$ rpki-client -vvf rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.mft File: kHsDit7Hw_qcZJMOZBmy-7q5yBw.mft (raw, json) Hash identifier: Xa7QaNYMBMy19NvVG78u/ir8T9+A7K8gLP3f5bxq7CE= Subject key identifier: 53:06:92:E0:12:C8:DB:88:B6:00:BB:37:AA:E5:B3:F4:FA:D1:CD:B5 Authority key identifier: 90:7B:03:8A:DE:C7:C3:FA:9C:64:93:0E:64:19:B2:FB:BA:B9:C8:1C Certificate issuer: /CN=A913A7A6/serialNumber=907B038ADEC7C3FA9C64930E6419B2FBBAB9C81C Certificate serial: 09FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHsDit7Hw_qcZJMOZBmy-7q5yBw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.mft Manifest number: 09F4 Signing time: Sun 06 Apr 2025 19:37:21 +0000 Manifest this update: Sun 06 Apr 2025 19:37:21 +0000 Manifest next update: Sun 13 Apr 2025 19:37:21 +0000 Files and hashes: 1: kHsDit7Hw_qcZJMOZBmy-7q5yBw.crl (hash: sZxgNR8DOvRWt6AlaNhDP/tY6eq5xMfOUA52akNAKqc=) 2: D4AECB7A701611EF824F7281C4F9AE02.roa (hash: 05sTqgo+Z4rvsk50BgwNBJM+KFLlXu8LZA40jZLQRSk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.crl rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHsDit7Hw_qcZJMOZBmy-7q5yBw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Apr 2025 19:37:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2555 (0x9fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913A7A6 Validity Not Before: Apr 6 19:37:21 2025 GMT Not After : Apr 13 19:37:21 2025 GMT Subject: CN=67f2d7f1-d703 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:7c:1d:29:9a:2d:d6:48:fc:68:f2:8d:e9:88: 7f:c9:02:7b:1a:0f:72:2b:70:e8:6e:0b:a6:30:24: 40:45:c1:77:13:92:0c:ad:6b:72:a3:fa:c5:42:ef: ea:1c:68:0e:00:f5:e2:84:04:45:f6:0d:8c:27:a8: ab:10:0a:99:4b:fd:75:59:bf:fe:2e:62:0a:23:8b: 20:83:c2:5f:08:fd:2c:1a:68:17:78:e3:42:49:e3: 03:a8:13:a2:b8:f5:5c:ee:36:5d:aa:07:39:28:f0: 1a:03:b2:86:1a:f7:c4:bb:bf:a5:57:dd:6b:ca:3c: df:ce:06:b0:86:40:e1:a7:27:fe:ad:df:b7:22:8c: 6d:a7:49:58:ea:e9:de:76:af:ef:ba:49:75:10:f5: e1:b1:cd:92:68:92:a6:46:bf:58:33:e9:af:94:39: a6:bc:45:90:1a:ae:ea:ec:ec:ff:0a:f1:80:af:11: ac:d1:de:4e:35:99:5e:01:be:c4:61:39:44:40:a9: bf:51:d2:90:3b:ef:3c:b0:e5:c1:f4:94:1e:e9:9e: 02:e6:78:09:e7:af:8b:7f:a4:88:a4:8a:07:d1:2b: 0a:5d:bc:ef:d7:0e:81:a4:e3:8a:b7:7b:62:d6:aa: 2c:63:a9:3f:a3:eb:4a:9d:6d:e2:95:15:79:5c:df: 08:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:06:92:E0:12:C8:DB:88:B6:00:BB:37:AA:E5:B3:F4:FA:D1:CD:B5 X509v3 Authority Key Identifier: keyid:90:7B:03:8A:DE:C7:C3:FA:9C:64:93:0E:64:19:B2:FB:BA:B9:C8:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHsDit7Hw_qcZJMOZBmy-7q5yBw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:ce:80:fb:6f:ec:75:83:33:2c:bf:4b:10:40:ee:d2:7c:7c: 35:7d:b0:cd:b0:70:0b:66:4d:5e:8d:a2:5a:71:dc:1b:0d:e4: e9:fd:87:e3:bd:d0:61:6a:ae:78:bd:34:42:19:99:18:da:01: 5d:e9:ea:0a:e2:52:71:b5:77:e0:68:b8:66:1a:cf:73:4c:21: 90:2c:11:07:c9:8f:96:56:e0:52:17:da:f8:92:0a:17:a2:7f: 61:77:23:12:f1:26:68:87:a4:7d:f1:0e:95:ac:22:85:0b:4a: bb:a4:7c:97:fd:47:25:10:da:47:72:20:14:ef:9a:6a:da:57: 3c:1a:07:e7:7f:55:8c:b2:f5:64:41:a0:ef:42:76:3f:ae:91: c1:95:ec:cf:81:57:de:39:57:ee:bf:a7:c5:38:99:e4:f0:4a: 11:9e:24:6e:c8:d7:a0:61:42:dd:3b:6c:5e:22:84:72:e7:16: bd:5f:70:00:d1:16:4a:48:83:37:5b:1d:04:54:90:33:e3:97: 89:3b:21:e3:08:e6:95:bf:d3:e4:4e:d5:de:d2:64:57:d8:aa: 3c:41:96:3f:cf:09:da:74:45:eb:ea:38:4c:c4:e3:50:16:47: f3:ef:69:13:59:8f:6b:63:d4:f7:c6:fb:a5:a2:cf:0a:32:fb: e3:f6:8b:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCfswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0E3QTYxMTAvBgNVBAUTKDkwN0IwMzhBREVDN0MzRkE5QzY0OTMwRTY0MTlCMkZC QkFCOUM4MUMwHhcNMjUwNDA2MTkzNzIxWhcNMjUwNDEzMTkzNzIxWjAYMRYwFAYD VQQDEw02N2YyZDdmMS1kNzAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx3wdKZot1kj8aPKN6Yh/yQJ7Gg9yK3DobgumMCRARcF3E5IMrWtyo/rFQu/q HGgOAPXihARF9g2MJ6irEAqZS/11Wb/+LmIKI4sgg8JfCP0sGmgXeONCSeMDqBOi uPVc7jZdqgc5KPAaA7KGGvfEu7+lV91ryjzfzgawhkDhpyf+rd+3Ioxtp0lY6une dq/vukl1EPXhsc2SaJKmRr9YM+mvlDmmvEWQGq7q7Oz/CvGArxGs0d5ONZleAb7E YTlEQKm/UdKQO+88sOXB9JQe6Z4C5ngJ56+Lf6SIpIoH0SsKXbzv1w6BpOOKt3ti 1qosY6k/o+tKnW3ilRV5XN8IRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFMGkuAS yNuItgC7N6rls/T60c21MB8GA1UdIwQYMBaAFJB7A4rex8P6nGSTDmQZsvu6ucgc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQTdBNi80REI5NDQzQTcz QjYxMUVBOUI4QzFGNUNDNEY5QUUwMi9rSHNEaXQ3SHdfcWNaSk1PWkJteS03cTV5 QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tIc0RpdDdId19xY1pKTU9aQm15LTdxNXlCdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QTdBNi80REI5NDQzQTczQjYxMUVBOUI4QzFGNUNDNEY5QUUwMi9rSHNEaXQ3SHdf cWNaSk1PWkJteS03cTV5QncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSzoD7b+x1gzMsv0sQQO7SfHw1fbDNsHALZk1ejaJacdwbDeTp/Yfj vdBhaq54vTRCGZkY2gFd6eoK4lJxtXfgaLhmGs9zTCGQLBEHyY+WVuBSF9r4kgoX on9hdyMS8SZoh6R98Q6VrCKFC0q7pHyX/UclENpHciAU75pq2lc8Ggfnf1WMsvVk QaDvQnY/rpHBlezPgVfeOVfuv6fFOJnk8EoRniRuyNegYULdO2xeIoRy5xa9X3AA 0RZKSIM3Wx0EVJAz45eJOyHjCOaVv9PkTtXe0mRX2Ko8QZY/zwnadEXr6jhMxONQ Fkfz72kTWY9rY9T3xvulos8KMvvj9ost -----END CERTIFICATE-----Generated at Mon Apr 7 11:12:44 2025 by rpki-client