$ rpki-client -vvf rpki.apnic.net/member_repository/A91651CF/3043635C86D711EF854DD47BC4F9AE02/KaAJAT90Md42nADKtUcWypNFJtM.mft File: KaAJAT90Md42nADKtUcWypNFJtM.mft (raw, json) Hash identifier: F/Ps7FQ7hcsuc0jYEGi3qbq4l3Sh9iqtUku/Y/HeXyE= Subject key identifier: 46:CC:95:F2:3E:C7:BF:AB:A5:BA:A3:9B:D1:89:F8:6C:26:61:C4:03 Authority key identifier: 29:A0:09:01:3F:74:31:DE:36:9C:00:CA:B5:47:16:CA:93:45:26:D3 Certificate issuer: /CN=A91651CF/serialNumber=29A009013F7431DE369C00CAB54716CA934526D3 Certificate serial: 67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KaAJAT90Md42nADKtUcWypNFJtM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91651CF/3043635C86D711EF854DD47BC4F9AE02/KaAJAT90Md42nADKtUcWypNFJtM.mft Manifest number: 67 Signing time: Fri 25 Apr 2025 05:56:41 +0000 Manifest this update: Fri 25 Apr 2025 05:56:40 +0000 Manifest next update: Fri 02 May 2025 05:56:40 +0000 Files and hashes: 1: KaAJAT90Md42nADKtUcWypNFJtM.crl (hash: aMb/k2c2Uy1+fWnVUJG2DoUTz8oZQIsEj4shi2OkaBQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91651CF/3043635C86D711EF854DD47BC4F9AE02/KaAJAT90Md42nADKtUcWypNFJtM.crl rsync://rpki.apnic.net/member_repository/A91651CF/3043635C86D711EF854DD47BC4F9AE02/KaAJAT90Md42nADKtUcWypNFJtM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KaAJAT90Md42nADKtUcWypNFJtM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:56:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 103 (0x67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91651CF, serialNumber=29A009013F7431DE369C00CAB54716CA934526D3 Validity Not Before: Apr 25 05:56:40 2025 GMT Not After : May 2 05:56:40 2025 GMT Subject: CN=680b2419-3330 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:42:40:bb:2e:6f:64:3d:bd:69:68:7e:de:06: 28:14:3b:f7:eb:11:72:13:45:04:fe:a1:d0:4f:cb: 64:f5:15:25:a5:2c:f1:bd:5f:5e:2a:a1:a4:26:0b: 43:14:bb:47:36:f8:0b:df:78:76:db:bd:11:62:a1: 5b:68:2c:b3:1f:25:78:c1:e6:fa:df:ad:00:39:44: 3f:13:e8:5a:d2:50:37:45:d7:0a:d7:48:e6:f7:d7: 0f:ff:af:1c:7a:1e:3d:09:1d:7a:3d:97:f3:9b:f7: 06:21:de:23:d8:d0:e9:24:f9:d2:70:cf:7a:01:b1: 22:ae:ff:9f:a2:8f:13:8f:34:c0:1f:9f:eb:e6:9a: 56:46:81:41:45:1d:b7:3b:f2:cd:81:41:a5:4e:15: 2d:ff:5d:90:c2:08:28:6f:7c:4a:59:8d:3b:2c:35: df:74:7e:cf:ec:a5:a6:7f:6e:d6:68:69:2e:c8:31: c0:16:16:b5:4a:d1:83:9e:36:d5:fd:0d:85:6b:61: ae:b2:cb:c9:fe:d4:13:a9:25:9c:85:4b:ed:01:58: 9a:34:08:9d:2f:4b:72:7a:ba:51:47:70:85:48:4b: 91:de:3e:7f:bb:d8:92:0c:e0:37:59:d3:46:fd:d8: 60:90:7f:b0:27:f4:f1:2f:93:0b:43:66:10:fe:7f: 89:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:CC:95:F2:3E:C7:BF:AB:A5:BA:A3:9B:D1:89:F8:6C:26:61:C4:03 X509v3 Authority Key Identifier: keyid:29:A0:09:01:3F:74:31:DE:36:9C:00:CA:B5:47:16:CA:93:45:26:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91651CF/3043635C86D711EF854DD47BC4F9AE02/KaAJAT90Md42nADKtUcWypNFJtM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KaAJAT90Md42nADKtUcWypNFJtM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91651CF/3043635C86D711EF854DD47BC4F9AE02/KaAJAT90Md42nADKtUcWypNFJtM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:35:62:3f:3e:05:03:67:a0:29:48:00:fd:b2:8e:63:c1:42: 3b:f7:7f:2c:e5:f5:6e:94:2e:b5:8c:8b:85:67:2c:53:ac:7d: cd:81:76:9b:27:c7:d6:9d:c4:93:f2:ed:a3:5d:0f:25:77:d8: 23:80:57:16:51:89:3e:4d:8d:7e:2e:d0:60:88:d8:9a:5e:34: 86:2c:44:9e:72:2f:12:e2:a3:9f:9f:5d:64:c1:46:d1:3a:67: c4:50:1c:70:2b:8e:22:0f:7d:71:50:bd:46:33:30:26:a4:f9: 1b:b3:ea:46:95:f1:8a:ff:00:8b:21:f2:49:f2:5c:61:42:af: 85:76:01:da:65:d8:b3:15:ca:9c:5a:ea:1f:cc:d6:3d:c1:88: 53:4a:54:a1:ad:94:63:8e:03:eb:29:69:32:34:52:e3:ea:96: b8:a2:0e:09:f9:7d:6a:b9:8b:3c:8c:b9:71:c0:d6:09:3c:6d: e9:ec:93:9d:11:be:f1:bf:0d:01:20:b3:07:7b:bd:36:56:24: 31:17:a0:a2:77:7e:70:34:95:01:d8:3d:c4:26:08:26:44:ff: 7a:b7:52:29:aa:04:eb:5c:29:b0:b1:f7:0d:ce:87:41:9e:92: 90:0d:eb:2f:2d:ad:a3:c9:fa:4c:18:6a:39:f1:d7:9e:73:c3: df:7e:d2:9d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NTFDRjExMC8GA1UEBRMoMjlBMDA5MDEzRjc0MzFERTM2OUMwMENBQjU0NzE2Q0E5 MzQ1MjZEMzAeFw0yNTA0MjUwNTU2NDBaFw0yNTA1MDIwNTU2NDBaMBgxFjAUBgNV BAMTDTY4MGIyNDE5LTMzMzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCQkC7Lm9kPb1paH7eBigUO/frEXITRQT+odBPy2T1FSWlLPG9X14qoaQmC0MU u0c2+AvfeHbbvRFioVtoLLMfJXjB5vrfrQA5RD8T6FrSUDdF1wrXSOb31w//rxx6 Hj0JHXo9l/Ob9wYh3iPY0Okk+dJwz3oBsSKu/5+ijxOPNMAfn+vmmlZGgUFFHbc7 8s2BQaVOFS3/XZDCCChvfEpZjTssNd90fs/spaZ/btZoaS7IMcAWFrVK0YOeNtX9 DYVrYa6yy8n+1BOpJZyFS+0BWJo0CJ0vS3J6ulFHcIVIS5HePn+72JIM4DdZ00b9 2GCQf7An9PEvkwtDZhD+f4kxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURsyV8j7H v6uluqOb0Yn4bCZhxAMwHwYDVR0jBBgwFoAUKaAJAT90Md42nADKtUcWypNFJtMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1MUNGLzMwNDM2MzVDODZE NzExRUY4NTRERDQ3QkM0RjlBRTAyL0thQUpBVDkwTWQ0Mm5BREt0VWNXeXBORkp0 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvS2FBSkFUOTBNZDQybkFES3RVY1d5cE5GSnRNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1 MUNGLzMwNDM2MzVDODZENzExRUY4NTRERDQ3QkM0RjlBRTAyL0thQUpBVDkwTWQ0 Mm5BREt0VWNXeXBORkp0TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC41Yj8+BQNnoClIAP2yjmPBQjv3fyzl9W6ULrWMi4VnLFOsfc2Bdpsn x9adxJPy7aNdDyV32COAVxZRiT5NjX4u0GCI2JpeNIYsRJ5yLxLio5+fXWTBRtE6 Z8RQHHArjiIPfXFQvUYzMCak+Ruz6kaV8Yr/AIsh8knyXGFCr4V2Adpl2LMVypxa 6h/M1j3BiFNKVKGtlGOOA+spaTI0UuPqlriiDgn5fWq5izyMuXHA1gk8bensk50R vvG/DQEgswd7vTZWJDEXoKJ3fnA0lQHYPcQmCCZE/3q3UimqBOtcKbCx9w3Oh0Ge kpAN6y8traPJ+kwYajnx155zw99+0p0= -----END CERTIFICATE-----Generated at Sat Apr 26 05:06:59 2025 by rpki-client