$ rpki-client -vvf rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.mft File: KMVnce5JZD_fxE-OMImmvXlf_IQ.mft (raw, json) Hash identifier: yaIYD0rXwWEVLrHnBxfmGUVoNWX4uEzTQhOZ2fcF9TA= Subject key identifier: 62:D7:AD:58:E9:B5:1F:CE:78:11:09:D5:25:14:F8:E6:4A:04:71:0D Authority key identifier: 28:C5:67:71:EE:49:64:3F:DF:C4:4F:8E:30:89:A6:BD:79:5F:FC:84 Certificate issuer: /CN=A9113C02/serialNumber=28C56771EE49643FDFC44F8E3089A6BD795FFC84 Certificate serial: 016C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMVnce5JZD_fxE-OMImmvXlf_IQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.mft Manifest number: 2448 Signing time: Thu 24 Apr 2025 16:21:24 +0000 Manifest this update: Thu 24 Apr 2025 16:21:23 +0000 Manifest next update: Thu 01 May 2025 16:21:23 +0000 Files and hashes: 1: KMVnce5JZD_fxE-OMImmvXlf_IQ.crl (hash: 2ZWOps1hERWrMQ5/LJHOY0x6X684focfzhsSJStXv9Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.crl rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMVnce5JZD_fxE-OMImmvXlf_IQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:21:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 364 (0x16c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113C02, serialNumber=28C56771EE49643FDFC44F8E3089A6BD795FFC84 Validity Not Before: Apr 24 16:21:23 2025 GMT Not After : May 1 16:21:23 2025 GMT Subject: CN=680a6503-509e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e2:38:8a:3a:56:ce:6e:d9:ca:ae:e5:f3:d2: b7:1d:a9:d3:79:1a:6b:0c:15:74:a1:09:e0:dc:c5: 9f:91:e1:88:66:59:61:34:b5:6b:8f:ff:ae:14:ce: eb:43:8b:45:88:fa:7c:60:d1:68:18:36:8d:d8:40: 5e:61:d0:60:a9:eb:04:95:8c:0d:87:3a:35:49:6a: 92:5b:14:db:72:24:bd:6c:00:5d:2c:c1:b8:b3:0e: 99:c2:83:d4:29:bd:33:27:24:7a:7e:d7:65:37:21: 0f:58:e8:96:16:a9:d6:22:85:9b:d6:eb:ba:4d:44: b8:39:23:81:8e:f7:73:69:ad:75:b6:9b:d3:f4:8a: 0c:eb:66:b6:3c:8a:c0:5b:7d:b1:cb:b0:14:fc:7d: d2:a5:29:ff:99:e7:f4:7b:b0:1e:15:ad:6e:a4:53: df:af:3f:4a:0b:d5:99:c0:68:af:be:43:cd:99:2d: bf:56:dc:f0:c4:01:31:db:ce:23:b6:4f:d8:c1:80: c1:f9:40:14:59:05:65:e8:be:b3:ef:ab:f7:4b:6c: 74:57:6f:94:cc:81:df:27:8d:b1:5a:b6:d7:79:0c: 51:af:2b:ea:50:da:da:5c:50:dd:6c:d4:4d:74:31: ce:11:fc:46:f0:be:7e:a5:a5:61:be:08:23:f5:e2: 88:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:D7:AD:58:E9:B5:1F:CE:78:11:09:D5:25:14:F8:E6:4A:04:71:0D X509v3 Authority Key Identifier: keyid:28:C5:67:71:EE:49:64:3F:DF:C4:4F:8E:30:89:A6:BD:79:5F:FC:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMVnce5JZD_fxE-OMImmvXlf_IQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:2e:de:3f:95:76:b0:2b:8e:0d:7b:65:b3:1f:a4:3e:e3:15: d2:44:36:74:12:a2:da:4d:40:4f:a5:a1:be:df:e2:24:f7:a2: c8:7c:52:25:2b:59:15:66:5c:1c:8f:b3:c4:38:3a:5a:be:98: 84:2a:09:8b:33:c3:6f:e6:17:01:00:3e:5e:ad:02:2f:86:60: 1f:55:e8:15:96:96:67:ba:04:2a:3f:5c:20:d8:99:ab:9c:b1: 62:62:d7:1b:a9:28:e4:ed:c5:24:eb:16:cc:96:79:c5:8f:61: dd:36:12:32:0c:6a:90:5a:65:95:f7:3d:09:f6:dc:e2:b5:20: 9d:ae:09:24:e4:36:13:9d:01:1b:ff:76:41:62:e9:bc:2d:a8: 5c:7a:4b:6f:d4:73:83:ed:34:a3:11:d4:e3:7e:7a:a3:d9:84: cf:70:f9:25:2f:a3:12:32:97:41:05:ee:ce:4d:e1:06:b1:96: 9c:90:cd:bc:70:52:97:0d:01:fc:48:72:1a:da:32:31:fb:b3: 54:40:6b:7d:25:e8:2c:83:93:d9:0d:8c:03:44:e9:c7:a2:43: 33:80:ea:8a:db:78:67:b1:48:c2:c6:1b:80:6f:86:74:33:7c: 92:88:9c:5b:d3:89:1b:3c:a5:3c:68:1e:b8:50:c6:52:ed:7e: 6e:56:ac:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTNDMDIxMTAvBgNVBAUTKDI4QzU2NzcxRUU0OTY0M0ZERkM0NEY4RTMwODlBNkJE Nzk1RkZDODQwHhcNMjUwNDI0MTYyMTIzWhcNMjUwNTAxMTYyMTIzWjAYMRYwFAYD VQQDEw02ODBhNjUwMy01MDllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw+I4ijpWzm7Zyq7l89K3HanTeRprDBV0oQng3MWfkeGIZllhNLVrj/+uFM7r Q4tFiPp8YNFoGDaN2EBeYdBgqesElYwNhzo1SWqSWxTbciS9bABdLMG4sw6ZwoPU Kb0zJyR6ftdlNyEPWOiWFqnWIoWb1uu6TUS4OSOBjvdzaa11tpvT9IoM62a2PIrA W32xy7AU/H3SpSn/mef0e7AeFa1upFPfrz9KC9WZwGivvkPNmS2/VtzwxAEx284j tk/YwYDB+UAUWQVl6L6z76v3S2x0V2+UzIHfJ42xWrbXeQxRryvqUNraXFDdbNRN dDHOEfxG8L5+paVhvggj9eKI1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGLXrVjp tR/OeBEJ1SUU+OZKBHENMB8GA1UdIwQYMBaAFCjFZ3HuSWQ/38RPjjCJpr15X/yE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0MwMi80QzQwNkZCNjQw NTYxMUU3QUYwNDFBMzVDNEY5QUUwMi9LTVZuY2U1SlpEX2Z4RS1PTUltbXZYbGZf SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tNVm5jZTVKWkRfZnhFLU9NSW1tdlhsZl9JUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx M0MwMi80QzQwNkZCNjQwNTYxMUU3QUYwNDFBMzVDNEY5QUUwMi9LTVZuY2U1SlpE X2Z4RS1PTUltbXZYbGZfSVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlLt4/lXawK44Ne2WzH6Q+4xXSRDZ0EqLaTUBPpaG+3+Ik96LIfFIl K1kVZlwcj7PEODpavpiEKgmLM8Nv5hcBAD5erQIvhmAfVegVlpZnugQqP1wg2Jmr nLFiYtcbqSjk7cUk6xbMlnnFj2HdNhIyDGqQWmWV9z0J9tzitSCdrgkk5DYTnQEb /3ZBYum8Lahcektv1HOD7TSjEdTjfnqj2YTPcPklL6MSMpdBBe7OTeEGsZackM28 cFKXDQH8SHIa2jIx+7NUQGt9Jegsg5PZDYwDROnHokMzgOqK23hnsUjCxhuAb4Z0 M3ySiJxb04kbPKU8aB64UMZS7X5uVqzN -----END CERTIFICATE-----Generated at Sat Apr 26 08:33:44 2025 by rpki-client