$ rpki-client -vvf rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.mft File: kpW_omLgV8ybyCF13K40eslspJE.mft (raw, json) Hash identifier: PoYngNMqG5eX2dkypFPfGQAVuIeDylDoPUBmQvhUPI0= Subject key identifier: B2:81:AB:D8:B5:C9:BF:6A:A7:D7:A4:31:AC:C6:5C:15:41:C9:F4:C0 Authority key identifier: 92:95:BF:A2:62:E0:57:CC:9B:C8:21:75:DC:AE:34:7A:C9:6C:A4:91 Certificate issuer: /CN=A91154E1/serialNumber=9295BFA262E057CC9BC82175DCAE347AC96CA491 Certificate serial: 09F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpW_omLgV8ybyCF13K40eslspJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.mft Manifest number: 09F1 Signing time: Thu 24 Apr 2025 19:46:16 +0000 Manifest this update: Thu 24 Apr 2025 19:46:15 +0000 Manifest next update: Thu 01 May 2025 19:46:15 +0000 Files and hashes: 1: kpW_omLgV8ybyCF13K40eslspJE.crl (hash: gei/XJZZGuFFsDBVJTauQY0bKNyopYDy1fGQywmy9YQ=) 2: FA6E4ECC755B11EAA7D9532EC4F9AE02.roa (hash: 8FzeKBFXv99yFqvBAS0u3OPnou1QCr+Lbmbr/8Rb56w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.crl rsync://rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpW_omLgV8ybyCF13K40eslspJE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:46:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2551 (0x9f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91154E1, serialNumber=9295BFA262E057CC9BC82175DCAE347AC96CA491 Validity Not Before: Apr 24 19:46:15 2025 GMT Not After : May 1 19:46:15 2025 GMT Subject: CN=680a9507-8c70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:66:ea:1c:c6:7d:8d:2e:5a:1f:e2:29:50:ed: 53:b9:f2:4e:0f:a5:79:5d:00:09:32:b1:3e:e4:38: 0e:30:4a:5a:69:b5:3c:4d:c0:b8:ad:13:88:8d:73: 3b:b9:64:09:0c:64:b7:fc:a0:e8:25:c1:3b:f7:ff: 31:19:43:5b:c8:0c:62:9d:b3:58:14:f1:6b:27:c5: bc:65:60:b6:61:59:1f:b9:a9:6f:fe:7d:d9:a1:8e: c4:51:5a:62:ae:74:8e:69:87:fb:69:64:f5:02:c6: 06:6d:4f:ec:14:af:46:91:05:fa:64:cc:a9:56:48: af:e4:e3:76:95:03:89:9a:b0:01:7a:40:bb:a1:a6: e8:ce:28:b3:47:a0:bc:dc:49:c5:e5:42:dc:28:a5: 1a:19:e5:02:2d:0a:7e:df:7a:c1:30:d6:1b:6d:15: 26:c2:ec:df:6b:c1:a9:be:1e:63:fe:89:44:3e:f7: a8:09:4b:62:c4:58:45:f9:a3:8f:28:a7:c8:c9:00: 0c:7e:6c:42:29:22:f3:cd:40:13:7d:23:41:05:87: fb:0a:db:8f:42:94:0e:5d:3e:8d:45:a0:a4:91:cf: 42:e6:5d:e9:e2:36:da:db:3a:02:c2:96:e2:90:13: a2:a6:50:b2:f8:f9:7b:b7:88:2d:c3:ab:3c:40:bb: 22:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:81:AB:D8:B5:C9:BF:6A:A7:D7:A4:31:AC:C6:5C:15:41:C9:F4:C0 X509v3 Authority Key Identifier: keyid:92:95:BF:A2:62:E0:57:CC:9B:C8:21:75:DC:AE:34:7A:C9:6C:A4:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpW_omLgV8ybyCF13K40eslspJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:24:ac:ac:c6:ee:bb:9d:82:b8:14:d9:06:98:b9:2c:91:a9: 6c:75:e6:67:e3:ac:b2:b9:c8:9e:f5:88:d7:8b:09:c0:97:08: 13:ee:dc:a5:4d:23:a5:5c:f4:08:7e:56:b3:b6:0e:35:f8:55: 22:39:40:58:28:1c:3c:6e:ff:94:8a:6d:39:f9:62:a5:f2:58: b2:7b:53:5a:db:01:ca:ec:69:b0:8b:8d:ec:3b:86:70:16:ae: 50:fd:ea:26:53:c3:4c:e4:65:a6:dd:ba:74:e1:b6:75:5b:fb: 9c:90:b8:2a:7d:ec:53:e6:db:d3:85:fc:4a:63:55:91:64:e3: af:c0:ed:d1:37:53:bf:e2:92:b7:8e:65:86:3e:84:4f:6a:14: 7e:e8:a5:d4:09:42:22:c0:6d:4b:a6:91:3f:e8:d9:64:7a:05: 6c:86:a1:d2:7a:cb:4f:97:6b:3e:38:c4:ac:00:34:71:99:fd: 35:a3:fb:1f:82:43:14:0b:1b:b9:85:b1:b1:e4:41:9e:5b:80: 77:cc:51:43:59:45:fe:1b:a3:e0:b9:7e:66:64:f0:a2:83:59: 09:9c:a3:ab:48:cf:88:98:7a:bb:1f:53:57:dc:6b:8c:0b:dc: 08:ab:da:f3:6c:cd:39:40:99:84:fa:76:00:4c:c7:40:7e:58: 5e:9e:11:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCfcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTU0RTExMTAvBgNVBAUTKDkyOTVCRkEyNjJFMDU3Q0M5QkM4MjE3NURDQUUzNDdB Qzk2Q0E0OTEwHhcNMjUwNDI0MTk0NjE1WhcNMjUwNTAxMTk0NjE1WjAYMRYwFAYD VQQDEw02ODBhOTUwNy04YzcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApmbqHMZ9jS5aH+IpUO1TufJOD6V5XQAJMrE+5DgOMEpaabU8TcC4rROIjXM7 uWQJDGS3/KDoJcE79/8xGUNbyAxinbNYFPFrJ8W8ZWC2YVkfualv/n3ZoY7EUVpi rnSOaYf7aWT1AsYGbU/sFK9GkQX6ZMypVkiv5ON2lQOJmrABekC7oaboziizR6C8 3EnF5ULcKKUaGeUCLQp+33rBMNYbbRUmwuzfa8Gpvh5j/olEPveoCUtixFhF+aOP KKfIyQAMfmxCKSLzzUATfSNBBYf7CtuPQpQOXT6NRaCkkc9C5l3p4jba2zoCwpbi kBOiplCy+Pl7t4gtw6s8QLsiRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLKBq9i1 yb9qp9ekMazGXBVByfTAMB8GA1UdIwQYMBaAFJKVv6Ji4FfMm8ghddyuNHrJbKSR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTRFMS80QTBDQjZGODc1 NDMxMUVBQTc1NzExNjBDNEY5QUUwMi9rcFdfb21MZ1Y4eWJ5Q0YxM0s0MGVzbHNw SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2twV19vbUxnVjh5YnlDRjEzSzQwZXNsc3BKRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NTRFMS80QTBDQjZGODc1NDMxMUVBQTc1NzExNjBDNEY5QUUwMi9rcFdfb21MZ1Y4 eWJ5Q0YxM0s0MGVzbHNwSkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByJKysxu67nYK4FNkGmLkskalsdeZn46yyucie9YjXiwnAlwgT7tyl TSOlXPQIflaztg41+FUiOUBYKBw8bv+Uim05+WKl8liye1Na2wHK7Gmwi43sO4Zw Fq5Q/eomU8NM5GWm3bp04bZ1W/uckLgqfexT5tvThfxKY1WRZOOvwO3RN1O/4pK3 jmWGPoRPahR+6KXUCUIiwG1LppE/6NlkegVshqHSestPl2s+OMSsADRxmf01o/sf gkMUCxu5hbGx5EGeW4B3zFFDWUX+G6PguX5mZPCig1kJnKOrSM+ImHq7H1NX3GuM C9wIq9rzbM05QJmE+nYATMdAflhenhHj -----END CERTIFICATE-----Generated at Sat Apr 26 05:06:01 2025 by rpki-client