$ rpki-client -vvf rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.mft File: iEthKajamClnFMU6WhKA_RAZ-KM.mft (raw, json) Hash identifier: wq12eiw5q0k5SlZEPFot73GzeOCwdVYKwNVco/Yq86o= Subject key identifier: 49:02:3A:6C:53:BB:0F:DD:7A:69:F5:E9:A2:0F:64:7E:22:0B:FB:28 Authority key identifier: 88:4B:61:29:A8:DA:98:29:67:14:C5:3A:5A:12:80:FD:10:19:F8:A3 Certificate issuer: /CN=A915F6E4/serialNumber=884B6129A8DA98296714C53A5A1280FD1019F8A3 Certificate serial: 013F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEthKajamClnFMU6WhKA_RAZ-KM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.mft Manifest number: 0138 Signing time: Fri 25 Apr 2025 03:35:09 +0000 Manifest this update: Fri 25 Apr 2025 03:35:08 +0000 Manifest next update: Fri 02 May 2025 03:35:08 +0000 Files and hashes: 1: iEthKajamClnFMU6WhKA_RAZ-KM.crl (hash: lmCPFKT/dO1pbSr729HSoYH8qm1XY/4hPpfgS7HDblk=) 2: E1B42772611A11EE9022C77EC4F9AE02.roa (hash: UvdgbLYF5+vRHqxdggCtIs+aJSz12jANKpYmMkrt0HU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.crl rsync://rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEthKajamClnFMU6WhKA_RAZ-KM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:35:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 319 (0x13f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F6E4, serialNumber=884B6129A8DA98296714C53A5A1280FD1019F8A3 Validity Not Before: Apr 25 03:35:08 2025 GMT Not After : May 2 03:35:08 2025 GMT Subject: CN=680b02ed-17f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:dc:4c:68:63:d2:fc:2c:d1:ab:d7:ab:a9:48: ab:aa:8c:ab:b8:08:0b:ec:33:db:93:24:44:f6:28: 49:0f:90:bb:d9:b6:b7:77:10:14:1a:43:c3:9e:31: 0f:47:d2:50:4f:0c:46:07:47:89:c6:54:30:1a:22: 82:15:0f:dd:88:7e:c8:7b:1b:b0:9a:8f:55:af:12: 1a:90:17:1e:ee:4e:93:18:ef:bb:70:6e:3c:7d:0f: a7:ed:83:ef:d3:e9:c6:3d:aa:f6:4e:44:ac:c7:f7: 54:27:71:58:d5:40:ca:95:55:b9:2d:4f:47:52:14: 5e:03:12:b0:39:01:58:4d:99:50:a9:25:cf:b7:ce: c4:98:e5:61:fc:fe:e7:b2:80:17:63:47:cf:42:cf: 38:f0:8e:1b:18:59:fc:64:71:9f:1c:2c:5c:94:3b: 93:30:25:83:db:22:13:20:d0:23:f0:58:85:80:98: 6d:7d:d5:8a:58:be:58:50:ff:c3:35:37:ef:ab:bc: 7e:e6:f3:ae:cc:2d:8b:0b:ea:82:ac:81:a3:32:0d: bc:1d:22:da:06:78:36:ea:74:2d:9b:aa:47:f2:34: a6:b3:fa:3b:31:e1:36:81:94:9e:8a:f9:ba:b4:bc: 66:bd:db:fe:b9:5d:7a:86:57:93:74:99:fa:f0:4d: 89:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:02:3A:6C:53:BB:0F:DD:7A:69:F5:E9:A2:0F:64:7E:22:0B:FB:28 X509v3 Authority Key Identifier: keyid:88:4B:61:29:A8:DA:98:29:67:14:C5:3A:5A:12:80:FD:10:19:F8:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEthKajamClnFMU6WhKA_RAZ-KM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:3d:46:47:9c:f8:58:df:fb:33:60:96:4d:94:e6:a0:ef:f5: d0:ec:98:15:53:af:81:75:8b:02:bc:7f:4c:57:b8:ce:11:ad: c2:2c:36:28:96:70:51:6e:6a:43:3e:42:b9:fb:60:79:5a:a9: 51:82:e8:0c:6f:81:85:49:6d:3f:c4:36:61:1a:5f:85:aa:e1: 69:d7:0e:e6:1a:ec:35:eb:ce:7c:64:e7:2a:41:7e:5a:ed:72: cd:d6:56:ba:9a:11:81:59:5e:13:2c:0b:25:5a:55:d2:a6:39: 34:56:68:31:af:3d:6b:0b:16:86:81:71:32:34:3c:7b:f6:e6: e7:34:4f:ec:69:06:b5:11:7c:50:da:5d:94:10:26:06:ed:6b: 14:8c:e7:16:fb:c4:3c:aa:ac:de:c4:b2:bf:37:9b:45:e1:79: 33:65:36:77:b2:65:9f:9e:13:dc:59:ff:b1:39:0e:04:51:74: f5:81:d1:b6:a8:74:cb:50:16:b0:47:8f:da:ee:bb:47:19:1e: f2:c3:12:f1:d0:f3:0e:d8:be:7e:ba:25:6b:2e:4c:15:3d:c9: 90:14:40:d8:a6:ea:b8:a4:63:ef:ec:2c:0a:79:e4:ef:e4:8a: e4:b4:c5:af:fe:34:03:29:1f:bc:01:71:e2:d9:ad:cf:9a:95: 18:ea:fa:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUY2RTQxMTAvBgNVBAUTKDg4NEI2MTI5QThEQTk4Mjk2NzE0QzUzQTVBMTI4MEZE MTAxOUY4QTMwHhcNMjUwNDI1MDMzNTA4WhcNMjUwNTAyMDMzNTA4WjAYMRYwFAYD VQQDEw02ODBiMDJlZC0xN2YyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApdxMaGPS/CzRq9erqUirqoyruAgL7DPbkyRE9ihJD5C72ba3dxAUGkPDnjEP R9JQTwxGB0eJxlQwGiKCFQ/diH7Iexuwmo9VrxIakBce7k6TGO+7cG48fQ+n7YPv 0+nGPar2TkSsx/dUJ3FY1UDKlVW5LU9HUhReAxKwOQFYTZlQqSXPt87EmOVh/P7n soAXY0fPQs848I4bGFn8ZHGfHCxclDuTMCWD2yITINAj8FiFgJhtfdWKWL5YUP/D NTfvq7x+5vOuzC2LC+qCrIGjMg28HSLaBng26nQtm6pH8jSms/o7MeE2gZSeivm6 tLxmvdv+uV16hleTdJn68E2JGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEkCOmxT uw/demn16aIPZH4iC/soMB8GA1UdIwQYMBaAFIhLYSmo2pgpZxTFOloSgP0QGfij MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RjZFNC9DQTgxRDlGRTRF MTAxMUVFOUZFMEJEMjZDNEY5QUUwMi9pRXRoS2FqYW1DbG5GTVU2V2hLQV9SQVot S00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lFdGhLYWphbUNsbkZNVTZXaEtBX1JBWi1LTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RjZFNC9DQTgxRDlGRTRFMTAxMUVFOUZFMEJEMjZDNEY5QUUwMi9pRXRoS2FqYW1D bG5GTVU2V2hLQV9SQVotS00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyPUZHnPhY3/szYJZNlOag7/XQ7JgVU6+BdYsCvH9MV7jOEa3CLDYo lnBRbmpDPkK5+2B5WqlRgugMb4GFSW0/xDZhGl+FquFp1w7mGuw16858ZOcqQX5a 7XLN1la6mhGBWV4TLAslWlXSpjk0Vmgxrz1rCxaGgXEyNDx79ubnNE/saQa1EXxQ 2l2UECYG7WsUjOcW+8Q8qqzexLK/N5tF4XkzZTZ3smWfnhPcWf+xOQ4EUXT1gdG2 qHTLUBawR4/a7rtHGR7ywxLx0PMO2L5+uiVrLkwVPcmQFEDYpuq4pGPv7CwKeeTv 5IrktMWv/jQDKR+8AXHi2a3PmpUY6vol -----END CERTIFICATE-----Generated at Sat Apr 26 04:28:20 2025 by rpki-client