$ rpki-client -vvf rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.mft File: Kz0hH8mZjfIDXiDZGqVe3sYo8KM.mft (raw, json) Hash identifier: c9GnoqSxe3XaZgsERYNfms1vuQtvnkUdWMKitpMf4XM= Subject key identifier: A9:AC:52:87:02:8B:9C:9A:BE:7E:A8:D3:15:52:E5:74:77:39:DA:DF Authority key identifier: 2B:3D:21:1F:C9:99:8D:F2:03:5E:20:D9:1A:A5:5E:DE:C6:28:F0:A3 Certificate issuer: /CN=A912B75A/serialNumber=2B3D211FC9998DF2035E20D91AA55EDEC628F0A3 Certificate serial: 76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.mft Manifest number: 76 Signing time: Sat 29 Mar 2025 06:04:54 +0000 Manifest this update: Sat 29 Mar 2025 06:04:54 +0000 Manifest next update: Sat 05 Apr 2025 06:04:53 +0000 Files and hashes: 1: Kz0hH8mZjfIDXiDZGqVe3sYo8KM.crl (hash: uSVz4+8cl6WzPjiOe9rss5Q3yMlexYqN6SwOb2Zhf2M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.crl rsync://rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 118 (0x76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B75A Validity Not Before: Mar 29 06:04:54 2025 GMT Not After : Apr 5 06:04:53 2025 GMT Subject: CN=67e78d86-474e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:cd:53:3b:35:78:b0:4d:8b:f6:de:33:e2:40: 92:8f:fd:83:1a:e9:3d:1e:f9:7f:b8:43:ad:23:63: a0:8b:c4:aa:e6:88:4f:d8:c2:b3:ac:66:b2:fc:40: 36:8b:b4:1c:3b:4a:06:77:1e:67:9a:30:4d:9c:37: a1:a9:d9:92:65:10:ce:c6:16:b8:ff:a3:da:c3:c9: 6f:4e:ec:9c:94:13:fb:5b:99:55:a5:ae:be:98:c7: d0:f3:78:3c:71:5a:98:38:fb:0b:4e:e4:0b:3c:3a: 27:74:4a:64:df:48:35:20:b0:ac:05:13:9f:c4:1e: 0a:99:f7:ce:aa:e0:91:ef:81:33:50:48:03:e6:69: b8:bb:fd:bd:03:9b:68:26:1e:d4:ce:2e:30:dc:ab: 13:f8:0a:b9:bb:d3:74:90:bb:6b:e5:4b:e8:27:26: a0:28:f5:0d:48:96:f0:ab:65:7a:60:b2:70:6b:f5: 19:c2:bf:8a:c0:e1:09:45:e0:40:37:d8:c8:1f:b5: 75:f3:f7:db:1a:36:e5:e4:37:07:9f:c8:71:24:52: 7f:ad:01:4e:e1:f4:04:91:6c:4f:fd:41:41:c6:52: 7e:00:8e:41:7f:87:ed:fe:51:d0:34:3e:5a:e7:2d: c7:56:7d:62:1b:7a:58:23:d7:22:15:b2:20:b3:45: 72:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:AC:52:87:02:8B:9C:9A:BE:7E:A8:D3:15:52:E5:74:77:39:DA:DF X509v3 Authority Key Identifier: keyid:2B:3D:21:1F:C9:99:8D:F2:03:5E:20:D9:1A:A5:5E:DE:C6:28:F0:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:14:f4:ef:7c:e7:98:43:d4:90:af:be:94:4d:16:7c:72:91: 92:c1:c0:13:a1:b2:f1:fb:d3:a4:a9:d1:88:91:77:59:75:28: 37:36:a5:0e:2e:3b:b1:f3:e3:6d:b0:7c:78:79:b6:17:8d:e8: 06:bf:74:10:cd:3c:9b:c7:c0:eb:6a:35:d4:89:08:fd:b3:b6: a0:0f:22:c4:be:63:54:21:f8:3c:c8:c8:c0:35:de:ca:ca:83: 24:f8:9b:99:fc:57:00:f6:a1:87:69:0d:ca:47:2b:29:46:7c: 2f:5c:4e:09:20:47:47:51:aa:8e:43:46:a7:91:9c:6a:28:5c: 96:c1:f2:93:37:32:96:b4:2d:1c:d3:5c:a3:de:dd:14:83:eb: 78:66:f9:20:b9:d6:90:fe:70:ab:30:45:be:eb:0b:a6:bf:9c: 4e:fd:9a:13:dd:90:97:17:08:7e:e7:b9:62:a3:2d:4a:d3:de: a3:5d:e6:2a:39:86:26:b6:5a:7a:ea:1b:17:ca:6a:60:32:f3: d8:41:00:d7:65:0c:a3:23:08:b2:ef:83:ca:ea:a7:5a:a4:4c: 43:27:83:c8:80:4f:96:33:81:d5:1e:57:7f:e3:0b:dd:c8:24: 09:dc:5b:ff:66:1b:ce:5e:c1:e5:41:09:13:b5:12:0e:e4:58: 0a:bd:c9:9d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy Qjc1QTExMC8GA1UEBRMoMkIzRDIxMUZDOTk5OERGMjAzNUUyMEQ5MUFBNTVFREVD NjI4RjBBMzAeFw0yNTAzMjkwNjA0NTRaFw0yNTA0MDUwNjA0NTNaMBgxFjAUBgNV BAMTDTY3ZTc4ZDg2LTQ3NGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNzVM7NXiwTYv23jPiQJKP/YMa6T0e+X+4Q60jY6CLxKrmiE/YwrOsZrL8QDaL tBw7SgZ3HmeaME2cN6Gp2ZJlEM7GFrj/o9rDyW9O7JyUE/tbmVWlrr6Yx9DzeDxx Wpg4+wtO5As8Oid0SmTfSDUgsKwFE5/EHgqZ986q4JHvgTNQSAPmabi7/b0Dm2gm HtTOLjDcqxP4Crm703SQu2vlS+gnJqAo9Q1IlvCrZXpgsnBr9RnCv4rA4QlF4EA3 2MgftXXz99saNuXkNwefyHEkUn+tAU7h9ASRbE/9QUHGUn4AjkF/h+3+UdA0Plrn LcdWfWIbelgj1yIVsiCzRXLNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqaxShwKL nJq+fqjTFVLldHc52t8wHwYDVR0jBBgwFoAUKz0hH8mZjfIDXiDZGqVe3sYo8KMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJCNzVBLzFCMjJFMUZFNUI5 QTExRUY4MjAyNzY0MEM0RjlBRTAyL0t6MGhIOG1aamZJRFhpRFpHcVZlM3NZbzhL TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvS3owaEg4bVpqZklEWGlEWkdxVmUzc1lvOEtNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJC NzVBLzFCMjJFMUZFNUI5QTExRUY4MjAyNzY0MEM0RjlBRTAyL0t6MGhIOG1aamZJ RFhpRFpHcVZlM3NZbzhLTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAF8U9O9855hD1JCvvpRNFnxykZLBwBOhsvH706Sp0YiRd1l1KDc2pQ4u O7Hz422wfHh5theN6Aa/dBDNPJvHwOtqNdSJCP2ztqAPIsS+Y1Qh+DzIyMA13srK gyT4m5n8VwD2oYdpDcpHKylGfC9cTgkgR0dRqo5DRqeRnGooXJbB8pM3Mpa0LRzT XKPe3RSD63hm+SC51pD+cKswRb7rC6a/nE79mhPdkJcXCH7nuWKjLUrT3qNd5io5 hia2WnrqGxfKamAy89hBANdlDKMjCLLvg8rqp1qkTEMng8iAT5YzgdUeV3/jC93I JAncW/9mG85eweVBCRO1Eg7kWAq9yZ0= -----END CERTIFICATE-----Generated at Fri Apr 4 22:32:09 2025 by rpki-client