$ rpki-client -vvf rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.mft File: iEthKajamClnFMU6WhKA_RAZ-KM.mft (raw, json) Hash identifier: VOrzQPwfTAF/2CqzvAOD+6EcSiTS1VwUnlfRHNPcN28= Subject key identifier: 1E:5B:84:2C:71:BE:65:94:2B:92:AD:B5:38:41:1A:80:A8:BF:1D:A4 Authority key identifier: 88:4B:61:29:A8:DA:98:29:67:14:C5:3A:5A:12:80:FD:10:19:F8:A3 Certificate issuer: /CN=A915F6E4/serialNumber=884B6129A8DA98296714C53A5A1280FD1019F8A3 Certificate serial: 0131 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEthKajamClnFMU6WhKA_RAZ-KM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.mft Manifest number: 012A Signing time: Sat 29 Mar 2025 04:04:14 +0000 Manifest this update: Sat 29 Mar 2025 04:04:13 +0000 Manifest next update: Sat 05 Apr 2025 04:04:13 +0000 Files and hashes: 1: iEthKajamClnFMU6WhKA_RAZ-KM.crl (hash: /RgbzwvB8X3ZMB50F69olIJ1QM1P+fUlcdeItiWr/3o=) 2: E1B42772611A11EE9022C77EC4F9AE02.roa (hash: UvdgbLYF5+vRHqxdggCtIs+aJSz12jANKpYmMkrt0HU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.crl rsync://rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEthKajamClnFMU6WhKA_RAZ-KM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 04:04:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 305 (0x131) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F6E4 Validity Not Before: Mar 29 04:04:13 2025 GMT Not After : Apr 5 04:04:13 2025 GMT Subject: CN=67e7713e-9c9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:be:69:41:37:b3:07:66:18:cc:68:05:b5:89: 9d:33:cb:c5:c0:5b:ce:0a:4a:a1:84:aa:a4:e3:a6: 73:55:1a:16:c2:90:c8:19:19:a8:82:28:85:c6:99: ea:f5:6f:f9:72:a6:0a:42:c1:b1:79:e0:4b:9d:69: 7b:46:aa:a1:d4:d4:82:d7:28:33:09:9f:73:ee:5e: 98:b1:ae:1d:b9:d2:29:40:a3:67:de:bb:c0:8f:8a: 66:ea:90:9d:72:08:23:9d:69:f3:60:87:a5:ee:39: ad:46:ed:ef:74:ec:e4:23:57:94:c3:6a:6b:d4:5f: c7:8b:4b:0b:32:8a:97:4f:be:71:b5:56:77:44:97: 31:21:61:84:ff:8d:fa:2f:f0:2f:60:35:10:94:74: aa:87:d7:d0:c4:11:1b:35:45:77:4f:d4:c4:b7:cf: 32:d7:c4:e1:0c:f8:ed:f2:df:50:c6:7a:ff:09:63: 6a:53:71:6a:41:12:e2:26:98:9e:2e:3e:8e:66:ba: 66:df:38:f9:25:eb:0d:34:2c:c5:59:11:56:60:4b: 3e:5a:39:81:08:2d:97:1e:3d:d8:63:07:9b:4f:3e: b2:c7:16:c7:3a:b6:09:2f:27:a1:47:41:12:51:e0: 87:3b:14:25:08:02:a1:9d:60:e8:8d:2e:40:60:54: 0e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:5B:84:2C:71:BE:65:94:2B:92:AD:B5:38:41:1A:80:A8:BF:1D:A4 X509v3 Authority Key Identifier: keyid:88:4B:61:29:A8:DA:98:29:67:14:C5:3A:5A:12:80:FD:10:19:F8:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEthKajamClnFMU6WhKA_RAZ-KM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:35:91:a1:20:5e:48:b0:e9:a1:d8:92:79:f7:7f:9a:6e:fe: 02:b7:d4:cc:3c:7e:1b:bb:ff:3d:ad:2c:f0:69:82:e2:99:29: 72:bc:19:0d:6e:01:ca:1c:4a:93:5f:f5:9e:99:47:03:5d:9d: 24:fd:61:c9:86:fe:52:9d:55:da:d8:f0:b2:d3:e9:ee:a5:13: dc:f2:ca:ca:e7:8b:eb:9b:e4:58:82:86:a1:e7:ed:76:4c:85: 4b:5b:31:30:c2:8d:62:ae:b9:1e:cf:be:33:71:52:a0:b0:70: 07:5d:82:f5:f9:9a:ad:9b:50:02:6e:33:fc:d1:11:53:20:80: 04:5f:f7:c9:94:c2:9c:3e:c7:d9:ea:21:70:66:d5:34:c6:c1: 6e:8f:69:9d:a4:a2:34:95:04:87:74:f6:19:d2:bb:4f:cf:07: 97:e1:cb:da:02:4b:34:11:c6:58:43:12:69:8e:f7:17:ad:bf: 32:82:78:74:ab:a4:1b:b7:07:99:1d:1e:81:7a:c7:8d:23:4c: a9:20:c3:77:a1:8a:75:a8:d5:d1:0e:7e:49:31:f1:ad:21:6e: e5:40:50:2c:5b:a5:f9:7f:4a:eb:d9:62:56:18:34:88:35:44: db:e7:b7:af:91:88:8f:6b:f3:5b:e1:3a:c8:b3:69:a9:de:23: 13:bc:4c:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUY2RTQxMTAvBgNVBAUTKDg4NEI2MTI5QThEQTk4Mjk2NzE0QzUzQTVBMTI4MEZE MTAxOUY4QTMwHhcNMjUwMzI5MDQwNDEzWhcNMjUwNDA1MDQwNDEzWjAYMRYwFAYD VQQDEw02N2U3NzEzZS05YzliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvL5pQTezB2YYzGgFtYmdM8vFwFvOCkqhhKqk46ZzVRoWwpDIGRmogiiFxpnq 9W/5cqYKQsGxeeBLnWl7Rqqh1NSC1ygzCZ9z7l6Ysa4dudIpQKNn3rvAj4pm6pCd cggjnWnzYIel7jmtRu3vdOzkI1eUw2pr1F/Hi0sLMoqXT75xtVZ3RJcxIWGE/436 L/AvYDUQlHSqh9fQxBEbNUV3T9TEt88y18ThDPjt8t9Qxnr/CWNqU3FqQRLiJpie Lj6OZrpm3zj5JesNNCzFWRFWYEs+WjmBCC2XHj3YYwebTz6yxxbHOrYJLyehR0ES UeCHOxQlCAKhnWDojS5AYFQOgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB5bhCxx vmWUK5KttThBGoCovx2kMB8GA1UdIwQYMBaAFIhLYSmo2pgpZxTFOloSgP0QGfij MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RjZFNC9DQTgxRDlGRTRF MTAxMUVFOUZFMEJEMjZDNEY5QUUwMi9pRXRoS2FqYW1DbG5GTVU2V2hLQV9SQVot S00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lFdGhLYWphbUNsbkZNVTZXaEtBX1JBWi1LTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RjZFNC9DQTgxRDlGRTRFMTAxMUVFOUZFMEJEMjZDNEY5QUUwMi9pRXRoS2FqYW1D bG5GTVU2V2hLQV9SQVotS00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3NZGhIF5IsOmh2JJ593+abv4Ct9TMPH4bu/89rSzwaYLimSlyvBkN bgHKHEqTX/WemUcDXZ0k/WHJhv5SnVXa2PCy0+nupRPc8srK54vrm+RYgoah5+12 TIVLWzEwwo1irrkez74zcVKgsHAHXYL1+Zqtm1ACbjP80RFTIIAEX/fJlMKcPsfZ 6iFwZtU0xsFuj2mdpKI0lQSHdPYZ0rtPzweX4cvaAks0EcZYQxJpjvcXrb8ygnh0 q6QbtweZHR6BeseNI0ypIMN3oYp1qNXRDn5JMfGtIW7lQFAsW6X5f0rr2WJWGDSI NUTb57evkYiPa/Nb4TrIs2mp3iMTvEyg -----END CERTIFICATE-----Generated at Fri Apr 4 22:00:31 2025 by rpki-client