$ rpki-client -vvf rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.mft File: kJQ-uOrUTDbtyZEDG_-IuKtlWik.mft (raw, json) Hash identifier: vS0v+YcRHou9TogC7mmDRqzBuXeMYzVRoIN8CrYSHYI= Subject key identifier: 23:C7:B9:72:24:53:F1:11:84:A9:17:9A:AE:FB:DC:EC:F7:0F:C4:57 Authority key identifier: 90:94:3E:B8:EA:D4:4C:36:ED:C9:91:03:1B:FF:88:B8:AB:65:5A:29 Certificate issuer: /CN=A9149106/serialNumber=90943EB8EAD44C36EDC991031BFF88B8AB655A29 Certificate serial: 0440 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kJQ-uOrUTDbtyZEDG_-IuKtlWik.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.mft Manifest number: 0440 Signing time: Wed 30 Apr 2025 23:49:01 +0000 Manifest this update: Wed 30 Apr 2025 23:49:00 +0000 Manifest next update: Wed 07 May 2025 23:49:00 +0000 Files and hashes: 1: kJQ-uOrUTDbtyZEDG_-IuKtlWik.crl (hash: J8G1d+nZEYpI+fFIrlmD3LwH2OI0j3lx6DFqs368kYo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.crl rsync://rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kJQ-uOrUTDbtyZEDG_-IuKtlWik.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 23:48:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1088 (0x440) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149106, serialNumber=90943EB8EAD44C36EDC991031BFF88B8AB655A29 Validity Not Before: Apr 30 23:49:00 2025 GMT Not After : May 7 23:49:00 2025 GMT Subject: CN=6812b6ec-877d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:55:cf:4b:54:d4:32:f1:79:b3:e7:d7:f1:0c: 25:02:36:c3:a7:c8:21:c6:80:13:73:31:fa:b7:e7: dd:6b:6c:47:38:03:7b:6d:dd:b0:26:d8:ce:81:9a: 6d:94:de:48:77:50:62:c7:2f:c5:2a:68:35:19:ec: 31:6c:04:73:b6:64:4c:9e:d2:e0:02:bd:22:f9:7a: b5:a8:9b:8f:f3:67:40:28:9f:bb:7e:65:5b:1f:1c: d7:84:0e:bd:33:1c:c3:fa:76:3c:ef:da:8a:01:78: 06:1f:96:81:27:63:94:26:bc:4b:0d:b6:d8:15:09: 25:7a:50:f9:a2:d7:d6:be:9e:1c:07:53:1e:fd:9d: 4f:af:a0:0c:23:5c:d5:8e:8e:21:5b:d1:1b:79:ec: d4:96:60:1f:d2:6c:54:0a:c4:84:d9:a5:46:a6:17: 7f:5b:3c:a1:39:d1:ce:d3:a1:94:b9:71:4e:f6:46: c1:2e:5e:20:c9:26:d9:73:8d:36:7e:fa:eb:c0:89: 4b:65:e3:8f:a0:5f:76:e7:6b:60:ac:b3:08:9a:3e: 44:8d:4c:2f:58:54:a1:1d:6f:4d:e2:22:06:27:f3: 71:13:3d:62:0f:17:72:d2:51:5b:9b:ff:c1:91:2f: 03:2d:44:43:45:26:42:14:7e:6e:af:ec:be:90:0a: 94:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:C7:B9:72:24:53:F1:11:84:A9:17:9A:AE:FB:DC:EC:F7:0F:C4:57 X509v3 Authority Key Identifier: keyid:90:94:3E:B8:EA:D4:4C:36:ED:C9:91:03:1B:FF:88:B8:AB:65:5A:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kJQ-uOrUTDbtyZEDG_-IuKtlWik.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:55:37:bc:95:7d:84:ce:25:4e:a2:65:ee:36:30:2e:00:8f: 7d:14:31:b4:a3:58:ab:87:48:67:d8:fe:a1:96:7f:94:ab:0a: e5:ea:4f:d0:d7:c2:3e:fa:20:74:33:14:17:6d:b3:ec:a1:70: 10:7c:d1:99:83:6c:75:f9:93:af:48:17:5f:7b:6d:dc:82:68: 2d:59:08:23:e1:c4:68:68:56:4e:12:5a:b5:2f:7c:5d:8c:45: 43:bb:7c:8e:79:17:b2:39:82:32:a6:3d:e7:73:fa:c4:22:19: 97:fc:2c:dc:7e:c2:32:0b:80:2f:9a:1d:c1:7c:21:1d:b0:29: e0:a0:04:c2:67:17:ec:56:08:2b:d2:77:a6:5e:ea:c2:ed:92: 74:3c:e6:74:1b:2d:87:58:df:a2:cd:54:a7:87:ef:ff:b9:5e: 0e:f1:44:69:0d:e8:c4:3d:93:84:f3:10:f8:0b:de:2b:3a:1c: ff:7b:34:75:ef:19:e8:c5:12:cb:62:30:66:a9:e1:6d:35:21: d0:5a:5a:13:2f:d9:3a:f1:33:4d:05:12:fe:11:74:1c:a3:76: a9:c3:4c:6d:6a:4a:32:32:d6:68:37:0f:03:49:53:a7:7d:bd: d4:3a:3f:83:9f:30:f9:5f:dc:d1:1b:27:b4:9d:02:ba:d2:91: 92:ce:dd:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDkxMDYxMTAvBgNVBAUTKDkwOTQzRUI4RUFENDRDMzZFREM5OTEwMzFCRkY4OEI4 QUI2NTVBMjkwHhcNMjUwNDMwMjM0OTAwWhcNMjUwNTA3MjM0OTAwWjAYMRYwFAYD VQQDEw02ODEyYjZlYy04NzdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx1XPS1TUMvF5s+fX8QwlAjbDp8ghxoATczH6t+fda2xHOAN7bd2wJtjOgZpt lN5Id1Bixy/FKmg1GewxbARztmRMntLgAr0i+Xq1qJuP82dAKJ+7fmVbHxzXhA69 MxzD+nY879qKAXgGH5aBJ2OUJrxLDbbYFQklelD5otfWvp4cB1Me/Z1Pr6AMI1zV jo4hW9EbeezUlmAf0mxUCsSE2aVGphd/WzyhOdHO06GUuXFO9kbBLl4gySbZc402 fvrrwIlLZeOPoF9252tgrLMImj5EjUwvWFShHW9N4iIGJ/NxEz1iDxdy0lFbm//B kS8DLURDRSZCFH5ur+y+kAqUWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCPHuXIk U/ERhKkXmq773Oz3D8RXMB8GA1UdIwQYMBaAFJCUPrjq1Ew27cmRAxv/iLirZVop MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTEwNi85NjE3QzA2RTUz NjkxMUVDQTRBNkJDNzhDNEY5QUUwMi9rSlEtdU9yVVREYnR5WkVER18tSXVLdGxX aWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tKUS11T3JVVERidHlaRURHXy1JdUt0bFdpay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTEwNi85NjE3QzA2RTUzNjkxMUVDQTRBNkJDNzhDNEY5QUUwMi9rSlEtdU9yVVRE YnR5WkVER18tSXVLdGxXaWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaVTe8lX2EziVOomXuNjAuAI99FDG0o1irh0hn2P6hln+Uqwrl6k/Q 18I++iB0MxQXbbPsoXAQfNGZg2x1+ZOvSBdfe23cgmgtWQgj4cRoaFZOElq1L3xd jEVDu3yOeReyOYIypj3nc/rEIhmX/CzcfsIyC4Avmh3BfCEdsCngoATCZxfsVggr 0nemXurC7ZJ0POZ0Gy2HWN+izVSnh+//uV4O8URpDejEPZOE8xD4C94rOhz/ezR1 7xnoxRLLYjBmqeFtNSHQWloTL9k68TNNBRL+EXQco3apw0xtakoyMtZoNw8DSVOn fb3UOj+DnzD5X9zRGye0nQK60pGSzt3A -----END CERTIFICATE-----Generated at Thu May 1 23:58:43 2025 by rpki-client