$ rpki-client -vvf rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.mft File: kUa3guuCRnsZ2LQdHMQOvwSJkGY.mft (raw, json) Hash identifier: i1NBiblKI4KTWvDSw1JJgjB6Hs+lszAgqbxvxfYtL7k= Subject key identifier: 12:55:68:EE:4A:6C:A4:B0:06:2F:15:B1:25:7A:24:17:50:E4:C3:FE Authority key identifier: 91:46:B7:82:EB:82:46:7B:19:D8:B4:1D:1C:C4:0E:BF:04:89:90:66 Certificate issuer: /CN=A9155806/serialNumber=9146B782EB82467B19D8B41D1CC40EBF04899066 Certificate serial: 71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUa3guuCRnsZ2LQdHMQOvwSJkGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.mft Manifest number: 71 Signing time: Tue 15 Apr 2025 05:37:04 +0000 Manifest this update: Tue 15 Apr 2025 05:37:03 +0000 Manifest next update: Tue 22 Apr 2025 05:37:03 +0000 Files and hashes: 1: kUa3guuCRnsZ2LQdHMQOvwSJkGY.crl (hash: NpvF0DY3oBG2OQ2MZDFXvy1xbvM1mePrpgwzIV66dTI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.crl rsync://rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUa3guuCRnsZ2LQdHMQOvwSJkGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 05:37:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 113 (0x71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155806, serialNumber=9146B782EB82467B19D8B41D1CC40EBF04899066 Validity Not Before: Apr 15 05:37:03 2025 GMT Not After : Apr 22 05:37:03 2025 GMT Subject: CN=67fdf080-0c21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d5:76:95:39:a1:f7:37:13:ec:55:e6:aa:e2: 12:a1:8a:27:59:00:c0:db:35:a2:96:35:0b:fb:16: 2b:10:43:30:f8:eb:f3:40:73:15:7e:5c:be:93:16: c8:0c:63:88:7f:d3:ae:75:50:01:8c:5f:13:39:01: f0:27:e1:ab:2c:7f:18:e2:39:41:46:34:8a:94:bc: 9a:18:4b:0c:f1:a3:1e:0d:71:b7:8a:f0:69:92:df: d7:03:30:49:0a:65:f6:4f:9d:d8:06:c1:58:4b:49: 0d:59:ea:bf:86:16:39:1a:55:ed:89:05:de:40:58: 22:65:15:e7:37:33:1a:cb:68:31:df:c3:d4:71:ce: b0:e3:2d:62:79:f6:37:2c:a8:9f:3a:e6:ad:84:f1: c0:65:d4:ca:c0:02:bc:24:a4:fd:b4:fb:11:a8:48: 7b:46:02:6d:31:2c:b3:17:6c:62:b7:85:50:67:25: 26:aa:a9:bc:55:ec:95:e1:13:1e:87:72:9e:62:16: ad:3c:c4:20:8a:e8:1d:ff:19:b9:80:c9:ca:b0:be: 5c:4c:b9:17:e0:bd:61:f3:e3:3e:47:84:92:79:17: d9:a3:b7:05:9a:a0:7d:d9:a1:2d:6c:a8:da:38:8b: c8:7d:e2:54:1a:05:95:e6:a0:89:6f:0a:a8:11:19: 28:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:55:68:EE:4A:6C:A4:B0:06:2F:15:B1:25:7A:24:17:50:E4:C3:FE X509v3 Authority Key Identifier: keyid:91:46:B7:82:EB:82:46:7B:19:D8:B4:1D:1C:C4:0E:BF:04:89:90:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUa3guuCRnsZ2LQdHMQOvwSJkGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:4c:fe:72:87:ea:51:b6:d7:c1:d5:3f:75:5a:91:d4:c0:ae: 3c:e0:fa:b4:2e:fa:87:36:89:30:86:e4:5a:fa:2a:cf:7d:36: 6d:df:32:0a:8a:fa:ab:2a:ea:04:ab:07:c0:eb:62:2f:31:55: f4:8c:80:42:53:34:ae:68:1f:9c:fc:22:4b:29:4d:6d:c0:d5: b0:37:6a:09:1d:97:90:dd:4f:24:ee:e8:e7:86:3d:d4:c6:24: 14:7c:ed:ff:76:74:d5:f5:d9:42:44:b3:1f:7d:3e:ca:93:ce: c1:a3:24:1f:cc:34:8d:71:3d:a0:a1:a3:63:95:67:d8:e0:d1: 97:ec:5d:2a:3c:a7:95:06:5c:76:e2:48:97:a9:bf:6b:59:fd: 0f:cc:8a:ac:30:69:ba:82:37:fa:8d:84:7f:b6:cc:6f:76:78: 26:67:fa:79:ae:6d:61:58:93:ed:bb:06:37:a1:08:84:23:2d: 67:38:02:32:0e:a6:61:da:c7:1a:0c:87:61:5a:ca:c3:a1:a2: c1:36:8c:66:9d:cb:fe:86:1a:e1:b4:62:67:94:16:95:b2:b1: 2e:c3:a7:48:3a:4c:c0:e4:36:86:7a:29:6f:f2:bb:7d:12:bb: a7:fc:d4:6f:37:9d:ed:34:b5:5a:15:79:32:3a:35:4c:b9:31: fb:27:07:ab -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NTgwNjExMC8GA1UEBRMoOTE0NkI3ODJFQjgyNDY3QjE5RDhCNDFEMUNDNDBFQkYw NDg5OTA2NjAeFw0yNTA0MTUwNTM3MDNaFw0yNTA0MjIwNTM3MDNaMBgxFjAUBgNV BAMTDTY3ZmRmMDgwLTBjMjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCy1XaVOaH3NxPsVeaq4hKhiidZAMDbNaKWNQv7FisQQzD46/NAcxV+XL6TFsgM Y4h/0651UAGMXxM5AfAn4assfxjiOUFGNIqUvJoYSwzxox4NcbeK8GmS39cDMEkK ZfZPndgGwVhLSQ1Z6r+GFjkaVe2JBd5AWCJlFec3MxrLaDHfw9RxzrDjLWJ59jcs qJ865q2E8cBl1MrAArwkpP20+xGoSHtGAm0xLLMXbGK3hVBnJSaqqbxV7JXhEx6H cp5iFq08xCCK6B3/GbmAycqwvlxMuRfgvWHz4z5HhJJ5F9mjtwWaoH3ZoS1sqNo4 i8h94lQaBZXmoIlvCqgRGSjVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUElVo7kps pLAGLxWxJXokF1Dkw/4wHwYDVR0jBBgwFoAUkUa3guuCRnsZ2LQdHMQOvwSJkGYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU1ODA2L0QwQzVGNEUyNkU5 MTExRUZBNjJCNEMzRkM0RjlBRTAyL2tVYTNndXVDUm5zWjJMUWRITVFPdndTSmtH WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva1VhM2d1dUNSbnNaMkxRZEhNUU92d1NKa0dZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU1 ODA2L0QwQzVGNEUyNkU5MTExRUZBNjJCNEMzRkM0RjlBRTAyL2tVYTNndXVDUm5z WjJMUWRITVFPdndTSmtHWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADpM/nKH6lG218HVP3VakdTArjzg+rQu+oc2iTCG5Fr6Ks99Nm3fMgqK +qsq6gSrB8DrYi8xVfSMgEJTNK5oH5z8IkspTW3A1bA3agkdl5DdTyTu6OeGPdTG JBR87f92dNX12UJEsx99PsqTzsGjJB/MNI1xPaCho2OVZ9jg0ZfsXSo8p5UGXHbi SJepv2tZ/Q/MiqwwabqCN/qNhH+2zG92eCZn+nmubWFYk+27BjehCIQjLWc4AjIO pmHaxxoMh2FaysOhosE2jGady/6GGuG0YmeUFpWysS7Dp0g6TMDkNoZ6KW/yu30S u6f81G83ne00tVoVeTI6NUy5MfsnB6s= -----END CERTIFICATE-----Generated at Tue Apr 15 20:15:09 2025 by rpki-client