$ rpki-client -vvf rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.mft File: KWYvUTolTw218H21gZ--rkD3vxU.mft (raw, json) Hash identifier: YLAB9D3WAFnCT4hEAQXa+6QWnO/jf4HDU/IXHu6ysGo= Subject key identifier: 03:A5:11:D6:B6:3E:5A:AE:85:B6:2C:14:F6:BF:7F:80:75:4D:64:51 Authority key identifier: 29:66:2F:51:3A:25:4F:0D:B5:F0:7D:B5:81:9F:BE:AE:40:F7:BF:15 Certificate issuer: /CN=A9146C84/serialNumber=29662F513A254F0DB5F07DB5819FBEAE40F7BF15 Certificate serial: 02BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KWYvUTolTw218H21gZ--rkD3vxU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.mft Manifest number: 02B1 Signing time: Thu 03 Apr 2025 01:27:47 +0000 Manifest this update: Thu 03 Apr 2025 01:27:47 +0000 Manifest next update: Thu 10 Apr 2025 01:27:47 +0000 Files and hashes: 1: KWYvUTolTw218H21gZ--rkD3vxU.crl (hash: f/IVhAxng6eRurITxHZNR7QYGzrWeXPpnNzvzWaivt0=) 2: F09C691AEBB511ECA410BF6DC4F9AE02.roa (hash: FCRN1NZQePuRvb8u1iPaHMlml/R9SMP4LFtnliSOA4U=) 3: EF6D9D70EBB511ECA410BF6DC4F9AE02.roa (hash: 8g36ak3SqloYK1bJK5eBraU51IJUZJjx7CwzUzGO3AA=) 4: F123461AEBB511ECA410BF6DC4F9AE02.roa (hash: 6OPdSEH/DXquux0qfN3JYefrSw/74ETxPeMsKF5ezJs=) 5: EFF97098EBB511ECA410BF6DC4F9AE02.roa (hash: S3J0UebQ/m57NDqWxTAcv6FKFlnX4xMQooz4gNQ5dXY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.crl rsync://rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KWYvUTolTw218H21gZ--rkD3vxU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 01:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 701 (0x2bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146C84 Validity Not Before: Apr 3 01:27:47 2025 GMT Not After : Apr 10 01:27:47 2025 GMT Subject: CN=67ede413-20a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:43:10:ac:a0:13:36:27:ec:5e:25:b0:2c:31: 43:37:dc:b6:be:a1:33:cb:4a:2f:f1:9d:c4:de:e8: 3e:0d:2c:9a:c3:58:bb:85:21:c4:2e:64:cb:a0:d1: ba:1c:9e:f3:43:10:bb:68:d4:71:e1:e3:2b:7c:89: 5c:74:12:f7:ff:59:14:3c:c4:67:86:b7:b8:c1:af: f8:14:16:ed:66:78:fc:5e:48:15:94:ab:c8:69:fb: e4:7a:e4:63:77:8c:48:69:1d:b9:6e:d1:c8:11:b9: 3d:38:d3:90:8b:77:5b:5a:bc:4b:1f:11:11:56:1e: 57:5e:d6:8d:e4:32:79:28:c1:4a:50:59:15:1d:29: 78:b6:50:ee:77:dd:ec:b7:a1:7a:1d:c0:26:9a:b2: 4d:18:22:1a:08:7d:e0:30:77:5c:38:34:03:ce:1a: bd:9d:67:45:a4:b5:05:f8:e9:dd:90:21:48:78:1c: 70:ac:7a:73:2a:48:49:cf:f7:8f:45:34:58:42:e9: 75:cb:2c:45:1f:5d:bc:a8:59:d1:bd:a1:8b:67:4c: b0:75:22:f9:89:5e:be:53:bb:45:8c:ef:24:33:6d: a4:06:01:e4:00:55:b1:88:0f:dc:05:bc:46:4f:3f: da:f1:23:d0:ff:08:5b:3e:c9:65:3a:5b:23:36:8e: 48:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:A5:11:D6:B6:3E:5A:AE:85:B6:2C:14:F6:BF:7F:80:75:4D:64:51 X509v3 Authority Key Identifier: keyid:29:66:2F:51:3A:25:4F:0D:B5:F0:7D:B5:81:9F:BE:AE:40:F7:BF:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KWYvUTolTw218H21gZ--rkD3vxU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:73:a9:d2:7a:e2:93:0e:42:be:ee:ea:5b:cf:29:fd:f1:f0: 2c:a8:93:51:37:c0:47:e5:57:fa:5b:72:84:ac:c4:5f:e8:6b: c2:d9:1a:d0:2e:63:eb:40:23:7b:36:5d:45:c9:23:20:c6:d2: e8:a2:86:84:86:eb:e3:f5:24:ce:9e:d4:cf:64:ba:42:d5:02: ea:5d:c6:65:0a:6d:cf:ee:67:bc:e7:7b:dd:f8:fe:f8:11:5a: a5:e8:94:bc:80:98:3b:aa:3a:43:a8:b9:a3:6d:c5:b2:73:13: 42:d3:1d:36:4f:63:a1:7e:e3:25:d6:c5:12:21:8a:eb:e0:37: f8:85:42:a5:a5:e8:93:96:c8:54:8e:ed:db:c1:a7:33:8f:71: 15:3b:8d:bd:07:e1:b2:2e:ee:9a:d9:42:b4:2e:bf:af:e5:9b: 54:a6:68:9e:74:59:c5:be:d5:d9:0b:20:e4:54:ad:ae:36:a4: ff:d2:fa:30:29:74:28:58:27:2d:38:34:c9:e6:03:e3:30:65: 4b:0b:1d:46:b4:d0:69:f2:2e:0c:1b:0b:bb:7e:dc:f0:3c:67: 8e:d0:64:15:a5:d8:29:f7:20:4c:b0:b5:d9:d3:bb:2a:cc:89: d2:cd:c1:8d:47:e3:0e:13:12:6f:ef:ca:0f:66:84:d1:c7:07: 16:60:d8:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAr0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZDODQxMTAvBgNVBAUTKDI5NjYyRjUxM0EyNTRGMERCNUYwN0RCNTgxOUZCRUFF NDBGN0JGMTUwHhcNMjUwNDAzMDEyNzQ3WhcNMjUwNDEwMDEyNzQ3WjAYMRYwFAYD VQQDEw02N2VkZTQxMy0yMGEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7EMQrKATNifsXiWwLDFDN9y2vqEzy0ov8Z3E3ug+DSyaw1i7hSHELmTLoNG6 HJ7zQxC7aNRx4eMrfIlcdBL3/1kUPMRnhre4wa/4FBbtZnj8XkgVlKvIafvkeuRj d4xIaR25btHIEbk9ONOQi3dbWrxLHxERVh5XXtaN5DJ5KMFKUFkVHSl4tlDud93s t6F6HcAmmrJNGCIaCH3gMHdcODQDzhq9nWdFpLUF+OndkCFIeBxwrHpzKkhJz/eP RTRYQul1yyxFH128qFnRvaGLZ0ywdSL5iV6+U7tFjO8kM22kBgHkAFWxiA/cBbxG Tz/a8SPQ/whbPsllOlsjNo5IHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAOlEda2 PlquhbYsFPa/f4B1TWRRMB8GA1UdIwQYMBaAFClmL1E6JU8NtfB9tYGfvq5A978V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkM4NC8yQTlCQjAyNkVC QjExMUVDODZERTM1NjVDNEY5QUUwMi9LV1l2VVRvbFR3MjE4SDIxZ1otLXJrRDN2 eFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXWXZVVG9sVHcyMThIMjFnWi0tcmtEM3Z4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkM4NC8yQTlCQjAyNkVCQjExMUVDODZERTM1NjVDNEY5QUUwMi9LV1l2VVRvbFR3 MjE4SDIxZ1otLXJrRDN2eFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdc6nSeuKTDkK+7upbzyn98fAsqJNRN8BH5Vf6W3KErMRf6GvC2RrQ LmPrQCN7Nl1FySMgxtLoooaEhuvj9STOntTPZLpC1QLqXcZlCm3P7me853vd+P74 EVql6JS8gJg7qjpDqLmjbcWycxNC0x02T2OhfuMl1sUSIYrr4Df4hUKlpeiTlshU ju3bwaczj3EVO429B+GyLu6a2UK0Lr+v5ZtUpmiedFnFvtXZCyDkVK2uNqT/0vow KXQoWCctODTJ5gPjMGVLCx1GtNBp8i4MGwu7ftzwPGeO0GQVpdgp9yBMsLXZ07sq zInSzcGNR+MOExJv78oPZoTRxwcWYNhC -----END CERTIFICATE-----Generated at Fri Apr 4 22:40:08 2025 by rpki-client