$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.mft File: K90xURFt6dvFXPw9LNrKWOdLGeY.mft (raw, json) Hash identifier: OHLoPF80RUIxaaS2c0KHL6pOtz+InUkkPAJtqrEHFTg= Subject key identifier: A0:0A:12:19:55:A1:B4:9C:F8:56:EC:AF:3D:53:50:94:6E:EB:26:CF Authority key identifier: 2B:DD:31:51:11:6D:E9:DB:C5:5C:FC:3D:2C:DA:CA:58:E7:4B:19:E6 Certificate issuer: /CN=A91CA815/serialNumber=2BDD3151116DE9DBC55CFC3D2CDACA58E74B19E6 Certificate serial: 348D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K90xURFt6dvFXPw9LNrKWOdLGeY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.mft Manifest number: 3482 Signing time: Thu 24 Apr 2025 14:57:17 +0000 Manifest this update: Thu 24 Apr 2025 14:57:17 +0000 Manifest next update: Thu 01 May 2025 14:57:17 +0000 Files and hashes: 1: K90xURFt6dvFXPw9LNrKWOdLGeY.crl (hash: 8toHRfUx6DT7Ste7rayQDf2+QoiEpuzWYZ16NJmogvo=) 2: E9E555FA506211EAA2BC3E2EC4F9AE02.roa (hash: 8wn1BShCqNm3QYIhzMCvnBkRSH1pV/AljqzDWjCUBxQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.crl rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K90xURFt6dvFXPw9LNrKWOdLGeY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 14:57:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13453 (0x348d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA815, serialNumber=2BDD3151116DE9DBC55CFC3D2CDACA58E74B19E6 Validity Not Before: Apr 24 14:57:17 2025 GMT Not After : May 1 14:57:17 2025 GMT Subject: CN=680a514d-f40e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:fb:43:27:40:38:be:8e:73:42:67:1a:b3:88: 92:89:05:ba:84:c7:ba:75:05:c7:d5:17:f2:bc:ab: 35:08:38:cd:0e:f9:06:b4:42:30:5b:34:a9:4a:29: be:8b:54:95:37:09:10:e9:e6:34:97:21:7a:c2:de: 09:c4:c1:3a:33:c4:53:ea:10:0f:4f:db:c2:be:b0: f9:a4:fd:71:00:47:3f:9d:01:80:d3:1b:2b:15:54: e3:32:1e:15:3b:ab:6a:d9:55:6c:8c:e2:d7:d6:db: 3e:21:83:dc:bd:c0:39:3d:12:0f:ab:98:35:0f:86: 1a:16:11:fe:48:44:7f:67:dc:c0:f8:a4:9e:e7:de: 8b:38:59:72:33:76:2c:0c:e3:6d:c8:e5:34:2a:5d: 13:13:bd:c3:3d:ed:75:fa:10:34:de:11:dd:18:67: ea:69:75:2f:93:cb:df:39:2d:ca:3b:b4:bd:12:41: 40:5f:26:85:43:22:52:72:6b:a3:a1:6f:a7:45:4a: 26:14:c6:65:81:f3:66:93:a7:4c:29:e8:0d:f1:3a: 9a:0d:2b:25:8c:55:ea:b4:4c:0c:0f:6c:43:7e:0e: f3:95:04:7f:fe:2a:f8:49:d3:8b:7c:d8:aa:f3:96: 8a:88:6d:1a:c3:e1:74:14:c4:b8:43:82:95:c7:fd: 4e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:0A:12:19:55:A1:B4:9C:F8:56:EC:AF:3D:53:50:94:6E:EB:26:CF X509v3 Authority Key Identifier: keyid:2B:DD:31:51:11:6D:E9:DB:C5:5C:FC:3D:2C:DA:CA:58:E7:4B:19:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K90xURFt6dvFXPw9LNrKWOdLGeY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:d7:9e:cb:cc:87:aa:7a:13:95:16:45:45:96:50:4a:ac:b2: 4e:6f:e9:d0:92:07:f0:72:bb:e9:7d:7d:22:37:74:cf:ed:fb: f2:cb:5c:c1:b1:83:72:e2:b0:17:38:6a:35:8f:bd:34:6f:69: bf:17:33:a0:1f:a0:8a:70:7c:49:47:e9:97:b9:22:43:4b:bf: e2:2f:e8:e9:77:57:32:51:d1:62:5a:45:bc:e0:b0:02:79:29: 3f:1d:68:52:01:f7:19:ad:e5:bc:02:33:f2:14:aa:65:17:04: f0:09:83:7a:6b:28:cc:12:5e:79:c5:80:ec:3f:78:83:5d:01: 81:86:bc:83:c4:15:a9:fa:de:dc:8f:11:ee:85:7f:89:18:8d: ed:19:16:57:de:55:cd:0c:75:f9:b0:93:9c:ae:29:85:d7:97: 37:af:f0:fc:dd:3c:a4:fb:a5:67:2b:00:c7:f4:e1:a9:af:92: da:63:65:87:a9:b8:3b:ff:81:da:61:b7:cb:ea:f8:7d:0c:40: 4c:df:fd:c4:7a:89:68:15:39:e3:28:06:35:48:f9:43:30:e8: 9a:92:76:32:74:da:5f:c8:32:47:c3:78:2f:51:be:39:61:0d: f8:18:65:65:b7:be:31:87:25:17:6a:f0:51:f2:a1:cb:43:ac: 40:13:9c:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0E4MTUxMTAvBgNVBAUTKDJCREQzMTUxMTE2REU5REJDNTVDRkMzRDJDREFDQTU4 RTc0QjE5RTYwHhcNMjUwNDI0MTQ1NzE3WhcNMjUwNTAxMTQ1NzE3WjAYMRYwFAYD VQQDEw02ODBhNTE0ZC1mNDBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6ftDJ0A4vo5zQmcas4iSiQW6hMe6dQXH1RfyvKs1CDjNDvkGtEIwWzSpSim+ i1SVNwkQ6eY0lyF6wt4JxME6M8RT6hAPT9vCvrD5pP1xAEc/nQGA0xsrFVTjMh4V O6tq2VVsjOLX1ts+IYPcvcA5PRIPq5g1D4YaFhH+SER/Z9zA+KSe596LOFlyM3Ys DONtyOU0Kl0TE73DPe11+hA03hHdGGfqaXUvk8vfOS3KO7S9EkFAXyaFQyJScmuj oW+nRUomFMZlgfNmk6dMKegN8TqaDSsljFXqtEwMD2xDfg7zlQR//ir4SdOLfNiq 85aKiG0aw+F0FMS4Q4KVx/1OfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKAKEhlV obSc+Fbsrz1TUJRu6ybPMB8GA1UdIwQYMBaAFCvdMVERbenbxVz8PSzayljnSxnm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTgxNS84RENEMUVBODFE OUIxMUUyOTFEMjg0ODkwOEIwMkNEMi9LOTB4VVJGdDZkdkZYUHc5TE5yS1dPZExH ZVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0s5MHhVUkZ0NmR2RlhQdzlMTnJLV09kTEdlWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTgxNS84RENEMUVBODFEOUIxMUUyOTFEMjg0ODkwOEIwMkNEMi9LOTB4VVJGdDZk dkZYUHc5TE5yS1dPZExHZVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDH157LzIeqehOVFkVFllBKrLJOb+nQkgfwcrvpfX0iN3TP7fvyy1zB sYNy4rAXOGo1j700b2m/FzOgH6CKcHxJR+mXuSJDS7/iL+jpd1cyUdFiWkW84LAC eSk/HWhSAfcZreW8AjPyFKplFwTwCYN6ayjMEl55xYDsP3iDXQGBhryDxBWp+t7c jxHuhX+JGI3tGRZX3lXNDHX5sJOcrimF15c3r/D83Tyk+6VnKwDH9OGpr5LaY2WH qbg7/4HaYbfL6vh9DEBM3/3EeoloFTnjKAY1SPlDMOiaknYydNpfyDJHw3gvUb45 YQ34GGVlt74xhyUXavBR8qHLQ6xAE5yg -----END CERTIFICATE-----Generated at Sat Apr 26 04:36:01 2025 by rpki-client