$ rpki-client -vvf rpki.apnic.net/member_repository/A9157BC3/708E6F68926111EDA5204E64C4F9AE02/KKyX2Zh-eNvuncufA3NcKDvOGGI.mft File: KKyX2Zh-eNvuncufA3NcKDvOGGI.mft (raw, json) Hash identifier: lP+5bihcCwu2bYR1otCLjeIUckV1ull1cwcUiwZN4aY= Subject key identifier: 9E:C6:1F:3B:EB:F0:8C:09:C1:D1:AB:7F:8A:D9:42:DC:45:A4:8C:32 Authority key identifier: 28:AC:97:D9:98:7E:78:DB:EE:9D:CB:9F:03:73:5C:28:3B:CE:18:62 Certificate issuer: /CN=A9157BC3/serialNumber=28AC97D9987E78DBEE9DCB9F03735C283BCE1862 Certificate serial: 01AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KKyX2Zh-eNvuncufA3NcKDvOGGI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157BC3/708E6F68926111EDA5204E64C4F9AE02/KKyX2Zh-eNvuncufA3NcKDvOGGI.mft Manifest number: 01A7 Signing time: Tue 15 Apr 2025 02:19:03 +0000 Manifest this update: Tue 15 Apr 2025 02:19:03 +0000 Manifest next update: Tue 22 Apr 2025 02:19:03 +0000 Files and hashes: 1: KKyX2Zh-eNvuncufA3NcKDvOGGI.crl (hash: IWeq8YS1YFFgBd+DRJbM+C5WgCqocmZUvcaNAd6jNMs=) 2: 1FCD9DE2926611EDA99A9419C4F9AE02.roa (hash: RqBWzz5uXzyQ1KueU4cHYCTj7govMSTdgiL2egEdolc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157BC3/708E6F68926111EDA5204E64C4F9AE02/KKyX2Zh-eNvuncufA3NcKDvOGGI.crl rsync://rpki.apnic.net/member_repository/A9157BC3/708E6F68926111EDA5204E64C4F9AE02/KKyX2Zh-eNvuncufA3NcKDvOGGI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KKyX2Zh-eNvuncufA3NcKDvOGGI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 02:19:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 426 (0x1aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157BC3, serialNumber=28AC97D9987E78DBEE9DCB9F03735C283BCE1862 Validity Not Before: Apr 15 02:19:03 2025 GMT Not After : Apr 22 02:19:03 2025 GMT Subject: CN=67fdc217-a4a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:02:bf:89:fc:3b:d5:0f:e0:9f:21:29:bf:d3: 3e:72:ca:16:ed:f8:f6:c0:c9:2e:c7:88:eb:7b:37: e3:87:90:c7:85:ea:87:7d:69:9a:94:b4:fc:03:62: fc:32:1b:47:82:21:26:ba:05:8d:2a:68:c7:ec:75: b1:cd:8f:f2:2d:fc:49:38:b8:f5:9a:6b:51:4a:6c: b8:26:a7:c5:fb:98:6f:88:04:82:01:99:66:33:5b: ad:12:f3:74:1d:0b:df:72:f8:d9:cc:0b:31:85:72: 8b:15:d5:47:98:9c:66:b7:c7:34:74:63:15:3e:4c: ce:c1:ab:c2:63:69:ab:d2:84:0f:20:93:d9:eb:79: c7:02:f2:4c:fb:08:92:1b:12:2a:ec:2e:ad:3f:72: 36:c4:a1:80:a0:b7:82:1c:8d:55:4d:1b:c8:e3:9d: 7c:68:18:d6:9c:45:8b:83:36:6f:c9:56:5f:ea:08: d6:b2:3d:22:94:6a:28:70:57:57:68:91:4f:5f:14: 94:6d:65:d0:f8:20:97:ac:5a:0e:d8:bb:48:ae:6e: 55:a7:fa:17:fd:cf:77:09:0d:83:99:57:bc:85:6b: 9f:f9:1a:13:39:f2:4b:74:80:fe:5e:65:3e:eb:94: 1e:35:50:23:84:57:84:a3:6e:ed:5a:60:b4:c3:e5: a1:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:C6:1F:3B:EB:F0:8C:09:C1:D1:AB:7F:8A:D9:42:DC:45:A4:8C:32 X509v3 Authority Key Identifier: keyid:28:AC:97:D9:98:7E:78:DB:EE:9D:CB:9F:03:73:5C:28:3B:CE:18:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157BC3/708E6F68926111EDA5204E64C4F9AE02/KKyX2Zh-eNvuncufA3NcKDvOGGI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KKyX2Zh-eNvuncufA3NcKDvOGGI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157BC3/708E6F68926111EDA5204E64C4F9AE02/KKyX2Zh-eNvuncufA3NcKDvOGGI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:2b:e1:9f:cc:c3:e7:e1:c3:01:e2:73:bb:8e:e9:5e:fd:cc: 36:7d:52:23:c5:0d:ff:6a:7c:35:68:3d:e4:04:3c:93:7b:0c: 09:2d:92:d5:ef:62:13:6c:4e:39:6a:0b:86:92:6c:e0:78:d5: 23:d5:e5:57:f1:96:9d:6d:f2:b1:8d:ee:62:e2:22:4e:cc:ae: 64:26:21:b7:dc:ac:ce:73:5d:6c:b6:90:c1:89:3d:38:c5:dc: c9:8b:05:b7:40:66:f5:64:d4:a0:57:a9:f8:8d:52:2f:56:16: ca:d7:b8:77:2f:06:42:bd:87:b6:da:31:cb:38:01:de:7a:8a: 59:a1:98:d2:bc:29:45:f6:cd:a0:2e:1c:91:7c:9b:6a:75:67: 95:e5:02:d2:8f:41:23:79:73:95:ec:8e:13:d4:4b:f7:41:47: 06:54:fc:4f:98:f7:d0:da:70:4a:67:40:95:2f:c5:d7:b7:ff: 1b:ac:d6:0f:0d:dd:3e:bd:34:1e:b8:00:0b:b1:3b:37:e2:68: 26:37:3d:f6:4e:05:4f:6e:2f:f0:48:dd:07:98:44:03:42:14: 09:3a:2c:2a:92:28:dc:d3:35:7c:99:9b:28:01:e7:2a:35:47: ca:1f:12:af:1d:a0:d7:e3:c1:d6:e0:ed:33:4f:92:89:e4:cc: 1b:95:64:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdCQzMxMTAvBgNVBAUTKDI4QUM5N0Q5OTg3RTc4REJFRTlEQ0I5RjAzNzM1QzI4 M0JDRTE4NjIwHhcNMjUwNDE1MDIxOTAzWhcNMjUwNDIyMDIxOTAzWjAYMRYwFAYD VQQDEw02N2ZkYzIxNy1hNGEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwQK/ifw71Q/gnyEpv9M+csoW7fj2wMkux4jrezfjh5DHheqHfWmalLT8A2L8 MhtHgiEmugWNKmjH7HWxzY/yLfxJOLj1mmtRSmy4JqfF+5hviASCAZlmM1utEvN0 HQvfcvjZzAsxhXKLFdVHmJxmt8c0dGMVPkzOwavCY2mr0oQPIJPZ63nHAvJM+wiS GxIq7C6tP3I2xKGAoLeCHI1VTRvI4518aBjWnEWLgzZvyVZf6gjWsj0ilGoocFdX aJFPXxSUbWXQ+CCXrFoO2LtIrm5Vp/oX/c93CQ2DmVe8hWuf+RoTOfJLdID+XmU+ 65QeNVAjhFeEo27tWmC0w+Wh6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ7GHzvr 8IwJwdGrf4rZQtxFpIwyMB8GA1UdIwQYMBaAFCisl9mYfnjb7p3LnwNzXCg7zhhi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0JDMy83MDhFNkY2ODky NjExMUVEQTUyMDRFNjRDNEY5QUUwMi9LS3lYMlpoLWVOdnVuY3VmQTNOY0tEdk9H R0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tLeVgyWmgtZU52dW5jdWZBM05jS0R2T0dHSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0JDMy83MDhFNkY2ODkyNjExMUVEQTUyMDRFNjRDNEY5QUUwMi9LS3lYMlpoLWVO dnVuY3VmQTNOY0tEdk9HR0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGK+GfzMPn4cMB4nO7jule/cw2fVIjxQ3/anw1aD3kBDyTewwJLZLV 72ITbE45aguGkmzgeNUj1eVX8ZadbfKxje5i4iJOzK5kJiG33KzOc11stpDBiT04 xdzJiwW3QGb1ZNSgV6n4jVIvVhbK17h3LwZCvYe22jHLOAHeeopZoZjSvClF9s2g LhyRfJtqdWeV5QLSj0EjeXOV7I4T1Ev3QUcGVPxPmPfQ2nBKZ0CVL8XXt/8brNYP Dd0+vTQeuAALsTs34mgmNz32TgVPbi/wSN0HmEQDQhQJOiwqkijc0zV8mZsoAecq NUfKHxKvHaDX48HW4O0zT5KJ5MwblWTy -----END CERTIFICATE-----Generated at Wed Apr 16 17:18:10 2025 by rpki-client