$ rpki-client -vvf rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.mft File: K0TIiRquK4of20jr9KV-mJrrc2M.mft (raw, json) Hash identifier: qn1469z6TUQEmAK5BZCUmL2Rry9zAsxdkyjNky95gDE= Subject key identifier: FC:D4:79:FA:BA:6B:5E:45:30:8E:28:2E:4A:A6:54:2F:41:24:97:EA Authority key identifier: 2B:44:C8:89:1A:AE:2B:8A:1F:DB:48:EB:F4:A5:7E:98:9A:EB:73:63 Certificate issuer: /CN=A918BBBA/serialNumber=2B44C8891AAE2B8A1FDB48EBF4A57E989AEB7363 Certificate serial: 0457 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0TIiRquK4of20jr9KV-mJrrc2M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.mft Manifest number: 0453 Signing time: Thu 24 Apr 2025 23:57:47 +0000 Manifest this update: Thu 24 Apr 2025 23:57:47 +0000 Manifest next update: Thu 01 May 2025 23:57:47 +0000 Files and hashes: 1: K0TIiRquK4of20jr9KV-mJrrc2M.crl (hash: 7FRDN8V48rEFSyWU8W65ih8Kr1K5plcOT0zPamQu20Y=) 2: 0CD36EF4500B11EC9430721DC4F9AE02.roa (hash: gK2u6xOFSxtr+xoZ4+/hIrNybEaw24qFNSOsiwBKiyM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.crl rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0TIiRquK4of20jr9KV-mJrrc2M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:57:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1111 (0x457) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BBBA, serialNumber=2B44C8891AAE2B8A1FDB48EBF4A57E989AEB7363 Validity Not Before: Apr 24 23:57:47 2025 GMT Not After : May 1 23:57:47 2025 GMT Subject: CN=680acffb-30de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3c:dd:a5:49:c7:cb:23:8e:6d:88:3c:ba:78: 24:74:f8:12:f0:7c:80:0e:fc:ef:c7:be:1c:95:fe: 3e:c0:a3:73:77:22:cf:2c:2a:41:98:8d:14:b1:24: f7:d7:79:d8:1f:8b:b8:82:3b:b4:2c:64:39:78:39: 68:f7:78:b0:57:88:5c:17:15:7e:cc:9f:16:4e:de: 17:db:69:59:43:ca:4e:b0:48:65:5b:98:0c:f8:7d: 65:e5:b8:ad:26:e1:4c:9e:d8:bf:83:7b:8b:27:07: 47:b4:44:da:e6:18:8c:44:7d:70:98:24:8a:0f:ca: 9e:94:e9:79:51:c0:d4:6f:43:70:76:e0:73:ea:ad: 6e:90:ca:b3:4b:a8:be:c8:6e:4d:c0:58:ab:a7:94: 82:45:2b:57:e4:bb:ad:68:a2:12:ba:5b:1f:73:d0: 90:78:55:d3:9e:00:9a:37:02:38:a4:7b:f0:88:af: fd:fe:ef:1b:7b:26:14:7e:ba:d3:50:2b:69:c0:fd: b3:25:e2:f7:ef:9c:45:44:ff:21:d4:de:61:69:c9: 7a:b1:cb:c1:c5:7c:39:be:bd:e4:d4:47:9f:59:57: 37:ab:3f:fc:6c:31:b0:5e:81:f6:8d:1b:c1:fc:5d: a2:94:58:ed:e7:fe:5c:21:f2:42:47:1b:ea:5b:47: 53:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:D4:79:FA:BA:6B:5E:45:30:8E:28:2E:4A:A6:54:2F:41:24:97:EA X509v3 Authority Key Identifier: keyid:2B:44:C8:89:1A:AE:2B:8A:1F:DB:48:EB:F4:A5:7E:98:9A:EB:73:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0TIiRquK4of20jr9KV-mJrrc2M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:19:a0:a5:02:5f:cc:00:45:a2:47:86:b2:ce:a9:2c:0b:d2: 01:57:70:93:65:39:3d:ac:c4:24:0e:97:5e:3d:0e:ff:d5:1c: 29:27:24:8f:ab:b9:f6:b8:7c:9a:6a:e7:84:a7:03:6c:6f:97: 60:f4:5a:f2:e4:85:37:fa:d6:ef:ea:e4:4b:34:ff:59:27:66: 73:9f:3e:10:d7:a4:19:7d:66:99:92:17:05:07:9d:39:bc:2a: 4d:bd:ed:6c:ea:d8:4e:08:4f:e6:69:90:05:55:e1:08:27:62: 50:3d:9f:98:6c:63:7f:4e:91:fa:cb:8e:33:3c:5f:cb:ef:10: 51:d3:ed:91:83:67:d6:ef:18:2a:e0:d1:f9:f0:7b:b3:1b:e8: 11:dd:26:ac:99:31:a2:ef:3a:e2:55:74:b0:15:6e:e0:8e:7c: 85:c2:90:df:a1:ed:87:36:c9:50:8f:86:9d:39:e9:0f:ef:2a: 7d:8b:c8:91:a7:5c:09:3f:7f:88:fa:18:3d:96:3c:e6:33:fb: 16:0f:bc:68:32:26:f7:26:fd:ff:b8:7b:c2:5e:9e:82:29:3d: 90:60:73:f0:a2:56:65:46:63:cd:a8:66:07:51:76:5c:06:29: c8:75:ff:de:29:be:dc:2c:6e:bf:ae:64:b2:ba:f5:91:db:42: 85:16:25:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJCQkExMTAvBgNVBAUTKDJCNDRDODg5MUFBRTJCOEExRkRCNDhFQkY0QTU3RTk4 OUFFQjczNjMwHhcNMjUwNDI0MjM1NzQ3WhcNMjUwNTAxMjM1NzQ3WjAYMRYwFAYD VQQDEw02ODBhY2ZmYi0zMGRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxzzdpUnHyyOObYg8ungkdPgS8HyADvzvx74clf4+wKNzdyLPLCpBmI0UsST3 13nYH4u4gju0LGQ5eDlo93iwV4hcFxV+zJ8WTt4X22lZQ8pOsEhlW5gM+H1l5bit JuFMnti/g3uLJwdHtETa5hiMRH1wmCSKD8qelOl5UcDUb0NwduBz6q1ukMqzS6i+ yG5NwFirp5SCRStX5LutaKISulsfc9CQeFXTngCaNwI4pHvwiK/9/u8beyYUfrrT UCtpwP2zJeL375xFRP8h1N5hacl6scvBxXw5vr3k1EefWVc3qz/8bDGwXoH2jRvB /F2ilFjt5/5cIfJCRxvqW0dTWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPzUefq6 a15FMI4oLkqmVC9BJJfqMB8GA1UdIwQYMBaAFCtEyIkariuKH9tI6/Slfpia63Nj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkJCQS9GOTEzQzBCQTRD NDIxMUVDOTY2NThBMzFDNEY5QUUwMi9LMFRJaVJxdUs0b2YyMGpyOUtWLW1KcnJj Mk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0swVElpUnF1SzRvZjIwanI5S1YtbUpycmMyTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QkJCQS9GOTEzQzBCQTRDNDIxMUVDOTY2NThBMzFDNEY5QUUwMi9LMFRJaVJxdUs0 b2YyMGpyOUtWLW1KcnJjMk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATGaClAl/MAEWiR4ayzqksC9IBV3CTZTk9rMQkDpdePQ7/1RwpJySP q7n2uHyaaueEpwNsb5dg9Fry5IU3+tbv6uRLNP9ZJ2Zznz4Q16QZfWaZkhcFB505 vCpNve1s6thOCE/maZAFVeEIJ2JQPZ+YbGN/TpH6y44zPF/L7xBR0+2Rg2fW7xgq 4NH58HuzG+gR3SasmTGi7zriVXSwFW7gjnyFwpDfoe2HNslQj4adOekP7yp9i8iR p1wJP3+I+hg9ljzmM/sWD7xoMib3Jv3/uHvCXp6CKT2QYHPwolZlRmPNqGYHUXZc BinIdf/eKb7cLG6/rmSyuvWR20KFFiUr -----END CERTIFICATE-----Generated at Sat Apr 26 13:46:55 2025 by rpki-client