$ rpki-client -vvf rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/K0QMfEWQAwVRV2J95yFOnKwSi0w.mft File: K0QMfEWQAwVRV2J95yFOnKwSi0w.mft (raw, json) Hash identifier: /s3UHzYBAXzhxZuP+42K2G1bWrqH/X14RQEyaWPE8mc= Subject key identifier: 10:E7:5F:61:98:23:EB:16:A1:B8:C7:9F:54:72:A9:61:56:24:CE:77 Authority key identifier: 2B:44:0C:7C:45:90:03:05:51:57:62:7D:E7:21:4E:9C:AC:12:8B:4C Certificate issuer: /CN=A9187729/serialNumber=2B440C7C459003055157627DE7214E9CAC128B4C Certificate serial: 03BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0QMfEWQAwVRV2J95yFOnKwSi0w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/K0QMfEWQAwVRV2J95yFOnKwSi0w.mft Manifest number: 03B9 Signing time: Fri 25 Apr 2025 00:26:42 +0000 Manifest this update: Fri 25 Apr 2025 00:26:41 +0000 Manifest next update: Fri 02 May 2025 00:26:41 +0000 Files and hashes: 1: K0QMfEWQAwVRV2J95yFOnKwSi0w.crl (hash: /zxjuTwFGC0OiB7726+EwTzGjZ0gBeWqjNYIom27qJE=) 2: 394B48F6889811EC9D1DF920C4F9AE02.roa (hash: zNdiJ1pBffbcNnWg75GFO6PkHkmsjOTQiX3Av0Ret+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/K0QMfEWQAwVRV2J95yFOnKwSi0w.crl rsync://rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/K0QMfEWQAwVRV2J95yFOnKwSi0w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0QMfEWQAwVRV2J95yFOnKwSi0w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:26:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 957 (0x3bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187729, serialNumber=2B440C7C459003055157627DE7214E9CAC128B4C Validity Not Before: Apr 25 00:26:41 2025 GMT Not After : May 2 00:26:41 2025 GMT Subject: CN=680ad6c1-ae6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:f2:9c:a3:2d:b8:07:af:19:cb:ce:cc:6f:cc: f5:f0:4e:32:59:a8:f9:07:81:cb:bd:f4:51:aa:bd: 38:57:c4:3a:09:8c:49:ba:27:85:1d:3d:96:1c:12: e2:a0:a9:c0:92:8e:da:cc:c3:4e:87:59:6d:50:f0: 6d:28:79:80:45:46:df:66:84:ca:1c:79:84:3b:37: 74:37:b8:3f:5c:ff:2b:14:37:ad:6e:be:dd:e2:cd: 19:13:cd:29:94:ff:ce:c7:e1:a6:56:f0:81:3b:27: 95:b0:84:be:88:2b:42:27:48:7d:00:d6:40:1e:47: 60:0c:3b:a1:6c:c7:32:25:93:c0:32:88:2d:fb:2c: e2:f1:23:84:58:b8:c0:c7:91:fc:5f:2d:dd:f2:39: d5:58:15:37:d1:2c:f9:32:68:a9:64:7a:a1:43:5c: 21:4b:d7:b0:fc:65:cb:e7:ba:f5:1d:b4:5d:1b:16: 53:70:84:d5:29:f8:83:3d:27:7f:88:57:b4:6e:bb: 75:d9:60:3c:7a:27:cd:56:7a:1b:3c:08:3c:e8:4b: 2a:e5:67:8f:1f:1c:cb:15:92:5f:3a:6a:67:f8:ec: 6d:2f:a5:7e:c7:0c:53:1c:ee:12:2b:d2:5a:a6:59: a4:de:a8:3e:a9:29:43:cf:a9:7d:10:48:f9:fc:42: 88:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:E7:5F:61:98:23:EB:16:A1:B8:C7:9F:54:72:A9:61:56:24:CE:77 X509v3 Authority Key Identifier: keyid:2B:44:0C:7C:45:90:03:05:51:57:62:7D:E7:21:4E:9C:AC:12:8B:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/K0QMfEWQAwVRV2J95yFOnKwSi0w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0QMfEWQAwVRV2J95yFOnKwSi0w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/K0QMfEWQAwVRV2J95yFOnKwSi0w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:02:a3:fd:63:d3:78:73:6e:b3:02:1c:28:b2:8c:32:a3:a2: e2:2e:d4:3e:55:6f:a4:c6:c3:22:2c:e7:29:39:32:70:a4:fa: 89:c4:7a:1f:c5:de:07:0d:b1:60:2c:e9:29:89:46:a5:6f:ed: df:60:f1:73:b8:aa:b3:51:68:c4:24:b2:f2:34:e7:d0:d3:7b: 0a:09:6e:4b:23:bb:fe:c9:46:6a:e9:ef:e8:90:3f:c1:fb:c3: 8a:01:92:05:a0:ba:6f:54:37:89:b6:39:78:f1:b7:9f:c5:93: f1:a6:71:33:76:00:b6:fc:64:83:80:f5:60:73:02:d5:21:7b: 32:cd:ee:da:f3:76:73:82:27:0e:aa:54:0d:3b:40:1f:17:f8: e4:9c:0a:4d:56:5b:2f:70:37:67:21:02:0a:fb:a8:5f:15:50: 27:6d:71:32:5f:8c:c5:e0:73:54:0c:af:d0:45:f1:ce:61:33: 0b:5e:79:e0:d7:01:9a:27:a9:4f:e1:c5:65:4f:79:5e:73:95: ac:93:57:c2:81:39:52:98:c2:6c:6b:01:31:da:4e:fe:e4:0d: f7:12:94:f6:8d:f7:c8:bc:2e:a8:06:18:70:c1:5f:5c:6e:78: 2a:1a:13:35:76:8e:87:45:b9:e2:37:b1:a5:c9:7f:3a:fc:7e: d1:a3:14:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA70wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc3MjkxMTAvBgNVBAUTKDJCNDQwQzdDNDU5MDAzMDU1MTU3NjI3REU3MjE0RTlD QUMxMjhCNEMwHhcNMjUwNDI1MDAyNjQxWhcNMjUwNTAyMDAyNjQxWjAYMRYwFAYD VQQDEw02ODBhZDZjMS1hZTZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3PKcoy24B68Zy87Mb8z18E4yWaj5B4HLvfRRqr04V8Q6CYxJuieFHT2WHBLi oKnAko7azMNOh1ltUPBtKHmARUbfZoTKHHmEOzd0N7g/XP8rFDetbr7d4s0ZE80p lP/Ox+GmVvCBOyeVsIS+iCtCJ0h9ANZAHkdgDDuhbMcyJZPAMogt+yzi8SOEWLjA x5H8Xy3d8jnVWBU30Sz5MmipZHqhQ1whS9ew/GXL57r1HbRdGxZTcITVKfiDPSd/ iFe0brt12WA8eifNVnobPAg86Esq5WePHxzLFZJfOmpn+OxtL6V+xwxTHO4SK9Ja plmk3qg+qSlDz6l9EEj5/EKIuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBDnX2GY I+sWobjHn1RyqWFWJM53MB8GA1UdIwQYMBaAFCtEDHxFkAMFUVdifechTpysEotM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzcyOS8xMzEyRjkwODg4 OTQxMUVDQjIwQjgzNzJDNEY5QUUwMi9LMFFNZkVXUUF3VlJWMko5NXlGT25Ld1Np MHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0swUU1mRVdRQXdWUlYySjk1eUZPbkt3U2kwdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzcyOS8xMzEyRjkwODg4OTQxMUVDQjIwQjgzNzJDNEY5QUUwMi9LMFFNZkVXUUF3 VlJWMko5NXlGT25Ld1NpMHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJAqP9Y9N4c26zAhwosowyo6LiLtQ+VW+kxsMiLOcpOTJwpPqJxHof xd4HDbFgLOkpiUalb+3fYPFzuKqzUWjEJLLyNOfQ03sKCW5LI7v+yUZq6e/okD/B +8OKAZIFoLpvVDeJtjl48befxZPxpnEzdgC2/GSDgPVgcwLVIXsyze7a83ZzgicO qlQNO0AfF/jknApNVlsvcDdnIQIK+6hfFVAnbXEyX4zF4HNUDK/QRfHOYTMLXnng 1wGaJ6lP4cVlT3lec5Wsk1fCgTlSmMJsawEx2k7+5A33EpT2jffIvC6oBhhwwV9c bngqGhM1do6HRbniN7GlyX86/H7RoxQW -----END CERTIFICATE-----Generated at Sat Apr 26 05:24:48 2025 by rpki-client