$ rpki-client -vvf rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft File: kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft (raw, json) Hash identifier: 9vEOxf64EIFc5HZxtRTcWJM9OSxT8F1yuo4luvnPfqM= Subject key identifier: E7:E6:70:EC:6A:81:8E:A7:BE:83:28:3E:6E:E4:B5:DD:21:FA:F8:87 Authority key identifier: 90:09:E7:41:96:D4:8B:03:96:4F:1F:C5:6C:FE:44:6E:C5:04:8C:F7 Certificate issuer: /CN=A9150F66/serialNumber=9009E74196D48B03964F1FC56CFE446EC5048CF7 Certificate serial: 28AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft Manifest number: 27E7 Signing time: Fri 04 Apr 2025 15:42:46 +0000 Manifest this update: Fri 04 Apr 2025 15:42:45 +0000 Manifest next update: Fri 11 Apr 2025 15:42:45 +0000 Files and hashes: 1: kAnnQZbUiwOWTx_FbP5EbsUEjPc.crl (hash: /DQyjPlWMw7LGk1gvDlTuAq+phljQf3uI1eDn3Ig400=) 2: BD3FF814A49811EEAD789D2AC4F9AE02.roa (hash: TklClzxx9K18o0RPLn1yMvXuXYYSv/q9QF8TfgX5y9s=) 3: CCF0C1920EBA11ECB2C2867AC4F9AE02.roa (hash: iPTnUE+jpm4fXw6wHpeUhTUEEJ/ETtPVxhkgN7Joem0=) 4: 4971496EAE1B11EF8FFE0422C4F9AE02.roa (hash: uKiFFY8vpTe1cBpydcM6MoqXZ6WNPxhGwHMFnSCc+M4=) 5: 28E35E4898F211ED9FB5D80DC4F9AE02.roa (hash: Jc7neVqmiIdnrebi7TQ+tno2juV2xxAmmlOymTBrBWE=) 6: 45163F62D61E11EEB0DF364BC4F9AE02.roa (hash: sKWjvCcZhYmyGIbGnhs6WPxWSOkCfXqAQsd4KEPlW5E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.crl rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 15:42:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10413 (0x28ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150F66 Validity Not Before: Apr 4 15:42:45 2025 GMT Not After : Apr 11 15:42:45 2025 GMT Subject: CN=67effdf5-c70f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:bb:29:d2:e5:0f:36:8d:fa:08:e7:90:4c:c6: 28:f6:55:95:21:19:26:d9:75:8b:88:a4:b0:b8:7f: ed:0b:41:0c:86:b0:23:25:da:7a:db:51:50:04:0a: 16:e7:ec:33:23:ce:42:a2:5c:9a:87:7d:65:f4:a2: 48:b1:0e:ce:96:bd:0f:68:5c:7b:55:ab:4b:ba:dd: 7e:83:c6:a1:8f:d9:f7:76:9f:4c:35:8e:0a:95:58: 09:15:9f:97:13:ce:fd:e3:1f:ac:a3:42:b8:dd:5b: a0:6d:20:a8:5b:81:5e:ae:84:18:11:62:93:87:b1: 71:5c:b5:09:7d:fe:02:bc:ec:a3:6c:fe:e7:cd:f0: cf:cd:42:1a:e9:41:d3:d3:66:48:57:79:83:04:34: e4:cf:f0:7b:f5:cf:e3:ee:47:0c:06:d2:33:0e:b8: 23:97:d9:92:3d:87:ab:10:23:f0:83:30:d4:a9:c0: e8:ab:1d:fb:e5:87:81:6c:19:5a:e1:f1:13:db:1e: f9:10:c4:71:88:a7:7e:1a:b0:fa:77:f8:69:07:18: 13:5c:40:d2:0a:0d:15:55:81:5f:4b:45:03:56:e2: 4d:00:da:84:d1:2a:ea:74:47:0f:48:05:8f:28:61: 7a:0c:04:e1:d1:29:24:31:61:55:18:d5:d3:3d:17: 38:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:E6:70:EC:6A:81:8E:A7:BE:83:28:3E:6E:E4:B5:DD:21:FA:F8:87 X509v3 Authority Key Identifier: keyid:90:09:E7:41:96:D4:8B:03:96:4F:1F:C5:6C:FE:44:6E:C5:04:8C:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:cb:cb:28:1f:63:d0:5c:6b:39:35:d4:7f:21:45:39:f6:3e: fd:ee:e3:1e:6a:7f:26:e7:21:33:b8:6c:03:38:13:71:c4:72: b7:a9:38:98:88:0e:cc:7e:9d:a9:08:0d:4b:fd:ab:f4:11:48: af:aa:61:1d:e1:a2:3b:98:5e:36:2f:57:02:27:a0:31:b9:64: 0f:8b:ec:b3:29:85:f8:6f:5d:9b:cf:41:5d:2a:c4:b5:92:54: 8b:a6:ef:b3:5c:d8:3e:e7:6c:e1:00:01:01:2c:54:eb:be:dd: ad:d7:4a:b3:2e:fd:49:60:b3:20:3b:e0:27:36:54:02:85:76: ed:94:5a:ec:18:fb:90:c3:cc:b5:5f:4f:87:af:34:fa:ca:f7: fc:87:20:0e:15:ed:9a:bd:10:76:a4:b9:ed:7c:1f:78:37:2b: a5:cd:63:4e:03:18:9a:18:41:8b:22:a3:99:92:54:b4:7d:7d: ef:d6:b7:bb:ba:3c:59:50:29:30:3b:27:46:f5:e8:7a:0d:ba: 3e:e0:e6:4f:ea:f3:01:87:5d:1f:dc:84:e3:b6:2d:33:68:c1: cf:e5:b4:6e:14:e7:4b:7a:88:7d:f0:f0:76:66:b9:15:a2:cd: 82:ec:58:fc:2f:b9:1e:28:bc:0e:89:1e:7e:aa:f7:84:de:2a: 71:dc:21:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBGNjYxMTAvBgNVBAUTKDkwMDlFNzQxOTZENDhCMDM5NjRGMUZDNTZDRkU0NDZF QzUwNDhDRjcwHhcNMjUwNDA0MTU0MjQ1WhcNMjUwNDExMTU0MjQ1WjAYMRYwFAYD VQQDEw02N2VmZmRmNS1jNzBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvLsp0uUPNo36COeQTMYo9lWVIRkm2XWLiKSwuH/tC0EMhrAjJdp621FQBAoW 5+wzI85Colyah31l9KJIsQ7Olr0PaFx7VatLut1+g8ahj9n3dp9MNY4KlVgJFZ+X E8794x+so0K43VugbSCoW4FeroQYEWKTh7FxXLUJff4CvOyjbP7nzfDPzUIa6UHT 02ZIV3mDBDTkz/B79c/j7kcMBtIzDrgjl9mSPYerECPwgzDUqcDoqx375YeBbBla 4fET2x75EMRxiKd+GrD6d/hpBxgTXEDSCg0VVYFfS0UDVuJNANqE0SrqdEcPSAWP KGF6DATh0SkkMWFVGNXTPRc4fwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOfmcOxq gY6nvoMoPm7ktd0h+viHMB8GA1UdIwQYMBaAFJAJ50GW1IsDlk8fxWz+RG7FBIz3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEY2Ni9CQzFEQzFGNkMx NzUxMUU0QTJDN0I3NENDNEY5QUUwMi9rQW5uUVpiVWl3T1dUeF9GYlA1RWJzVUVq UGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tBbm5RWmJVaXdPV1R4X0ZiUDVFYnNVRWpQYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MEY2Ni9CQzFEQzFGNkMxNzUxMUU0QTJDN0I3NENDNEY5QUUwMi9rQW5uUVpiVWl3 T1dUeF9GYlA1RWJzVUVqUGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADy8soH2PQXGs5NdR/IUU59j797uMean8m5yEzuGwDOBNxxHK3qTiY iA7Mfp2pCA1L/av0EUivqmEd4aI7mF42L1cCJ6AxuWQPi+yzKYX4b12bz0FdKsS1 klSLpu+zXNg+52zhAAEBLFTrvt2t10qzLv1JYLMgO+AnNlQChXbtlFrsGPuQw8y1 X0+HrzT6yvf8hyAOFe2avRB2pLntfB94NyulzWNOAxiaGEGLIqOZklS0fX3v1re7 ujxZUCkwOydG9eh6Dbo+4OZP6vMBh10f3ITjti0zaMHP5bRuFOdLeoh98PB2ZrkV os2C7Fj8L7keKLwOiR5+qveE3ipx3CEC -----END CERTIFICATE-----Generated at Sun Apr 6 02:44:54 2025 by rpki-client