$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9CCC/758C80A22FD711F0862A6385C4F9AE02/kwduLLXgmVQqshD-tIYBkMVFxDY.mft File: kwduLLXgmVQqshD-tIYBkMVFxDY.mft (raw, json) Hash identifier: A5tvelwvutkfNCno8bEB3bQsijp38I/bX+NO4+KiYGQ= Subject key identifier: 9E:AF:07:46:66:9F:B6:EF:4E:0E:6B:6B:E6:EB:24:1D:EA:93:35:3D Authority key identifier: 93:07:6E:2C:B5:E0:99:54:2A:B2:10:FE:B4:86:01:90:C5:45:C4:36 Certificate issuer: /CN=A91E9CCC/serialNumber=93076E2CB5E099542AB210FEB4860190C545C436 Certificate serial: 11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kwduLLXgmVQqshD-tIYBkMVFxDY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9CCC/758C80A22FD711F0862A6385C4F9AE02/kwduLLXgmVQqshD-tIYBkMVFxDY.mft Manifest number: 0D Signing time: Sat 31 May 2025 07:40:44 +0000 Manifest this update: Sat 31 May 2025 07:40:44 +0000 Manifest next update: Sat 07 Jun 2025 07:40:44 +0000 Files and hashes: 1: kwduLLXgmVQqshD-tIYBkMVFxDY.crl (hash: ecFiWxpXOGt4PbhzHBWOPakPY9GmBM/rc1WlDzk9m+U=) 2: 5A8BA4982FDE11F0A4AB5D57C4F9AE02.roa (hash: AMD2GEEFiF8rkGOwYs1r+qxOyHQFwJJUEW+dwUt3a3s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9CCC/758C80A22FD711F0862A6385C4F9AE02/kwduLLXgmVQqshD-tIYBkMVFxDY.crl rsync://rpki.apnic.net/member_repository/A91E9CCC/758C80A22FD711F0862A6385C4F9AE02/kwduLLXgmVQqshD-tIYBkMVFxDY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kwduLLXgmVQqshD-tIYBkMVFxDY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:40:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9CCC, serialNumber=93076E2CB5E099542AB210FEB4860190C545C436 Validity Not Before: May 31 07:40:44 2025 GMT Not After : Jun 7 07:40:44 2025 GMT Subject: CN=683ab27c-c307 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b6:7d:99:96:34:9f:21:36:8a:92:8a:84:97: 56:2d:f7:92:ea:81:bc:20:f5:75:54:a5:f5:b2:f0: 71:33:d9:b4:a4:f5:23:3f:77:22:eb:3d:0b:40:79: 5c:5e:b3:af:78:68:3b:c8:f1:41:b2:3d:d9:7e:58: 02:b4:45:34:d0:e9:00:76:57:f7:99:c6:df:cd:5d: 06:f2:89:bc:d3:54:8e:87:ec:31:8e:aa:eb:d9:ec: fa:04:00:8f:7b:fa:34:ef:16:42:fd:b4:70:40:50: 08:b2:08:9c:83:72:d5:77:bc:de:b1:55:97:da:6a: 4f:5c:ae:a0:19:63:c4:3a:e3:24:b8:38:4d:d0:07: 23:6b:fb:b8:37:3f:55:7a:3b:ec:cc:24:13:cd:aa: 6f:6f:27:64:3b:5b:b8:6e:ad:79:0f:ab:b2:ad:ff: 80:12:72:89:28:82:08:12:94:4b:9c:3b:01:dc:b1: 14:dd:ca:57:71:c0:27:10:99:97:66:8c:75:e8:50: 48:ee:b1:f0:cf:97:ef:85:07:b2:42:67:bb:eb:00: e2:06:31:7a:57:45:3b:f4:d6:78:c9:23:66:ee:ae: 9b:89:03:77:7f:5d:dc:a7:59:0c:27:ab:13:81:aa: 03:f5:2c:23:2a:5b:d8:51:bd:f2:c7:4f:7a:f1:ee: 7a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:AF:07:46:66:9F:B6:EF:4E:0E:6B:6B:E6:EB:24:1D:EA:93:35:3D X509v3 Authority Key Identifier: keyid:93:07:6E:2C:B5:E0:99:54:2A:B2:10:FE:B4:86:01:90:C5:45:C4:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9CCC/758C80A22FD711F0862A6385C4F9AE02/kwduLLXgmVQqshD-tIYBkMVFxDY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kwduLLXgmVQqshD-tIYBkMVFxDY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9CCC/758C80A22FD711F0862A6385C4F9AE02/kwduLLXgmVQqshD-tIYBkMVFxDY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:22:a8:f0:2f:c1:c6:26:de:58:3f:63:95:e6:0d:b6:c4:02: a7:11:b6:34:ef:ef:18:a3:b8:a0:2e:01:6e:e7:b2:96:a2:2c: a4:76:c2:48:15:9d:46:3f:da:b2:7d:73:ae:ef:08:72:63:10: e0:04:47:df:17:53:d6:f2:df:71:63:c2:2f:b0:a3:93:bd:36: d6:72:58:c7:93:f4:19:d9:8a:99:17:64:35:29:4c:96:51:4f: 03:ac:a3:eb:15:83:2b:5f:b9:c4:e1:8a:9a:05:2e:fc:14:b6: 9f:4a:ff:a4:97:43:f9:91:46:86:3d:15:aa:9e:99:8b:a8:82: cc:cc:63:98:02:c2:f1:c6:0c:48:39:14:ab:e9:3a:bf:74:6b: 0f:ab:9e:4a:e5:45:9a:28:3a:1d:45:f1:a9:21:39:c5:e7:bd: c1:4f:44:d5:fe:ed:94:f8:5f:e6:8b:13:84:4e:1c:9c:a1:25: a8:6e:fd:4a:ce:68:70:09:41:ea:c0:f3:8f:ca:35:af:4f:ad: 9f:4d:d6:99:64:ec:e5:90:4f:86:7d:db:a8:cb:23:9e:d6:e6: 2d:0e:dd:35:c2:ee:7b:94:26:ab:85:a2:c8:b5:d2:a0:2e:60: 79:b5:bf:e0:a7:07:61:d0:26:af:aa:0a:92:c7:39:77:5d:76: 0b:c5:b1:fc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF OUNDQzExMC8GA1UEBRMoOTMwNzZFMkNCNUUwOTk1NDJBQjIxMEZFQjQ4NjAxOTBD NTQ1QzQzNjAeFw0yNTA1MzEwNzQwNDRaFw0yNTA2MDcwNzQwNDRaMBgxFjAUBgNV BAMTDTY4M2FiMjdjLWMzMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCjtn2ZljSfITaKkoqEl1Yt95Lqgbwg9XVUpfWy8HEz2bSk9SM/dyLrPQtAeVxe s694aDvI8UGyPdl+WAK0RTTQ6QB2V/eZxt/NXQbyibzTVI6H7DGOquvZ7PoEAI97 +jTvFkL9tHBAUAiyCJyDctV3vN6xVZfaak9crqAZY8Q64yS4OE3QByNr+7g3P1V6 O+zMJBPNqm9vJ2Q7W7hurXkPq7Kt/4AScokogggSlEucOwHcsRTdyldxwCcQmZdm jHXoUEjusfDPl++FB7JCZ7vrAOIGMXpXRTv01njJI2burpuJA3d/XdynWQwnqxOB qgP1LCMqW9hRvfLHT3rx7nolAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUnq8HRmaf tu9ODmtr5uskHeqTNT0wHwYDVR0jBBgwFoAUkwduLLXgmVQqshD+tIYBkMVFxDYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5Q0NDLzc1OEM4MEEyMkZE NzExRjA4NjJBNjM4NUM0RjlBRTAyL2t3ZHVMTFhnbVZRcXNoRC10SVlCa01WRnhE WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva3dkdUxMWGdtVlFxc2hELXRJWUJrTVZGeERZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5 Q0NDLzc1OEM4MEEyMkZENzExRjA4NjJBNjM4NUM0RjlBRTAyL2t3ZHVMTFhnbVZR cXNoRC10SVlCa01WRnhEWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHgiqPAvwcYm3lg/Y5XmDbbEAqcRtjTv7xijuKAuAW7nspaiLKR2wkgV nUY/2rJ9c67vCHJjEOAER98XU9by33Fjwi+wo5O9NtZyWMeT9BnZipkXZDUpTJZR TwOso+sVgytfucThipoFLvwUtp9K/6SXQ/mRRoY9FaqemYuogszMY5gCwvHGDEg5 FKvpOr90aw+rnkrlRZooOh1F8akhOcXnvcFPRNX+7ZT4X+aLE4ROHJyhJahu/UrO aHAJQerA84/KNa9PrZ9N1plk7OWQT4Z926jLI57W5i0O3TXC7nuUJquFosi10qAu YHm1v+CnB2HQJq+qCpLHOXdddgvFsfw= -----END CERTIFICATE-----Generated at Sat May 31 17:23:33 2025 by rpki-client