$ rpki-client -vvf rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.mft File: kBpDycSAhnF-284lXAKi8DU9qvo.mft (raw, json) Hash identifier: owvfn5/lgSG/SdPTkRA/nWl/TZpa+/KQDpPleknQQ/o= Subject key identifier: DB:57:81:95:91:08:73:18:8C:FB:77:6D:61:E1:25:5C:C9:49:F9:BB Authority key identifier: 90:1A:43:C9:C4:80:86:71:7E:DB:CE:25:5C:02:A2:F0:35:3D:AA:FA Certificate issuer: /CN=A9165DB1/serialNumber=901A43C9C48086717EDBCE255C02A2F0353DAAFA Certificate serial: 0261 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBpDycSAhnF-284lXAKi8DU9qvo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.mft Manifest number: 0261 Signing time: Fri 25 Apr 2025 01:31:53 +0000 Manifest this update: Fri 25 Apr 2025 01:31:53 +0000 Manifest next update: Fri 02 May 2025 01:31:53 +0000 Files and hashes: 1: kBpDycSAhnF-284lXAKi8DU9qvo.crl (hash: WmVdzU5KXpxkRuJ/JTgf92UvdbG+b1TaB26a4HIcLLM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.crl rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBpDycSAhnF-284lXAKi8DU9qvo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:31:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 609 (0x261) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165DB1, serialNumber=901A43C9C48086717EDBCE255C02A2F0353DAAFA Validity Not Before: Apr 25 01:31:53 2025 GMT Not After : May 2 01:31:53 2025 GMT Subject: CN=680ae609-7e35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:60:1b:cd:74:1b:72:ce:bf:81:cc:32:dd:9e: 13:61:bd:08:a8:0d:a5:9d:00:4d:83:73:a2:be:2b: 20:fd:bd:9c:de:a9:2b:fb:69:b2:23:76:6b:c8:aa: 25:b0:e4:c7:07:c3:d3:e9:0b:15:f5:7f:fb:60:fd: 75:39:c8:d2:ba:f5:5d:c1:a2:37:c0:38:3b:8a:a7: 7e:cd:93:1a:42:a0:67:db:bf:89:ad:be:65:4d:30: 42:fd:d0:3c:15:11:0b:62:a1:c9:4b:18:c4:18:32: 0b:a2:71:de:70:ec:47:79:38:6a:a6:8a:29:fa:95: 97:3a:5a:92:22:aa:13:4a:27:d6:53:8f:e4:9e:e4: 99:29:48:d4:3d:b7:6f:45:22:7b:77:20:ff:5d:d5: d1:52:6b:94:71:30:2d:e7:80:0a:0d:40:d3:b5:f4: ea:7f:07:71:61:d8:a6:09:a9:b0:d4:b9:91:97:5d: 44:a7:b8:d0:1a:c8:0f:ed:36:cb:08:95:f7:e9:a1: 4f:5b:64:c7:88:10:3b:83:fc:1a:e1:5d:21:dd:53: e8:81:b0:62:a8:b5:9b:43:76:3c:ff:cf:c0:66:24: d1:b7:4e:c8:a9:29:a6:e4:fd:43:b2:50:6e:bc:af: ff:df:f5:10:59:76:51:5a:1d:f7:91:61:04:ec:96: 37:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:57:81:95:91:08:73:18:8C:FB:77:6D:61:E1:25:5C:C9:49:F9:BB X509v3 Authority Key Identifier: keyid:90:1A:43:C9:C4:80:86:71:7E:DB:CE:25:5C:02:A2:F0:35:3D:AA:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBpDycSAhnF-284lXAKi8DU9qvo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:63:08:64:bf:6f:90:95:c9:80:cc:9f:ec:4d:b1:61:c7:f9: 2a:f0:f0:0e:37:4e:bd:1a:24:6d:02:0d:c7:58:8b:16:8f:8a: ee:4d:f3:9a:72:b4:37:f8:ad:c1:eb:0d:cc:83:75:5d:5f:91: 87:7b:54:d8:2a:11:c1:ed:c1:b2:a1:fe:e3:cc:b3:b7:d3:05: f2:13:cb:fa:f9:0b:e0:ac:62:bb:4d:99:11:d1:87:47:89:ca: 28:0b:99:b9:89:2b:d8:03:43:70:da:ca:87:12:58:d6:66:3b: bb:7a:ee:11:6a:d6:f1:4e:7a:d1:be:9a:28:0c:b0:62:15:64: 21:8c:23:69:b4:a8:c8:ef:c9:2d:7b:96:af:a6:47:db:10:7d: 47:7e:7e:60:97:0f:1b:39:53:5b:dd:2f:81:43:b4:13:64:14: b9:52:68:5a:87:b4:bc:af:56:97:9b:d0:38:76:2f:b5:46:84: 71:57:7e:11:f0:44:9d:f8:5d:a2:41:36:b0:4e:c7:55:74:56: ae:9d:d2:81:04:df:f7:28:90:a3:52:52:97:ad:d2:6a:17:7a: df:b0:03:f0:2a:0d:b2:5c:17:fe:21:b7:55:b2:08:f6:66:2b: f7:52:6a:11:21:98:21:24:73:47:d3:e2:f1:7f:3c:69:f0:7e: be:f0:c0:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVEQjExMTAvBgNVBAUTKDkwMUE0M0M5QzQ4MDg2NzE3RURCQ0UyNTVDMDJBMkYw MzUzREFBRkEwHhcNMjUwNDI1MDEzMTUzWhcNMjUwNTAyMDEzMTUzWjAYMRYwFAYD VQQDEw02ODBhZTYwOS03ZTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8GAbzXQbcs6/gcwy3Z4TYb0IqA2lnQBNg3Oivisg/b2c3qkr+2myI3ZryKol sOTHB8PT6QsV9X/7YP11OcjSuvVdwaI3wDg7iqd+zZMaQqBn27+Jrb5lTTBC/dA8 FRELYqHJSxjEGDILonHecOxHeThqpoop+pWXOlqSIqoTSifWU4/knuSZKUjUPbdv RSJ7dyD/XdXRUmuUcTAt54AKDUDTtfTqfwdxYdimCamw1LmRl11Ep7jQGsgP7TbL CJX36aFPW2THiBA7g/wa4V0h3VPogbBiqLWbQ3Y8/8/AZiTRt07IqSmm5P1DslBu vK//3/UQWXZRWh33kWEE7JY3JQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNtXgZWR CHMYjPt3bWHhJVzJSfm7MB8GA1UdIwQYMBaAFJAaQ8nEgIZxftvOJVwCovA1Par6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NURCMS81MEMxQkY5MjBF MTcxMUVEOEUzQkQ5MTVDNEY5QUUwMi9rQnBEeWNTQWhuRi0yODRsWEFLaThEVTlx dm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2tCcER5Y1NBaG5GLTI4NGxYQUtpOERVOXF2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NURCMS81MEMxQkY5MjBFMTcxMUVEOEUzQkQ5MTVDNEY5QUUwMi9rQnBEeWNTQWhu Ri0yODRsWEFLaThEVTlxdm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJYwhkv2+QlcmAzJ/sTbFhx/kq8PAON069GiRtAg3HWIsWj4ruTfOa crQ3+K3B6w3Mg3VdX5GHe1TYKhHB7cGyof7jzLO30wXyE8v6+QvgrGK7TZkR0YdH icooC5m5iSvYA0Nw2sqHEljWZju7eu4RatbxTnrRvpooDLBiFWQhjCNptKjI78kt e5avpkfbEH1Hfn5glw8bOVNb3S+BQ7QTZBS5Umhah7S8r1aXm9A4di+1RoRxV34R 8ESd+F2iQTawTsdVdFaundKBBN/3KJCjUlKXrdJqF3rfsAPwKg2yXBf+IbdVsgj2 Ziv3UmoRIZghJHNH0+Lxfzxp8H6+8MAU -----END CERTIFICATE-----Generated at Sat Apr 26 15:11:58 2025 by rpki-client