$ rpki-client -vvf rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/K0QMfEWQAwVRV2J95yFOnKwSi0w.mft File: K0QMfEWQAwVRV2J95yFOnKwSi0w.mft (raw, json) Hash identifier: G2N2gCIC4e6AXP2FtXn624cbG3g2/4J4oIH2i9X1Xt0= Subject key identifier: AD:9C:9B:C0:33:AC:B1:78:AB:E0:54:42:ED:F1:87:89:A0:FA:82:CA Authority key identifier: 2B:44:0C:7C:45:90:03:05:51:57:62:7D:E7:21:4E:9C:AC:12:8B:4C Certificate issuer: /CN=A9187729/serialNumber=2B440C7C459003055157627DE7214E9CAC128B4C Certificate serial: 03B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0QMfEWQAwVRV2J95yFOnKwSi0w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/K0QMfEWQAwVRV2J95yFOnKwSi0w.mft Manifest number: 03B0 Signing time: Mon 07 Apr 2025 00:19:29 +0000 Manifest this update: Mon 07 Apr 2025 00:19:29 +0000 Manifest next update: Mon 14 Apr 2025 00:19:29 +0000 Files and hashes: 1: K0QMfEWQAwVRV2J95yFOnKwSi0w.crl (hash: v20Ga8LZwMUfHMkWNF8a/Y11OJmq/BQ49b0YmAM+CRU=) 2: 394B48F6889811EC9D1DF920C4F9AE02.roa (hash: zNdiJ1pBffbcNnWg75GFO6PkHkmsjOTQiX3Av0Ret+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/K0QMfEWQAwVRV2J95yFOnKwSi0w.crl rsync://rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/K0QMfEWQAwVRV2J95yFOnKwSi0w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0QMfEWQAwVRV2J95yFOnKwSi0w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Apr 2025 00:19:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 948 (0x3b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187729 Validity Not Before: Apr 7 00:19:29 2025 GMT Not After : Apr 14 00:19:29 2025 GMT Subject: CN=67f31a11-0a39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a5:a5:2e:03:57:7d:cd:f0:f1:6c:87:f9:80: ea:30:b6:d6:dd:3f:f0:7d:94:46:89:14:b2:da:f9: e3:db:81:81:7b:7f:f9:74:90:27:16:15:3f:ee:ec: e6:ef:a8:9c:1a:b7:fa:89:92:89:40:15:58:20:b9: fd:cc:16:0f:b5:eb:86:c1:4a:99:6b:71:5b:be:fb: cc:98:76:71:3d:87:b6:ac:bc:85:43:31:45:4a:d7: 27:88:49:6d:6b:f0:ae:ff:fc:c8:67:68:54:f7:9f: d2:76:d6:7e:50:ec:e4:20:10:af:da:80:8c:b3:e5: fa:14:cf:7f:b7:4a:1a:4b:a0:ca:d5:2d:94:67:33: 14:e6:c0:25:d0:53:7a:27:07:cc:e1:3d:62:5c:ff: bf:09:e3:be:00:d5:af:56:58:8a:2f:0b:e1:f5:3e: 0e:78:04:81:b5:fb:85:50:47:b6:c9:c6:2f:93:dd: d1:24:a5:af:27:ca:42:a4:a1:ca:6d:2e:4f:53:bb: 19:9d:df:28:a8:54:19:13:bd:00:d4:9e:f5:7f:0f: 15:55:c7:5e:a6:0c:f4:24:d4:28:41:37:f0:58:fd: 2e:9e:bb:3d:df:97:25:33:d7:16:18:49:87:71:10: 36:29:b2:e8:34:c6:1f:5f:17:2b:bb:fe:d0:57:80: fb:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:9C:9B:C0:33:AC:B1:78:AB:E0:54:42:ED:F1:87:89:A0:FA:82:CA X509v3 Authority Key Identifier: keyid:2B:44:0C:7C:45:90:03:05:51:57:62:7D:E7:21:4E:9C:AC:12:8B:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/K0QMfEWQAwVRV2J95yFOnKwSi0w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0QMfEWQAwVRV2J95yFOnKwSi0w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/K0QMfEWQAwVRV2J95yFOnKwSi0w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:10:60:95:28:cf:67:c2:ac:03:c0:ad:93:c4:3d:ee:e5:c5: f5:cf:b6:ca:cb:aa:d1:5f:33:f5:fd:c4:04:a5:f0:dd:b4:7f: 0d:7d:eb:d3:e8:9c:af:ca:69:c5:33:24:03:99:47:6d:77:7c: 54:57:8b:a7:17:d9:3b:da:aa:b1:c2:2d:bd:cf:e3:70:5e:25: f4:30:15:50:71:77:49:6b:86:8a:d2:4b:0f:b3:d0:90:62:74: fe:b1:f0:da:ea:82:50:4e:01:e7:9f:5d:61:c7:15:37:93:32: 54:99:ea:16:8b:0b:b4:16:74:44:43:65:4c:e7:de:34:2d:78: 7e:f0:b0:04:67:90:ae:15:17:e2:e6:25:41:57:7f:35:22:0e: 8b:5e:58:e2:c1:bd:0f:85:6f:79:6d:b4:fd:f3:3c:2f:db:91: 81:67:b5:49:5f:59:8a:45:6d:6b:e0:8e:50:da:23:d6:8e:1d: 2a:a2:c5:c5:54:1d:f2:2a:30:1f:b0:ba:a2:6e:4b:d5:a0:6f: e6:8e:6d:46:02:0a:f8:14:a5:53:39:88:4d:31:7f:ef:b1:67: 0f:1c:48:3e:f9:72:a7:4d:08:a3:d5:31:05:ea:d9:6e:ea:78: 16:b4:b8:f0:17:7d:83:3a:d5:1f:cf:b4:9f:c0:e1:52:85:9d: 35:17:12:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc3MjkxMTAvBgNVBAUTKDJCNDQwQzdDNDU5MDAzMDU1MTU3NjI3REU3MjE0RTlD QUMxMjhCNEMwHhcNMjUwNDA3MDAxOTI5WhcNMjUwNDE0MDAxOTI5WjAYMRYwFAYD VQQDEw02N2YzMWExMS0wYTM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm6WlLgNXfc3w8WyH+YDqMLbW3T/wfZRGiRSy2vnj24GBe3/5dJAnFhU/7uzm 76icGrf6iZKJQBVYILn9zBYPteuGwUqZa3FbvvvMmHZxPYe2rLyFQzFFStcniElt a/Cu//zIZ2hU95/SdtZ+UOzkIBCv2oCMs+X6FM9/t0oaS6DK1S2UZzMU5sAl0FN6 JwfM4T1iXP+/CeO+ANWvVliKLwvh9T4OeASBtfuFUEe2ycYvk93RJKWvJ8pCpKHK bS5PU7sZnd8oqFQZE70A1J71fw8VVcdepgz0JNQoQTfwWP0unrs935clM9cWGEmH cRA2KbLoNMYfXxcru/7QV4D7cwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK2cm8Az rLF4q+BUQu3xh4mg+oLKMB8GA1UdIwQYMBaAFCtEDHxFkAMFUVdifechTpysEotM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzcyOS8xMzEyRjkwODg4 OTQxMUVDQjIwQjgzNzJDNEY5QUUwMi9LMFFNZkVXUUF3VlJWMko5NXlGT25Ld1Np MHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0swUU1mRVdRQXdWUlYySjk1eUZPbkt3U2kwdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzcyOS8xMzEyRjkwODg4OTQxMUVDQjIwQjgzNzJDNEY5QUUwMi9LMFFNZkVXUUF3 VlJWMko5NXlGT25Ld1NpMHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEEGCVKM9nwqwDwK2TxD3u5cX1z7bKy6rRXzP1/cQEpfDdtH8NfevT 6JyvymnFMyQDmUdtd3xUV4unF9k72qqxwi29z+NwXiX0MBVQcXdJa4aK0ksPs9CQ YnT+sfDa6oJQTgHnn11hxxU3kzJUmeoWiwu0FnREQ2VM5940LXh+8LAEZ5CuFRfi 5iVBV381Ig6LXljiwb0PhW95bbT98zwv25GBZ7VJX1mKRW1r4I5Q2iPWjh0qosXF VB3yKjAfsLqibkvVoG/mjm1GAgr4FKVTOYhNMX/vsWcPHEg++XKnTQij1TEF6tlu 6ngWtLjwF32DOtUfz7SfwOFShZ01FxJs -----END CERTIFICATE-----Generated at Mon Apr 7 19:30:01 2025 by rpki-client