$ rpki-client -vvf rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft File: kap3g_sCeBmDjEqRyRxg1B-z7qs.mft (raw, json) Hash identifier: iTAVJUXLnkZEruUtwsoZF2yUgL5EsS+9i1dmXb9wlEo= Subject key identifier: 66:04:44:07:FC:65:14:8A:24:96:C6:B6:87:F9:05:C8:58:9B:27:FE Authority key identifier: 91:AA:77:83:FB:02:78:19:83:8C:4A:91:C9:1C:60:D4:1F:B3:EE:AB Certificate issuer: /CN=A9179672/serialNumber=91AA7783FB027819838C4A91C91C60D41FB3EEAB Certificate serial: 90 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kap3g_sCeBmDjEqRyRxg1B-z7qs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft Manifest number: 84 Signing time: Sat 05 Apr 2025 06:03:07 +0000 Manifest this update: Sat 05 Apr 2025 06:03:06 +0000 Manifest next update: Sat 12 Apr 2025 06:03:06 +0000 Files and hashes: 1: kap3g_sCeBmDjEqRyRxg1B-z7qs.crl (hash: qHQBqPrItl7168ZCCEbAwbwsnGpoNMWn779dFCWrsfM=) 2: 8B92BEBE5F6411EFA6B37A52C4F9AE02.roa (hash: gsmwp4OHnwC8hYSd2METX/aBne78nHhg+4ChJNmzP2M=) 3: 4B5B64C25F6411EFBC739B4FC4F9AE02.roa (hash: VYna6cWYFndEMpqakjNTMdAcPe4hQVZ6c7OGBrC7QsU=) 4: 71685FB25F6411EFB16D4552C4F9AE02.roa (hash: swi4PXSK/F+KN97GlDzhN7O3Kmz0645WUAiVa8gtnyQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.crl rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kap3g_sCeBmDjEqRyRxg1B-z7qs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 06:03:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 144 (0x90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179672 Validity Not Before: Apr 5 06:03:06 2025 GMT Not After : Apr 12 06:03:06 2025 GMT Subject: CN=67f0c79a-73bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:17:fb:8a:2d:e2:20:b1:47:0c:30:c0:cd:8c: 9a:5c:5a:07:c9:57:98:cf:d6:5d:82:2e:14:20:8b: 24:32:2f:15:2c:46:4f:fd:0a:d5:7d:e4:8d:97:f4: e4:0d:66:ac:c3:15:02:9f:c3:31:96:1b:16:3c:07: aa:6f:e2:a3:d9:48:76:90:af:8d:90:d0:da:e9:f0: 7c:05:c0:c7:5c:a7:fa:43:71:48:54:b3:c8:a8:5f: 7c:73:27:18:9d:92:1b:51:64:57:de:c2:37:fe:4d: a2:4e:bb:6c:44:95:ef:3d:de:e9:b8:17:69:51:c8: 27:53:c1:3c:68:6b:05:5b:09:b2:22:72:49:9e:54: ea:56:23:b8:a0:e8:d9:f2:a2:87:d7:78:f6:4b:96: f2:0e:e6:c7:fa:5d:0b:81:cd:3d:b6:82:0f:2f:5b: 45:9c:56:82:9d:6a:be:af:92:fb:0d:2f:1a:e1:03: 4a:25:1e:23:82:61:9b:09:3d:ce:5a:ce:0d:c7:51: 86:ab:92:5d:74:a8:bc:12:6f:82:45:0b:a5:81:e6: 6d:30:2f:91:20:c8:65:82:38:25:d5:82:d1:47:c0: 74:df:34:cc:e8:9f:00:33:9e:6b:ba:6c:9d:f3:a7: 16:51:57:66:62:ed:cf:a4:f8:db:de:01:76:26:06: da:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:04:44:07:FC:65:14:8A:24:96:C6:B6:87:F9:05:C8:58:9B:27:FE X509v3 Authority Key Identifier: keyid:91:AA:77:83:FB:02:78:19:83:8C:4A:91:C9:1C:60:D4:1F:B3:EE:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kap3g_sCeBmDjEqRyRxg1B-z7qs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:2f:95:69:4e:b2:ed:a8:3a:79:2b:09:90:a1:fc:ef:bb:86: 12:f9:80:fc:ac:e4:17:23:a3:db:73:84:a2:48:23:cf:89:45: 73:b3:ca:ea:de:e7:56:31:d0:37:0c:42:54:05:77:9f:65:7b: 34:70:a0:4b:54:40:7d:e8:62:ce:6a:67:51:7a:d3:6d:f6:64: 80:ec:ef:94:aa:4a:1d:99:9a:bd:3a:7a:1d:8a:57:ee:a4:19: a9:04:1e:23:cb:5d:d0:e3:1b:5e:80:4a:a9:e1:26:d3:7c:38: 39:ee:5b:e9:19:23:6b:9d:f5:eb:6c:f7:d0:2c:91:9f:ca:3e: 06:bc:18:36:9a:84:8b:c6:2e:71:26:e4:ef:57:8c:25:88:46: 77:e3:fd:0b:e0:e6:9d:b9:e8:9d:cf:df:28:9d:28:eb:e1:55: 7b:2c:da:70:3a:92:61:b0:6c:3a:2b:78:5e:43:37:05:0e:c0: cc:da:0a:bd:09:ee:c4:61:f0:08:05:21:bf:fa:8b:f6:34:97: 1e:3c:92:c3:fe:24:84:d6:0f:8b:7f:e6:ea:28:72:3d:e2:e4: 50:3f:0b:c9:58:64:1e:4a:9d:34:27:24:18:1f:38:82:56:49: 3c:9e:33:98:35:06:c4:6f:90:51:9c:32:00:52:27:7c:51:73: 61:69:6c:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzk2NzIxMTAvBgNVBAUTKDkxQUE3NzgzRkIwMjc4MTk4MzhDNEE5MUM5MUM2MEQ0 MUZCM0VFQUIwHhcNMjUwNDA1MDYwMzA2WhcNMjUwNDEyMDYwMzA2WjAYMRYwFAYD VQQDEw02N2YwYzc5YS03M2JjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Rf7ii3iILFHDDDAzYyaXFoHyVeYz9Zdgi4UIIskMi8VLEZP/QrVfeSNl/Tk DWaswxUCn8MxlhsWPAeqb+Kj2Uh2kK+NkNDa6fB8BcDHXKf6Q3FIVLPIqF98cycY nZIbUWRX3sI3/k2iTrtsRJXvPd7puBdpUcgnU8E8aGsFWwmyInJJnlTqViO4oOjZ 8qKH13j2S5byDubH+l0Lgc09toIPL1tFnFaCnWq+r5L7DS8a4QNKJR4jgmGbCT3O Ws4Nx1GGq5JddKi8Em+CRQulgeZtMC+RIMhlgjgl1YLRR8B03zTM6J8AM55rumyd 86cWUVdmYu3PpPjb3gF2JgbapwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGYERAf8 ZRSKJJbGtof5BchYmyf+MB8GA1UdIwQYMBaAFJGqd4P7AngZg4xKkckcYNQfs+6r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OTY3Mi9FNUY0NUFEMDVG NTQxMUVGOEQxOEJFMjNDNEY5QUUwMi9rYXAzZ19zQ2VCbURqRXFSeVJ4ZzFCLXo3 cXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2thcDNnX3NDZUJtRGpFcVJ5UnhnMUItejdxcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OTY3Mi9FNUY0NUFEMDVGNTQxMUVGOEQxOEJFMjNDNEY5QUUwMi9rYXAzZ19zQ2VC bURqRXFSeVJ4ZzFCLXo3cXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyL5VpTrLtqDp5KwmQofzvu4YS+YD8rOQXI6Pbc4SiSCPPiUVzs8rq 3udWMdA3DEJUBXefZXs0cKBLVEB96GLOamdRetNt9mSA7O+UqkodmZq9Onodilfu pBmpBB4jy13Q4xtegEqp4SbTfDg57lvpGSNrnfXrbPfQLJGfyj4GvBg2moSLxi5x JuTvV4wliEZ34/0L4Oadueidz98onSjr4VV7LNpwOpJhsGw6K3heQzcFDsDM2gq9 Ce7EYfAIBSG/+ov2NJcePJLD/iSE1g+Lf+bqKHI94uRQPwvJWGQeSp00JyQYHziC Vkk8njOYNQbEb5BRnDIAUid8UXNhaWwc -----END CERTIFICATE-----Generated at Sat Apr 5 19:48:07 2025 by rpki-client