$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2875/C25DE0E6B4E811EC980C4471C4F9AE02/kNmaqNeRMUCvrp7iv-vNo3uhzSg.mft File: kNmaqNeRMUCvrp7iv-vNo3uhzSg.mft (raw, json) Hash identifier: FzNVHdEiyXKsIn2PCJSc3TwI5fToMQgf3zBEACFBVKM= Subject key identifier: 61:58:93:0E:B5:99:32:5B:39:1E:B2:E4:E5:0A:EC:17:2A:7D:BE:D7 Authority key identifier: 90:D9:9A:A8:D7:91:31:40:AF:AE:9E:E2:BF:EB:CD:A3:7B:A1:CD:28 Certificate issuer: /CN=A91C2875/serialNumber=90D99AA8D7913140AFAE9EE2BFEBCDA37BA1CD28 Certificate serial: 0350 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNmaqNeRMUCvrp7iv-vNo3uhzSg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2875/C25DE0E6B4E811EC980C4471C4F9AE02/kNmaqNeRMUCvrp7iv-vNo3uhzSg.mft Manifest number: 0348 Signing time: Fri 25 Apr 2025 00:47:41 +0000 Manifest this update: Fri 25 Apr 2025 00:47:41 +0000 Manifest next update: Fri 02 May 2025 00:47:41 +0000 Files and hashes: 1: kNmaqNeRMUCvrp7iv-vNo3uhzSg.crl (hash: T7fcXWt+4XjmDXVZK/LiCYSF4Z+/JYheBkFbkr47URc=) 2: ABB1EE64B4ED11ECBA3D016FC4F9AE02.roa (hash: KdODWWy5DaOqxG/rlhfUZW4he8HC+tvuYe4LwAo61T4=) 3: 0E9CF77EBA6811EC8058A213C4F9AE02.roa (hash: I5MvmpsL8y59IDd7Mhzk7RlviZnPSJZXIgkWIwxVqvA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2875/C25DE0E6B4E811EC980C4471C4F9AE02/kNmaqNeRMUCvrp7iv-vNo3uhzSg.crl rsync://rpki.apnic.net/member_repository/A91C2875/C25DE0E6B4E811EC980C4471C4F9AE02/kNmaqNeRMUCvrp7iv-vNo3uhzSg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNmaqNeRMUCvrp7iv-vNo3uhzSg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:47:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 848 (0x350) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2875, serialNumber=90D99AA8D7913140AFAE9EE2BFEBCDA37BA1CD28 Validity Not Before: Apr 25 00:47:41 2025 GMT Not After : May 2 00:47:41 2025 GMT Subject: CN=680adbad-b4c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c4:29:70:a1:6e:db:4d:f0:8e:4b:fa:96:a4: ad:65:cf:7f:54:77:0d:54:09:1e:aa:2f:a3:c1:d0: 19:2b:d6:f9:e0:60:df:c7:14:04:ea:13:a7:e9:e0: ce:7c:ef:12:63:18:bd:e2:24:d3:55:1f:8c:20:cc: 1f:2e:dc:6d:7f:8b:59:2a:4d:d4:df:b4:81:32:f0: db:83:06:2c:3d:3f:07:b0:d6:8c:c0:8a:fd:73:c8: 54:97:6d:88:40:48:b5:73:80:b6:98:b6:96:e8:4c: 9c:7e:82:6a:79:ad:ae:3a:b9:61:28:81:f2:ec:96: 2e:4a:e0:23:dd:8a:36:f8:ba:83:0d:6a:17:8a:65: fb:1d:12:97:93:30:a4:b7:20:77:c9:92:ad:d3:7d: c8:70:33:09:60:d8:b7:64:65:b1:8b:83:4b:ac:73: 57:54:9e:4b:bf:3d:d4:0e:c1:6a:af:78:10:4c:e7: 9c:dd:ac:58:a9:3f:56:b1:6e:58:be:ef:fc:87:c8: 89:d3:eb:ba:2f:71:b2:ea:72:99:09:e1:7e:e4:17: 99:c3:ee:ca:c2:e9:ce:92:c7:ea:c0:32:bb:22:92: 37:b6:b7:de:91:be:5c:7c:36:d2:af:e7:85:27:06: 74:45:a1:6c:13:68:54:a4:9d:6f:0e:0a:e0:23:74: cf:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:58:93:0E:B5:99:32:5B:39:1E:B2:E4:E5:0A:EC:17:2A:7D:BE:D7 X509v3 Authority Key Identifier: keyid:90:D9:9A:A8:D7:91:31:40:AF:AE:9E:E2:BF:EB:CD:A3:7B:A1:CD:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2875/C25DE0E6B4E811EC980C4471C4F9AE02/kNmaqNeRMUCvrp7iv-vNo3uhzSg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNmaqNeRMUCvrp7iv-vNo3uhzSg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2875/C25DE0E6B4E811EC980C4471C4F9AE02/kNmaqNeRMUCvrp7iv-vNo3uhzSg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:8b:c6:3c:b8:35:07:f6:ea:16:a7:06:17:4e:6a:d2:b6:ad: 59:8b:23:77:5f:19:99:53:95:2d:b5:9f:d7:33:42:c6:07:22: f5:01:30:1c:8e:7b:88:fe:59:36:72:d3:db:d6:b4:93:1f:e2: 1d:2e:0d:7c:96:4b:7b:d0:9f:76:51:d8:06:da:6a:4e:62:6d: 63:df:ac:24:ca:62:28:27:56:00:76:c8:30:3c:49:fc:e4:c0: d8:17:6d:b6:50:a1:e4:a3:91:d7:e4:67:ff:41:92:af:87:9a: 98:19:e3:78:74:6a:74:8c:51:cc:15:47:0e:05:da:19:4b:b3: d8:0c:23:68:83:a5:e6:fe:19:46:ca:27:3d:c4:3f:e4:b1:b5: c5:01:1a:df:8b:4d:49:ae:9b:06:c9:8b:b0:14:fe:fa:d6:4d: 77:ce:93:ac:2b:7d:c2:ad:01:00:0d:ae:71:da:79:38:a1:a5: cd:d5:7d:13:a8:d3:87:76:53:f8:65:f8:a7:71:3a:57:8e:e1: e8:11:2e:ab:49:8b:6b:eb:2f:23:3c:0f:ea:c7:13:50:bb:c6: 73:a7:6d:91:d6:0f:ab:54:db:82:1f:9a:3d:b6:55:65:88:12: 9b:15:5d:08:f9:6e:d2:c1:67:ef:f3:77:6d:9c:c4:bb:ff:70: c2:5b:0c:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzI4NzUxMTAvBgNVBAUTKDkwRDk5QUE4RDc5MTMxNDBBRkFFOUVFMkJGRUJDREEz N0JBMUNEMjgwHhcNMjUwNDI1MDA0NzQxWhcNMjUwNTAyMDA0NzQxWjAYMRYwFAYD VQQDEw02ODBhZGJhZC1iNGM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0sQpcKFu203wjkv6lqStZc9/VHcNVAkeqi+jwdAZK9b54GDfxxQE6hOn6eDO fO8SYxi94iTTVR+MIMwfLtxtf4tZKk3U37SBMvDbgwYsPT8HsNaMwIr9c8hUl22I QEi1c4C2mLaW6EycfoJqea2uOrlhKIHy7JYuSuAj3Yo2+LqDDWoXimX7HRKXkzCk tyB3yZKt033IcDMJYNi3ZGWxi4NLrHNXVJ5Lvz3UDsFqr3gQTOec3axYqT9WsW5Y vu/8h8iJ0+u6L3Gy6nKZCeF+5BeZw+7KwunOksfqwDK7IpI3trfekb5cfDbSr+eF JwZ0RaFsE2hUpJ1vDgrgI3TPzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGFYkw61 mTJbOR6y5OUK7Bcqfb7XMB8GA1UdIwQYMBaAFJDZmqjXkTFAr66e4r/rzaN7oc0o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjg3NS9DMjVERTBFNkI0 RTgxMUVDOTgwQzQ0NzFDNEY5QUUwMi9rTm1hcU5lUk1VQ3ZycDdpdi12Tm8zdWh6 U2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tObWFxTmVSTVVDdnJwN2l2LXZObzN1aHpTZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Mjg3NS9DMjVERTBFNkI0RTgxMUVDOTgwQzQ0NzFDNEY5QUUwMi9rTm1hcU5lUk1V Q3ZycDdpdi12Tm8zdWh6U2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSi8Y8uDUH9uoWpwYXTmrStq1ZiyN3XxmZU5UttZ/XM0LGByL1ATAc jnuI/lk2ctPb1rSTH+IdLg18lkt70J92UdgG2mpOYm1j36wkymIoJ1YAdsgwPEn8 5MDYF222UKHko5HX5Gf/QZKvh5qYGeN4dGp0jFHMFUcOBdoZS7PYDCNog6Xm/hlG yic9xD/ksbXFARrfi01JrpsGyYuwFP761k13zpOsK33CrQEADa5x2nk4oaXN1X0T qNOHdlP4ZfincTpXjuHoES6rSYtr6y8jPA/qxxNQu8Zzp22R1g+rVNuCH5o9tlVl iBKbFV0I+W7SwWfv83dtnMS7/3DCWwyT -----END CERTIFICATE-----Generated at Sat Apr 26 05:20:55 2025 by rpki-client