$ rpki-client -vvf rpki.apnic.net/member_repository/A919AAA0/228396BA95F411EBB31B8F66C4F9AE02/KtUm39nH6QyjDDH8pOGCUBtwB1M.mft File: KtUm39nH6QyjDDH8pOGCUBtwB1M.mft (raw, json) Hash identifier: 2V5xpU46dWixZkrFqNZqomT+3tgZNRbelUbqHNxCgHU= Subject key identifier: B9:B4:78:C6:53:A2:75:FC:7F:5B:28:5B:12:EF:94:6D:9D:A0:3E:2E Authority key identifier: 2A:D5:26:DF:D9:C7:E9:0C:A3:0C:31:FC:A4:E1:82:50:1B:70:07:53 Certificate issuer: /CN=A919AAA0/serialNumber=2AD526DFD9C7E90CA30C31FCA4E182501B700753 Certificate serial: 064A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KtUm39nH6QyjDDH8pOGCUBtwB1M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919AAA0/228396BA95F411EBB31B8F66C4F9AE02/KtUm39nH6QyjDDH8pOGCUBtwB1M.mft Manifest number: 062E Signing time: Sat 26 Apr 2025 22:24:33 +0000 Manifest this update: Sat 26 Apr 2025 22:24:33 +0000 Manifest next update: Sat 03 May 2025 22:24:33 +0000 Files and hashes: 1: KtUm39nH6QyjDDH8pOGCUBtwB1M.crl (hash: 56GBD4+TGQtZvH5S04VJx6g0dwu4L8npVeGVeAaxwKU=) 2: 4092F17AE64811EFA0F37560C4F9AE02.roa (hash: MuDOs+UNP3qWV7q9sz+FoRMoZ33SC0+8rektpH4Ht5s=) 3: 698130FEE60411EFA2DC3057C4F9AE02.roa (hash: Vt5tMPro7Yd+AkFJe3Cnn+BsDTWCkJWM0XoIlmggi2I=) 4: 5C75E87C95F511EBA6D31767C4F9AE02.roa (hash: lfQZb+Cu5k1P9aIBAVZr1VIcUuyX72bxEGl/rtrTc0A=) 5: 176E1D3E961411EB80BD4E1DC4F9AE02.roa (hash: guMsQztHXJe0nHYo+3sRzxnbrPq9rNiGro7Edp8V/SQ=) 6: 6CFB0FFCF65711EB8988A924C4F9AE02.roa (hash: 0e9NIIe4Eh6DQ3FvIOOg4nTVMnHbYlzq1N/yU/4pzQY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919AAA0/228396BA95F411EBB31B8F66C4F9AE02/KtUm39nH6QyjDDH8pOGCUBtwB1M.crl rsync://rpki.apnic.net/member_repository/A919AAA0/228396BA95F411EBB31B8F66C4F9AE02/KtUm39nH6QyjDDH8pOGCUBtwB1M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KtUm39nH6QyjDDH8pOGCUBtwB1M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 22:24:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1610 (0x64a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919AAA0, serialNumber=2AD526DFD9C7E90CA30C31FCA4E182501B700753 Validity Not Before: Apr 26 22:24:33 2025 GMT Not After : May 3 22:24:33 2025 GMT Subject: CN=680d5d21-12e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:68:70:12:5a:a9:68:0c:6f:f4:27:08:4e:c5: ba:19:0d:49:a2:10:2c:a7:7f:96:44:0f:cd:dd:c6: cb:69:37:d7:5a:f3:2b:08:90:e4:54:39:2d:72:b1: f6:49:a9:ac:d7:9e:54:2d:48:51:3e:7c:88:42:eb: 5f:16:16:a9:9b:1b:ac:e7:7d:db:50:76:2d:c6:45: 93:4f:91:14:f1:6a:37:dc:d6:a2:19:10:5d:58:33: f5:ae:d0:21:bf:67:33:a2:7f:b0:bf:7c:95:56:0e: 2a:d0:7a:3e:8d:12:4a:35:69:28:3a:9b:07:33:9d: de:5f:80:5a:cf:d3:94:94:45:ca:f2:a9:13:a6:e3: 56:db:e5:d1:75:3a:cd:aa:40:01:fc:02:1e:fe:f3: 4a:76:27:aa:f3:43:08:c9:6a:3b:c0:8b:6b:77:e7: 20:5f:bd:c5:68:1d:43:62:2e:3d:62:af:fa:69:5c: ea:94:f7:e2:a6:27:bc:dd:c4:c2:bf:86:0b:df:60: 06:2b:56:d8:63:3b:ee:0b:94:67:b1:39:1c:e4:65: e7:46:e4:37:4b:91:05:13:98:7b:5e:57:40:a9:da: fa:11:82:92:d1:b1:bf:0b:29:aa:72:62:8d:41:7f: 74:19:3b:11:3e:9c:04:18:73:34:a5:00:f7:2e:ca: 53:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:B4:78:C6:53:A2:75:FC:7F:5B:28:5B:12:EF:94:6D:9D:A0:3E:2E X509v3 Authority Key Identifier: keyid:2A:D5:26:DF:D9:C7:E9:0C:A3:0C:31:FC:A4:E1:82:50:1B:70:07:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919AAA0/228396BA95F411EBB31B8F66C4F9AE02/KtUm39nH6QyjDDH8pOGCUBtwB1M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KtUm39nH6QyjDDH8pOGCUBtwB1M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AAA0/228396BA95F411EBB31B8F66C4F9AE02/KtUm39nH6QyjDDH8pOGCUBtwB1M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:13:6c:eb:19:c9:f5:65:33:04:c5:cd:a5:6c:23:43:f2:53: 79:5a:c3:d8:00:88:9e:4d:f7:12:77:dc:f4:09:91:d2:cb:01: d8:16:04:58:ba:23:83:85:be:61:85:91:e1:22:14:42:1c:a8: 55:dc:c7:f0:7e:bb:6a:67:a2:45:07:bc:5e:f0:85:10:2e:fe: 07:ca:05:cb:43:98:aa:bd:62:fa:bb:10:82:ce:ca:88:a6:e0: 45:a1:14:2c:60:4f:11:b8:d8:b7:2f:1e:49:8f:0e:23:2b:81: 36:2a:f3:1f:1d:61:77:28:ec:01:9e:b3:cd:36:45:b9:f0:04: 97:2c:94:0d:c7:1c:47:b7:8c:cf:df:d6:a2:f3:d1:04:be:ff: 4e:9d:ad:9a:ca:35:f9:ce:0a:44:83:94:ea:e1:79:ce:51:77: 9d:ef:ef:1e:d6:13:c5:df:da:7e:7a:ff:22:2a:76:36:aa:e1: 0d:66:d1:1e:a7:64:78:cf:a0:78:28:a9:e5:44:2a:bb:1e:ab: 88:26:d0:0f:a3:da:ec:b7:51:0e:11:64:1d:d9:85:9f:65:44: 41:98:06:f2:72:b2:0b:a4:62:e0:31:1d:c7:a1:57:2e:f6:a9: 29:55:47:8b:21:50:4f:f4:1c:e3:37:8e:c0:82:b9:43:89:33: dd:79:3e:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUFBQTAxMTAvBgNVBAUTKDJBRDUyNkRGRDlDN0U5MENBMzBDMzFGQ0E0RTE4MjUw MUI3MDA3NTMwHhcNMjUwNDI2MjIyNDMzWhcNMjUwNTAzMjIyNDMzWjAYMRYwFAYD VQQDEw02ODBkNWQyMS0xMmU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAomhwElqpaAxv9CcITsW6GQ1JohAsp3+WRA/N3cbLaTfXWvMrCJDkVDktcrH2 Sams155ULUhRPnyIQutfFhapmxus533bUHYtxkWTT5EU8Wo33NaiGRBdWDP1rtAh v2czon+wv3yVVg4q0Ho+jRJKNWkoOpsHM53eX4Baz9OUlEXK8qkTpuNW2+XRdTrN qkAB/AIe/vNKdieq80MIyWo7wItrd+cgX73FaB1DYi49Yq/6aVzqlPfipie83cTC v4YL32AGK1bYYzvuC5RnsTkc5GXnRuQ3S5EFE5h7XldAqdr6EYKS0bG/CymqcmKN QX90GTsRPpwEGHM0pQD3LspTxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLm0eMZT onX8f1soWxLvlG2doD4uMB8GA1UdIwQYMBaAFCrVJt/Zx+kMowwx/KThglAbcAdT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QUFBMC8yMjgzOTZCQTk1 RjQxMUVCQjMxQjhGNjZDNEY5QUUwMi9LdFVtMzluSDZReWpEREg4cE9HQ1VCdHdC MU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0t0VW0zOW5INlF5akRESDhwT0dDVUJ0d0IxTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QUFBMC8yMjgzOTZCQTk1RjQxMUVCQjMxQjhGNjZDNEY5QUUwMi9LdFVtMzluSDZR eWpEREg4cE9HQ1VCdHdCMU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJE2zrGcn1ZTMExc2lbCND8lN5WsPYAIieTfcSd9z0CZHSywHYFgRY uiODhb5hhZHhIhRCHKhV3MfwfrtqZ6JFB7xe8IUQLv4HygXLQ5iqvWL6uxCCzsqI puBFoRQsYE8RuNi3Lx5Jjw4jK4E2KvMfHWF3KOwBnrPNNkW58ASXLJQNxxxHt4zP 39ai89EEvv9Ona2ayjX5zgpEg5Tq4XnOUXed7+8e1hPF39p+ev8iKnY2quENZtEe p2R4z6B4KKnlRCq7HquIJtAPo9rst1EOEWQd2YWfZURBmAbycrILpGLgMR3HoVcu 9qkpVUeLIVBP9BzjN47AgrlDiTPdeT78 -----END CERTIFICATE-----Generated at Mon Apr 28 05:20:13 2025 by rpki-client