$ rpki-client -vvf rpki.apnic.net/member_repository/A915A161/B07B2AB84B1011E9AAE3EE43C4F9AE02/kCs-s81I0JqgoQybLLKA0KDNLbo.mft File: kCs-s81I0JqgoQybLLKA0KDNLbo.mft (raw, json) Hash identifier: kGEKwVcnoz6c5/iV6/QCHXAlmpux58dsB3CEEF3g2xw= Subject key identifier: 5D:70:7A:5B:FC:04:9D:4A:EE:D9:79:55:37:66:37:26:0B:6E:60:27 Authority key identifier: 90:2B:3E:B3:CD:48:D0:9A:A0:A1:0C:9B:2C:B2:80:D0:A0:CD:2D:BA Certificate issuer: /CN=A915A161/serialNumber=902B3EB3CD48D09AA0A10C9B2CB280D0A0CD2DBA Certificate serial: 0FD8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCs-s81I0JqgoQybLLKA0KDNLbo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A161/B07B2AB84B1011E9AAE3EE43C4F9AE02/kCs-s81I0JqgoQybLLKA0KDNLbo.mft Manifest number: 0FD8 Signing time: Thu 24 Apr 2025 17:27:58 +0000 Manifest this update: Thu 24 Apr 2025 17:27:58 +0000 Manifest next update: Thu 01 May 2025 17:27:58 +0000 Files and hashes: 1: kCs-s81I0JqgoQybLLKA0KDNLbo.crl (hash: t/ZuakN964vDUnKf/LhPdBim7S4RIGTJFceFhRlzYrA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A161/B07B2AB84B1011E9AAE3EE43C4F9AE02/kCs-s81I0JqgoQybLLKA0KDNLbo.crl rsync://rpki.apnic.net/member_repository/A915A161/B07B2AB84B1011E9AAE3EE43C4F9AE02/kCs-s81I0JqgoQybLLKA0KDNLbo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCs-s81I0JqgoQybLLKA0KDNLbo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:27:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4056 (0xfd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A161, serialNumber=902B3EB3CD48D09AA0A10C9B2CB280D0A0CD2DBA Validity Not Before: Apr 24 17:27:58 2025 GMT Not After : May 1 17:27:58 2025 GMT Subject: CN=680a749e-de25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6e:6f:04:87:05:5a:57:25:4e:04:f4:17:40: ea:a5:61:f8:a6:d2:af:b9:a6:cc:68:95:37:01:19: 8d:d4:cb:04:18:06:3c:4c:30:17:67:ff:91:7a:b7: 58:05:7e:9b:76:b1:5e:e4:b5:c1:79:5b:83:9c:6d: b0:1e:72:2c:4d:9f:d2:43:75:48:89:c7:1b:12:2d: 73:e5:7f:de:29:cc:3c:6f:32:01:e5:89:f1:87:35: 62:d7:37:54:ca:ea:cd:fc:64:54:dc:e2:1a:91:d6: 75:2d:2b:f7:7b:f1:f6:a3:30:f5:62:7a:de:58:70: 9f:cd:05:19:73:64:71:6a:f8:08:87:40:2c:2d:dd: 23:4b:28:86:ca:f8:81:db:3c:58:93:93:f2:f4:d2: 39:47:89:16:5e:94:a7:5e:32:be:5a:05:8d:bb:db: 7a:de:4b:a4:0b:d9:4a:1c:70:cf:c6:c9:43:ff:61: 2d:1c:64:ca:0b:d5:ca:46:58:6e:90:20:07:d2:5b: 5f:e7:96:74:ab:27:80:03:5b:19:3e:42:a5:4b:b1: b8:87:cf:ab:bc:e2:ac:e7:1e:6e:1d:02:05:d2:09: f5:2e:67:80:d6:e4:be:05:44:c9:4c:73:b9:49:54: 97:5f:0a:ca:a8:c0:53:45:cf:ec:7f:1a:41:9c:02: 14:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:70:7A:5B:FC:04:9D:4A:EE:D9:79:55:37:66:37:26:0B:6E:60:27 X509v3 Authority Key Identifier: keyid:90:2B:3E:B3:CD:48:D0:9A:A0:A1:0C:9B:2C:B2:80:D0:A0:CD:2D:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A161/B07B2AB84B1011E9AAE3EE43C4F9AE02/kCs-s81I0JqgoQybLLKA0KDNLbo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCs-s81I0JqgoQybLLKA0KDNLbo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A161/B07B2AB84B1011E9AAE3EE43C4F9AE02/kCs-s81I0JqgoQybLLKA0KDNLbo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:78:c8:f8:59:59:45:f1:26:bd:ff:46:a5:73:f3:e5:97:a4: 87:57:88:2c:1d:68:63:f9:9f:cf:f8:b4:1a:d1:d4:19:ca:c1: b2:ab:ec:05:ed:83:18:0c:05:48:ed:a8:3f:6b:d6:57:d8:b2: 3b:1e:b7:33:2b:52:47:a9:92:e1:a8:97:29:46:ee:75:e3:73: bf:bb:36:0b:52:d6:5b:aa:36:13:9d:88:81:29:7f:1a:66:1a: 36:2d:34:8d:20:09:b8:3e:74:1c:9f:5d:b3:67:9e:ad:56:4a: d3:7f:61:9e:9a:89:f3:9a:3b:67:5d:68:64:71:6d:ee:2e:02: d8:b8:6e:da:69:a7:3b:93:ee:b0:42:ec:5f:d5:09:76:f8:0a: f2:4f:36:46:a7:5f:83:17:58:07:f3:da:41:2e:76:d6:94:d3: 2b:ba:f6:3d:98:c3:ef:98:b6:40:b1:26:68:2e:38:b8:f1:e2: e5:3e:84:88:c2:90:3d:09:c6:b7:28:ea:a2:a0:1b:cb:b7:30: 03:d4:64:fb:ca:33:45:a0:df:2b:fb:3d:8b:4b:a1:7f:51:ae: a1:a4:22:ee:9a:27:35:8d:d0:a4:aa:93:02:58:42:30:3b:06: 17:6b:e3:24:ed:51:a4:a5:08:1a:72:74:59:ae:57:9f:a0:d7: c9:00:19:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD9gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUExNjExMTAvBgNVBAUTKDkwMkIzRUIzQ0Q0OEQwOUFBMEExMEM5QjJDQjI4MEQw QTBDRDJEQkEwHhcNMjUwNDI0MTcyNzU4WhcNMjUwNTAxMTcyNzU4WjAYMRYwFAYD VQQDEw02ODBhNzQ5ZS1kZTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwm5vBIcFWlclTgT0F0DqpWH4ptKvuabMaJU3ARmN1MsEGAY8TDAXZ/+RerdY BX6bdrFe5LXBeVuDnG2wHnIsTZ/SQ3VIiccbEi1z5X/eKcw8bzIB5YnxhzVi1zdU yurN/GRU3OIakdZ1LSv3e/H2ozD1YnreWHCfzQUZc2RxavgIh0AsLd0jSyiGyviB 2zxYk5Py9NI5R4kWXpSnXjK+WgWNu9t63kukC9lKHHDPxslD/2EtHGTKC9XKRlhu kCAH0ltf55Z0qyeAA1sZPkKlS7G4h8+rvOKs5x5uHQIF0gn1LmeA1uS+BUTJTHO5 SVSXXwrKqMBTRc/sfxpBnAIUkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF1welv8 BJ1K7tl5VTdmNyYLbmAnMB8GA1UdIwQYMBaAFJArPrPNSNCaoKEMmyyygNCgzS26 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTE2MS9CMDdCMkFCODRC MTAxMUU5QUFFM0VFNDNDNEY5QUUwMi9rQ3MtczgxSTBKcWdvUXliTExLQTBLRE5M Ym8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tDcy1zODFJMEpxZ29ReWJMTEtBMEtETkxiby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTE2MS9CMDdCMkFCODRCMTAxMUU5QUFFM0VFNDNDNEY5QUUwMi9rQ3MtczgxSTBK cWdvUXliTExLQTBLRE5MYm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBseMj4WVlF8Sa9/0alc/Pll6SHV4gsHWhj+Z/P+LQa0dQZysGyq+wF 7YMYDAVI7ag/a9ZX2LI7HrczK1JHqZLhqJcpRu5143O/uzYLUtZbqjYTnYiBKX8a Zho2LTSNIAm4PnQcn12zZ56tVkrTf2GemonzmjtnXWhkcW3uLgLYuG7aaac7k+6w Quxf1Ql2+AryTzZGp1+DF1gH89pBLnbWlNMruvY9mMPvmLZAsSZoLji48eLlPoSI wpA9Cca3KOqioBvLtzAD1GT7yjNFoN8r+z2LS6F/Ua6hpCLumic1jdCkqpMCWEIw OwYXa+Mk7VGkpQgacnRZrlefoNfJABkU -----END CERTIFICATE-----Generated at Sat Apr 26 04:28:12 2025 by rpki-client