$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.mft File: KMruhJZWnFc8PlsYkMWhs0z8jjA.mft (raw, json) Hash identifier: J2kaor9ptacjDUp/uctndGwtOLFfamVtQEwlIKZIV0U= Subject key identifier: F7:BC:C7:60:8C:5B:B9:72:A1:8A:88:01:A1:59:DF:EA:3E:2A:8C:D1 Authority key identifier: 28:CA:EE:84:96:56:9C:57:3C:3E:5B:18:90:C5:A1:B3:4C:FC:8E:30 Certificate issuer: /CN=A91E4EF6/serialNumber=28CAEE8496569C573C3E5B1890C5A1B34CFC8E30 Certificate serial: 06DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMruhJZWnFc8PlsYkMWhs0z8jjA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.mft Manifest number: 1123 Signing time: Thu 24 Apr 2025 19:33:12 +0000 Manifest this update: Thu 24 Apr 2025 19:33:12 +0000 Manifest next update: Thu 01 May 2025 19:33:12 +0000 Files and hashes: 1: KMruhJZWnFc8PlsYkMWhs0z8jjA.crl (hash: r6Xp7KEtVyWHddKLPH/u/kp/0ripIK2dWuMxCVD5C9k=) 2: 377B6620506B11EBAD849641C4F9AE02.roa (hash: kG/awft1YnlMUcGo/TLCAbm8s2p3POH5kub747SVbDc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.crl rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMruhJZWnFc8PlsYkMWhs0z8jjA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:33:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1754 (0x6da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4EF6, serialNumber=28CAEE8496569C573C3E5B1890C5A1B34CFC8E30 Validity Not Before: Apr 24 19:33:12 2025 GMT Not After : May 1 19:33:12 2025 GMT Subject: CN=680a91f8-3b6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a8:04:0f:da:f4:d3:59:21:5e:62:a7:1b:9f: 41:92:8a:16:11:ca:ca:ce:7e:5c:0b:79:b3:c1:88: a1:f9:cb:98:6d:6a:f3:3f:93:25:83:21:8b:c9:12: 6f:12:4c:8a:6a:b9:f0:33:23:ed:60:d4:cf:a3:cf: 5b:39:da:9d:31:28:26:b1:c4:e7:5b:f1:c1:d5:2f: 29:39:6b:24:c8:a6:97:7e:91:79:28:90:25:a8:02: 15:6b:35:b9:d0:61:0a:ad:e0:f7:22:e5:35:10:6c: be:94:bc:92:dc:0b:c2:cb:a7:fc:c4:00:0d:84:a5: 8e:8e:0a:a1:18:d6:dc:5c:b4:89:bd:70:e9:3a:f8: 96:ec:45:ef:f6:be:ab:94:f9:60:55:d0:99:52:27: b2:fa:83:f5:31:41:a5:c4:c8:87:aa:d2:c9:90:c4: d6:9e:ba:8d:13:b6:e4:e8:ac:50:67:10:3b:75:33: 62:82:53:20:3f:98:3c:20:28:e3:28:4c:7a:0b:a6: b6:dc:07:22:ef:6b:4c:ba:e8:7a:ad:2d:9b:80:2c: a8:31:5e:b7:0c:3e:e8:f7:3b:ee:58:31:c9:a9:59: ba:65:f2:1c:ff:5e:f6:6b:a6:80:45:df:fb:03:5b: 0d:c5:86:df:f2:d0:d6:7d:8d:bc:c1:ec:46:bb:7d: 48:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:BC:C7:60:8C:5B:B9:72:A1:8A:88:01:A1:59:DF:EA:3E:2A:8C:D1 X509v3 Authority Key Identifier: keyid:28:CA:EE:84:96:56:9C:57:3C:3E:5B:18:90:C5:A1:B3:4C:FC:8E:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMruhJZWnFc8PlsYkMWhs0z8jjA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:45:0e:55:77:1b:95:24:b6:b9:57:e1:90:27:04:47:98:81: 3b:07:2c:7c:90:86:ee:36:9d:7c:76:d1:8a:e5:6f:3b:33:45: 3c:e1:81:a4:34:ac:b1:7d:2c:f3:22:23:70:3a:fd:6e:3f:fe: 8e:e7:79:e9:c1:ed:8c:7f:2a:31:9b:ff:76:89:b5:1e:d4:a5: a7:3d:da:b8:ef:ce:81:cd:d3:ac:82:18:4e:27:60:59:07:d8: 92:bf:7e:03:b6:be:94:bb:1a:a6:7d:eb:15:69:b5:22:f7:d0: 21:da:76:72:69:54:0a:10:eb:c3:2e:33:3a:91:2d:14:a0:d5: 8d:ff:db:d7:d9:58:6c:8b:4a:ff:9c:d4:35:e1:4f:84:91:f8: e7:bf:a6:06:0a:9d:c1:88:c4:e8:44:11:46:4b:75:49:b9:d8: 87:cb:56:ec:a8:ee:21:7e:05:3a:72:ef:90:c1:08:5c:e7:49: 49:ec:eb:0f:00:8c:59:4a:4d:1f:1e:b2:d3:f0:49:d2:c3:2e: ea:0a:ed:e9:a5:b9:cf:9d:51:77:0e:3a:55:96:bf:03:1b:71: 1c:21:7d:2a:e5:38:cc:61:a9:68:18:5b:b8:d9:7c:ad:c6:fb: 01:88:f7:f7:66:bf:db:7a:03:39:dd:a9:33:5d:5e:6b:df:78: 49:b7:28:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRFRjYxMTAvBgNVBAUTKDI4Q0FFRTg0OTY1NjlDNTczQzNFNUIxODkwQzVBMUIz NENGQzhFMzAwHhcNMjUwNDI0MTkzMzEyWhcNMjUwNTAxMTkzMzEyWjAYMRYwFAYD VQQDEw02ODBhOTFmOC0zYjZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxKgED9r001khXmKnG59BkooWEcrKzn5cC3mzwYih+cuYbWrzP5MlgyGLyRJv EkyKarnwMyPtYNTPo89bOdqdMSgmscTnW/HB1S8pOWskyKaXfpF5KJAlqAIVazW5 0GEKreD3IuU1EGy+lLyS3AvCy6f8xAANhKWOjgqhGNbcXLSJvXDpOviW7EXv9r6r lPlgVdCZUiey+oP1MUGlxMiHqtLJkMTWnrqNE7bk6KxQZxA7dTNiglMgP5g8ICjj KEx6C6a23Aci72tMuuh6rS2bgCyoMV63DD7o9zvuWDHJqVm6ZfIc/172a6aARd/7 A1sNxYbf8tDWfY28wexGu31IkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPe8x2CM W7lyoYqIAaFZ3+o+KozRMB8GA1UdIwQYMBaAFCjK7oSWVpxXPD5bGJDFobNM/I4w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEVGNi85MzgwMDc4RTYx RDYxMUVBQjhEMDE1NUJDNEY5QUUwMi9LTXJ1aEpaV25GYzhQbHNZa01XaHMwejhq akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tNcnVoSlpXbkZjOFBsc1lrTVdoczB6OGpqQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEVGNi85MzgwMDc4RTYxRDYxMUVBQjhEMDE1NUJDNEY5QUUwMi9LTXJ1aEpaV25G YzhQbHNZa01XaHMwejhqakEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlRQ5VdxuVJLa5V+GQJwRHmIE7Byx8kIbuNp18dtGK5W87M0U84YGk NKyxfSzzIiNwOv1uP/6O53npwe2Mfyoxm/92ibUe1KWnPdq4786BzdOsghhOJ2BZ B9iSv34Dtr6UuxqmfesVabUi99Ah2nZyaVQKEOvDLjM6kS0UoNWN/9vX2Vhsi0r/ nNQ14U+Ekfjnv6YGCp3BiMToRBFGS3VJudiHy1bsqO4hfgU6cu+QwQhc50lJ7OsP AIxZSk0fHrLT8EnSwy7qCu3ppbnPnVF3DjpVlr8DG3EcIX0q5TjMYaloGFu42Xyt xvsBiPf3Zr/begM53akzXV5r33hJtyju -----END CERTIFICATE-----Generated at Sat Apr 26 04:32:31 2025 by rpki-client