$ rpki-client -vvf rpki.apnic.net/member_repository/A9138679/CB2CB3CEEA7711EFA5635680C4F9AE02/koDwcHR3Uzh7a6ZXMtbdeZKzUME.mft File: koDwcHR3Uzh7a6ZXMtbdeZKzUME.mft (raw, json) Hash identifier: Hdwet/bB5xQx/kQ/3rA7DPQ2up4CARBJyFtnutqHHIM= Subject key identifier: F4:D1:31:7C:74:6C:BC:E2:E3:50:11:D8:F7:4E:63:BC:B0:FE:E7:4E Authority key identifier: 92:80:F0:70:74:77:53:38:7B:6B:A6:57:32:D6:DD:79:92:B3:50:C1 Certificate issuer: /CN=A9138679/serialNumber=9280F070747753387B6BA65732D6DD7992B350C1 Certificate serial: 1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/koDwcHR3Uzh7a6ZXMtbdeZKzUME.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138679/CB2CB3CEEA7711EFA5635680C4F9AE02/koDwcHR3Uzh7a6ZXMtbdeZKzUME.mft Manifest number: 1C Signing time: Sat 05 Apr 2025 07:11:06 +0000 Manifest this update: Sat 05 Apr 2025 07:11:06 +0000 Manifest next update: Sat 12 Apr 2025 07:11:06 +0000 Files and hashes: 1: koDwcHR3Uzh7a6ZXMtbdeZKzUME.crl (hash: uPUsdipcBlBClC7fRFMpFNL9ge7foe31YM3BO6P75/w=) 2: 2CD223FCEA7811EF92D8DC39C4F9AE02.roa (hash: zvy+2HhQd/n3VOaiuMrL5/OccoJAnqCm0UAKCkrWeWw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138679/CB2CB3CEEA7711EFA5635680C4F9AE02/koDwcHR3Uzh7a6ZXMtbdeZKzUME.crl rsync://rpki.apnic.net/member_repository/A9138679/CB2CB3CEEA7711EFA5635680C4F9AE02/koDwcHR3Uzh7a6ZXMtbdeZKzUME.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/koDwcHR3Uzh7a6ZXMtbdeZKzUME.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:11:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138679 Validity Not Before: Apr 5 07:11:06 2025 GMT Not After : Apr 12 07:11:06 2025 GMT Subject: CN=67f0d78a-e234 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e2:02:4f:ff:5b:24:2f:74:bd:32:a3:3d:80: 19:eb:b6:84:52:e5:3e:b0:bd:93:43:17:1a:89:7e: 96:19:dc:9a:c4:0a:a6:8b:73:5a:08:ed:e9:0e:7e: f6:bb:dd:f8:45:d9:f6:60:f5:49:36:fd:b1:4f:5c: 9d:b7:7d:98:cd:dd:8f:4f:ed:91:ae:69:3c:52:7f: 32:3e:9d:60:fc:a7:f2:28:4e:46:3d:16:60:fe:0d: 42:05:2c:b7:74:67:bd:ae:68:0b:d9:4e:da:50:c1: 41:e8:05:2c:54:09:75:87:13:fd:9e:af:c3:73:5e: 54:49:20:c8:7a:50:01:45:c7:cc:c0:f8:18:bd:6f: 46:fb:c5:7a:c3:98:d6:4e:9b:21:b2:0d:30:2e:67: 26:e5:37:d8:53:58:b8:c9:08:84:e4:c7:ae:e4:4b: 45:36:9c:40:e7:80:4c:73:d1:03:eb:d3:a8:74:54: 73:a1:9b:f5:97:17:54:96:64:d4:75:1b:b9:21:1e: 3d:1d:e8:49:2f:06:a4:cc:0c:ac:bf:38:f1:34:77: bf:8c:3e:d5:ac:31:52:1b:6d:db:43:44:b0:99:03: 3a:74:b3:66:a4:52:b7:a9:28:e8:bf:3e:fd:77:5b: d2:a8:dd:f7:8d:60:4c:ca:a4:53:aa:2d:5b:c4:05: c2:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:D1:31:7C:74:6C:BC:E2:E3:50:11:D8:F7:4E:63:BC:B0:FE:E7:4E X509v3 Authority Key Identifier: keyid:92:80:F0:70:74:77:53:38:7B:6B:A6:57:32:D6:DD:79:92:B3:50:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138679/CB2CB3CEEA7711EFA5635680C4F9AE02/koDwcHR3Uzh7a6ZXMtbdeZKzUME.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/koDwcHR3Uzh7a6ZXMtbdeZKzUME.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138679/CB2CB3CEEA7711EFA5635680C4F9AE02/koDwcHR3Uzh7a6ZXMtbdeZKzUME.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:7e:1f:74:6e:22:c6:0e:b3:d0:a9:38:39:a0:c6:fe:16:b2: 3d:a7:10:d0:e6:bc:28:53:1b:59:12:e3:a8:69:7b:23:7e:05: 9a:f9:7b:34:16:82:c3:2f:a2:5f:36:9d:ea:d1:7b:d0:9e:cc: 9b:05:be:3e:bc:83:53:36:54:2d:10:a4:dc:be:29:0f:9a:9e: fe:6c:72:e1:ca:2a:a0:75:d4:05:df:7b:74:3f:be:31:f1:5a: 84:fb:29:77:67:79:f0:1e:be:df:68:cf:8a:c1:25:11:54:15: 9f:e3:a4:24:cc:03:3d:ae:fc:f0:d6:d7:78:f1:b4:19:28:63: 17:a0:4a:5a:3d:88:0c:60:6a:f3:7d:b9:ca:b0:1f:d7:b2:39: 6c:da:f6:d7:9d:a4:f0:cb:59:dd:9b:d1:e8:d4:cc:83:53:72: 00:67:80:43:2f:03:ed:fb:40:7d:97:bc:78:08:a5:72:2b:1e: d1:7a:c0:e6:82:9f:26:21:ba:8e:78:0c:b4:14:4a:d2:a2:58: b5:40:72:e7:1c:84:f3:36:60:58:94:53:da:4e:7e:dc:a3:3c: 5a:9a:56:43:2c:f6:7a:50:24:63:e8:c9:38:67:da:d2:aa:b6: de:6d:85:83:9d:ef:b0:72:8b:bd:85:3e:db:cc:3c:f3:55:3a: 43:cb:c5:bc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz ODY3OTExMC8GA1UEBRMoOTI4MEYwNzA3NDc3NTMzODdCNkJBNjU3MzJENkRENzk5 MkIzNTBDMTAeFw0yNTA0MDUwNzExMDZaFw0yNTA0MTIwNzExMDZaMBgxFjAUBgNV BAMTDTY3ZjBkNzhhLWUyMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZ4gJP/1skL3S9MqM9gBnrtoRS5T6wvZNDFxqJfpYZ3JrECqaLc1oI7ekOfva7 3fhF2fZg9Uk2/bFPXJ23fZjN3Y9P7ZGuaTxSfzI+nWD8p/IoTkY9FmD+DUIFLLd0 Z72uaAvZTtpQwUHoBSxUCXWHE/2er8NzXlRJIMh6UAFFx8zA+Bi9b0b7xXrDmNZO myGyDTAuZyblN9hTWLjJCITkx67kS0U2nEDngExz0QPr06h0VHOhm/WXF1SWZNR1 G7khHj0d6EkvBqTMDKy/OPE0d7+MPtWsMVIbbdtDRLCZAzp0s2akUrepKOi/Pv13 W9Ko3feNYEzKpFOqLVvEBcK9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9NExfHRs vOLjUBHY905jvLD+504wHwYDVR0jBBgwFoAUkoDwcHR3Uzh7a6ZXMtbdeZKzUMEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4Njc5L0NCMkNCM0NFRUE3 NzExRUZBNTYzNTY4MEM0RjlBRTAyL2tvRHdjSFIzVXpoN2E2WlhNdGJkZVpLelVN RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva29Ed2NIUjNVemg3YTZaWE10YmRlWkt6VU1FLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4 Njc5L0NCMkNCM0NFRUE3NzExRUZBNTYzNTY4MEM0RjlBRTAyL2tvRHdjSFIzVXpo N2E2WlhNdGJkZVpLelVNRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKV+H3RuIsYOs9CpODmgxv4Wsj2nENDmvChTG1kS46hpeyN+BZr5ezQW gsMvol82nerRe9CezJsFvj68g1M2VC0QpNy+KQ+anv5scuHKKqB11AXfe3Q/vjHx WoT7KXdnefAevt9oz4rBJRFUFZ/jpCTMAz2u/PDW13jxtBkoYxegSlo9iAxgavN9 ucqwH9eyOWza9tedpPDLWd2b0ejUzINTcgBngEMvA+37QH2XvHgIpXIrHtF6wOaC nyYhuo54DLQUStKiWLVAcucchPM2YFiUU9pOftyjPFqaVkMs9npQJGPoyThn2tKq tt5thYOd77Byi72FPtvMPPNVOkPLxbw= -----END CERTIFICATE-----Generated at Sat Apr 5 19:22:45 2025 by rpki-client