:86:d8:76:54:85:1e:55:be:50:b3: 33:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:26:56:FF:7F:6C:EC:7F:78:65:58:C4:BC:21:A5:D2:D0:CD:D3:48 X509v3 Authority Key Identifier: keyid:6C:A6:B2:AC:1D:D1:7B:01:4D:B6:C7:67:27:9D:08:C6:6E:4E:FC:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/bKayrB3RewFNtsdnJ50Ixm5O_AU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKayrB3RewFNtsdnJ50Ixm5O_AU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/bKayrB3RewFNtsdnJ50Ixm5O_AU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:a7:3f:79:36:70:db:52:94:d4:a2:40:79:b2:31:73:82:78: 82:ab:19:29:35:03:29:98:ed:24:e8:c2:4e:55:23:a3:26:4c: 21:3a:3a:ff:30:bf:45:ea:2c:ec:51:55:bd:6f:39:1c:9e:14: 51:9d:ef:36:f9:89:48:6d:74:1c:8a:87:ac:59:57:86:e8:ea: fa:95:f8:e3:8f:d1:bd:63:8b:72:cc:16:a4:1a:2e:81:0a:ae: 2e:ac:54:04:f1:d3:22:55:48:fc:1e:bb:a3:69:19:81:a8:0a: af:7b:7e:74:24:f5:ff:1f:e1:b1:3a:1e:51:8d:81:0d:33:5a: 9a:a8:f2:82:85:03:02:41:b9:28:1f:dc:7c:f7:70:c0:cd:88: bf:9a:e4:6b:32:fe:84:59:2f:75:22:8f:3b:e7:eb:69:cd:ab: 1f:4a:6e:5b:3b:b2:e3:46:e9:28:63:71:9c:e2:cd:bc:2d:a9: 7c:6f:06:c1:d7:84:a8:87:77:fa:f2:d4:71:82:31:83:38:19: 3c:c5:24:2c:ab:1e:fc:4d:b7:18:d4:03:80:68:17:7e:5d:46: 58:92:54:87:b2:75:cc:78:df:cc:d5:81:e8:45:78:d0:7d:0e: ae:36:bd:b0:ad:1c:a8:8f:ce:c7:b0:95:f8:4f:70:c4:49:4a: 57:ac:46:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD4UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM2QjQxMTAvBgNVBAUTKDZDQTZCMkFDMUREMTdCMDE0REI2Qzc2NzI3OUQwOEM2 NkU0RUZDMDUwHhcNMjUwNDA0MTc0MDUyWhcNMjUwNDExMTc0MDUyWjAYMRYwFAYD VQQDEw02N2YwMTlhNC1jMjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvV1h+RheoHm4OZF2Zgtjv122vCwMCVmNs7Pn5z2USuy6wyaAkgoX14ddWlqC Ac1pZvG5uqBAhppe3bwor7XsZvmI0wLNqsnCcXQ2krUfx6r6yAX9E2w1wTZLotnF 0dG9BV84k3kCqIWVm4R9P5G11+5vYkPzkzpIJk2JqE8REqUBV4xpQILGEv1HvVkt VDAbpWTEHFTJdLs6Fm/HwXLnKhyGpH9o33myf0yfUREsYHd7vfdzqfxUttOZFPfQ updy7wgzAUCWjW/SOXzSiaHYVNgL4K2W1DU60OodIOpNkzSp1Fx6J+2eB6i5YhCf F6Ttqw+p1obYdlSFHlW+ULMzZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIgmVv9/ bOx/eGVYxLwhpdLQzdNIMB8GA1UdIwQYMBaAFGymsqwd0XsBTbbHZyedCMZuTvwF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzZCNC83MjZGNTFDMjYz RjIxMUU5QkIyMERENDVDNEY5QUUwMi9iS2F5ckIzUmV3Rk50c2RuSjUwSXhtNU9f QVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JLYXlyQjNSZXdGTnRzZG5KNTBJeG01T19BVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzZCNC83MjZGNTFDMjYzRjIxMUU5QkIyMERENDVDNEY5QUUwMi9iS2F5ckIzUmV3 Rk50c2RuSjUwSXhtNU9fQVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfpz95NnDbUpTUokB5sjFzgniCqxkpNQMpmO0k6MJOVSOjJkwhOjr/ ML9F6izsUVW9bzkcnhRRne82+YlIbXQcioesWVeG6Or6lfjjj9G9Y4tyzBakGi6B Cq4urFQE8dMiVUj8HrujaRmBqAqve350JPX/H+GxOh5RjYENM1qaqPKChQMCQbko H9x893DAzYi/muRrMv6EWS91Io875+tpzasfSm5bO7LjRukoY3Gc4s28Lal8bwbB 14Soh3f68tRxgjGDOBk8xSQsqx78TbcY1AOAaBd+XUZYklSHsnXMeN/M1YHoRXjQ fQ6uNr2wrRyoj87HsJX4T3DESUpXrEZO -----END CERTIFICATE-----Generated at Sat Apr 5 13:40:17 2025 by rpki-client