$ rpki-client -vvf rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.mft File: kUhQxLilE7L45O3EtVeHB3djcq4.mft (raw, json) Hash identifier: p/KfCYmxGZxdSF2glRt09iHOpyhCNaxvifE4i6qgFds= Subject key identifier: FD:8A:47:63:99:AF:BF:62:A8:1D:86:32:63:50:AA:C9:CC:61:EE:A3 Authority key identifier: 91:48:50:C4:B8:A5:13:B2:F8:E4:ED:C4:B5:57:87:07:77:63:72:AE Certificate issuer: /CN=A91215B3/serialNumber=914850C4B8A513B2F8E4EDC4B5578707776372AE Certificate serial: 017B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUhQxLilE7L45O3EtVeHB3djcq4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.mft Manifest number: 016E Signing time: Fri 25 Apr 2025 03:09:41 +0000 Manifest this update: Fri 25 Apr 2025 03:09:40 +0000 Manifest next update: Fri 02 May 2025 03:09:40 +0000 Files and hashes: 1: kUhQxLilE7L45O3EtVeHB3djcq4.crl (hash: bq2V2Ywa28ZoZCU5dB3CPdPGE2SBvZnqVYQq1q6Uiec=) 2: D8F27C903AD811EF960D9329C4F9AE02.roa (hash: g1Yxh4X4gr9QP8BwAN2yJktOsO1m01aHRbfwGJbCyik=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.crl rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUhQxLilE7L45O3EtVeHB3djcq4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:09:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 379 (0x17b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91215B3, serialNumber=914850C4B8A513B2F8E4EDC4B5578707776372AE Validity Not Before: Apr 25 03:09:40 2025 GMT Not After : May 2 03:09:40 2025 GMT Subject: CN=680afcf4-f9a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:93:9c:bb:b0:f3:4b:6e:19:af:27:4e:0d:45: 81:d4:98:11:64:ef:1c:db:34:1b:00:95:48:b1:e1: a9:c0:6c:79:98:74:09:d4:93:9e:6f:72:e4:a8:94: b4:42:88:b3:ee:df:d2:ac:b6:da:63:af:50:d3:89: 3e:41:ca:d2:bf:5c:e1:ba:6f:08:4b:30:66:fe:0c: ec:1d:fa:98:30:2b:fc:dc:32:55:7b:06:35:32:61: 5a:c7:81:5b:ff:43:83:73:76:de:bc:d0:2c:92:8c: 72:e5:c1:48:c7:d2:9b:86:66:4b:df:11:99:2a:3d: 44:d4:80:3b:7f:2b:2d:35:fa:43:7a:82:7e:f1:6a: 89:df:a4:b9:11:50:e3:9f:ee:e5:83:ff:6d:67:4b: cf:71:07:67:bf:13:5e:28:4b:89:6a:a8:f6:17:67: 6e:0f:88:39:af:3e:07:62:0e:39:1a:63:5f:23:5a: 45:d7:fd:5e:2c:3c:9c:74:77:a2:e1:0d:fc:9d:d8: 65:05:f5:ba:d0:6f:28:2b:76:e3:45:b7:48:a6:65: c4:ba:21:bb:6f:04:64:04:3b:1a:fe:83:12:fd:8a: e4:44:e2:f5:ac:22:4c:e6:7c:44:dd:10:29:30:68: a5:41:d6:e1:d4:ab:73:98:e1:c0:a0:c4:bc:84:9b: 86:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:8A:47:63:99:AF:BF:62:A8:1D:86:32:63:50:AA:C9:CC:61:EE:A3 X509v3 Authority Key Identifier: keyid:91:48:50:C4:B8:A5:13:B2:F8:E4:ED:C4:B5:57:87:07:77:63:72:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUhQxLilE7L45O3EtVeHB3djcq4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:51:bc:09:b2:b3:d1:bf:4d:9f:10:5f:20:59:b7:ff:88:6f: 6e:ac:04:2d:f2:08:2c:77:5d:03:59:f6:b0:0d:03:1e:9f:b0: be:dc:81:f7:ee:34:87:4a:cd:38:53:0f:bd:d5:9a:66:22:75: 9a:cb:d9:89:ca:c2:76:9f:fe:77:48:fc:6d:63:78:a6:d2:3f: 74:13:47:4f:a6:65:f6:47:b1:28:8e:52:4e:fd:47:9a:f6:41: 3d:df:01:45:3c:02:4d:73:42:f9:45:3d:97:1e:be:d7:7b:c7: f8:b4:c2:0e:a5:1d:10:53:d1:1a:61:9a:8b:20:e1:b0:54:72: 68:6d:96:e7:ec:99:ad:19:6d:24:54:11:28:25:da:1d:b6:96: 4a:5f:4c:0d:ab:b9:36:6f:3c:bf:37:ab:9d:b8:4e:31:e9:b3: 9d:f0:64:62:f0:e0:15:b8:59:d2:f1:75:9c:95:ad:e2:e1:61: fa:5b:d1:0c:b6:0a:06:be:99:25:d9:02:90:58:9b:75:37:39: 84:e4:00:da:b3:c8:48:68:04:aa:56:5a:14:1d:02:a4:45:9d: 7e:39:76:e6:b1:b0:8e:8f:ad:73:90:af:9f:97:2d:22:7d:29: 83:3b:b7:43:af:6d:f5:18:65:93:2a:4e:cb:5b:c8:c2:ff:79: d8:73:89:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE1QjMxMTAvBgNVBAUTKDkxNDg1MEM0QjhBNTEzQjJGOEU0RURDNEI1NTc4NzA3 Nzc2MzcyQUUwHhcNMjUwNDI1MDMwOTQwWhcNMjUwNTAyMDMwOTQwWjAYMRYwFAYD VQQDEw02ODBhZmNmNC1mOWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvZOcu7DzS24ZrydODUWB1JgRZO8c2zQbAJVIseGpwGx5mHQJ1JOeb3LkqJS0 Qoiz7t/SrLbaY69Q04k+QcrSv1zhum8ISzBm/gzsHfqYMCv83DJVewY1MmFax4Fb /0ODc3bevNAskoxy5cFIx9KbhmZL3xGZKj1E1IA7fystNfpDeoJ+8WqJ36S5EVDj n+7lg/9tZ0vPcQdnvxNeKEuJaqj2F2duD4g5rz4HYg45GmNfI1pF1/1eLDycdHei 4Q38ndhlBfW60G8oK3bjRbdIpmXEuiG7bwRkBDsa/oMS/YrkROL1rCJM5nxE3RAp MGilQdbh1KtzmOHAoMS8hJuGwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP2KR2OZ r79iqB2GMmNQqsnMYe6jMB8GA1UdIwQYMBaAFJFIUMS4pROy+OTtxLVXhwd3Y3Ku MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTVCMy9FNkY2OEYwNjBC NEIxMUVFQUI5QUFENzlDNEY5QUUwMi9rVWhReExpbEU3TDQ1TzNFdFZlSEIzZGpj cTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tVaFF4TGlsRTdMNDVPM0V0VmVIQjNkamNxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTVCMy9FNkY2OEYwNjBCNEIxMUVFQUI5QUFENzlDNEY5QUUwMi9rVWhReExpbEU3 TDQ1TzNFdFZlSEIzZGpjcTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJUbwJsrPRv02fEF8gWbf/iG9urAQt8ggsd10DWfawDQMen7C+3IH3 7jSHSs04Uw+91ZpmInWay9mJysJ2n/53SPxtY3im0j90E0dPpmX2R7EojlJO/Uea 9kE93wFFPAJNc0L5RT2XHr7Xe8f4tMIOpR0QU9EaYZqLIOGwVHJobZbn7JmtGW0k VBEoJdodtpZKX0wNq7k2bzy/N6uduE4x6bOd8GRi8OAVuFnS8XWcla3i4WH6W9EM tgoGvpkl2QKQWJt1NzmE5ADas8hIaASqVloUHQKkRZ1+OXbmsbCOj61zkK+fly0i fSmDO7dDr231GGWTKk7LW8jC/3nYc4lm -----END CERTIFICATE-----Generated at Sat Apr 26 04:19:57 2025 by rpki-client