$ rpki-client -vvf rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.mft File: kCSWwSsdqlhOQrNDNM8XIBI2snw.mft (raw, json) Hash identifier: n8lfufsSzJ8uOjtEbLt+2d7UjIsNB0BwyqLVGawslHc= Subject key identifier: E0:50:43:65:FA:C9:2D:91:EB:A3:B4:98:45:AE:A9:99:D9:76:25:B2 Authority key identifier: 90:24:96:C1:2B:1D:AA:58:4E:42:B3:43:34:CF:17:20:12:36:B2:7C Certificate issuer: /CN=A912346E/serialNumber=902496C12B1DAA584E42B34334CF17201236B27C Certificate serial: 0608 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCSWwSsdqlhOQrNDNM8XIBI2snw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.mft Manifest number: 0603 Signing time: Thu 24 Apr 2025 22:40:04 +0000 Manifest this update: Thu 24 Apr 2025 22:40:03 +0000 Manifest next update: Thu 01 May 2025 22:40:03 +0000 Files and hashes: 1: kCSWwSsdqlhOQrNDNM8XIBI2snw.crl (hash: 80hUHjoO7I01Limj2w19uilD5lxjVc12P+aeOb8X2NA=) 2: 5E54C4BEA06411EBB6AFCD55C4F9AE02.roa (hash: gD2pdRxoUHqWRJCmsWGE/SoCkIZoZVizTbKUYmffLCI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.crl rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCSWwSsdqlhOQrNDNM8XIBI2snw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:40:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1544 (0x608) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912346E, serialNumber=902496C12B1DAA584E42B34334CF17201236B27C Validity Not Before: Apr 24 22:40:03 2025 GMT Not After : May 1 22:40:03 2025 GMT Subject: CN=680abdc4-8a2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:bf:f5:9f:28:e3:02:41:45:f1:f6:0b:ea:4f: 58:3d:3f:15:e4:5c:66:a1:38:a3:d7:56:5d:59:51: 9c:ef:83:5f:33:ad:16:53:e4:65:29:3e:b6:10:9c: 65:14:4d:bc:b4:6b:c9:27:b1:66:97:48:91:f5:95: 26:bb:b7:29:fc:35:62:41:7e:9e:18:5c:37:ce:64: 2e:40:1d:d8:37:d6:6f:3f:af:e8:0c:cd:ad:5b:47: 49:73:07:f4:ea:90:8d:38:91:4b:26:06:66:25:df: be:63:9c:1c:e6:6e:c7:29:0f:0c:48:83:19:2d:82: 39:f8:b1:89:43:a5:dd:4b:21:61:55:28:00:ca:e2: 2a:a8:d6:85:7f:52:2c:60:87:a9:0e:29:2e:08:38: 1c:f5:5d:fa:0d:dd:9b:7b:5f:25:04:10:c7:ad:52: ef:1d:8a:24:24:c7:31:b4:93:83:ed:4e:16:f5:55: d3:1e:a9:ba:d9:cc:b4:e2:e9:36:d2:4f:8b:e9:28: 9d:7d:54:e5:3e:2a:8e:d1:7d:ca:1f:f4:04:54:e3: c3:4c:04:03:62:a4:5c:77:be:ee:8d:d1:6a:6d:83: c5:4e:01:22:58:87:15:c5:8c:99:74:f9:ea:04:7d: 48:a8:02:75:15:96:6b:9e:51:12:cc:84:f2:54:03: 58:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:50:43:65:FA:C9:2D:91:EB:A3:B4:98:45:AE:A9:99:D9:76:25:B2 X509v3 Authority Key Identifier: keyid:90:24:96:C1:2B:1D:AA:58:4E:42:B3:43:34:CF:17:20:12:36:B2:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCSWwSsdqlhOQrNDNM8XIBI2snw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:5e:c8:0e:85:bb:78:85:32:d3:01:9f:f4:45:f1:2e:a2:ef: db:fb:87:af:e1:5b:94:f6:6c:f9:ce:26:0a:e9:5a:9a:7f:73: f6:06:f6:19:7c:ca:20:38:1a:e1:28:d0:4a:b0:c0:0e:23:de: 70:47:a5:c2:12:57:82:bd:40:e5:05:8f:9c:b2:c2:09:00:83: ae:ae:f6:62:1f:a7:9a:83:bf:77:85:b0:e9:a7:85:d9:7e:5a: c7:5e:ef:ed:09:44:78:e7:72:cb:8e:10:d9:a4:de:13:1c:fc: 53:08:80:f1:0a:9d:ce:76:0f:e1:ac:c6:85:75:51:c4:15:ae: 67:a6:0f:64:ad:bc:04:c4:8c:44:30:b0:f2:af:f7:58:ca:23: d6:c7:95:bc:f4:07:ec:6b:bc:61:b1:3b:5b:42:cc:4f:91:ed: 86:06:1c:f7:23:b0:bc:61:bf:53:50:2f:ea:68:3d:fa:aa:73: f6:77:1f:c4:39:27:e4:94:9c:0a:9e:ec:cb:0f:e9:74:79:e9: e8:56:45:f8:a6:42:90:04:78:ae:e6:28:de:9d:dd:79:84:5d: c9:66:d0:a0:f1:d6:de:05:7a:59:e4:e4:94:cb:51:82:be:a5: e7:d7:f3:d8:d3:67:6f:aa:06:cd:c4:95:ea:7f:40:39:0b:50: 95:db:ea:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBggwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM0NkUxMTAvBgNVBAUTKDkwMjQ5NkMxMkIxREFBNTg0RTQyQjM0MzM0Q0YxNzIw MTIzNkIyN0MwHhcNMjUwNDI0MjI0MDAzWhcNMjUwNTAxMjI0MDAzWjAYMRYwFAYD VQQDEw02ODBhYmRjNC04YTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzb/1nyjjAkFF8fYL6k9YPT8V5FxmoTij11ZdWVGc74NfM60WU+RlKT62EJxl FE28tGvJJ7Fml0iR9ZUmu7cp/DViQX6eGFw3zmQuQB3YN9ZvP6/oDM2tW0dJcwf0 6pCNOJFLJgZmJd++Y5wc5m7HKQ8MSIMZLYI5+LGJQ6XdSyFhVSgAyuIqqNaFf1Is YIepDikuCDgc9V36Dd2be18lBBDHrVLvHYokJMcxtJOD7U4W9VXTHqm62cy04uk2 0k+L6SidfVTlPiqO0X3KH/QEVOPDTAQDYqRcd77ujdFqbYPFTgEiWIcVxYyZdPnq BH1IqAJ1FZZrnlESzITyVANYywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOBQQ2X6 yS2R66O0mEWuqZnZdiWyMB8GA1UdIwQYMBaAFJAklsErHapYTkKzQzTPFyASNrJ8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzQ2RS84NUM0M0ZGRUEw NjIxMUVCODU5RTc2NTNDNEY5QUUwMi9rQ1NXd1NzZHFsaE9Rck5ETk04WElCSTJz bncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tDU1d3U3NkcWxoT1FyTkROTThYSUJJMnNudy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzQ2RS84NUM0M0ZGRUEwNjIxMUVCODU5RTc2NTNDNEY5QUUwMi9rQ1NXd1NzZHFs aE9Rck5ETk04WElCSTJzbncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNXsgOhbt4hTLTAZ/0RfEuou/b+4ev4VuU9mz5ziYK6Vqaf3P2BvYZ fMogOBrhKNBKsMAOI95wR6XCEleCvUDlBY+cssIJAIOurvZiH6eag793hbDpp4XZ flrHXu/tCUR453LLjhDZpN4THPxTCIDxCp3Odg/hrMaFdVHEFa5npg9krbwExIxE MLDyr/dYyiPWx5W89Afsa7xhsTtbQsxPke2GBhz3I7C8Yb9TUC/qaD36qnP2dx/E OSfklJwKnuzLD+l0eenoVkX4pkKQBHiu5ijend15hF3JZtCg8dbeBXpZ5OSUy1GC vqXn1/PY02dvqgbNxJXqf0A5C1CV2+r7 -----END CERTIFICATE-----Generated at Sat Apr 26 16:46:20 2025 by rpki-client