$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.mft File: KLpuaH8fvYM7mhOq2MFCrY-vvKg.mft (raw, json) Hash identifier: XdMCGoa0No5EPJCW8j3gOlgI8t/feiQE9FaT5Qvbkc0= Subject key identifier: 3B:B6:4E:F9:DC:19:2C:B0:A1:54:E8:46:98:08:38:90:50:97:59:C3 Authority key identifier: 28:BA:6E:68:7F:1F:BD:83:3B:9A:13:AA:D8:C1:42:AD:8F:AF:BC:A8 Certificate issuer: /CN=A91ED469/serialNumber=28BA6E687F1FBD833B9A13AAD8C142AD8FAFBCA8 Certificate serial: 0106 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KLpuaH8fvYM7mhOq2MFCrY-vvKg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.mft Manifest number: 0102 Signing time: Fri 25 Apr 2025 04:12:26 +0000 Manifest this update: Fri 25 Apr 2025 04:12:25 +0000 Manifest next update: Fri 02 May 2025 04:12:25 +0000 Files and hashes: 1: KLpuaH8fvYM7mhOq2MFCrY-vvKg.crl (hash: PjezDf/9uNFrk6IliBGPwCJWw8rlhoc/nMceg7CPL4M=) 2: F259393A9CC211EEA3A14563C4F9AE02.roa (hash: H8jOBdWZy3BflOdKi2IUHX/jDGy3Qp76HCrr86p/kow=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.crl rsync://rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KLpuaH8fvYM7mhOq2MFCrY-vvKg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:12:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 262 (0x106) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED469, serialNumber=28BA6E687F1FBD833B9A13AAD8C142AD8FAFBCA8 Validity Not Before: Apr 25 04:12:25 2025 GMT Not After : May 2 04:12:25 2025 GMT Subject: CN=680b0baa-4347 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:1f:ea:58:c3:11:ed:c3:f1:27:53:1b:c2:d7: 68:91:e9:b1:b7:58:6c:06:3c:75:74:3d:a6:cf:51: bf:f8:86:77:69:0b:0a:53:a1:c1:3b:d6:c1:f7:bb: e1:a0:26:2c:df:00:c6:4c:92:67:0a:e2:bf:a1:81: c5:af:8d:1c:a3:be:32:85:18:62:9f:64:98:7f:88: 92:28:34:94:ba:9e:32:c4:e0:92:02:eb:ec:44:02: 20:46:ec:e3:83:99:05:5f:6e:19:b5:8f:5e:b0:0b: 84:83:e0:64:b7:8e:95:68:04:aa:d1:a9:0c:31:0a: d3:76:aa:e7:92:e8:dc:08:ce:1b:4f:7d:f0:2b:bf: e3:a6:2b:12:4f:8d:70:e9:40:f4:ff:71:6a:74:a9: fe:a1:bc:e7:c2:55:18:77:b0:0e:65:1d:72:46:04: 8f:51:2c:7f:bf:e7:22:45:41:a2:74:0c:48:44:04: 92:cf:57:1a:90:95:8b:46:53:b0:db:85:96:27:e2: 91:91:5c:4e:71:56:16:64:6a:35:ca:80:91:4d:4c: fb:94:16:6c:bc:79:22:72:a4:d6:7f:bf:4b:cf:52: 1e:68:10:7b:67:e3:6f:a3:3c:cb:c7:27:a1:50:43: d7:15:ce:c7:04:7b:f6:97:ad:6e:88:b7:ea:4d:79: e9:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:B6:4E:F9:DC:19:2C:B0:A1:54:E8:46:98:08:38:90:50:97:59:C3 X509v3 Authority Key Identifier: keyid:28:BA:6E:68:7F:1F:BD:83:3B:9A:13:AA:D8:C1:42:AD:8F:AF:BC:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KLpuaH8fvYM7mhOq2MFCrY-vvKg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:7e:c0:95:8e:3f:15:2e:7f:43:15:a8:1f:d3:0c:cd:81:bb: c6:b6:ac:ef:3c:e0:14:60:b1:dd:f6:27:a4:be:27:cd:af:4b: b4:59:b3:23:b9:e4:12:63:e6:8b:4a:f7:4a:e0:b9:54:80:55: d7:ca:38:65:98:51:fc:02:24:42:0c:36:cd:7c:ad:bc:8a:c5: d6:de:86:b5:1f:87:7f:26:89:4b:cb:e3:b6:63:da:fb:7e:92: 1d:7a:2a:40:f7:c8:29:6c:06:98:09:4d:58:c6:b3:90:5b:74: 94:7a:dd:3c:f3:c4:c7:66:18:fc:b8:69:31:f8:9c:50:05:2d: ee:66:6a:f7:1d:5b:3f:6d:f1:d5:d2:c4:99:d1:22:f2:ab:a6: f5:c1:5f:d1:67:ba:42:7a:ce:66:7f:13:4c:1b:f0:80:a9:d8: dc:dc:d6:f6:38:06:d7:f2:2d:1e:06:8b:53:23:d3:5f:d0:76: 51:e5:81:53:dc:14:79:40:4a:6b:30:69:fc:8e:96:b3:4f:19: 2c:d6:9c:23:ad:a1:4a:87:ec:53:14:30:4b:c8:43:b3:8b:29: bc:9e:11:ca:2c:0c:84:02:a9:fb:fa:2b:60:ac:36:50:01:ef: 0c:66:e1:d8:de:ef:44:11:6b:47:d5:d8:21:ac:f4:72:6f:8c: 0b:fb:ac:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQ0NjkxMTAvBgNVBAUTKDI4QkE2RTY4N0YxRkJEODMzQjlBMTNBQUQ4QzE0MkFE OEZBRkJDQTgwHhcNMjUwNDI1MDQxMjI1WhcNMjUwNTAyMDQxMjI1WjAYMRYwFAYD VQQDEw02ODBiMGJhYS00MzQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4x/qWMMR7cPxJ1Mbwtdokemxt1hsBjx1dD2mz1G/+IZ3aQsKU6HBO9bB97vh oCYs3wDGTJJnCuK/oYHFr40co74yhRhin2SYf4iSKDSUup4yxOCSAuvsRAIgRuzj g5kFX24ZtY9esAuEg+Bkt46VaASq0akMMQrTdqrnkujcCM4bT33wK7/jpisST41w 6UD0/3FqdKn+obznwlUYd7AOZR1yRgSPUSx/v+ciRUGidAxIRASSz1cakJWLRlOw 24WWJ+KRkVxOcVYWZGo1yoCRTUz7lBZsvHkicqTWf79Lz1IeaBB7Z+NvozzLxyeh UEPXFc7HBHv2l61uiLfqTXnprQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDu2Tvnc GSywoVToRpgIOJBQl1nDMB8GA1UdIwQYMBaAFCi6bmh/H72DO5oTqtjBQq2Pr7yo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDQ2OS85N0RFN0E3RTlD QzIxMUVFQjMwMkUwNjFDNEY5QUUwMi9LTHB1YUg4ZnZZTTdtaE9xMk1GQ3JZLXZ2 S2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tMcHVhSDhmdllNN21oT3EyTUZDclktdnZLZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDQ2OS85N0RFN0E3RTlDQzIxMUVFQjMwMkUwNjFDNEY5QUUwMi9LTHB1YUg4ZnZZ TTdtaE9xMk1GQ3JZLXZ2S2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhfsCVjj8VLn9DFagf0wzNgbvGtqzvPOAUYLHd9iekvifNr0u0WbMj ueQSY+aLSvdK4LlUgFXXyjhlmFH8AiRCDDbNfK28isXW3oa1H4d/JolLy+O2Y9r7 fpIdeipA98gpbAaYCU1YxrOQW3SUet0888THZhj8uGkx+JxQBS3uZmr3HVs/bfHV 0sSZ0SLyq6b1wV/RZ7pCes5mfxNMG/CAqdjc3Nb2OAbX8i0eBotTI9Nf0HZR5YFT 3BR5QEprMGn8jpazTxks1pwjraFKh+xTFDBLyEOziym8nhHKLAyEAqn7+itgrDZQ Ae8MZuHY3u9EEWtH1dghrPRyb4wL+6wq -----END CERTIFICATE-----Generated at Sat Apr 26 13:03:34 2025 by rpki-client