$ rpki-client -vvf rpki.apnic.net/member_repository/A9115CB5/D9FD2DFEF37F11EBB283E74AC4F9AE02/kfSTmrrtQPo2bsx2NZ3KK8tozkc.mft File: kfSTmrrtQPo2bsx2NZ3KK8tozkc.mft (raw, json) Hash identifier: /4RfK2tctUcRA1VtD67e3vgfY8CRH1OKLiT0SU4vmNU= Subject key identifier: 55:60:DC:45:22:87:35:8D:AB:E1:CC:97:16:74:ED:C4:56:7A:82:EE Authority key identifier: 91:F4:93:9A:BA:ED:40:FA:36:6E:CC:76:35:9D:CA:2B:CB:68:CE:47 Certificate issuer: /CN=A9115CB5/serialNumber=91F4939ABAED40FA366ECC76359DCA2BCB68CE47 Certificate serial: 0532 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfSTmrrtQPo2bsx2NZ3KK8tozkc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115CB5/D9FD2DFEF37F11EBB283E74AC4F9AE02/kfSTmrrtQPo2bsx2NZ3KK8tozkc.mft Manifest number: 0527 Signing time: Fri 28 Mar 2025 23:47:33 +0000 Manifest this update: Fri 28 Mar 2025 23:47:32 +0000 Manifest next update: Fri 04 Apr 2025 23:47:32 +0000 Files and hashes: 1: kfSTmrrtQPo2bsx2NZ3KK8tozkc.crl (hash: SuyzCRFE7BKsGBtOR+QKSYQyjbeWZExiSKIsYze4aeY=) 2: C41538940B4711EC99840631C4F9AE02.roa (hash: li3UtGYjrBf3C8NwlkMmtocNy8KFUcDjCj/BKLVAeWQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115CB5/D9FD2DFEF37F11EBB283E74AC4F9AE02/kfSTmrrtQPo2bsx2NZ3KK8tozkc.crl rsync://rpki.apnic.net/member_repository/A9115CB5/D9FD2DFEF37F11EBB283E74AC4F9AE02/kfSTmrrtQPo2bsx2NZ3KK8tozkc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfSTmrrtQPo2bsx2NZ3KK8tozkc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 23:47:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1330 (0x532) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115CB5 Validity Not Before: Mar 28 23:47:32 2025 GMT Not After : Apr 4 23:47:32 2025 GMT Subject: CN=67e73515-cd62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:98:7b:e1:9a:33:12:2f:a1:87:45:be:91:d9: bc:86:a8:bd:fd:19:7a:1f:15:6f:1d:27:6b:19:ca: aa:f8:8b:90:8c:d4:de:61:c1:c9:dd:0f:63:0b:1f: 70:9d:02:e8:f5:9f:1f:7a:70:20:73:ce:4c:bf:64: ef:71:bd:ad:6b:6b:e4:d4:c3:81:fb:c2:b9:5d:7f: 47:48:cd:bb:25:22:75:31:83:b9:8e:5f:7e:90:6c: 06:26:77:6a:e7:cf:fb:af:7e:0f:3d:3e:df:35:04: 94:bb:0e:56:4e:88:1e:6d:08:70:5f:a7:c7:3c:45: 76:7a:33:04:df:70:24:5e:6e:e7:20:ba:5f:a3:0d: 7b:80:4f:b7:d6:f0:a8:43:d1:0d:f0:84:89:38:a9: ff:6d:ff:8d:f3:5f:55:2d:9a:35:ca:44:a9:ce:b4: 30:bc:1a:76:96:11:d9:1e:a9:62:4d:fd:a3:4f:9b: 1a:96:7e:d0:66:82:ce:f1:7a:25:c2:a5:03:72:88: 32:d5:46:3d:86:db:4e:72:3b:31:82:06:86:9e:75: e2:55:5a:9a:91:9c:16:5e:14:36:55:77:67:28:a4: 39:f4:d8:56:67:b5:92:ea:c7:2d:16:0f:b3:85:f6: 06:b5:62:ac:1f:56:b0:86:0a:4a:10:74:36:18:27: af:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:60:DC:45:22:87:35:8D:AB:E1:CC:97:16:74:ED:C4:56:7A:82:EE X509v3 Authority Key Identifier: keyid:91:F4:93:9A:BA:ED:40:FA:36:6E:CC:76:35:9D:CA:2B:CB:68:CE:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115CB5/D9FD2DFEF37F11EBB283E74AC4F9AE02/kfSTmrrtQPo2bsx2NZ3KK8tozkc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfSTmrrtQPo2bsx2NZ3KK8tozkc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115CB5/D9FD2DFEF37F11EBB283E74AC4F9AE02/kfSTmrrtQPo2bsx2NZ3KK8tozkc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:1e:3c:bc:12:57:52:0b:e5:15:7c:99:e4:99:8c:63:1e:d5: 0d:b1:c5:03:9f:f7:7e:ee:9b:27:89:c1:26:cf:91:43:ee:ea: 18:7d:97:6b:31:60:56:4b:9e:27:55:69:66:3c:4b:09:63:35: 86:dd:7e:71:29:2a:a0:51:2d:8b:df:2d:c6:60:ec:c2:83:1f: ed:56:03:d9:31:92:03:75:91:ec:b4:e2:b5:e3:bc:3e:2e:2c: fb:34:8a:7a:26:08:6c:d4:2a:77:61:93:39:5a:9a:fa:bc:81: 09:68:4a:24:0b:c9:4a:47:46:20:56:53:2f:59:98:fd:19:6f: 00:bb:0b:3c:e1:ba:5a:7d:2d:a9:34:49:bf:77:10:a6:4f:f7: fd:67:90:6b:4d:13:6a:c8:ae:5c:65:15:b4:1a:9d:5b:44:dc: 9b:25:fd:c3:c6:d2:17:ba:4f:10:0c:15:f9:ae:48:0d:15:1a: 7d:4b:2b:21:a9:61:94:4f:91:db:b4:00:2f:ab:85:94:14:1b: 67:65:79:c2:a5:0a:de:dd:a7:7c:11:1f:6b:92:ff:2e:12:e2: 2f:a3:26:1a:0c:cb:c6:be:88:0b:b1:22:05:de:12:1f:0e:8c: 51:97:0d:85:1b:22:34:ef:5e:44:61:43:9d:8a:8a:a2:a0:4c: 35:24:75:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTVDQjUxMTAvBgNVBAUTKDkxRjQ5MzlBQkFFRDQwRkEzNjZFQ0M3NjM1OURDQTJC Q0I2OENFNDcwHhcNMjUwMzI4MjM0NzMyWhcNMjUwNDA0MjM0NzMyWjAYMRYwFAYD VQQDEw02N2U3MzUxNS1jZDYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr5h74ZozEi+hh0W+kdm8hqi9/Rl6HxVvHSdrGcqq+IuQjNTeYcHJ3Q9jCx9w nQLo9Z8fenAgc85Mv2Tvcb2ta2vk1MOB+8K5XX9HSM27JSJ1MYO5jl9+kGwGJndq 58/7r34PPT7fNQSUuw5WTogebQhwX6fHPEV2ejME33AkXm7nILpfow17gE+31vCo Q9EN8ISJOKn/bf+N819VLZo1ykSpzrQwvBp2lhHZHqliTf2jT5saln7QZoLO8Xol wqUDcogy1UY9httOcjsxggaGnnXiVVqakZwWXhQ2VXdnKKQ59NhWZ7WS6sctFg+z hfYGtWKsH1awhgpKEHQ2GCevlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFVg3EUi hzWNq+HMlxZ07cRWeoLuMB8GA1UdIwQYMBaAFJH0k5q67UD6Nm7MdjWdyivLaM5H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNUNCNS9EOUZEMkRGRUYz N0YxMUVCQjI4M0U3NEFDNEY5QUUwMi9rZlNUbXJydFFQbzJic3gyTlozS0s4dG96 a2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tmU1RtcnJ0UVBvMmJzeDJOWjNLSzh0b3prYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NUNCNS9EOUZEMkRGRUYzN0YxMUVCQjI4M0U3NEFDNEY5QUUwMi9rZlNUbXJydFFQ bzJic3gyTlozS0s4dG96a2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7Hjy8EldSC+UVfJnkmYxjHtUNscUDn/d+7psnicEmz5FD7uoYfZdr MWBWS54nVWlmPEsJYzWG3X5xKSqgUS2L3y3GYOzCgx/tVgPZMZIDdZHstOK147w+ Liz7NIp6Jghs1Cp3YZM5Wpr6vIEJaEokC8lKR0YgVlMvWZj9GW8Auws84bpafS2p NEm/dxCmT/f9Z5BrTRNqyK5cZRW0Gp1bRNybJf3DxtIXuk8QDBX5rkgNFRp9Sysh qWGUT5HbtAAvq4WUFBtnZXnCpQre3ad8ER9rkv8uEuIvoyYaDMvGvogLsSIF3hIf DoxRlw2FGyI0715EYUOdioqioEw1JHUn -----END CERTIFICATE-----Generated at Fri Apr 4 22:00:52 2025 by rpki-client