$ rpki-client -vvf rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/KsCrS187tbDveb0hpknK_-f5wgo.mft File: KsCrS187tbDveb0hpknK_-f5wgo.mft (raw, json) Hash identifier: 8QMu7qDA70snKOAMkEsrRdIKWESIIcOKn4Pg/FSXn0s= Subject key identifier: 58:1D:D4:94:80:57:9A:76:99:5C:A8:43:66:5C:72:69:21:35:2D:6B Authority key identifier: 2A:C0:AB:4B:5F:3B:B5:B0:EF:79:BD:21:A6:49:CA:FF:E7:F9:C2:0A Certificate issuer: /CN=A91B927E/serialNumber=2AC0AB4B5F3BB5B0EF79BD21A649CAFFE7F9C20A Certificate serial: 06EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsCrS187tbDveb0hpknK_-f5wgo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/KsCrS187tbDveb0hpknK_-f5wgo.mft Manifest number: 1108 Signing time: Thu 24 Apr 2025 19:39:27 +0000 Manifest this update: Thu 24 Apr 2025 19:39:27 +0000 Manifest next update: Thu 01 May 2025 19:39:27 +0000 Files and hashes: 1: KsCrS187tbDveb0hpknK_-f5wgo.crl (hash: c0jIVdPfduVXZNFoI9Oct4K7G6VT9GafrPUhLjXAyRk=) 2: 6243075E653411EB98060C17C4F9AE02.roa (hash: NDLfyb46b0G5U2WbOhSmMW5qTZe1rxLw2rEopJT9V6w=) 3: 37868F90574711EBB6BA4183C4F9AE02.roa (hash: lo283iVsMsLHbJbz5lAswnspLjcjQrX9MFqmCe7E2UU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/KsCrS187tbDveb0hpknK_-f5wgo.crl rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/KsCrS187tbDveb0hpknK_-f5wgo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsCrS187tbDveb0hpknK_-f5wgo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:39:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1774 (0x6ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B927E, serialNumber=2AC0AB4B5F3BB5B0EF79BD21A649CAFFE7F9C20A Validity Not Before: Apr 24 19:39:27 2025 GMT Not After : May 1 19:39:27 2025 GMT Subject: CN=680a936f-b2c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:46:19:39:6e:33:6b:aa:e9:59:21:e4:42:5a: 0b:42:a1:3a:c6:99:73:3f:4e:85:83:2f:40:84:76: a5:b1:22:3d:8c:3d:73:75:d5:ca:f5:88:c0:da:01: e4:d2:84:0e:ab:21:b4:18:91:bd:e0:f8:34:16:cf: 19:46:00:4f:c3:af:b2:b8:c0:4b:45:19:12:3e:0e: b8:e8:ca:23:ea:17:f3:96:4b:37:90:c9:07:c2:81: 80:f4:cc:2f:c9:66:09:1f:35:19:32:87:b9:5e:79: de:df:17:e4:f1:2b:6d:95:65:b8:38:c7:2a:84:24: 55:e6:5d:b1:66:a7:3a:f3:23:80:7a:e0:c0:fa:9f: c1:68:f5:dc:3b:5a:c5:87:e3:eb:d8:33:a7:46:3f: bf:36:18:1c:5c:d8:90:5d:68:a0:eb:63:65:17:ce: 67:2b:76:ef:f0:ba:1b:64:85:82:2a:fd:fc:8b:95: 94:48:13:85:55:e1:01:a4:1f:41:74:f3:e1:d9:74: 75:e3:a2:5f:47:38:6f:e3:cc:d2:3f:d5:88:fe:a1: 9b:2a:aa:34:92:d0:62:e4:58:fd:ff:72:51:83:7c: 61:58:53:a1:fe:71:b5:7c:be:c8:38:80:6e:42:3c: ea:c9:69:f7:3e:5c:74:93:43:aa:b8:84:50:60:05: 6a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:1D:D4:94:80:57:9A:76:99:5C:A8:43:66:5C:72:69:21:35:2D:6B X509v3 Authority Key Identifier: keyid:2A:C0:AB:4B:5F:3B:B5:B0:EF:79:BD:21:A6:49:CA:FF:E7:F9:C2:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/KsCrS187tbDveb0hpknK_-f5wgo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsCrS187tbDveb0hpknK_-f5wgo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/KsCrS187tbDveb0hpknK_-f5wgo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:4b:d1:d6:7a:2a:40:c7:42:4e:96:e2:84:ae:9e:d7:5b:6b: 78:c6:dc:5c:9a:a8:fb:8f:15:0e:17:77:91:2c:70:46:da:19: 9e:c9:d6:fa:0c:fc:ac:98:29:fd:85:d5:1d:a3:d3:1f:f7:73: bb:a8:82:09:43:3a:cc:2e:27:68:5b:f4:b5:1e:cc:46:a3:61: 15:71:d3:49:f3:18:c6:bd:18:8c:00:db:bf:87:3e:17:fc:1d: 5d:b7:32:f6:cd:fa:4d:7f:28:0d:7d:7e:f1:ba:a3:d2:4a:0e: 44:89:b8:82:c7:14:b2:4d:3f:35:87:5e:65:82:2e:ef:09:17: 6f:45:fd:fc:76:f5:d6:e4:bf:0c:9f:05:67:d9:aa:49:d1:1b: 66:24:a7:38:02:6b:41:7a:1f:6f:42:bf:d7:84:85:8b:57:94: 7c:aa:9a:c8:3a:81:87:54:12:6c:91:32:51:4b:45:83:f9:17: 1c:01:6d:3d:9b:73:1d:1a:39:5b:8f:18:50:fd:09:45:a5:0a: 4d:9d:e9:91:97:f3:3c:1d:ad:78:8f:2a:8f:a9:54:33:c5:10: d7:ac:93:0b:98:ff:e4:81:91:53:bc:34:bb:f8:86:b8:c1:59: d0:71:97:05:61:3d:c0:1e:9b:70:2b:4d:60:85:26:6f:32:f8: 8c:fc:b1:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBu4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkyN0UxMTAvBgNVBAUTKDJBQzBBQjRCNUYzQkI1QjBFRjc5QkQyMUE2NDlDQUZG RTdGOUMyMEEwHhcNMjUwNDI0MTkzOTI3WhcNMjUwNTAxMTkzOTI3WjAYMRYwFAYD VQQDEw02ODBhOTM2Zi1iMmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArUYZOW4za6rpWSHkQloLQqE6xplzP06Fgy9AhHalsSI9jD1zddXK9YjA2gHk 0oQOqyG0GJG94Pg0Fs8ZRgBPw6+yuMBLRRkSPg646Moj6hfzlks3kMkHwoGA9Mwv yWYJHzUZMoe5Xnne3xfk8SttlWW4OMcqhCRV5l2xZqc68yOAeuDA+p/BaPXcO1rF h+Pr2DOnRj+/NhgcXNiQXWig62NlF85nK3bv8LobZIWCKv38i5WUSBOFVeEBpB9B dPPh2XR146JfRzhv48zSP9WI/qGbKqo0ktBi5Fj9/3JRg3xhWFOh/nG1fL7IOIBu QjzqyWn3Plx0k0OquIRQYAVqDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFgd1JSA V5p2mVyoQ2ZccmkhNS1rMB8GA1UdIwQYMBaAFCrAq0tfO7Ww73m9IaZJyv/n+cIK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTI3RS9DQ0Q2RUQxQzY4 REYxMUVBOTdCMTU1MjRDNEY5QUUwMi9Lc0NyUzE4N3RiRHZlYjBocGtuS18tZjV3 Z28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tzQ3JTMTg3dGJEdmViMGhwa25LXy1mNXdnby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTI3RS9DQ0Q2RUQxQzY4REYxMUVBOTdCMTU1MjRDNEY5QUUwMi9Lc0NyUzE4N3Ri RHZlYjBocGtuS18tZjV3Z28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpS9HWeipAx0JOluKErp7XW2t4xtxcmqj7jxUOF3eRLHBG2hmeydb6 DPysmCn9hdUdo9Mf93O7qIIJQzrMLidoW/S1HsxGo2EVcdNJ8xjGvRiMANu/hz4X /B1dtzL2zfpNfygNfX7xuqPSSg5EibiCxxSyTT81h15lgi7vCRdvRf38dvXW5L8M nwVn2apJ0RtmJKc4AmtBeh9vQr/XhIWLV5R8qprIOoGHVBJskTJRS0WD+RccAW09 m3MdGjlbjxhQ/QlFpQpNnemRl/M8Ha14jyqPqVQzxRDXrJMLmP/kgZFTvDS7+Ia4 wVnQcZcFYT3AHptwK01ghSZvMviM/LH9 -----END CERTIFICATE-----Generated at Sat Apr 26 07:06:37 2025 by rpki-client