$ rpki-client -vvf rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.mft File: klwudR4T9Usqn5-j2mUO2423zy0.mft (raw, json) Hash identifier: Tl1O9NmFbKjT9HUQmaLlzxEfbCwL4whm1bc2GwCSLuQ= Subject key identifier: B4:E4:2B:2B:77:53:93:D7:42:A4:A4:A7:CD:5D:38:96:B6:79:11:E4 Authority key identifier: 92:5C:2E:75:1E:13:F5:4B:2A:9F:9F:A3:DA:65:0E:DB:8D:B7:CF:2D Certificate issuer: /CN=A918B9B8/serialNumber=925C2E751E13F54B2A9F9FA3DA650EDB8DB7CF2D Certificate serial: 09C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klwudR4T9Usqn5-j2mUO2423zy0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.mft Manifest number: 09C2 Signing time: Thu 24 Apr 2025 19:51:14 +0000 Manifest this update: Thu 24 Apr 2025 19:51:13 +0000 Manifest next update: Thu 01 May 2025 19:51:13 +0000 Files and hashes: 1: klwudR4T9Usqn5-j2mUO2423zy0.crl (hash: ZJ/ckLSO1eYDOYykLdtw+vHCFOz+9v+Osk7A96Gwrt4=) 2: 275694947E2111EABA287C6DC4F9AE02.roa (hash: 7d4ZQMpLwZNv6c2aTJKagStC5pu82EAlUBC22iAZFbM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.crl rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klwudR4T9Usqn5-j2mUO2423zy0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:51:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2504 (0x9c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B9B8, serialNumber=925C2E751E13F54B2A9F9FA3DA650EDB8DB7CF2D Validity Not Before: Apr 24 19:51:13 2025 GMT Not After : May 1 19:51:13 2025 GMT Subject: CN=680a9631-dae1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:25:3e:ca:52:0f:9b:8a:84:1e:d5:19:a3:86: b1:cb:9f:fe:30:9c:d0:22:98:d2:a0:5f:58:17:32: a1:6d:36:25:97:32:37:7b:44:6b:2d:b3:5c:f4:f5: 9d:9c:20:14:25:96:0d:33:06:8c:11:c3:5b:5e:fb: 89:2d:4d:c7:07:a3:05:9a:3b:c9:8e:76:c2:86:a8: be:b1:e1:af:bc:b3:b5:84:81:15:a0:88:05:25:5a: 51:09:2f:34:a1:e9:0b:4f:3f:ea:5c:a8:34:46:51: 33:70:8c:75:17:99:df:bb:4c:e7:39:30:34:c5:aa: 9a:d2:99:da:aa:e9:b8:c2:d0:ea:15:aa:72:4e:aa: 99:01:86:43:a0:70:df:35:a3:a2:ec:8f:cb:44:dd: 01:9e:a9:4f:31:30:3a:88:77:86:29:56:3f:77:fa: 6d:73:21:dc:78:20:41:a4:ad:69:8c:67:e4:7e:94: ee:25:b0:eb:98:f6:86:32:0f:da:96:1c:5e:f3:98: cd:bf:97:66:8d:88:cb:f0:1b:37:07:bd:7f:bf:36: fc:e5:8a:e6:17:69:14:6b:7a:91:5b:58:e3:33:4b: 74:d0:28:b4:8e:37:d9:15:bb:81:5f:42:9a:01:8c: 77:ed:a6:19:9d:1e:a0:68:9d:0d:cb:43:f0:7f:49: 13:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:E4:2B:2B:77:53:93:D7:42:A4:A4:A7:CD:5D:38:96:B6:79:11:E4 X509v3 Authority Key Identifier: keyid:92:5C:2E:75:1E:13:F5:4B:2A:9F:9F:A3:DA:65:0E:DB:8D:B7:CF:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klwudR4T9Usqn5-j2mUO2423zy0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:ae:40:70:d1:84:ef:0a:4e:24:f7:62:25:79:3f:a4:d6:d0: f2:ca:96:4b:cd:cd:c4:c2:27:d3:0c:b5:38:c8:11:7a:b1:1f: 44:6e:bc:42:ba:32:73:9e:e7:26:e7:69:2f:5b:6c:29:44:b2: 5c:0f:5a:6d:fe:5c:84:91:4c:a1:74:69:9d:33:54:90:1a:07: 71:17:fa:4b:8d:4a:0f:90:dc:2a:27:28:78:ab:ba:35:e4:b9: 85:cd:e8:3c:97:be:23:e4:ef:1c:67:32:d1:5c:2f:86:31:f0: 60:c5:5a:39:bd:71:66:93:61:46:57:a5:7c:19:7f:5b:72:81: c3:52:cf:96:47:4b:fd:e9:b0:8c:36:6d:2b:84:ed:39:f1:ea: 67:77:c2:8a:b0:c5:0c:c3:aa:7c:e2:90:54:f7:80:6f:ef:5c: ab:70:83:a1:de:0b:e7:96:e8:9b:a7:ab:66:51:70:31:2c:46: 47:ec:0a:d5:73:95:e9:99:c0:16:ad:af:c3:43:33:ab:b6:81: c1:a9:8b:61:3d:92:b6:7f:d5:bc:49:9e:a1:95:0f:44:a8:8f: 61:8e:6f:ef:a8:fb:f3:8a:58:17:fd:48:9b:73:62:33:3f:04: 9b:d3:5c:3f:91:68:3b:ce:9f:d1:f8:d8:83:65:ec:45:f6:1b: c8:ba:1e:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCcgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEI5QjgxMTAvBgNVBAUTKDkyNUMyRTc1MUUxM0Y1NEIyQTlGOUZBM0RBNjUwRURC OERCN0NGMkQwHhcNMjUwNDI0MTk1MTEzWhcNMjUwNTAxMTk1MTEzWjAYMRYwFAYD VQQDEw02ODBhOTYzMS1kYWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoiU+ylIPm4qEHtUZo4axy5/+MJzQIpjSoF9YFzKhbTYllzI3e0RrLbNc9PWd nCAUJZYNMwaMEcNbXvuJLU3HB6MFmjvJjnbChqi+seGvvLO1hIEVoIgFJVpRCS80 oekLTz/qXKg0RlEzcIx1F5nfu0znOTA0xaqa0pnaqum4wtDqFapyTqqZAYZDoHDf NaOi7I/LRN0BnqlPMTA6iHeGKVY/d/ptcyHceCBBpK1pjGfkfpTuJbDrmPaGMg/a lhxe85jNv5dmjYjL8Bs3B71/vzb85YrmF2kUa3qRW1jjM0t00Ci0jjfZFbuBX0Ka AYx37aYZnR6gaJ0Ny0Pwf0kTewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLTkKyt3 U5PXQqSkp81dOJa2eRHkMB8GA1UdIwQYMBaAFJJcLnUeE/VLKp+fo9plDtuNt88t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjlCOC8zREU5MDYwMjdF MjAxMUVBODQ2RjIzNkRDNEY5QUUwMi9rbHd1ZFI0VDlVc3FuNS1qMm1VTzI0MjN6 eTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tsd3VkUjRUOVVzcW41LWoybVVPMjQyM3p5MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjlCOC8zREU5MDYwMjdFMjAxMUVBODQ2RjIzNkRDNEY5QUUwMi9rbHd1ZFI0VDlV c3FuNS1qMm1VTzI0MjN6eTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAprkBw0YTvCk4k92IleT+k1tDyypZLzc3EwifTDLU4yBF6sR9EbrxC ujJznucm52kvW2wpRLJcD1pt/lyEkUyhdGmdM1SQGgdxF/pLjUoPkNwqJyh4q7o1 5LmFzeg8l74j5O8cZzLRXC+GMfBgxVo5vXFmk2FGV6V8GX9bcoHDUs+WR0v96bCM Nm0rhO058epnd8KKsMUMw6p84pBU94Bv71yrcIOh3gvnluibp6tmUXAxLEZH7ArV c5XpmcAWra/DQzOrtoHBqYthPZK2f9W8SZ6hlQ9EqI9hjm/vqPvzilgX/Uibc2Iz PwSb01w/kWg7zp/R+NiDZexF9hvIuh6j -----END CERTIFICATE-----Generated at Sat Apr 26 13:04:33 2025 by rpki-client