$ rpki-client -vvf rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.mft File: kUa3guuCRnsZ2LQdHMQOvwSJkGY.mft (raw, json) Hash identifier: qDVA1DIXiC3sTnqXTcYdVmoLfEQBkX+rc2pcB1Km0aQ= Subject key identifier: 47:AD:E1:01:58:07:6B:09:6E:FE:D7:9F:24:17:D9:F6:07:F8:7E:AC Authority key identifier: 91:46:B7:82:EB:82:46:7B:19:D8:B4:1D:1C:C4:0E:BF:04:89:90:66 Certificate issuer: /CN=A9155806/serialNumber=9146B782EB82467B19D8B41D1CC40EBF04899066 Certificate serial: 76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUa3guuCRnsZ2LQdHMQOvwSJkGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.mft Manifest number: 76 Signing time: Fri 25 Apr 2025 05:46:09 +0000 Manifest this update: Fri 25 Apr 2025 05:46:09 +0000 Manifest next update: Fri 02 May 2025 05:46:09 +0000 Files and hashes: 1: kUa3guuCRnsZ2LQdHMQOvwSJkGY.crl (hash: uL3nPPWItwXch94FXm4ub8x4y7qJfvD2dn0RKf/aFzU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.crl rsync://rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUa3guuCRnsZ2LQdHMQOvwSJkGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:46:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 118 (0x76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155806, serialNumber=9146B782EB82467B19D8B41D1CC40EBF04899066 Validity Not Before: Apr 25 05:46:09 2025 GMT Not After : May 2 05:46:09 2025 GMT Subject: CN=680b21a1-b1aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a1:c9:5e:b3:68:2a:bb:99:2a:80:0a:f9:ec: 80:c8:c7:96:20:f0:a3:0c:30:bb:8a:8b:58:aa:b7: 57:2a:2a:09:4c:e1:43:a9:42:eb:15:44:ef:ae:03: e4:26:4d:af:70:23:ad:6f:35:b9:d9:e1:6a:33:91: 57:5d:54:f4:49:cd:e6:20:b1:85:c6:e1:00:ac:f6: a9:c2:57:f8:dd:b0:98:96:a8:78:15:fa:af:04:5f: cb:52:bf:d5:13:3e:bd:39:bc:f2:78:25:22:d2:8e: 3a:0f:5b:1a:59:80:76:ac:38:74:b8:ca:e8:a6:10: a9:ca:ea:0c:c9:41:2b:52:2d:a2:b1:e5:f6:b2:18: 59:57:a4:8a:b0:43:84:0c:44:42:d9:f8:f1:3b:98: 8f:66:ef:03:e5:91:92:fd:00:ef:62:ba:3f:8a:8d: 83:99:13:db:b0:fd:0e:c9:05:99:b0:c9:4f:c6:a2: bf:e5:ad:44:8a:39:9b:30:72:95:3e:95:b9:ff:5e: 7a:a6:f9:8f:d7:b3:4b:c9:b3:76:45:52:fa:fc:d3: 6e:6d:b6:94:84:c7:44:64:af:9e:45:df:f7:80:fe: c5:69:c5:57:42:1a:70:34:9b:c0:c9:3b:9a:a7:c2: 74:74:0b:53:e7:49:84:22:67:57:4c:08:ed:7a:b7: 92:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:AD:E1:01:58:07:6B:09:6E:FE:D7:9F:24:17:D9:F6:07:F8:7E:AC X509v3 Authority Key Identifier: keyid:91:46:B7:82:EB:82:46:7B:19:D8:B4:1D:1C:C4:0E:BF:04:89:90:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUa3guuCRnsZ2LQdHMQOvwSJkGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:7f:c1:06:2a:29:e0:f0:72:a5:63:ae:2c:5f:d4:6c:99:e9: 22:5f:c4:82:12:a0:04:5d:3e:f4:10:44:95:a0:3e:7c:d7:07: 9e:c5:33:29:68:09:1d:36:f4:58:ed:27:c2:97:da:68:92:c0: 32:f2:5d:29:c7:d5:7b:22:74:20:43:12:05:a3:fc:47:3a:4e: d5:21:c5:4f:40:a9:9f:20:8b:a3:5d:ca:00:b6:72:ae:f4:d7: dd:11:79:8f:c5:35:12:df:20:b8:8d:6c:c0:79:57:02:87:4c: 0f:0d:70:79:2b:90:fa:dc:0b:a7:ba:1d:f6:5c:46:1c:1e:ca: fd:2f:38:3b:0a:e0:c0:55:c5:ea:a0:6d:39:dd:00:c3:33:82: 60:40:ef:f7:13:60:c7:a7:3d:ba:a7:1b:95:4a:a4:8d:56:44: dd:d3:8f:db:90:a2:07:dc:b8:83:45:64:5c:70:a9:4a:89:7d: 10:ec:4c:5a:f3:07:e6:f2:07:53:78:3d:c8:82:d2:b2:8e:e6: 98:08:6c:ba:3b:a5:2a:3b:e9:88:89:c3:30:63:17:3e:c9:81: 38:30:82:45:7d:13:4e:90:62:9b:c0:2c:80:d7:5c:46:4b:d3: 91:c2:4d:0d:43:10:44:3e:08:c3:7d:02:75:af:7a:70:c5:89: 2d:ac:8f:1a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NTgwNjExMC8GA1UEBRMoOTE0NkI3ODJFQjgyNDY3QjE5RDhCNDFEMUNDNDBFQkYw NDg5OTA2NjAeFw0yNTA0MjUwNTQ2MDlaFw0yNTA1MDIwNTQ2MDlaMBgxFjAUBgNV BAMTDTY4MGIyMWExLWIxYWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7ocles2gqu5kqgAr57IDIx5Yg8KMMMLuKi1iqt1cqKglM4UOpQusVRO+uA+Qm Ta9wI61vNbnZ4WozkVddVPRJzeYgsYXG4QCs9qnCV/jdsJiWqHgV+q8EX8tSv9UT Pr05vPJ4JSLSjjoPWxpZgHasOHS4yuimEKnK6gzJQStSLaKx5fayGFlXpIqwQ4QM RELZ+PE7mI9m7wPlkZL9AO9iuj+KjYOZE9uw/Q7JBZmwyU/Gor/lrUSKOZswcpU+ lbn/Xnqm+Y/Xs0vJs3ZFUvr8025ttpSEx0Rkr55F3/eA/sVpxVdCGnA0m8DJO5qn wnR0C1PnSYQiZ1dMCO16t5KFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUR63hAVgH awlu/tefJBfZ9gf4fqwwHwYDVR0jBBgwFoAUkUa3guuCRnsZ2LQdHMQOvwSJkGYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU1ODA2L0QwQzVGNEUyNkU5 MTExRUZBNjJCNEMzRkM0RjlBRTAyL2tVYTNndXVDUm5zWjJMUWRITVFPdndTSmtH WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva1VhM2d1dUNSbnNaMkxRZEhNUU92d1NKa0dZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU1 ODA2L0QwQzVGNEUyNkU5MTExRUZBNjJCNEMzRkM0RjlBRTAyL2tVYTNndXVDUm5z WjJMUWRITVFPdndTSmtHWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHV/wQYqKeDwcqVjrixf1GyZ6SJfxIISoARdPvQQRJWgPnzXB57FMylo CR029FjtJ8KX2miSwDLyXSnH1XsidCBDEgWj/Ec6TtUhxU9AqZ8gi6NdygC2cq70 190ReY/FNRLfILiNbMB5VwKHTA8NcHkrkPrcC6e6HfZcRhweyv0vODsK4MBVxeqg bTndAMMzgmBA7/cTYMenPbqnG5VKpI1WRN3Tj9uQogfcuINFZFxwqUqJfRDsTFrz B+byB1N4PciC0rKO5pgIbLo7pSo76YiJwzBjFz7JgTgwgkV9E06QYpvALIDXXEZL 05HCTQ1DEEQ+CMN9AnWvenDFiS2sjxo= -----END CERTIFICATE-----Generated at Sat Apr 26 04:36:01 2025 by rpki-client