$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft File: kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft (raw, json) Hash identifier: zQ97IxjqEw6Md/RL8RiP9fq3RrmCJFGeHgr15WOPfBE= Subject key identifier: EA:48:A8:91:61:E2:3E:40:D5:33:53:8F:0D:35:BD:4F:9B:8F:5E:7F Authority key identifier: 90:C6:B6:8D:16:AE:43:92:ED:F0:E9:0F:E1:37:38:0E:3C:44:37:E7 Certificate issuer: /CN=A91F7935/serialNumber=90C6B68D16AE4392EDF0E90FE137380E3C4437E7 Certificate serial: 039D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft Manifest number: 0399 Signing time: Sat 31 May 2025 00:58:18 +0000 Manifest this update: Sat 31 May 2025 00:58:18 +0000 Manifest next update: Sat 07 Jun 2025 00:58:18 +0000 Files and hashes: 1: kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.crl (hash: xrNhLE+kBXeJai+y0HT8bpVpo97d+5yqimqpxC+49NA=) 2: 76B3E9929B9811EC8CE35458C4F9AE02.roa (hash: SgiMSTFsjgeREQPyRLpKSW3muW+9eyekiQ9Ab0wfEaI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.crl rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:58:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 925 (0x39d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7935, serialNumber=90C6B68D16AE4392EDF0E90FE137380E3C4437E7 Validity Not Before: May 31 00:58:18 2025 GMT Not After : Jun 7 00:58:18 2025 GMT Subject: CN=683a542a-3c92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:34:f7:8e:11:a4:ec:bd:cc:a1:fd:ee:af:59: 0a:be:88:43:ae:10:a7:f5:a6:aa:11:8a:64:54:e9: 35:05:20:b4:48:20:c3:4b:11:7f:40:1a:f2:0b:88: 86:28:e0:28:2b:93:85:6d:96:8e:be:68:ab:c4:90: f2:80:1c:83:34:54:40:d7:fc:8e:e1:1a:2d:dd:38: f2:24:08:97:2f:c8:5d:a3:20:af:40:e8:74:10:40: 80:28:10:60:ca:06:1e:85:f3:81:cb:44:a6:eb:8a: e6:6a:74:15:22:85:fd:61:4a:40:4f:1a:39:fb:0a: ba:cf:18:dd:0f:9e:90:2f:6c:24:1d:52:1f:a7:c6: 51:39:f2:4b:78:95:88:d0:8d:16:82:22:a8:3a:11: 99:f7:46:27:af:fb:44:ba:73:27:f9:9e:69:00:39: a3:9e:7c:d4:8c:34:6c:81:09:29:d0:02:1a:21:15: 96:49:b9:6b:7c:09:40:fb:a3:05:39:a2:e9:be:a4: 7d:5f:8a:25:41:ce:a4:f8:39:af:23:2d:0b:8b:dc: 89:3b:d3:66:41:ca:b1:a3:25:a6:d7:f3:fb:d8:f1: 0b:0b:de:fd:b5:64:d3:a8:56:da:f8:66:01:9d:d1: 55:d5:10:10:90:1d:80:a2:c8:29:4c:32:b7:14:d9: 39:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:48:A8:91:61:E2:3E:40:D5:33:53:8F:0D:35:BD:4F:9B:8F:5E:7F X509v3 Authority Key Identifier: keyid:90:C6:B6:8D:16:AE:43:92:ED:F0:E9:0F:E1:37:38:0E:3C:44:37:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:92:ef:d6:3e:2c:64:92:a0:20:3b:e5:9a:24:c6:3b:a2:cb: 6d:ce:f1:88:22:12:ec:cd:6a:7b:69:e0:fa:00:b1:ee:04:e6: 34:7d:97:b6:c5:6e:cd:56:cf:61:63:ec:e2:8e:4a:a3:04:a2: 4a:18:96:fc:76:da:ea:6f:2c:6d:cd:30:0e:53:00:83:14:ef: 7a:7e:9b:30:94:a5:6d:bb:89:6d:11:e8:fb:6a:62:d3:a5:31: 0c:8a:53:17:20:b1:07:bb:c5:1d:a4:cb:6e:7f:12:c8:04:f6: 91:35:71:71:08:0f:71:ce:fe:b2:0c:02:e0:56:3b:83:7a:1c: 13:22:1c:78:03:a0:b4:31:25:79:c5:dc:7a:ff:87:4f:61:ae: 4d:53:cf:9d:fb:ae:8e:0d:a8:96:f9:d3:ed:97:db:8e:a1:75: 1c:32:ef:37:7a:9a:b5:06:fa:59:93:6f:0f:b3:86:7b:bf:5e: 9e:6e:e4:32:ba:01:36:6f:05:f8:b2:5e:3d:44:a6:ac:09:61: ef:ac:a4:9e:ff:2d:60:23:ab:7d:b8:d1:90:93:99:cb:ee:08: a5:41:3a:cd:79:3b:8b:65:4b:6c:69:05:63:a7:8b:87:db:84: 1e:53:88:92:77:75:98:cb:93:9b:58:6c:bf:b6:60:c5:06:72: 01:41:9e:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA50wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjc5MzUxMTAvBgNVBAUTKDkwQzZCNjhEMTZBRTQzOTJFREYwRTkwRkUxMzczODBF M0M0NDM3RTcwHhcNMjUwNTMxMDA1ODE4WhcNMjUwNjA3MDA1ODE4WjAYMRYwFAYD VQQDEw02ODNhNTQyYS0zYzkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0DT3jhGk7L3Mof3ur1kKvohDrhCn9aaqEYpkVOk1BSC0SCDDSxF/QBryC4iG KOAoK5OFbZaOvmirxJDygByDNFRA1/yO4Rot3TjyJAiXL8hdoyCvQOh0EECAKBBg ygYehfOBy0Sm64rmanQVIoX9YUpATxo5+wq6zxjdD56QL2wkHVIfp8ZROfJLeJWI 0I0WgiKoOhGZ90Ynr/tEunMn+Z5pADmjnnzUjDRsgQkp0AIaIRWWSblrfAlA+6MF OaLpvqR9X4olQc6k+DmvIy0Li9yJO9NmQcqxoyWm1/P72PELC979tWTTqFba+GYB ndFV1RAQkB2AosgpTDK3FNk5RwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOpIqJFh 4j5A1TNTjw01vU+bj15/MB8GA1UdIwQYMBaAFJDGto0WrkOS7fDpD+E3OA48RDfn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzkzNS85MDVBM0E0ODlC OTUxMUVDQUUzRjBDNEZDNEY5QUUwMi9rTWEyalJhdVE1THQ4T2tQNFRjNERqeEVO LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tNYTJqUmF1UTVMdDhPa1A0VGM0RGp4RU4tYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzkzNS85MDVBM0E0ODlCOTUxMUVDQUUzRjBDNEZDNEY5QUUwMi9rTWEyalJhdVE1 THQ4T2tQNFRjNERqeEVOLWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2ku/WPixkkqAgO+WaJMY7osttzvGIIhLszWp7aeD6ALHuBOY0fZe2 xW7NVs9hY+zijkqjBKJKGJb8dtrqbyxtzTAOUwCDFO96fpswlKVtu4ltEej7amLT pTEMilMXILEHu8UdpMtufxLIBPaRNXFxCA9xzv6yDALgVjuDehwTIhx4A6C0MSV5 xdx6/4dPYa5NU8+d+66ODaiW+dPtl9uOoXUcMu83epq1BvpZk28Ps4Z7v16ebuQy ugE2bwX4sl49RKasCWHvrKSe/y1gI6t9uNGQk5nL7gilQTrNeTuLZUtsaQVjp4uH 24QeU4iSd3WYy5ObWGy/tmDFBnIBQZ4j -----END CERTIFICATE-----Generated at Sat May 31 16:47:48 2025 by rpki-client