$ rpki-client -vvf rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.mft File: kw3fQQEGkDvrmRnJm94BY4cGVa4.mft (raw, json) Hash identifier: P2wdVW4/xe4mueXY/zuoeUlkvG+OPEZ5QRM9wzvsWSE= Subject key identifier: C1:D4:73:32:30:9D:7F:53:E0:C9:A4:46:41:19:32:7A:76:24:0D:04 Authority key identifier: 93:0D:DF:41:01:06:90:3B:EB:99:19:C9:9B:DE:01:63:87:06:55:AE Certificate issuer: /CN=A9198553/serialNumber=930DDF410106903BEB9919C99BDE0163870655AE Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kw3fQQEGkDvrmRnJm94BY4cGVa4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.mft Manifest number: 39 Signing time: Fri 25 Apr 2025 06:35:46 +0000 Manifest this update: Fri 25 Apr 2025 06:35:45 +0000 Manifest next update: Fri 02 May 2025 06:35:45 +0000 Files and hashes: 1: kw3fQQEGkDvrmRnJm94BY4cGVa4.crl (hash: AYQ3/fTmwS9Pe0w4ZSK9kXg50jikPvBVqdfKwlHGebA=) 2: 5042D03ED2EF11EFBA610425C4F9AE02.roa (hash: Td45KF7s5KJjDmYTPbjMG6cwXZMtoTfhOtwsLcRRVB4=) 3: B56BC994E18A11EF94F99968C4F9AE02.roa (hash: gzNobaLbEvK3FJ3mC0CiPYdWO820L9Sv8IKQdUKftFE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.crl rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kw3fQQEGkDvrmRnJm94BY4cGVa4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:35:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198553, serialNumber=930DDF410106903BEB9919C99BDE0163870655AE Validity Not Before: Apr 25 06:35:45 2025 GMT Not After : May 2 06:35:45 2025 GMT Subject: CN=680b2d41-dfb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:37:aa:65:2d:56:2d:31:c8:b7:fd:86:d1:8c: 94:68:40:81:bd:1b:1a:03:13:b6:65:9f:2b:b7:8c: 70:17:82:00:40:98:5e:78:2e:d7:3a:e6:24:70:5b: 62:68:26:aa:17:b1:af:e9:e7:76:8d:c4:d5:91:10: 9c:02:00:80:77:8a:ed:00:d1:7d:05:a8:a4:7a:fe: 59:11:aa:d2:63:1e:16:06:73:88:99:6c:69:ec:20: 22:26:ce:a8:a3:58:5f:ec:bc:4c:86:d0:ef:a3:4d: 4e:fb:fb:ff:8e:28:3a:5e:a9:a8:ef:4f:71:f0:25: 8e:4f:d5:ea:2f:2a:1c:43:e8:f0:1e:1e:0d:3a:10: 33:22:0f:88:70:6a:f8:15:d5:e9:2e:5b:57:c7:79: 1d:0b:8c:13:b3:8d:ee:7a:4d:b3:c4:16:71:cb:1e: 1a:7b:85:f4:05:cd:b2:94:37:d0:ef:fe:ae:54:ef: da:a4:e4:7b:91:fe:ed:31:fd:b5:a7:5e:d5:2b:37: 90:36:73:1f:69:b8:2c:63:88:d9:dc:85:0f:37:3b: 9a:38:9b:35:16:4b:6f:08:b8:a6:a3:4e:4e:58:fc: 9f:03:18:19:5b:84:8e:72:c7:96:a3:8c:ad:0c:18: 7c:d4:0c:49:36:ee:9d:15:68:68:b3:0d:c9:91:35: 19:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:D4:73:32:30:9D:7F:53:E0:C9:A4:46:41:19:32:7A:76:24:0D:04 X509v3 Authority Key Identifier: keyid:93:0D:DF:41:01:06:90:3B:EB:99:19:C9:9B:DE:01:63:87:06:55:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kw3fQQEGkDvrmRnJm94BY4cGVa4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:99:3c:30:4e:88:d2:64:96:73:5a:13:c6:59:bf:c6:f8:b6: 62:29:08:b7:07:b1:9c:d8:82:6d:17:08:1d:57:f0:4c:8e:95: ef:bb:0b:9f:ee:45:5c:02:c0:64:d4:9b:37:bb:48:92:f9:0e: 81:6e:ff:45:a7:54:9d:24:e0:ce:da:da:28:a1:10:45:37:6b: 45:ca:39:1c:fd:27:fd:d2:4a:51:d1:fb:9a:c2:73:d3:04:03: 91:bc:83:4d:eb:7d:9d:54:b4:62:12:b2:18:69:07:78:48:2f: 60:b7:a4:24:ed:4c:65:fe:99:87:36:e2:43:d0:67:22:8a:f0: cb:24:92:61:53:77:b3:3a:f0:81:86:38:a3:f7:38:1e:a1:6d: e1:ed:13:d0:ef:a2:53:1b:84:ba:40:5b:98:53:4e:96:69:c5: f4:40:67:41:2e:57:cc:ec:48:92:f0:f8:72:f2:58:a8:1c:70: 16:ec:9b:6c:a1:7e:31:3a:71:a4:ba:6e:29:60:22:24:27:c3: 1f:cc:7a:55:76:ac:76:23:e2:e9:fd:a9:b8:dc:a8:28:78:61: a4:6a:41:12:72:db:86:2e:78:f9:59:a0:4e:b1:91:9a:8f:ac: 11:a4:9c:29:01:e5:5f:b7:13:73:83:c3:81:53:00:f7:81:30: 04:7f:79:2a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 ODU1MzExMC8GA1UEBRMoOTMwRERGNDEwMTA2OTAzQkVCOTkxOUM5OUJERTAxNjM4 NzA2NTVBRTAeFw0yNTA0MjUwNjM1NDVaFw0yNTA1MDIwNjM1NDVaMBgxFjAUBgNV BAMTDTY4MGIyZDQxLWRmYjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCfN6plLVYtMci3/YbRjJRoQIG9GxoDE7Zlnyu3jHAXggBAmF54Ltc65iRwW2Jo JqoXsa/p53aNxNWREJwCAIB3iu0A0X0FqKR6/lkRqtJjHhYGc4iZbGnsICImzqij WF/svEyG0O+jTU77+/+OKDpeqajvT3HwJY5P1eovKhxD6PAeHg06EDMiD4hwavgV 1ekuW1fHeR0LjBOzje56TbPEFnHLHhp7hfQFzbKUN9Dv/q5U79qk5HuR/u0x/bWn XtUrN5A2cx9puCxjiNnchQ83O5o4mzUWS28IuKajTk5Y/J8DGBlbhI5yx5ajjK0M GHzUDEk27p0VaGizDcmRNRlHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwdRzMjCd f1PgyaRGQRkyenYkDQQwHwYDVR0jBBgwFoAUkw3fQQEGkDvrmRnJm94BY4cGVa4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4NTUzL0E1OUJGRkU0RDJF RDExRUY4REVFNTEyMEM0RjlBRTAyL2t3M2ZRUUVHa0R2cm1SbkptOTRCWTRjR1Zh NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIva3czZlFRRUdrRHZybVJuSm05NEJZNGNHVmE0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4 NTUzL0E1OUJGRkU0RDJFRDExRUY4REVFNTEyMEM0RjlBRTAyL2t3M2ZRUUVHa0R2 cm1SbkptOTRCWTRjR1ZhNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFqZPDBOiNJklnNaE8ZZv8b4tmIpCLcHsZzYgm0XCB1X8EyOle+7C5/u RVwCwGTUmze7SJL5DoFu/0WnVJ0k4M7a2iihEEU3a0XKORz9J/3SSlHR+5rCc9ME A5G8g03rfZ1UtGISshhpB3hIL2C3pCTtTGX+mYc24kPQZyKK8MskkmFTd7M68IGG OKP3OB6hbeHtE9DvolMbhLpAW5hTTpZpxfRAZ0EuV8zsSJLw+HLyWKgccBbsm2yh fjE6caS6bilgIiQnwx/MelV2rHYj4un9qbjcqCh4YaRqQRJy24YuePlZoE6xkZqP rBGknCkB5V+3E3ODw4FTAPeBMAR/eSo= -----END CERTIFICATE-----Generated at Sat Apr 26 17:09:02 2025 by rpki-client