$ rpki-client -vvf rpki.apnic.net/member_repository/A9142E1E/D409F82AD16911EFB76FB520C4F9AE02/KO2nuV1ejUVip1l0xt19pkwqKoY.mft File: KO2nuV1ejUVip1l0xt19pkwqKoY.mft (raw, json) Hash identifier: H1gM9WMtJvhxIx1EhaTLP7z/9fOEbGvrj01VdrQjFew= Subject key identifier: D8:D4:B0:66:FC:AD:2E:93:85:2E:BB:96:D5:7B:6E:C6:2D:C9:A9:24 Authority key identifier: 28:ED:A7:B9:5D:5E:8D:45:62:A7:59:74:C6:DD:7D:A6:4C:2A:2A:86 Certificate issuer: /CN=A9142E1E/serialNumber=28EDA7B95D5E8D4562A75974C6DD7DA64C2A2A86 Certificate serial: 37 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/KO2nuV1ejUVip1l0xt19pkwqKoY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142E1E/D409F82AD16911EFB76FB520C4F9AE02/KO2nuV1ejUVip1l0xt19pkwqKoY.mft Manifest number: 37 Signing time: Fri 25 Apr 2025 05:54:22 +0000 Manifest this update: Fri 25 Apr 2025 05:54:22 +0000 Manifest next update: Fri 02 May 2025 05:54:22 +0000 Files and hashes: 1: KO2nuV1ejUVip1l0xt19pkwqKoY.crl (hash: AvMFjGHlg8cp9K4hFxJV/GZSz65kjw4hvDjdDwdeFoU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142E1E/D409F82AD16911EFB76FB520C4F9AE02/KO2nuV1ejUVip1l0xt19pkwqKoY.crl rsync://rpki.apnic.net/member_repository/A9142E1E/D409F82AD16911EFB76FB520C4F9AE02/KO2nuV1ejUVip1l0xt19pkwqKoY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/KO2nuV1ejUVip1l0xt19pkwqKoY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:54:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142E1E, serialNumber=28EDA7B95D5E8D4562A75974C6DD7DA64C2A2A86 Validity Not Before: Apr 25 05:54:22 2025 GMT Not After : May 2 05:54:22 2025 GMT Subject: CN=680b238e-3522 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:3f:65:c7:89:cb:5b:04:d0:83:d9:de:e3:65: ba:e1:b7:da:b9:8a:52:4f:7e:4f:28:73:b8:13:8e: 9f:f7:4e:7e:4a:e2:c9:89:5f:a2:39:67:68:a3:74: 82:62:f8:1c:c5:36:0f:5f:ee:09:63:19:21:9a:1d: 05:d5:bf:af:02:20:e1:80:d3:69:e1:4d:24:35:73: ad:45:58:bc:ff:7c:dc:db:3a:b3:5f:63:99:49:12: 9c:c9:bd:12:0b:42:22:e6:8e:2d:93:d2:25:da:94: 2d:20:56:db:96:2e:b7:a7:c6:7d:68:d2:42:c4:93: c2:e8:1f:93:eb:af:8f:55:cd:e6:81:bb:70:5b:65: 21:1d:fb:46:b7:c8:09:84:7c:81:10:d8:30:d5:32: 6a:14:07:63:97:3e:ae:c7:33:6a:cf:60:a3:3e:28: 59:88:14:fc:21:fc:8f:a3:77:ac:19:03:40:bf:8b: f5:95:de:70:e0:e6:89:08:86:0f:5c:6f:70:bb:51: 4c:7a:1f:8a:5d:8e:43:d1:8a:7a:e4:3f:bc:eb:c8: d7:eb:9c:23:c9:da:07:61:67:6c:93:80:15:2f:8a: 72:ca:fb:65:4f:67:c9:0e:f1:41:78:13:46:6c:0e: 3f:fc:7e:33:95:43:79:b4:9c:35:08:68:21:aa:23: 95:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:D4:B0:66:FC:AD:2E:93:85:2E:BB:96:D5:7B:6E:C6:2D:C9:A9:24 X509v3 Authority Key Identifier: keyid:28:ED:A7:B9:5D:5E:8D:45:62:A7:59:74:C6:DD:7D:A6:4C:2A:2A:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142E1E/D409F82AD16911EFB76FB520C4F9AE02/KO2nuV1ejUVip1l0xt19pkwqKoY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/KO2nuV1ejUVip1l0xt19pkwqKoY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142E1E/D409F82AD16911EFB76FB520C4F9AE02/KO2nuV1ejUVip1l0xt19pkwqKoY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:a3:89:e9:d7:6a:f9:2b:3c:9e:44:4c:4c:db:8d:a7:2e:3a: f0:14:e3:31:a4:00:e6:d0:bb:22:80:e6:d8:e9:04:74:0a:ec: 12:b3:ba:6d:ad:1a:2b:c0:30:4a:dc:c0:e6:85:1a:af:5d:10: 94:c2:6b:82:00:f2:61:19:fc:40:62:a6:fd:92:2e:78:34:ba: 20:9f:1e:04:1a:39:b8:bb:b0:41:1f:07:8a:7f:d1:f1:7e:ee: ae:a1:40:02:eb:8c:22:55:f6:d9:c9:75:a1:ae:40:5e:c7:43: 0b:af:b8:c9:e0:f4:0b:37:71:0b:81:98:04:c0:78:d2:46:07: 42:0d:4c:77:0b:5d:71:c0:27:41:4d:37:d0:47:41:77:19:48: 96:cf:a4:43:3c:32:b1:3e:2d:d4:21:99:fc:fe:85:d7:bd:b3: 32:e6:3a:e8:ae:a8:5e:18:b3:74:b2:78:88:e7:3a:11:50:5c: 92:a2:7d:bc:fd:e9:38:34:7f:db:4d:da:03:25:c9:ff:79:9a: 42:a2:3b:bb:39:70:7e:3c:55:72:d5:ac:8f:59:06:d3:f1:9f: d7:f9:de:11:e9:4e:68:c6:b2:28:c0:06:83:f1:02:a0:d3:bf: 22:b1:6b:9a:8a:8f:c6:49:7d:3d:f4:7e:8a:46:07:6f:47:83: 50:81:84:5b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MkUxRTExMC8GA1UEBRMoMjhFREE3Qjk1RDVFOEQ0NTYyQTc1OTc0QzZERDdEQTY0 QzJBMkE4NjAeFw0yNTA0MjUwNTU0MjJaFw0yNTA1MDIwNTU0MjJaMBgxFjAUBgNV BAMTDTY4MGIyMzhlLTM1MjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRP2XHictbBNCD2d7jZbrht9q5ilJPfk8oc7gTjp/3Tn5K4smJX6I5Z2ijdIJi +BzFNg9f7gljGSGaHQXVv68CIOGA02nhTSQ1c61FWLz/fNzbOrNfY5lJEpzJvRIL QiLmji2T0iXalC0gVtuWLrenxn1o0kLEk8LoH5Prr49VzeaBu3BbZSEd+0a3yAmE fIEQ2DDVMmoUB2OXPq7HM2rPYKM+KFmIFPwh/I+jd6wZA0C/i/WV3nDg5okIhg9c b3C7UUx6H4pdjkPRinrkP7zryNfrnCPJ2gdhZ2yTgBUvinLK+2VPZ8kO8UF4E0Zs Dj/8fjOVQ3m0nDUIaCGqI5WFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2NSwZvyt LpOFLruW1Xtuxi3JqSQwHwYDVR0jBBgwFoAUKO2nuV1ejUVip1l0xt19pkwqKoYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyRTFFL0Q0MDlGODJBRDE2 OTExRUZCNzZGQjUyMEM0RjlBRTAyL0tPMm51VjFlalVWaXAxbDB4dDE5cGt3cUtv WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvS08ybnVWMWVqVVZpcDFsMHh0MTlwa3dxS29ZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy RTFFL0Q0MDlGODJBRDE2OTExRUZCNzZGQjUyMEM0RjlBRTAyL0tPMm51VjFlalVW aXAxbDB4dDE5cGt3cUtvWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADWjienXavkrPJ5ETEzbjacuOvAU4zGkAObQuyKA5tjpBHQK7BKzum2t GivAMErcwOaFGq9dEJTCa4IA8mEZ/EBipv2SLng0uiCfHgQaObi7sEEfB4p/0fF+ 7q6hQALrjCJV9tnJdaGuQF7HQwuvuMng9As3cQuBmATAeNJGB0INTHcLXXHAJ0FN N9BHQXcZSJbPpEM8MrE+LdQhmfz+hde9szLmOuiuqF4Ys3SyeIjnOhFQXJKifbz9 6Tg0f9tN2gMlyf95mkKiO7s5cH48VXLVrI9ZBtPxn9f53hHpTmjGsijABoPxAqDT vyKxa5qKj8ZJfT30fopGB29Hg1CBhFs= -----END CERTIFICATE-----Generated at Sat Apr 26 17:15:56 2025 by rpki-client