$ rpki-client -vvf rpki.apnic.net/member_repository/A9158650/7758D2C2BDA711EDAECD4A5DC4F9AE02/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.mft File: KBfUqGRK7EGa3M7jDE6Hok0v9Xs.mft (raw, json) Hash identifier: fBCki79xQAOw8iAcbu6WdpDGL4I64VVgasNfmgwvzUE= Subject key identifier: 17:E1:91:E2:F0:15:BE:E4:DD:CB:81:A4:94:47:E9:E0:76:A0:3A:01 Authority key identifier: 28:17:D4:A8:64:4A:EC:41:9A:DC:CE:E3:0C:4E:87:A2:4D:2F:F5:7B Certificate issuer: /CN=A9158650/serialNumber=2817D4A8644AEC419ADCCEE30C4E87A24D2FF57B Certificate serial: 0196 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158650/7758D2C2BDA711EDAECD4A5DC4F9AE02/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.mft Manifest number: 0192 Signing time: Fri 25 Apr 2025 02:38:25 +0000 Manifest this update: Fri 25 Apr 2025 02:38:25 +0000 Manifest next update: Fri 02 May 2025 02:38:25 +0000 Files and hashes: 1: KBfUqGRK7EGa3M7jDE6Hok0v9Xs.crl (hash: Wrwd8uSh40kj0tOZWyvdySeoeIy9deNjDg2W8VVlCHM=) 2: EA5A9A32BDAA11ED92995562C4F9AE02.roa (hash: la16kPDMZ0PGNGFfbiOJE4nU4r91VONeRM7xfP7lGe4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158650/7758D2C2BDA711EDAECD4A5DC4F9AE02/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.crl rsync://rpki.apnic.net/member_repository/A9158650/7758D2C2BDA711EDAECD4A5DC4F9AE02/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:38:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 406 (0x196) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158650, serialNumber=2817D4A8644AEC419ADCCEE30C4E87A24D2FF57B Validity Not Before: Apr 25 02:38:25 2025 GMT Not After : May 2 02:38:25 2025 GMT Subject: CN=680af5a1-05af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:92:e3:a3:1b:cd:d9:a9:69:86:d4:94:c1:63: 98:c3:b7:ee:56:64:88:6c:97:01:6f:2b:fa:a8:48: 88:6c:6a:31:e1:a1:ea:f5:75:bf:70:ab:6d:92:3a: 9f:46:d0:7d:72:50:26:99:8c:d2:f2:6b:7c:44:42: c5:95:29:02:57:9c:7b:d3:14:97:d3:e1:0c:b6:3a: de:af:ac:aa:c7:e6:07:60:92:b4:e9:8c:50:df:6f: ed:5d:4f:df:3c:e2:6f:11:6c:be:ee:01:f4:0d:e5: 1c:af:48:5f:ec:15:74:ac:d3:69:fd:eb:8e:37:ef: fe:7b:59:9f:72:d7:fc:70:7c:d7:e5:a5:30:7b:e3: fa:7f:c9:25:54:e1:6f:44:4d:81:4a:47:30:a9:dc: b3:0f:66:9e:85:d1:3e:53:5d:a2:02:65:e0:f4:ec: 98:4e:d5:89:59:68:1f:dd:ba:26:b8:da:d0:94:77: 59:67:03:17:f8:42:59:c8:2a:41:ea:1f:66:c7:4f: 3e:07:76:2d:38:b3:bc:c2:10:fa:1d:2a:a2:6a:82: 55:b1:11:ee:85:ee:47:a3:7f:b0:c4:32:60:f7:a0: d8:b7:93:83:63:e7:c0:19:64:6f:82:9a:f8:23:ec: 5d:20:d8:e6:a5:0e:1d:7f:9e:8d:6d:32:8b:1e:07: 28:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:E1:91:E2:F0:15:BE:E4:DD:CB:81:A4:94:47:E9:E0:76:A0:3A:01 X509v3 Authority Key Identifier: keyid:28:17:D4:A8:64:4A:EC:41:9A:DC:CE:E3:0C:4E:87:A2:4D:2F:F5:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158650/7758D2C2BDA711EDAECD4A5DC4F9AE02/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158650/7758D2C2BDA711EDAECD4A5DC4F9AE02/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:a2:1a:78:27:44:9a:1e:d5:72:a7:4f:5b:e4:a8:3b:b4:df: c6:6e:13:25:fa:9e:c8:b3:dc:df:70:8f:52:0f:d2:4c:ea:67: 07:8d:c9:e9:69:19:4c:68:00:24:1c:89:29:b0:91:c5:d8:b0: 49:46:50:b4:01:cb:b2:79:38:85:57:f6:9f:cc:6d:41:fb:2b: 95:fc:6d:e5:e0:ca:a6:94:7b:84:b2:50:9d:d9:d2:fa:bd:47: fb:0d:ce:fd:5d:e8:43:01:1b:13:b6:5b:79:d1:6e:e5:a5:e4: ee:6f:bb:83:ce:7a:33:f7:f4:53:36:e8:ae:0b:a3:b2:f4:a8: be:e9:03:2c:ce:c9:90:25:e8:73:48:69:b3:f0:41:68:c1:d6: 1b:27:ea:f9:f4:6c:54:40:1b:1c:f5:c5:e2:0e:f7:56:e1:aa: 0d:91:e4:bb:00:ee:bf:b6:e2:88:05:d3:06:c8:e1:d3:a1:78: 50:6f:c5:6f:5a:d8:2d:9a:7a:04:9c:ed:2c:f3:b7:d5:7b:81: 20:6f:81:56:de:71:72:15:1c:e7:c6:fe:95:38:c3:e0:24:fe: 69:9b:ec:9b:4a:fa:42:3d:ba:5b:c8:11:68:b0:c5:10:56:40: c3:ce:36:0e:bb:df:93:d3:b3:1d:c9:37:e7:63:cb:f4:e2:82: 50:10:7f:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg2NTAxMTAvBgNVBAUTKDI4MTdENEE4NjQ0QUVDNDE5QURDQ0VFMzBDNEU4N0Ey NEQyRkY1N0IwHhcNMjUwNDI1MDIzODI1WhcNMjUwNTAyMDIzODI1WjAYMRYwFAYD VQQDEw02ODBhZjVhMS0wNWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ZLjoxvN2alphtSUwWOYw7fuVmSIbJcBbyv6qEiIbGox4aHq9XW/cKttkjqf RtB9clAmmYzS8mt8RELFlSkCV5x70xSX0+EMtjrer6yqx+YHYJK06YxQ32/tXU/f POJvEWy+7gH0DeUcr0hf7BV0rNNp/euON+/+e1mfctf8cHzX5aUwe+P6f8klVOFv RE2BSkcwqdyzD2aehdE+U12iAmXg9OyYTtWJWWgf3bomuNrQlHdZZwMX+EJZyCpB 6h9mx08+B3YtOLO8whD6HSqiaoJVsRHuhe5Ho3+wxDJg96DYt5ODY+fAGWRvgpr4 I+xdINjmpQ4df56NbTKLHgco6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBfhkeLw Fb7k3cuBpJRH6eB2oDoBMB8GA1UdIwQYMBaAFCgX1KhkSuxBmtzO4wxOh6JNL/V7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODY1MC83NzU4RDJDMkJE QTcxMUVEQUVDRDRBNURDNEY5QUUwMi9LQmZVcUdSSzdFR2EzTTdqREU2SG9rMHY5 WHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tCZlVxR1JLN0VHYTNNN2pERTZIb2swdjlYcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODY1MC83NzU4RDJDMkJEQTcxMUVEQUVDRDRBNURDNEY5QUUwMi9LQmZVcUdSSzdF R2EzTTdqREU2SG9rMHY5WHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFohp4J0SaHtVyp09b5Kg7tN/GbhMl+p7Is9zfcI9SD9JM6mcHjcnp aRlMaAAkHIkpsJHF2LBJRlC0AcuyeTiFV/afzG1B+yuV/G3l4MqmlHuEslCd2dL6 vUf7Dc79XehDARsTtlt50W7lpeTub7uDznoz9/RTNuiuC6Oy9Ki+6QMszsmQJehz SGmz8EFowdYbJ+r59GxUQBsc9cXiDvdW4aoNkeS7AO6/tuKIBdMGyOHToXhQb8Vv WtgtmnoEnO0s87fVe4Egb4FW3nFyFRznxv6VOMPgJP5pm+ybSvpCPbpbyBFosMUQ VkDDzjYOu9+T07MdyTfnY8v04oJQEH8A -----END CERTIFICATE-----Generated at Sat Apr 26 03:37:18 2025 by rpki-client