$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.mft File: K1N18tBgdUbVH2UR9hvEoYl0_eI.mft (raw, json) Hash identifier: yvbj5s0TPDnqUv+b5aJHzJa1DO/bRmAjwSSNMovv9VE= Subject key identifier: BC:B6:BA:F2:A0:D1:01:16:62:3F:04:53:6F:7E:7C:3B:EB:76:55:F3 Authority key identifier: 2B:53:75:F2:D0:60:75:46:D5:1F:65:11:F6:1B:C4:A1:89:74:FD:E2 Certificate issuer: /CN=A91EF19E/serialNumber=2B5375F2D0607546D51F6511F61BC4A18974FDE2 Certificate serial: 34A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1N18tBgdUbVH2UR9hvEoYl0_eI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.mft Manifest number: 3499 Signing time: Thu 24 Apr 2025 14:23:17 +0000 Manifest this update: Thu 24 Apr 2025 14:23:17 +0000 Manifest next update: Thu 01 May 2025 14:23:17 +0000 Files and hashes: 1: K1N18tBgdUbVH2UR9hvEoYl0_eI.crl (hash: acYoxRtcV16B64FLCqZJQIoyaOsahZC8XPE3rA7L/1o=) 2: FACC58F855C411E9A0FEF781C4F9AE02.roa (hash: xRVsw1KmS2w+1EDgE8BbroBgIAZxNI85/W3Lxxz+NyE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.crl rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1N18tBgdUbVH2UR9hvEoYl0_eI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 14:23:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13481 (0x34a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF19E, serialNumber=2B5375F2D0607546D51F6511F61BC4A18974FDE2 Validity Not Before: Apr 24 14:23:17 2025 GMT Not After : May 1 14:23:17 2025 GMT Subject: CN=680a4955-36a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:fa:2e:b5:72:6c:c5:1d:41:46:16:02:ba:ce: dd:ac:c9:0c:47:2d:de:c2:c9:ea:ab:51:b9:24:bc: 21:4b:bf:58:8d:bc:4a:9d:94:cc:a9:fa:11:d6:0c: 24:31:3c:94:9a:a9:44:46:04:93:cb:fa:77:9e:73: 03:67:96:80:89:ca:fc:e5:3c:b5:d1:fb:e8:72:05: cd:43:06:50:55:1e:80:19:17:b7:56:ed:f3:0d:e0: f0:48:8a:30:5e:43:32:0a:64:84:ef:2d:50:c8:2f: 74:31:2a:49:a5:12:a5:ed:ea:f9:55:b1:a8:02:3f: 37:16:2c:f6:e9:09:0a:ac:50:7a:9a:ff:a4:0c:99: ae:97:0c:4f:be:17:5f:3a:8b:0b:01:e9:4a:fd:ac: 31:94:00:74:11:69:ab:50:37:99:c7:07:84:99:48: dd:6d:9e:39:88:bf:7f:85:fb:5a:bf:d6:0a:8e:21: b5:a6:af:cc:b8:0e:62:9f:b5:2c:c3:1d:11:be:a7: bf:c1:79:18:de:d6:1a:d7:2d:b1:49:37:39:e5:4b: 96:9f:70:cb:6b:c0:31:8d:20:93:34:90:64:e0:41: a4:51:3a:30:71:3d:84:cc:d3:a4:dd:60:4f:df:d5: 5b:be:4f:34:7a:a8:b6:64:72:97:b7:ca:a7:fc:f0: 65:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:B6:BA:F2:A0:D1:01:16:62:3F:04:53:6F:7E:7C:3B:EB:76:55:F3 X509v3 Authority Key Identifier: keyid:2B:53:75:F2:D0:60:75:46:D5:1F:65:11:F6:1B:C4:A1:89:74:FD:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1N18tBgdUbVH2UR9hvEoYl0_eI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:68:58:f0:01:f9:67:a2:62:e7:3a:34:e5:99:f4:12:1c:33: 55:46:7c:f1:b2:ab:ad:07:bc:78:13:95:c9:34:3a:2c:1e:4b: de:11:75:c3:17:25:1a:f2:68:db:1d:20:31:d4:ff:64:3b:a4: 5a:b8:4b:c3:d7:20:fc:2f:de:c4:81:73:77:62:1f:8f:44:90: 2c:92:df:a7:d4:b1:c9:1e:af:e5:b0:c9:a7:2c:29:e7:95:70: e2:93:cf:ed:01:18:b7:a9:8d:c7:97:77:ac:2c:60:15:86:69: d1:da:a9:8f:00:c6:96:03:24:2d:9e:17:45:ea:ca:61:50:36: b5:0e:12:b5:cf:4b:da:63:ab:e3:49:87:38:b5:8f:4a:f0:d6: a8:e5:f8:65:72:f3:7b:b0:0d:25:1e:63:53:77:d2:65:23:75: 73:5f:e6:a4:cc:51:39:78:96:4e:e7:5b:f2:b3:09:0b:9f:6f: 5c:de:cf:42:1b:7e:de:fa:be:41:84:d1:92:a9:42:86:25:02: 46:4f:1d:24:27:4f:3f:5d:b3:d6:71:52:3c:a4:9e:c6:01:f6: 86:39:15:fe:9f:43:e9:a6:5e:12:29:2c:89:0a:1f:e7:ce:ff: c0:4b:3f:c9:53:78:b0:22:72:d2:27:c3:2c:18:7c:66:18:b8: e2:9d:ec:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYxOUUxMTAvBgNVBAUTKDJCNTM3NUYyRDA2MDc1NDZENTFGNjUxMUY2MUJDNEEx ODk3NEZERTIwHhcNMjUwNDI0MTQyMzE3WhcNMjUwNTAxMTQyMzE3WjAYMRYwFAYD VQQDEw02ODBhNDk1NS0zNmE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3voutXJsxR1BRhYCus7drMkMRy3ewsnqq1G5JLwhS79YjbxKnZTMqfoR1gwk MTyUmqlERgSTy/p3nnMDZ5aAicr85Ty10fvocgXNQwZQVR6AGRe3Vu3zDeDwSIow XkMyCmSE7y1QyC90MSpJpRKl7er5VbGoAj83Fiz26QkKrFB6mv+kDJmulwxPvhdf OosLAelK/awxlAB0EWmrUDeZxweEmUjdbZ45iL9/hftav9YKjiG1pq/MuA5in7Us wx0Rvqe/wXkY3tYa1y2xSTc55UuWn3DLa8AxjSCTNJBk4EGkUTowcT2EzNOk3WBP 39Vbvk80eqi2ZHKXt8qn/PBlEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLy2uvKg 0QEWYj8EU29+fDvrdlXzMB8GA1UdIwQYMBaAFCtTdfLQYHVG1R9lEfYbxKGJdP3i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjE5RS8wNUM0QzBBNDFE ODQxMUUyQjBDNUEzRDkwOEIwMkNEMi9LMU4xOHRCZ2RVYlZIMlVSOWh2RW9ZbDBf ZUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0sxTjE4dEJnZFViVkgyVVI5aHZFb1lsMF9lSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjE5RS8wNUM0QzBBNDFEODQxMUUyQjBDNUEzRDkwOEIwMkNEMi9LMU4xOHRCZ2RV YlZIMlVSOWh2RW9ZbDBfZUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcaFjwAflnomLnOjTlmfQSHDNVRnzxsqutB7x4E5XJNDosHkveEXXD FyUa8mjbHSAx1P9kO6RauEvD1yD8L97EgXN3Yh+PRJAskt+n1LHJHq/lsMmnLCnn lXDik8/tARi3qY3Hl3esLGAVhmnR2qmPAMaWAyQtnhdF6sphUDa1DhK1z0vaY6vj SYc4tY9K8Nao5fhlcvN7sA0lHmNTd9JlI3VzX+akzFE5eJZO51vyswkLn29c3s9C G37e+r5BhNGSqUKGJQJGTx0kJ08/XbPWcVI8pJ7GAfaGORX+n0Pppl4SKSyJCh/n zv/ASz/JU3iwInLSJ8MsGHxmGLjiney+ -----END CERTIFICATE-----Generated at Sat Apr 26 04:27:20 2025 by rpki-client