$ rpki-client -vvf rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/KwN-XtvChKOTiNGbzUXS2UdLMZs.mft File: KwN-XtvChKOTiNGbzUXS2UdLMZs.mft (raw, json) Hash identifier: Q3oqqHcXTnzCzR4f5pMlEgVKAPXkDsOUk9MfuuiP6C4= Subject key identifier: 14:17:46:D9:51:FD:93:D1:8A:26:C5:83:C0:8F:57:FA:59:B3:3F:A0 Authority key identifier: 2B:03:7E:5E:DB:C2:84:A3:93:88:D1:9B:CD:45:D2:D9:47:4B:31:9B Certificate issuer: /CN=A9183A80/serialNumber=2B037E5EDBC284A39388D19BCD45D2D9474B319B Certificate serial: 03B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KwN-XtvChKOTiNGbzUXS2UdLMZs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/KwN-XtvChKOTiNGbzUXS2UdLMZs.mft Manifest number: 0442 Signing time: Thu 03 Apr 2025 00:42:58 +0000 Manifest this update: Thu 03 Apr 2025 00:42:57 +0000 Manifest next update: Thu 10 Apr 2025 00:42:57 +0000 Files and hashes: 1: KwN-XtvChKOTiNGbzUXS2UdLMZs.crl (hash: qMrOHx4D3OIpOULXKk+UAD+O+IVcC2o02i5T4LYVpF8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/KwN-XtvChKOTiNGbzUXS2UdLMZs.crl rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/KwN-XtvChKOTiNGbzUXS2UdLMZs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KwN-XtvChKOTiNGbzUXS2UdLMZs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 00:42:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 951 (0x3b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183A80 Validity Not Before: Apr 3 00:42:57 2025 GMT Not After : Apr 10 00:42:57 2025 GMT Subject: CN=67edd991-b0a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3f:b4:62:02:eb:d2:07:69:db:f7:a5:98:cf: ac:6c:e2:b5:07:96:74:84:c5:bc:1d:b5:49:2c:56: 14:fa:45:d7:b2:d7:25:ff:00:8e:b4:d7:4c:4a:d1: f6:41:a7:e8:55:67:0e:e5:2a:f7:91:e1:84:0b:8d: 84:81:52:a4:0c:83:5f:7c:15:64:e4:3d:7d:5a:27: fa:d4:82:92:f6:72:74:23:f6:ce:c9:32:2e:ce:0f: 01:b3:44:ee:bb:95:87:c4:08:3b:63:cd:2a:44:d7: f8:05:89:43:3b:5c:97:55:e8:55:2e:ba:50:47:ea: cb:1d:f0:98:69:51:df:01:a0:64:8d:68:5c:a4:3d: 7e:dc:77:51:62:01:fb:c0:2b:c2:a6:e3:c0:51:7a: 6c:e1:56:54:84:58:c6:49:36:8f:ec:ff:c0:dd:89: 3a:6b:2b:e4:31:2e:9f:61:96:ce:b7:6e:af:19:41: 9e:74:db:63:17:e4:45:bc:15:8c:df:f4:d4:0b:3f: a3:a9:9d:f7:fe:4c:d5:23:19:19:fa:e7:aa:35:0f: 7b:57:8c:81:8c:1d:4f:b4:9a:5a:09:31:4e:cd:eb: 7d:fa:a2:d8:8a:00:ce:09:06:48:78:9f:45:ad:02: 94:94:bc:15:f6:b5:20:0a:33:a3:ab:50:95:37:5a: ab:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:17:46:D9:51:FD:93:D1:8A:26:C5:83:C0:8F:57:FA:59:B3:3F:A0 X509v3 Authority Key Identifier: keyid:2B:03:7E:5E:DB:C2:84:A3:93:88:D1:9B:CD:45:D2:D9:47:4B:31:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/KwN-XtvChKOTiNGbzUXS2UdLMZs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KwN-XtvChKOTiNGbzUXS2UdLMZs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/KwN-XtvChKOTiNGbzUXS2UdLMZs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:ba:25:62:b5:8f:43:30:c7:e9:1d:ff:15:f0:05:cf:0e:2d: 4a:20:56:2c:8c:64:92:f1:57:40:5d:d4:7f:29:ee:e7:5e:7a: a2:23:d5:91:e6:c7:ba:98:c6:99:2f:54:cf:a4:f1:39:9f:2c: 29:05:26:8b:83:ae:48:1f:a8:ad:64:a6:8f:ef:f3:db:61:ae: 37:55:62:bf:1b:56:47:90:10:2a:c6:95:45:82:cb:86:b8:2e: b9:10:0e:60:b7:45:04:3e:d2:9c:37:60:68:70:09:c4:91:83: 85:33:16:6d:f6:a9:a8:a7:f4:96:e6:78:4a:ae:f8:ea:8a:2d: f8:95:d3:86:e7:97:53:26:4d:58:66:9b:36:51:cb:a7:44:da: ee:a4:a5:70:34:b6:ba:33:6b:a0:2d:e1:4b:28:9a:50:bd:a1: 39:27:2a:a9:d2:50:51:be:73:20:fb:c5:5c:b4:0e:9a:22:49: 9a:e7:33:a7:f3:d1:ff:57:00:64:b2:f4:2a:31:86:08:6a:8a: eb:8c:b6:e2:49:4e:12:f3:12:b4:8a:f1:b3:a1:08:f4:cb:c0: e9:85:8b:f4:3a:cb:24:08:0a:db:60:bb:d2:ff:9b:a5:97:c5: 33:1a:42:0e:e7:02:1d:3a:85:91:9b:92:1a:28:78:a3:84:b4: 0e:de:b6:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODNBODAxMTAvBgNVBAUTKDJCMDM3RTVFREJDMjg0QTM5Mzg4RDE5QkNENDVEMkQ5 NDc0QjMxOUIwHhcNMjUwNDAzMDA0MjU3WhcNMjUwNDEwMDA0MjU3WjAYMRYwFAYD VQQDEw02N2VkZDk5MS1iMGE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuj+0YgLr0gdp2/elmM+sbOK1B5Z0hMW8HbVJLFYU+kXXstcl/wCOtNdMStH2 QafoVWcO5Sr3keGEC42EgVKkDINffBVk5D19Wif61IKS9nJ0I/bOyTIuzg8Bs0Tu u5WHxAg7Y80qRNf4BYlDO1yXVehVLrpQR+rLHfCYaVHfAaBkjWhcpD1+3HdRYgH7 wCvCpuPAUXps4VZUhFjGSTaP7P/A3Yk6ayvkMS6fYZbOt26vGUGedNtjF+RFvBWM 3/TUCz+jqZ33/kzVIxkZ+ueqNQ97V4yBjB1PtJpaCTFOzet9+qLYigDOCQZIeJ9F rQKUlLwV9rUgCjOjq1CVN1qrYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBQXRtlR /ZPRiibFg8CPV/pZsz+gMB8GA1UdIwQYMBaAFCsDfl7bwoSjk4jRm81F0tlHSzGb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0E4MC82OTAxMTlEMjg4 MUExMUVDQkNDRkEwMEZDNEY5QUUwMi9Ld04tWHR2Q2hLT1RpTkdielVYUzJVZExN WnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0t3Ti1YdHZDaEtPVGlOR2J6VVhTMlVkTE1acy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 M0E4MC82OTAxMTlEMjg4MUExMUVDQkNDRkEwMEZDNEY5QUUwMi9Ld04tWHR2Q2hL T1RpTkdielVYUzJVZExNWnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQuiVitY9DMMfpHf8V8AXPDi1KIFYsjGSS8VdAXdR/Ke7nXnqiI9WR 5se6mMaZL1TPpPE5nywpBSaLg65IH6itZKaP7/PbYa43VWK/G1ZHkBAqxpVFgsuG uC65EA5gt0UEPtKcN2BocAnEkYOFMxZt9qmop/SW5nhKrvjqii34ldOG55dTJk1Y Zps2UcunRNrupKVwNLa6M2ugLeFLKJpQvaE5Jyqp0lBRvnMg+8VctA6aIkma5zOn 89H/VwBksvQqMYYIaorrjLbiSU4S8xK0ivGzoQj0y8DphYv0OsskCArbYLvS/5ul l8UzGkIO5wIdOoWRm5IaKHijhLQO3rbG -----END CERTIFICATE-----Generated at Fri Apr 4 22:30:01 2025 by rpki-client