$ rpki-client -vvf rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft File: Kt1a2PtDrdgNUrtYNpPDG42asuw.mft (raw, json) Hash identifier: GIKucFLtvyOWeBESZhkHgjk7o+Pq7vHAYpNRSXbZHPw= Subject key identifier: 90:03:0C:73:42:42:B9:F1:DA:52:3A:58:E6:17:75:2C:DB:AD:92:43 Authority key identifier: 2A:DD:5A:D8:FB:43:AD:D8:0D:52:BB:58:36:93:C3:1B:8D:9A:B2:EC Certificate issuer: /CN=A913149F/serialNumber=2ADD5AD8FB43ADD80D52BB583693C31B8D9AB2EC Certificate serial: 0C1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kt1a2PtDrdgNUrtYNpPDG42asuw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft Manifest number: 0C15 Signing time: Thu 24 Apr 2025 18:29:51 +0000 Manifest this update: Thu 24 Apr 2025 18:29:51 +0000 Manifest next update: Thu 01 May 2025 18:29:51 +0000 Files and hashes: 1: Kt1a2PtDrdgNUrtYNpPDG42asuw.crl (hash: Zfh9naDev5t9LWQuC3ruRVlXJSwvookC6IT/d/m8PJs=) 2: 78550A2608FE11EAA003E778C4F9AE02.roa (hash: /6LQIDdmV3dE7MeUvHilah4V60fZn+m3/u3zkX+mGFA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.crl rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kt1a2PtDrdgNUrtYNpPDG42asuw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:29:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3098 (0xc1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913149F, serialNumber=2ADD5AD8FB43ADD80D52BB583693C31B8D9AB2EC Validity Not Before: Apr 24 18:29:51 2025 GMT Not After : May 1 18:29:51 2025 GMT Subject: CN=680a831f-7697 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c2:46:6c:67:33:99:22:76:ef:61:a5:37:fa: f4:9a:c7:42:6f:96:78:3d:11:04:a9:85:6e:f1:01: 30:11:97:20:1b:86:7d:0f:85:e4:2f:fb:77:b4:b2: 7a:8b:29:09:6f:28:61:61:dd:f2:73:17:39:b9:95: 02:5c:05:c9:b7:42:52:3a:6e:4d:15:9c:c1:98:1b: ad:21:a6:96:cd:06:26:95:9c:a1:a2:62:7c:56:17: 84:fb:a7:37:8b:54:09:23:89:da:de:6e:30:f8:fd: 33:94:cc:bf:ef:2e:9b:b1:70:d7:03:c2:fd:ed:7c: 47:a1:43:28:eb:35:a7:ba:be:d4:77:b6:c1:a0:92: 4c:8a:98:3c:36:67:a2:fb:d7:18:5c:51:bc:4b:28: bc:a1:bf:b1:94:85:20:17:a0:41:32:26:64:f8:3a: dc:0e:72:bf:04:f1:10:1a:13:27:37:6b:c1:40:12: 57:f0:f1:0e:4d:1e:e5:42:24:fa:9f:fb:09:42:3b: 15:b6:f0:da:90:62:95:aa:9c:a9:61:6f:65:c9:c8: b7:20:95:4f:b0:df:a0:e5:74:43:f1:12:c2:4c:52: 87:ac:cb:1e:42:49:50:bf:9f:74:29:ef:85:86:c6: b5:9e:51:9e:85:b8:b1:40:3d:86:67:0d:3d:74:d3: e4:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:03:0C:73:42:42:B9:F1:DA:52:3A:58:E6:17:75:2C:DB:AD:92:43 X509v3 Authority Key Identifier: keyid:2A:DD:5A:D8:FB:43:AD:D8:0D:52:BB:58:36:93:C3:1B:8D:9A:B2:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kt1a2PtDrdgNUrtYNpPDG42asuw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:23:c2:93:bc:9f:69:9f:a8:e9:19:61:56:14:4e:a9:97:55: d5:ba:88:4c:e6:d0:98:dd:9f:9f:3e:86:9c:60:59:2e:b6:84: 38:1d:fc:ac:4e:c4:a6:57:b9:44:59:ce:f9:fa:ca:93:88:7b: 38:ae:ea:af:20:78:d9:79:ec:20:78:01:00:57:60:6b:2e:95: 51:14:9f:c1:db:a9:22:82:d0:3b:d5:19:9f:86:a4:ce:90:1b: ec:43:45:7f:aa:fd:20:bc:f4:8d:29:63:fe:3a:c8:e8:f1:8a: 6f:8c:de:a4:cd:8d:8a:3e:7a:19:f1:e6:37:91:dd:09:81:b1: 97:dc:d6:9f:02:24:65:81:05:a4:43:bc:ca:52:51:c5:b0:d1: 0a:b9:f7:81:f4:b2:17:e5:89:b2:90:36:60:9a:b1:f7:d4:ec: 23:cc:0d:c9:a6:38:6a:56:a3:e5:49:d7:8a:6f:02:c1:1b:7e: 18:a8:61:5c:57:4d:fb:f8:43:bb:20:0e:70:ab:3d:ae:9e:2a: 89:99:ad:fb:0d:1f:ac:e9:ab:b5:eb:f4:9b:2b:ba:5d:f1:5c: 28:f7:da:da:08:33:f9:26:d4:db:4c:4d:62:a5:37:4e:e3:31: 68:26:1e:09:a8:d7:99:0b:83:9a:ac:b0:98:05:6a:f6:e4:de: b3:1c:da:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDBowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE0OUYxMTAvBgNVBAUTKDJBREQ1QUQ4RkI0M0FERDgwRDUyQkI1ODM2OTNDMzFC OEQ5QUIyRUMwHhcNMjUwNDI0MTgyOTUxWhcNMjUwNTAxMTgyOTUxWjAYMRYwFAYD VQQDEw02ODBhODMxZi03Njk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnsJGbGczmSJ272GlN/r0msdCb5Z4PREEqYVu8QEwEZcgG4Z9D4XkL/t3tLJ6 iykJbyhhYd3ycxc5uZUCXAXJt0JSOm5NFZzBmButIaaWzQYmlZyhomJ8VheE+6c3 i1QJI4na3m4w+P0zlMy/7y6bsXDXA8L97XxHoUMo6zWnur7Ud7bBoJJMipg8Nmei +9cYXFG8Syi8ob+xlIUgF6BBMiZk+DrcDnK/BPEQGhMnN2vBQBJX8PEOTR7lQiT6 n/sJQjsVtvDakGKVqpypYW9lyci3IJVPsN+g5XRD8RLCTFKHrMseQklQv590Ke+F hsa1nlGehbixQD2GZw09dNPkowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJADDHNC Qrnx2lI6WOYXdSzbrZJDMB8GA1UdIwQYMBaAFCrdWtj7Q63YDVK7WDaTwxuNmrLs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTQ5Ri9ERjAxNTgwODA4 RkMxMUVBQTg5MUE1NzVDNEY5QUUwMi9LdDFhMlB0RHJkZ05VcnRZTnBQREc0MmFz dXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0t0MWEyUHREcmRnTlVydFlOcFBERzQyYXN1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTQ5Ri9ERjAxNTgwODA4RkMxMUVBQTg5MUE1NzVDNEY5QUUwMi9LdDFhMlB0RHJk Z05VcnRZTnBQREc0MmFzdXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2I8KTvJ9pn6jpGWFWFE6pl1XVuohM5tCY3Z+fPoacYFkutoQ4Hfys TsSmV7lEWc75+sqTiHs4ruqvIHjZeewgeAEAV2BrLpVRFJ/B26kigtA71RmfhqTO kBvsQ0V/qv0gvPSNKWP+Osjo8YpvjN6kzY2KPnoZ8eY3kd0JgbGX3NafAiRlgQWk Q7zKUlHFsNEKufeB9LIX5YmykDZgmrH31OwjzA3JpjhqVqPlSdeKbwLBG34YqGFc V037+EO7IA5wqz2uniqJma37DR+s6au16/SbK7pd8Vwo99raCDP5JtTbTE1ipTdO 4zFoJh4JqNeZC4OarLCYBWr25N6zHNoz -----END CERTIFICATE-----Generated at Sat Apr 26 13:03:11 2025 by rpki-client