$ rpki-client -vvf rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.mft File: kWov4qosIKsBxaE9I22knbfqUGI.mft (raw, json) Hash identifier: CKUUO/wuzYDGbejHoH9gE4iabJbZ3VALAumv422rEP8= Subject key identifier: 33:41:2F:42:A2:39:54:D4:74:65:7C:15:B8:16:3F:69:FA:65:D6:08 Authority key identifier: 91:6A:2F:E2:AA:2C:20:AB:01:C5:A1:3D:23:6D:A4:9D:B7:EA:50:62 Certificate issuer: /CN=A912EF71/serialNumber=916A2FE2AA2C20AB01C5A13D236DA49DB7EA5062 Certificate serial: 0E08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kWov4qosIKsBxaE9I22knbfqUGI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.mft Manifest number: 0E00 Signing time: Thu 24 Apr 2025 17:48:09 +0000 Manifest this update: Thu 24 Apr 2025 17:48:08 +0000 Manifest next update: Thu 01 May 2025 17:48:08 +0000 Files and hashes: 1: kWov4qosIKsBxaE9I22knbfqUGI.crl (hash: UOQl4TxhC/HdzAXnaB7tPGizZx5Ka69t81ygBKSSMPM=) 2: 6877A622A9DB11E9B353AF85C4F9AE02.roa (hash: 041/+q2U6C3NS+0FvYUDZgs9ujhQmOXumHp5fUehTOA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.crl rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kWov4qosIKsBxaE9I22knbfqUGI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:48:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3592 (0xe08) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912EF71, serialNumber=916A2FE2AA2C20AB01C5A13D236DA49DB7EA5062 Validity Not Before: Apr 24 17:48:08 2025 GMT Not After : May 1 17:48:08 2025 GMT Subject: CN=680a7959-fc50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:36:1c:12:0b:44:64:fa:3a:09:1d:d8:d8:20: 2e:70:56:cb:23:4a:0d:9c:36:ec:44:24:f8:f0:8b: 86:d0:9f:89:d9:0d:fa:ba:33:1f:a6:e9:d4:5b:47: 50:3e:0a:ed:c4:65:06:f7:9e:3f:e6:76:a9:29:00: 15:f2:80:b4:9a:1a:f8:37:ed:b2:e9:2e:71:36:22: 61:3a:4a:48:84:60:07:6b:d3:2c:19:25:ed:01:08: f4:a8:76:f0:a4:cd:4a:fe:72:04:8c:9e:e7:6b:e4: 9f:c3:11:1c:9e:8a:5a:93:44:b2:a9:80:32:c7:c6: 60:40:bc:20:f2:24:65:dc:20:0d:6e:33:e5:26:0c: f6:7c:b5:f4:23:d8:24:90:d6:fa:42:21:61:0d:21: 2d:8a:95:c8:ce:3f:cf:05:40:71:e7:1d:23:3f:f8: 3c:30:ec:d7:a5:66:41:7e:31:64:d3:d5:9a:80:32: 26:63:bf:32:46:9c:7b:2b:c1:c6:b4:49:6c:0e:c2: e7:2f:69:ec:1e:fd:96:58:f9:88:72:f6:3d:60:09: 56:17:95:14:5b:d6:08:c1:c4:e9:6e:fc:de:1b:95: 91:1e:04:08:89:1e:1b:06:52:b2:9c:85:12:a5:50: 3e:b7:d0:5d:b4:fd:0c:59:9e:fa:07:29:17:02:44: 1c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:41:2F:42:A2:39:54:D4:74:65:7C:15:B8:16:3F:69:FA:65:D6:08 X509v3 Authority Key Identifier: keyid:91:6A:2F:E2:AA:2C:20:AB:01:C5:A1:3D:23:6D:A4:9D:B7:EA:50:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kWov4qosIKsBxaE9I22knbfqUGI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:92:67:09:75:a5:f7:43:bc:17:09:ec:e2:e1:5a:e5:9f:60: d8:40:5f:06:a1:a7:26:42:ee:1b:13:cf:d3:c7:39:11:bb:7e: 4c:cd:15:a0:1e:a8:cf:bf:22:d4:4e:5e:72:d1:bd:af:ef:91: b1:27:45:7a:99:04:00:c8:63:f1:de:ed:4b:9f:59:76:f7:27: 3d:d4:4f:ed:27:c6:75:3d:13:36:ca:22:c0:37:db:50:c4:45: 1e:63:00:9b:d6:4a:d7:a0:f4:aa:1a:8c:7b:e7:18:c5:29:ef: 6f:b2:04:eb:75:0e:91:35:ca:53:d9:0b:a0:62:81:fe:3a:50: 8f:4c:4b:22:73:fb:27:15:f1:eb:4a:6e:16:bd:59:8d:48:7d: 89:49:bb:e3:2e:fb:e4:2e:21:b9:03:c5:5e:3e:8d:3a:2a:d6: cb:a3:91:32:7c:d2:e5:68:49:c1:dd:5a:94:9c:ca:13:67:96: d3:8b:4b:00:48:74:7e:c0:a7:06:d7:92:de:f0:7a:b3:2a:d0: 1b:d8:16:65:03:57:ca:12:93:4b:f0:e8:9e:e5:f9:a7:f3:87: 37:ce:6a:64:b0:f5:bf:46:fe:81:e1:1c:b8:02:0e:36:23:ef: 0d:e4:e3:d0:91:d0:3e:f6:97:39:01:0d:95:57:70:e6:6b:22: 94:13:f3:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDggwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkVGNzExMTAvBgNVBAUTKDkxNkEyRkUyQUEyQzIwQUIwMUM1QTEzRDIzNkRBNDlE QjdFQTUwNjIwHhcNMjUwNDI0MTc0ODA4WhcNMjUwNTAxMTc0ODA4WjAYMRYwFAYD VQQDEw02ODBhNzk1OS1mYzUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1zYcEgtEZPo6CR3Y2CAucFbLI0oNnDbsRCT48IuG0J+J2Q36ujMfpunUW0dQ PgrtxGUG954/5napKQAV8oC0mhr4N+2y6S5xNiJhOkpIhGAHa9MsGSXtAQj0qHbw pM1K/nIEjJ7na+SfwxEcnopak0SyqYAyx8ZgQLwg8iRl3CANbjPlJgz2fLX0I9gk kNb6QiFhDSEtipXIzj/PBUBx5x0jP/g8MOzXpWZBfjFk09WagDImY78yRpx7K8HG tElsDsLnL2nsHv2WWPmIcvY9YAlWF5UUW9YIwcTpbvzeG5WRHgQIiR4bBlKynIUS pVA+t9BdtP0MWZ76BykXAkQcVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDNBL0Ki OVTUdGV8FbgWP2n6ZdYIMB8GA1UdIwQYMBaAFJFqL+KqLCCrAcWhPSNtpJ236lBi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRUY3MS83RUE4Mjk3Q0E5 REExMUU5OTU0MzM0ODRDNEY5QUUwMi9rV292NHFvc0lLc0J4YUU5STIya25iZnFV R0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tXb3Y0cW9zSUtzQnhhRTlJMjJrbmJmcVVHSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RUY3MS83RUE4Mjk3Q0E5REExMUU5OTU0MzM0ODRDNEY5QUUwMi9rV292NHFvc0lL c0J4YUU5STIya25iZnFVR0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLkmcJdaX3Q7wXCezi4Vrln2DYQF8GoacmQu4bE8/TxzkRu35MzRWg HqjPvyLUTl5y0b2v75GxJ0V6mQQAyGPx3u1Ln1l29yc91E/tJ8Z1PRM2yiLAN9tQ xEUeYwCb1krXoPSqGox75xjFKe9vsgTrdQ6RNcpT2QugYoH+OlCPTEsic/snFfHr Sm4WvVmNSH2JSbvjLvvkLiG5A8VePo06KtbLo5EyfNLlaEnB3VqUnMoTZ5bTi0sA SHR+wKcG15Le8HqzKtAb2BZlA1fKEpNL8Oie5fmn84c3zmpksPW/Rv6B4Ry4Ag42 I+8N5OPQkdA+9pc5AQ2VV3DmayKUE/PA -----END CERTIFICATE-----Generated at Sat Apr 26 05:07:59 2025 by rpki-client