$ rpki-client -vvf rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft File: kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft (raw, json) Hash identifier: ztizeb08YjckPoykfSeI60iE3RhfZXUUKNziSxYDzSY= Subject key identifier: DC:85:76:AE:04:07:F9:02:98:07:34:A8:DD:E7:FD:29:72:31:9A:10 Authority key identifier: 90:F5:30:64:D0:48:C0:CC:F8:BC:D8:F8:98:C0:66:A1:31:74:BF:A7 Certificate issuer: /CN=A9181EAA/serialNumber=90F53064D048C0CCF8BCD8F898C066A13174BFA7 Certificate serial: 09D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kPUwZNBIwMz4vNj4mMBmoTF0v6c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft Manifest number: 09C4 Signing time: Fri 04 Apr 2025 16:12:32 +0000 Manifest this update: Fri 04 Apr 2025 16:12:31 +0000 Manifest next update: Fri 11 Apr 2025 16:12:31 +0000 Files and hashes: 1: kPUwZNBIwMz4vNj4mMBmoTF0v6c.crl (hash: EWROc3DiOyWgFrFZ6BaNIK9pLPQXi4m9XIM4OzLUTL4=) 2: C32E05EEA10011EAA9C71D3AC4F9AE02.roa (hash: iLsqzUs1EOc2H2HJP2UkL+mYLQ5HY7IBKFpu82r2gzI=) 3: 24F4E436A10211EABCED8740C4F9AE02.roa (hash: fSyqxt+thtJ8EftQ6rivJuvYTMv0PKjtJE/N/crpwfo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.crl rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kPUwZNBIwMz4vNj4mMBmoTF0v6c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 16:12:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2516 (0x9d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181EAA Validity Not Before: Apr 4 16:12:31 2025 GMT Not After : Apr 11 16:12:31 2025 GMT Subject: CN=67f004f0-7ad9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:a1:3a:1f:d2:9a:6f:c7:70:91:1f:e4:5e:66: 9e:c8:c6:70:5f:4d:9c:f8:7a:df:66:6e:5b:75:4a: d4:6c:ab:e6:be:d7:96:f9:82:d9:46:d8:9d:64:1a: 12:b8:27:02:6a:9f:d5:6a:d5:62:23:42:3e:5c:87: a6:b2:b6:e9:d5:38:78:f3:04:5f:5f:57:9d:30:8d: bd:ad:0f:54:54:94:5c:6e:8f:9e:6d:82:de:2e:fc: f6:7a:cc:9c:39:9c:a5:5c:cb:c2:aa:07:83:57:51: e3:98:5a:6b:a6:a9:78:3b:43:12:81:e5:bf:d1:46: d3:95:b8:a9:4e:c2:20:c2:ee:e5:1b:dd:d4:b4:56: f7:69:d6:40:8f:3f:f5:53:fd:b7:dc:17:32:a4:46: ba:30:c9:59:bf:ff:1f:5c:20:a4:37:ce:4c:ed:45: aa:c7:e5:48:2f:60:9f:57:15:0b:1b:c5:c5:52:4f: b3:6a:2c:4c:97:f0:c1:2c:d0:b5:2f:61:d1:af:ab: 44:f9:aa:13:40:39:e9:d2:b0:76:dc:5c:be:a5:c3: 12:70:10:ed:bc:76:bf:be:ca:6d:21:09:7b:d8:0e: ca:28:9a:cf:f0:4e:7a:aa:0a:dd:eb:98:4b:ee:2e: 4f:a3:41:d7:e6:08:c9:af:eb:af:28:ac:2a:a5:55: c9:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:85:76:AE:04:07:F9:02:98:07:34:A8:DD:E7:FD:29:72:31:9A:10 X509v3 Authority Key Identifier: keyid:90:F5:30:64:D0:48:C0:CC:F8:BC:D8:F8:98:C0:66:A1:31:74:BF:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kPUwZNBIwMz4vNj4mMBmoTF0v6c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:fe:c3:7e:29:a9:d9:45:91:4a:d1:26:5d:3e:cb:fe:bf:25: d2:d0:60:b0:47:58:3e:c9:9c:3c:06:60:29:de:78:3d:03:5e: 33:31:3c:7f:88:4a:d2:35:84:62:63:ac:b0:86:91:9d:74:55: a9:0b:96:5d:7a:60:42:c1:95:6d:91:fc:e7:a9:1e:71:cf:03: 87:d6:48:f5:6a:89:f6:5a:a6:dd:12:de:2c:78:4c:9e:a2:87: a8:51:94:bb:4f:0f:0c:ab:85:ad:dd:81:d9:9f:bd:36:7d:f7: 6d:c7:3a:d2:cb:a2:3a:45:0d:d9:2a:b5:ff:73:e8:40:1a:05: bf:bc:4a:71:ea:4f:83:f0:1d:7a:9e:b3:87:00:18:82:0e:4c: 5d:8e:8b:97:da:17:1a:db:5b:61:10:bf:2c:b9:90:b8:2e:39: ba:8c:29:c0:c5:de:2b:bf:67:97:73:31:2c:d7:7c:25:3e:55: 57:b9:ee:e6:48:7e:82:89:5f:3f:b0:8f:54:f5:06:77:87:70: 62:75:30:dc:56:29:2f:7a:35:45:30:fb:4f:55:f7:ff:9e:03: bd:5c:bb:d9:fa:2a:90:a7:a3:3b:89:d4:11:8d:e2:5d:33:c5: 78:65:87:d2:1c:00:69:a1:a3:aa:dc:ec:46:32:10:7f:de:38: 7d:6d:61:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODFFQUExMTAvBgNVBAUTKDkwRjUzMDY0RDA0OEMwQ0NGOEJDRDhGODk4QzA2NkEx MzE3NEJGQTcwHhcNMjUwNDA0MTYxMjMxWhcNMjUwNDExMTYxMjMxWjAYMRYwFAYD VQQDEw02N2YwMDRmMC03YWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6qE6H9Kab8dwkR/kXmaeyMZwX02c+HrfZm5bdUrUbKvmvteW+YLZRtidZBoS uCcCap/VatViI0I+XIemsrbp1Th48wRfX1edMI29rQ9UVJRcbo+ebYLeLvz2esyc OZylXMvCqgeDV1HjmFprpql4O0MSgeW/0UbTlbipTsIgwu7lG93UtFb3adZAjz/1 U/233BcypEa6MMlZv/8fXCCkN85M7UWqx+VIL2CfVxULG8XFUk+zaixMl/DBLNC1 L2HRr6tE+aoTQDnp0rB23Fy+pcMScBDtvHa/vsptIQl72A7KKJrP8E56qgrd65hL 7i5Po0HX5gjJr+uvKKwqpVXJJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNyFdq4E B/kCmAc0qN3n/SlyMZoQMB8GA1UdIwQYMBaAFJD1MGTQSMDM+LzY+JjAZqExdL+n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MUVBQS8wNzdGQ0RCNDdF RDIxMUVBOUVCOEQ1NzlDNEY5QUUwMi9rUFV3Wk5CSXdNejR2Tmo0bU1CbW9URjB2 NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2tQVXdaTkJJd016NHZOajRtTUJtb1RGMHY2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MUVBQS8wNzdGQ0RCNDdFRDIxMUVBOUVCOEQ1NzlDNEY5QUUwMi9rUFV3Wk5CSXdN ejR2Tmo0bU1CbW9URjB2NmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+/sN+KanZRZFK0SZdPsv+vyXS0GCwR1g+yZw8BmAp3ng9A14zMTx/ iErSNYRiY6ywhpGddFWpC5ZdemBCwZVtkfznqR5xzwOH1kj1aon2WqbdEt4seEye ooeoUZS7Tw8Mq4Wt3YHZn702ffdtxzrSy6I6RQ3ZKrX/c+hAGgW/vEpx6k+D8B16 nrOHABiCDkxdjouX2hca21thEL8suZC4Ljm6jCnAxd4rv2eXczEs13wlPlVXue7m SH6CiV8/sI9U9QZ3h3BidTDcVikvejVFMPtPVff/ngO9XLvZ+iqQp6M7idQRjeJd M8V4ZYfSHABpoaOq3OxGMhB/3jh9bWFE -----END CERTIFICATE-----Generated at Sat Apr 5 19:18:52 2025 by rpki-client