$ rpki-client -vvf rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft File: kbx5rhXMrqROT-eEX7_KY-f6654.mft (raw, json) Hash identifier: I8htSae1rWvC+EWjOxlPm0y4E1VdVXgWDtdG9J3pGaY= Subject key identifier: 2B:7C:5B:E1:9D:E2:22:A7:CE:72:DC:00:84:C2:1A:00:98:8B:13:B8 Authority key identifier: 91:BC:79:AE:15:CC:AE:A4:4E:4F:E7:84:5F:BF:CA:63:E7:FA:EB:9E Certificate issuer: /CN=A9194335/serialNumber=91BC79AE15CCAEA44E4FE7845FBFCA63E7FAEB9E Certificate serial: 0FE5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kbx5rhXMrqROT-eEX7_KY-f6654.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft Manifest number: 0FC9 Signing time: Thu 24 Apr 2025 17:29:43 +0000 Manifest this update: Thu 24 Apr 2025 17:29:43 +0000 Manifest next update: Thu 01 May 2025 17:29:43 +0000 Files and hashes: 1: kbx5rhXMrqROT-eEX7_KY-f6654.crl (hash: yjmf4lhkYQINj17bMuznJNEbCGZ3tJSW16s5645jq/A=) 2: 30BF32F2C28C11EAB764BF4CC4F9AE02.roa (hash: 91GhAMmVYDOKIaPlZtLbS9DCeqxqN11XLz4AvQ01ZCY=) 3: 122F83AAC4AD11EA9E35F20AC4F9AE02.roa (hash: aCjyEapN5RNEdBx43BF8hSE5Js6g7kyTOXpzPyF+n3k=) 4: 13C01CC0C4AD11EA9E35F20AC4F9AE02.roa (hash: fOkeLT2T9sGexymAbtOvzE9kd8mH2xk9Q29zH8sz1Bw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.crl rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kbx5rhXMrqROT-eEX7_KY-f6654.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:29:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4069 (0xfe5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194335, serialNumber=91BC79AE15CCAEA44E4FE7845FBFCA63E7FAEB9E Validity Not Before: Apr 24 17:29:43 2025 GMT Not After : May 1 17:29:43 2025 GMT Subject: CN=680a7507-f06d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:03:e1:9a:58:b4:fb:e9:d7:cf:2a:6e:b9:ef: 57:c7:ee:9f:0b:06:1b:1d:4a:09:4b:c0:e5:a6:d0: bc:71:be:95:1e:01:49:54:b3:f1:b7:a0:79:4d:4c: 44:49:4d:ff:5b:57:67:de:e3:57:5f:75:5a:8e:70: 1e:6e:5c:f6:3e:9b:e0:6f:da:a2:88:45:40:ea:c3: e2:ff:3c:a7:46:a2:b7:f9:40:ea:fc:a3:8b:67:d0: c2:92:39:0a:36:58:cb:b8:64:d7:51:4c:33:09:3b: d1:ac:30:52:54:fa:4c:7d:bc:61:5c:4c:32:a8:4b: 9e:c9:b5:6b:3e:51:74:a7:77:a6:ae:89:3a:54:75: 00:39:22:16:7a:be:4b:dd:47:ee:4f:89:42:43:a0: d1:5d:98:98:59:38:c6:aa:c3:45:55:a8:1e:76:af: cb:a3:95:5d:8f:90:9d:a5:0f:ad:b1:96:74:de:66: 6e:e8:85:82:0b:af:48:24:64:6b:57:d9:96:17:ca: 8c:63:e4:8f:ce:e2:48:65:33:f2:4c:c3:aa:b5:20: 93:d4:ba:db:40:9b:5d:9a:0e:ea:34:da:46:ed:44: ab:d9:02:b2:e2:cf:37:45:55:f2:45:a3:4d:9a:47: de:25:98:d2:8e:4a:95:90:6f:a5:1a:a7:a0:50:2c: e0:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:7C:5B:E1:9D:E2:22:A7:CE:72:DC:00:84:C2:1A:00:98:8B:13:B8 X509v3 Authority Key Identifier: keyid:91:BC:79:AE:15:CC:AE:A4:4E:4F:E7:84:5F:BF:CA:63:E7:FA:EB:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kbx5rhXMrqROT-eEX7_KY-f6654.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:62:29:19:32:25:ab:59:0b:b0:72:4d:29:d2:b9:b0:e7:3b: c9:58:bd:4f:fd:44:35:28:9f:6d:de:2f:6b:11:a2:75:e4:10: 47:e1:00:e7:dc:8a:b1:02:85:60:a5:67:b9:85:58:c7:92:14: cf:04:e5:b0:c9:51:23:bf:16:56:cd:b1:8e:68:cc:e6:98:0a: a2:fb:7a:b3:b1:76:54:4c:76:2f:57:70:0b:cf:fa:c6:15:e4: 8f:3d:c8:15:ea:57:48:d2:6a:ab:99:9b:b0:56:22:2f:b1:8b: a3:24:4d:70:eb:60:b5:f4:2d:c1:7b:dd:51:0d:ca:6a:3e:d3: 6a:a1:03:28:05:82:08:b0:46:3a:af:ea:21:ba:15:34:e6:a4: cd:ad:c8:00:b9:5f:00:d1:c0:1c:05:bc:d8:2a:21:a5:e0:6a: bd:9c:16:35:0f:a6:45:d4:28:41:0e:c2:fa:a8:d3:0c:af:31: a7:ee:e2:bf:b3:e6:86:53:7f:ee:4a:93:3e:9b:10:80:f4:a4: 6e:53:54:92:24:aa:7e:d6:ba:df:a9:00:dd:72:0c:2e:68:e6: de:3b:9b:11:e2:bb:20:c8:e2:33:12:e4:a6:59:50:25:73:9f: 0a:86:7e:c1:8d:d6:66:46:f5:7a:6a:c7:5f:44:39:38:74:58: 93:cb:97:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD+UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQzMzUxMTAvBgNVBAUTKDkxQkM3OUFFMTVDQ0FFQTQ0RTRGRTc4NDVGQkZDQTYz RTdGQUVCOUUwHhcNMjUwNDI0MTcyOTQzWhcNMjUwNTAxMTcyOTQzWjAYMRYwFAYD VQQDEw02ODBhNzUwNy1mMDZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxAPhmli0++nXzypuue9Xx+6fCwYbHUoJS8DlptC8cb6VHgFJVLPxt6B5TUxE SU3/W1dn3uNXX3VajnAeblz2Ppvgb9qiiEVA6sPi/zynRqK3+UDq/KOLZ9DCkjkK NljLuGTXUUwzCTvRrDBSVPpMfbxhXEwyqEueybVrPlF0p3emrok6VHUAOSIWer5L 3UfuT4lCQ6DRXZiYWTjGqsNFVagedq/Lo5Vdj5CdpQ+tsZZ03mZu6IWCC69IJGRr V9mWF8qMY+SPzuJIZTPyTMOqtSCT1LrbQJtdmg7qNNpG7USr2QKy4s83RVXyRaNN mkfeJZjSjkqVkG+lGqegUCzgVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCt8W+Gd 4iKnznLcAITCGgCYixO4MB8GA1UdIwQYMBaAFJG8ea4VzK6kTk/nhF+/ymPn+uue MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDMzNS8zNDJEMjIyODUx RDExMUU5QUYxRkY3M0NDNEY5QUUwMi9rYng1cmhYTXJxUk9ULWVFWDdfS1ktZjY2 NTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tieDVyaFhNcnFST1QtZUVYN19LWS1mNjY1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDMzNS8zNDJEMjIyODUxRDExMUU5QUYxRkY3M0NDNEY5QUUwMi9rYng1cmhYTXJx Uk9ULWVFWDdfS1ktZjY2NTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWYikZMiWrWQuwck0p0rmw5zvJWL1P/UQ1KJ9t3i9rEaJ15BBH4QDn 3IqxAoVgpWe5hVjHkhTPBOWwyVEjvxZWzbGOaMzmmAqi+3qzsXZUTHYvV3ALz/rG FeSPPcgV6ldI0mqrmZuwViIvsYujJE1w62C19C3Be91RDcpqPtNqoQMoBYIIsEY6 r+ohuhU05qTNrcgAuV8A0cAcBbzYKiGl4Gq9nBY1D6ZF1ChBDsL6qNMMrzGn7uK/ s+aGU3/uSpM+mxCA9KRuU1SSJKp+1rrfqQDdcgwuaObeO5sR4rsgyOIzEuSmWVAl c58Khn7BjdZmRvV6asdfRDk4dFiTy5ch -----END CERTIFICATE-----Generated at Sat Apr 26 05:07:02 2025 by rpki-client