$ rpki-client -vvf rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.mft File: kPaA_KfJMP0f3FM2dTha6Q-0FnI.mft (raw, json) Hash identifier: L01pN3oV8/Usx6RCYH7CndRT31b9wc8Hz/14pm1I7SE= Subject key identifier: 9C:5C:95:E7:85:70:1B:08:AC:0A:9E:79:8B:8D:25:0A:A2:A4:B3:E1 Authority key identifier: 90:F6:80:FC:A7:C9:30:FD:1F:DC:53:36:75:38:5A:E9:0F:B4:16:72 Certificate issuer: /CN=A91248C9/serialNumber=90F680FCA7C930FD1FDC533675385AE90FB41672 Certificate serial: 0116 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kPaA_KfJMP0f3FM2dTha6Q-0FnI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.mft Manifest number: 0114 Signing time: Wed 09 Apr 2025 03:48:09 +0000 Manifest this update: Wed 09 Apr 2025 03:48:08 +0000 Manifest next update: Wed 16 Apr 2025 03:48:08 +0000 Files and hashes: 1: kPaA_KfJMP0f3FM2dTha6Q-0FnI.crl (hash: AuoL9CA5xvEpxSbSbXg8abfIBaMt+0Z4IUNAKqg2ec0=) 2: 4B3C43EA6EF011EE84DC9B0EC4F9AE02.roa (hash: fKu+QnI9JJSs0/0qC7wtQtv1o9IdD9KvcLGhg+7rRMo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.crl rsync://rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kPaA_KfJMP0f3FM2dTha6Q-0FnI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 03:48:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 278 (0x116) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91248C9 Validity Not Before: Apr 9 03:48:08 2025 GMT Not After : Apr 16 03:48:08 2025 GMT Subject: CN=67f5edf8-a517 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b7:36:e3:e4:6d:6a:64:f9:f7:8a:5f:61:a1: 47:27:86:51:e5:b8:97:73:30:2e:f3:d0:ed:e9:33: a9:f1:3d:86:f9:2e:1b:d7:6a:57:9c:31:95:a8:ac: 2e:a6:0a:3f:76:34:34:38:d0:cb:70:69:1e:8e:39: 07:7e:11:df:8c:fa:d4:09:88:0a:32:2e:f0:bc:10: 6b:9e:11:d5:2d:66:af:4e:b9:9c:a3:d8:88:a7:ea: 79:6a:4e:c7:16:5d:0c:31:8f:3f:3f:81:8d:05:f3: 75:95:78:5f:24:25:68:d6:1a:2f:52:08:c1:c4:2e: 6e:b7:b4:25:d0:19:bb:95:5b:0b:df:24:ac:54:22: b1:e0:f9:96:a0:52:4d:26:1f:3b:0b:a8:a4:64:c9: 5c:d6:94:4d:72:89:d8:88:ce:e5:e1:ae:98:fa:49: 9d:e9:5a:c4:18:d9:57:3c:5b:92:07:e6:a2:24:03: b1:70:a3:76:ce:e5:ce:ac:a3:89:fd:62:c9:fd:64: 28:ee:5f:a7:e7:10:90:fa:72:d0:3b:f0:26:c1:f7: ce:a8:98:4b:c3:79:91:8b:75:ee:03:b3:e5:4e:f3: a7:d5:b2:2a:7d:2d:d8:e8:a4:20:5c:bc:06:18:26: d3:d6:6c:11:c5:06:dc:e1:ce:37:07:09:f6:2b:73: 2a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:5C:95:E7:85:70:1B:08:AC:0A:9E:79:8B:8D:25:0A:A2:A4:B3:E1 X509v3 Authority Key Identifier: keyid:90:F6:80:FC:A7:C9:30:FD:1F:DC:53:36:75:38:5A:E9:0F:B4:16:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kPaA_KfJMP0f3FM2dTha6Q-0FnI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:93:15:85:80:90:95:fe:88:f5:45:ba:12:f5:6f:76:83:1e: bc:19:92:33:0d:d4:bc:7f:5e:3a:cf:15:e2:a2:71:5d:75:07: a2:07:bf:f9:f6:bd:c0:c8:4d:6d:25:f1:88:f4:db:39:ff:78: ff:a2:83:13:70:00:22:86:8c:d7:c8:53:64:66:c4:12:29:9c: 4b:ba:e2:b4:23:94:07:12:5a:7e:58:ab:46:e0:4c:fe:45:56: b9:a6:73:5a:b5:f1:5a:1c:ca:1a:f1:e9:36:53:1b:78:39:2f: 51:88:c6:ef:6a:04:5d:ce:aa:24:57:ef:a0:51:83:07:f4:7a: e5:12:14:3a:e4:e0:9c:a9:0d:56:6e:0a:fc:31:11:2c:a7:75: bd:74:e3:6b:76:a1:0b:45:10:16:11:76:98:19:13:5e:83:3f: 4d:87:c3:24:5e:9b:15:75:13:09:08:0f:c5:ff:51:f3:68:77: ef:4d:70:1f:21:59:ff:ce:ba:d2:16:68:38:df:84:f6:54:3c: 7a:5c:6e:c5:4b:d0:f0:8c:f2:69:94:54:67:19:08:b4:d8:90: c1:14:50:0f:e0:d7:ce:7d:bb:7c:4c:4d:19:65:a8:65:a7:9f: b8:27:66:75:ba:22:f2:d4:88:36:6f:c7:d0:d1:10:65:bf:93: 6d:c2:a6:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQ4QzkxMTAvBgNVBAUTKDkwRjY4MEZDQTdDOTMwRkQxRkRDNTMzNjc1Mzg1QUU5 MEZCNDE2NzIwHhcNMjUwNDA5MDM0ODA4WhcNMjUwNDE2MDM0ODA4WjAYMRYwFAYD VQQDEw02N2Y1ZWRmOC1hNTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Lc24+RtamT594pfYaFHJ4ZR5biXczAu89Dt6TOp8T2G+S4b12pXnDGVqKwu pgo/djQ0ONDLcGkejjkHfhHfjPrUCYgKMi7wvBBrnhHVLWavTrmco9iIp+p5ak7H Fl0MMY8/P4GNBfN1lXhfJCVo1hovUgjBxC5ut7Ql0Bm7lVsL3ySsVCKx4PmWoFJN Jh87C6ikZMlc1pRNconYiM7l4a6Y+kmd6VrEGNlXPFuSB+aiJAOxcKN2zuXOrKOJ /WLJ/WQo7l+n5xCQ+nLQO/AmwffOqJhLw3mRi3XuA7PlTvOn1bIqfS3Y6KQgXLwG GCbT1mwRxQbc4c43Bwn2K3MqTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJxcleeF cBsIrAqeeYuNJQqipLPhMB8GA1UdIwQYMBaAFJD2gPynyTD9H9xTNnU4WukPtBZy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDhDOS9BMDU1QjVCMjZF RUQxMUVFQkMxQUFCNTNDNEY5QUUwMi9rUGFBX0tmSk1QMGYzRk0yZFRoYTZRLTBG bkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tQYUFfS2ZKTVAwZjNGTTJkVGhhNlEtMEZuSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDhDOS9BMDU1QjVCMjZFRUQxMUVFQkMxQUFCNTNDNEY5QUUwMi9rUGFBX0tmSk1Q MGYzRk0yZFRoYTZRLTBGbkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKkxWFgJCV/oj1RboS9W92gx68GZIzDdS8f146zxXionFddQeiB7/5 9r3AyE1tJfGI9Ns5/3j/ooMTcAAihozXyFNkZsQSKZxLuuK0I5QHElp+WKtG4Ez+ RVa5pnNatfFaHMoa8ek2Uxt4OS9RiMbvagRdzqokV++gUYMH9HrlEhQ65OCcqQ1W bgr8MREsp3W9dONrdqELRRAWEXaYGRNegz9Nh8MkXpsVdRMJCA/F/1HzaHfvTXAf IVn/zrrSFmg434T2VDx6XG7FS9DwjPJplFRnGQi02JDBFFAP4NfOfbt8TE0ZZahl p5+4J2Z1uiLy1Ig2b8fQ0RBlv5NtwqaI -----END CERTIFICATE-----Generated at Thu Apr 10 20:41:55 2025 by rpki-client