$ rpki-client -vvf rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft File: kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft (raw, json) Hash identifier: 61i0PzE2auilF5lZmf0DHjR/TGYFVrxVXGMpx2G7rEE= Subject key identifier: 4D:79:3B:32:EA:85:82:B6:FF:48:53:29:4E:AB:1B:02:E5:E1:07:97 Authority key identifier: 90:F5:30:64:D0:48:C0:CC:F8:BC:D8:F8:98:C0:66:A1:31:74:BF:A7 Certificate issuer: /CN=A9181EAA/serialNumber=90F53064D048C0CCF8BCD8F898C066A13174BFA7 Certificate serial: 09DF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kPUwZNBIwMz4vNj4mMBmoTF0v6c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft Manifest number: 09CF Signing time: Sat 26 Apr 2025 16:08:03 +0000 Manifest this update: Sat 26 Apr 2025 16:08:01 +0000 Manifest next update: Sat 03 May 2025 16:08:01 +0000 Files and hashes: 1: kPUwZNBIwMz4vNj4mMBmoTF0v6c.crl (hash: DU1qWqbGalJhsOxhtuP/z97Ce9fnz6Pf54goA57GCD0=) 2: C32E05EEA10011EAA9C71D3AC4F9AE02.roa (hash: iLsqzUs1EOc2H2HJP2UkL+mYLQ5HY7IBKFpu82r2gzI=) 3: 24F4E436A10211EABCED8740C4F9AE02.roa (hash: fSyqxt+thtJ8EftQ6rivJuvYTMv0PKjtJE/N/crpwfo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.crl rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kPUwZNBIwMz4vNj4mMBmoTF0v6c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 16:08:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2527 (0x9df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181EAA, serialNumber=90F53064D048C0CCF8BCD8F898C066A13174BFA7 Validity Not Before: Apr 26 16:08:01 2025 GMT Not After : May 3 16:08:01 2025 GMT Subject: CN=680d04e2-eaf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:e4:f3:2a:35:02:ce:a2:a2:fe:13:72:37:7c: 3c:98:9a:1f:ff:88:ee:97:2d:7d:47:a4:65:2f:a6: d7:0a:69:d7:48:a3:65:5b:0c:e2:55:e9:15:fc:2e: f6:2b:95:0e:23:d0:eb:23:27:34:09:a0:2d:be:3b: 26:01:87:ef:d4:7e:27:d1:65:4b:c7:dd:f5:1c:7b: ef:00:07:24:a7:c6:68:56:fe:d6:c8:fc:a9:2e:1f: ed:91:13:95:1f:26:f7:55:54:5c:06:b1:f7:e0:97: b1:50:f2:32:ca:42:79:e0:e6:87:29:1d:af:13:34: 65:0c:1e:ef:ca:6e:01:04:aa:3b:b2:64:11:32:96: 4c:1e:31:40:b1:cf:db:d8:0e:41:7b:4e:98:2e:c0: a6:fa:5f:56:c5:28:48:f9:27:cb:dd:2e:d7:a4:3f: b1:77:46:1b:73:a6:e3:6e:f2:5d:81:1f:b4:1e:81: 50:b6:cd:01:91:b4:77:11:9a:ba:d1:95:57:3a:72: ac:32:b6:5c:74:ee:a5:70:33:a8:cd:b1:80:8a:af: f9:e9:1a:bd:da:53:07:26:89:90:fa:e1:0f:81:e0: 6e:31:82:ec:7c:6b:52:0a:fb:3c:5e:67:a2:2e:81: 7f:cc:6d:22:1d:24:3f:7b:66:0e:73:22:a5:84:7a: 96:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:79:3B:32:EA:85:82:B6:FF:48:53:29:4E:AB:1B:02:E5:E1:07:97 X509v3 Authority Key Identifier: keyid:90:F5:30:64:D0:48:C0:CC:F8:BC:D8:F8:98:C0:66:A1:31:74:BF:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kPUwZNBIwMz4vNj4mMBmoTF0v6c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:32:84:77:f3:dc:5d:c2:0a:19:25:3e:5d:8f:c1:04:58:62: 9d:9d:a4:e3:57:97:53:fb:8f:0f:b2:56:b1:ba:60:81:86:2e: 28:75:6f:c3:a9:c4:ec:91:e3:86:a2:d9:dd:c0:e7:5a:5a:2f: bb:30:1c:38:44:a6:e2:c9:41:c0:a1:cc:09:77:ba:d4:9b:da: 75:6b:e4:49:d1:0a:d7:39:a7:3b:ef:7a:fc:a2:a2:5a:65:bc: 49:bd:96:e7:2d:a6:da:dd:c3:70:0d:e2:77:30:2a:4d:55:6b: ae:55:57:63:5e:cc:3b:06:2d:68:c4:24:ea:1a:f9:85:5e:37: 4d:bb:74:05:0a:bd:47:41:3e:0a:5c:d0:03:14:b9:11:19:6a: 39:7d:21:6e:7f:33:05:d4:58:81:f0:ed:b5:99:f3:5f:6d:d8: 3b:9a:f9:ae:7f:ce:02:ea:de:0a:da:b3:7d:81:24:ae:a5:d2: c3:f8:0d:f4:f4:d5:a8:e3:1f:fb:44:ca:43:29:6b:a4:fc:1a: be:d5:11:86:86:ac:01:80:b4:6a:e1:2d:7f:fe:c1:41:04:ce: 09:06:6b:d0:40:bd:cc:87:a2:8f:5f:c6:62:1e:e3:fe:d4:b3: 95:1a:c8:89:5c:e6:21:24:ff:55:47:51:b5:85:89:e2:ab:89: 1d:9b:1b:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODFFQUExMTAvBgNVBAUTKDkwRjUzMDY0RDA0OEMwQ0NGOEJDRDhGODk4QzA2NkEx MzE3NEJGQTcwHhcNMjUwNDI2MTYwODAxWhcNMjUwNTAzMTYwODAxWjAYMRYwFAYD VQQDEw02ODBkMDRlMi1lYWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6eTzKjUCzqKi/hNyN3w8mJof/4july19R6RlL6bXCmnXSKNlWwziVekV/C72 K5UOI9DrIyc0CaAtvjsmAYfv1H4n0WVLx931HHvvAAckp8ZoVv7WyPypLh/tkROV Hyb3VVRcBrH34JexUPIyykJ54OaHKR2vEzRlDB7vym4BBKo7smQRMpZMHjFAsc/b 2A5Be06YLsCm+l9WxShI+SfL3S7XpD+xd0Ybc6bjbvJdgR+0HoFQts0BkbR3EZq6 0ZVXOnKsMrZcdO6lcDOozbGAiq/56Rq92lMHJomQ+uEPgeBuMYLsfGtSCvs8Xmei LoF/zG0iHSQ/e2YOcyKlhHqWxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE15OzLq hYK2/0hTKU6rGwLl4QeXMB8GA1UdIwQYMBaAFJD1MGTQSMDM+LzY+JjAZqExdL+n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MUVBQS8wNzdGQ0RCNDdF RDIxMUVBOUVCOEQ1NzlDNEY5QUUwMi9rUFV3Wk5CSXdNejR2Tmo0bU1CbW9URjB2 NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2tQVXdaTkJJd016NHZOajRtTUJtb1RGMHY2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MUVBQS8wNzdGQ0RCNDdFRDIxMUVBOUVCOEQ1NzlDNEY5QUUwMi9rUFV3Wk5CSXdN ejR2Tmo0bU1CbW9URjB2NmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0MoR389xdwgoZJT5dj8EEWGKdnaTjV5dT+48PslaxumCBhi4odW/D qcTskeOGotndwOdaWi+7MBw4RKbiyUHAocwJd7rUm9p1a+RJ0QrXOac773r8oqJa ZbxJvZbnLaba3cNwDeJ3MCpNVWuuVVdjXsw7Bi1oxCTqGvmFXjdNu3QFCr1HQT4K XNADFLkRGWo5fSFufzMF1FiB8O21mfNfbdg7mvmuf84C6t4K2rN9gSSupdLD+A30 9NWo4x/7RMpDKWuk/Bq+1RGGhqwBgLRq4S1//sFBBM4JBmvQQL3Mh6KPX8ZiHuP+ 1LOVGsiJXOYhJP9VR1G1hYniq4kdmxu9 -----END CERTIFICATE-----Generated at Sun Apr 27 04:06:57 2025 by rpki-client