$ rpki-client -vvf rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.mft File: kpW_omLgV8ybyCF13K40eslspJE.mft (raw, json) Hash identifier: CjsAohQMfugHAIDhvlzYfQv1s0QBbH5F87wDuHfNMkA= Subject key identifier: 45:99:B3:9B:F8:94:7D:62:90:12:5C:B2:2C:3F:3D:14:8A:0F:72:11 Authority key identifier: 92:95:BF:A2:62:E0:57:CC:9B:C8:21:75:DC:AE:34:7A:C9:6C:A4:91 Certificate issuer: /CN=A91154E1/serialNumber=9295BFA262E057CC9BC82175DCAE347AC96CA491 Certificate serial: 09ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpW_omLgV8ybyCF13K40eslspJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.mft Manifest number: 09E7 Signing time: Fri 04 Apr 2025 20:03:14 +0000 Manifest this update: Fri 04 Apr 2025 20:03:13 +0000 Manifest next update: Fri 11 Apr 2025 20:03:13 +0000 Files and hashes: 1: kpW_omLgV8ybyCF13K40eslspJE.crl (hash: eJrirRXuxVwq1BG/OlLhhrmjyYXZflBzmdrx0i/fMxA=) 2: FA6E4ECC755B11EAA7D9532EC4F9AE02.roa (hash: 8FzeKBFXv99yFqvBAS0u3OPnou1QCr+Lbmbr/8Rb56w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.crl rsync://rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpW_omLgV8ybyCF13K40eslspJE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 20:03:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2541 (0x9ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91154E1 Validity Not Before: Apr 4 20:03:13 2025 GMT Not After : Apr 11 20:03:13 2025 GMT Subject: CN=67f03b02-36c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:25:24:ba:25:f3:44:6a:26:0d:cc:40:ae:24: e5:5c:2e:96:61:6a:5a:0a:0a:10:fe:28:ff:0b:f8: 26:6e:51:ee:32:22:22:cd:57:ae:06:44:2e:80:db: 57:d4:c6:c9:55:53:8f:21:5c:2b:96:b6:a5:a1:34: c8:45:47:23:b5:25:95:57:a7:05:df:47:37:58:04: 73:a9:ed:8f:b2:b5:7a:c2:45:d4:f6:72:94:05:88: ca:40:87:6a:59:35:d9:7b:4d:99:34:27:58:de:fd: 57:5f:a8:10:fb:86:53:b9:e6:2d:9a:aa:16:e3:73: 85:a2:31:6f:a6:ba:ce:0f:a0:a3:0f:20:c4:84:b2: 1e:3a:02:c2:dd:dd:ee:be:20:e5:ec:91:37:f6:b1: 58:a0:e3:de:51:c0:e7:5d:81:df:82:4c:87:67:bd: f8:e1:19:53:18:8a:24:aa:5c:d3:72:f9:9c:5d:d4: a3:30:48:ea:05:e0:2e:db:4b:38:9c:57:b7:70:52: 74:de:e2:b8:9f:a6:f9:36:82:d5:4b:34:37:92:5b: 07:9e:ee:6d:b6:3f:d1:00:7d:47:b7:d9:62:ed:2f: 94:42:1b:31:47:ab:1a:ad:4c:2a:64:17:31:06:24: 07:1c:96:19:bc:e7:f1:3d:40:d0:f1:ca:b0:38:05: 2f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:99:B3:9B:F8:94:7D:62:90:12:5C:B2:2C:3F:3D:14:8A:0F:72:11 X509v3 Authority Key Identifier: keyid:92:95:BF:A2:62:E0:57:CC:9B:C8:21:75:DC:AE:34:7A:C9:6C:A4:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpW_omLgV8ybyCF13K40eslspJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:20:0b:8c:12:ad:cd:c6:71:20:3b:de:26:f6:fd:9b:ab:2c: c9:72:16:2c:6a:80:48:58:74:46:15:c5:53:cc:bc:d2:f6:f2: 86:86:e5:cb:b4:eb:cc:43:3c:36:6e:bd:4b:fc:2b:f0:a6:80: 94:fe:0a:29:57:47:92:db:e4:e0:a8:a3:ee:6b:0c:85:14:6b: 9c:0f:54:43:59:83:be:d8:d4:ab:5d:02:6d:fc:4b:97:08:53: b6:eb:fc:f1:77:fe:67:ba:2f:0a:52:b6:60:13:22:db:83:0f: 1f:37:67:c0:bc:23:56:38:b9:44:8d:91:96:b2:b4:e2:06:0e: 57:46:02:b5:5f:d6:ec:24:c5:b9:f6:d0:7e:a4:ac:09:9e:1e: e1:83:e9:50:3e:bd:10:01:b4:c9:9e:27:99:60:94:f3:ff:52: 72:b0:55:90:f2:97:b3:e7:dd:5a:21:d8:3b:ba:1f:37:b1:53: 12:60:a1:d4:75:3a:ae:4f:88:34:a5:87:2f:b1:d2:04:5e:aa: 0b:57:44:a2:c0:96:28:7b:e6:26:b5:75:88:34:d5:ec:04:c3: 7e:99:a4:3a:66:a7:57:47:ec:df:0f:09:8e:d5:0a:8e:b4:c7: 8b:09:07:d3:f6:b0:12:65:79:43:d8:a5:60:ac:79:29:a4:76: 56:01:ab:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCe0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTU0RTExMTAvBgNVBAUTKDkyOTVCRkEyNjJFMDU3Q0M5QkM4MjE3NURDQUUzNDdB Qzk2Q0E0OTEwHhcNMjUwNDA0MjAwMzEzWhcNMjUwNDExMjAwMzEzWjAYMRYwFAYD VQQDEw02N2YwM2IwMi0zNmM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1CUkuiXzRGomDcxAriTlXC6WYWpaCgoQ/ij/C/gmblHuMiIizVeuBkQugNtX 1MbJVVOPIVwrlraloTTIRUcjtSWVV6cF30c3WARzqe2PsrV6wkXU9nKUBYjKQIdq WTXZe02ZNCdY3v1XX6gQ+4ZTueYtmqoW43OFojFvprrOD6CjDyDEhLIeOgLC3d3u viDl7JE39rFYoOPeUcDnXYHfgkyHZ7344RlTGIokqlzTcvmcXdSjMEjqBeAu20s4 nFe3cFJ03uK4n6b5NoLVSzQ3klsHnu5ttj/RAH1Ht9li7S+UQhsxR6sarUwqZBcx BiQHHJYZvOfxPUDQ8cqwOAUv9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEWZs5v4 lH1ikBJcsiw/PRSKD3IRMB8GA1UdIwQYMBaAFJKVv6Ji4FfMm8ghddyuNHrJbKSR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTRFMS80QTBDQjZGODc1 NDMxMUVBQTc1NzExNjBDNEY5QUUwMi9rcFdfb21MZ1Y4eWJ5Q0YxM0s0MGVzbHNw SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2twV19vbUxnVjh5YnlDRjEzSzQwZXNsc3BKRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NTRFMS80QTBDQjZGODc1NDMxMUVBQTc1NzExNjBDNEY5QUUwMi9rcFdfb21MZ1Y4 eWJ5Q0YxM0s0MGVzbHNwSkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGIAuMEq3NxnEgO94m9v2bqyzJchYsaoBIWHRGFcVTzLzS9vKGhuXL tOvMQzw2br1L/CvwpoCU/gopV0eS2+TgqKPuawyFFGucD1RDWYO+2NSrXQJt/EuX CFO26/zxd/5nui8KUrZgEyLbgw8fN2fAvCNWOLlEjZGWsrTiBg5XRgK1X9bsJMW5 9tB+pKwJnh7hg+lQPr0QAbTJnieZYJTz/1JysFWQ8pez591aIdg7uh83sVMSYKHU dTquT4g0pYcvsdIEXqoLV0SiwJYoe+YmtXWINNXsBMN+maQ6ZqdXR+zfDwmO1QqO tMeLCQfT9rASZXlD2KVgrHkppHZWAauy -----END CERTIFICATE-----Generated at Sun Apr 6 02:44:24 2025 by rpki-client