$ rpki-client -vvf rpki.apnic.net/member_repository/A9180174/79D6662A168911EC8162580CC4F9AE02/KN1yVzxbraKIuDKzmB_0yYsvjFE.mft File: KN1yVzxbraKIuDKzmB_0yYsvjFE.mft (raw, json) Hash identifier: a13ANe9MECV7s08UIhgOOMVfNon2LCmSaBGKv+yoqxE= Subject key identifier: 8E:3C:70:9E:23:75:AA:05:57:78:9D:8A:04:91:A7:26:41:47:D0:1B Authority key identifier: 28:DD:72:57:3C:5B:AD:A2:88:B8:32:B3:98:1F:F4:C9:8B:2F:8C:51 Certificate issuer: /CN=A9180174/serialNumber=28DD72573C5BADA288B832B3981FF4C98B2F8C51 Certificate serial: 04E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KN1yVzxbraKIuDKzmB_0yYsvjFE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180174/79D6662A168911EC8162580CC4F9AE02/KN1yVzxbraKIuDKzmB_0yYsvjFE.mft Manifest number: 04DF Signing time: Thu 24 Apr 2025 23:33:33 +0000 Manifest this update: Thu 24 Apr 2025 23:33:32 +0000 Manifest next update: Thu 01 May 2025 23:33:32 +0000 Files and hashes: 1: KN1yVzxbraKIuDKzmB_0yYsvjFE.crl (hash: bA1pSLRHBHa4U3Csus3udLBAuhjtvY9yNfoCKCPoT0s=) 2: F6750B60168D11EC89C9CB5DC4F9AE02.roa (hash: 9is5aeB2FzFVh9EnamHZGKMz2wLecoiTResPsgf3D2Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180174/79D6662A168911EC8162580CC4F9AE02/KN1yVzxbraKIuDKzmB_0yYsvjFE.crl rsync://rpki.apnic.net/member_repository/A9180174/79D6662A168911EC8162580CC4F9AE02/KN1yVzxbraKIuDKzmB_0yYsvjFE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KN1yVzxbraKIuDKzmB_0yYsvjFE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:33:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1253 (0x4e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180174, serialNumber=28DD72573C5BADA288B832B3981FF4C98B2F8C51 Validity Not Before: Apr 24 23:33:32 2025 GMT Not After : May 1 23:33:32 2025 GMT Subject: CN=680aca4d-c397 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:69:97:8a:61:c3:f0:31:c0:d1:45:c7:3a:1a: 89:1e:6f:7f:32:9b:56:12:6f:60:7c:e3:b6:78:ea: 74:1b:59:9f:14:f1:50:69:69:c8:bd:02:7b:f2:42: 2c:99:c3:9b:27:33:9d:a4:85:49:98:54:80:1c:48: 4e:47:9f:60:da:74:c4:80:49:67:00:47:24:36:fd: 07:d0:b6:cb:53:74:59:fc:ac:0b:82:9d:6e:34:41: e2:6f:5d:b5:da:1d:00:73:d8:4a:45:5e:0e:cd:1f: d7:9a:42:64:98:cf:c5:79:3f:09:58:e2:b4:98:58: c1:93:ba:e6:a9:e5:5e:86:b7:88:de:c8:81:dd:6d: 6a:81:50:be:4e:36:34:68:39:42:df:1a:1a:47:41: 8b:3a:d5:53:e8:eb:f1:c4:2e:6f:49:46:0e:40:3a: 0e:be:87:b2:48:35:bc:b7:b7:67:ee:26:98:8c:be: 62:12:c2:45:6b:71:c4:91:ca:3b:3d:c7:f7:f7:d8: 7d:82:49:67:3f:02:8d:7d:cd:60:f9:ef:3b:4e:5f: 4f:2c:44:55:16:e8:58:58:60:16:a8:1c:81:a2:65: 50:43:76:4c:c7:4d:bb:d8:80:69:20:ac:1f:5c:2a: 66:1c:ee:94:cb:f7:43:f2:15:aa:3f:e9:75:0a:45: 54:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:3C:70:9E:23:75:AA:05:57:78:9D:8A:04:91:A7:26:41:47:D0:1B X509v3 Authority Key Identifier: keyid:28:DD:72:57:3C:5B:AD:A2:88:B8:32:B3:98:1F:F4:C9:8B:2F:8C:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180174/79D6662A168911EC8162580CC4F9AE02/KN1yVzxbraKIuDKzmB_0yYsvjFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KN1yVzxbraKIuDKzmB_0yYsvjFE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180174/79D6662A168911EC8162580CC4F9AE02/KN1yVzxbraKIuDKzmB_0yYsvjFE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:4e:1b:e5:74:f0:4f:20:c1:90:6e:2a:bf:2a:b6:98:2b:cd: 45:73:d0:73:90:5f:3b:01:f2:7b:2c:07:1a:f4:dc:87:ef:e9: 91:36:f0:22:47:01:24:58:8f:fa:b6:b5:46:c4:e8:a8:e9:73: 6e:fb:78:e5:85:68:d3:f9:2f:eb:3f:fd:49:5b:0d:b4:72:32: 7b:e8:0d:4b:cd:36:55:31:d9:d1:ef:e1:d9:92:f3:5f:d1:be: 76:d9:f9:84:fe:93:f6:2c:bc:fc:1b:c3:78:b3:f4:6f:b6:0e: 83:db:a7:c2:8e:b8:66:23:77:78:75:8f:45:24:ee:7b:83:77: 21:67:0e:63:7e:aa:bb:28:2d:0c:ae:a0:5d:56:f6:3f:0a:5e: 33:5f:1c:3e:c0:ef:58:cc:95:25:e7:bf:72:a3:3b:d2:33:01: 48:24:9d:d0:4f:aa:31:77:9e:42:73:de:5a:ad:92:33:6a:80: 2d:1f:67:0f:69:8c:46:4d:ce:8f:73:6f:a9:dd:80:d1:61:c1: fc:66:13:75:43:92:f7:a8:7c:80:9c:53:dc:64:a8:4c:13:d8: 31:17:ad:2f:94:5e:02:3a:87:54:56:52:35:a8:2b:2d:ef:f9: 7f:fe:14:1f:cf:43:fa:71:f0:6f:af:a8:ea:f6:b5:7d:38:c8: 8a:b5:43:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAxNzQxMTAvBgNVBAUTKDI4REQ3MjU3M0M1QkFEQTI4OEI4MzJCMzk4MUZGNEM5 OEIyRjhDNTEwHhcNMjUwNDI0MjMzMzMyWhcNMjUwNTAxMjMzMzMyWjAYMRYwFAYD VQQDEw02ODBhY2E0ZC1jMzk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArmmXimHD8DHA0UXHOhqJHm9/MptWEm9gfOO2eOp0G1mfFPFQaWnIvQJ78kIs mcObJzOdpIVJmFSAHEhOR59g2nTEgElnAEckNv0H0LbLU3RZ/KwLgp1uNEHib121 2h0Ac9hKRV4OzR/XmkJkmM/FeT8JWOK0mFjBk7rmqeVehreI3siB3W1qgVC+TjY0 aDlC3xoaR0GLOtVT6OvxxC5vSUYOQDoOvoeySDW8t7dn7iaYjL5iEsJFa3HEkco7 Pcf399h9gklnPwKNfc1g+e87Tl9PLERVFuhYWGAWqByBomVQQ3ZMx0272IBpIKwf XCpmHO6Uy/dD8hWqP+l1CkVU1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI48cJ4j daoFV3idigSRpyZBR9AbMB8GA1UdIwQYMBaAFCjdclc8W62iiLgys5gf9MmLL4xR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDE3NC83OUQ2NjYyQTE2 ODkxMUVDODE2MjU4MENDNEY5QUUwMi9LTjF5Vnp4YnJhS0l1REt6bUJfMHlZc3Zq RkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tOMXlWenhicmFLSXVES3ptQl8weVlzdmpGRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDE3NC83OUQ2NjYyQTE2ODkxMUVDODE2MjU4MENDNEY5QUUwMi9LTjF5Vnp4YnJh S0l1REt6bUJfMHlZc3ZqRkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoThvldPBPIMGQbiq/KraYK81Fc9BzkF87AfJ7LAca9NyH7+mRNvAi RwEkWI/6trVGxOio6XNu+3jlhWjT+S/rP/1JWw20cjJ76A1LzTZVMdnR7+HZkvNf 0b522fmE/pP2LLz8G8N4s/Rvtg6D26fCjrhmI3d4dY9FJO57g3chZw5jfqq7KC0M rqBdVvY/Cl4zXxw+wO9YzJUl579yozvSMwFIJJ3QT6oxd55Cc95arZIzaoAtH2cP aYxGTc6Pc2+p3YDRYcH8ZhN1Q5L3qHyAnFPcZKhME9gxF60vlF4COodUVlI1qCst 7/l//hQfz0P6cfBvr6jq9rV9OMiKtUPX -----END CERTIFICATE-----Generated at Sat Apr 26 04:38:41 2025 by rpki-client