$ rpki-client -vvf rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.mft File: klwudR4T9Usqn5-j2mUO2423zy0.mft (raw, json) Hash identifier: NShi686ilNPbvISkWuKRLkPKt5YEbjC39wPth//xFs8= Subject key identifier: B0:C5:A0:84:21:56:7A:D6:F9:BB:09:97:78:D8:95:FD:DA:75:64:BE Authority key identifier: 92:5C:2E:75:1E:13:F5:4B:2A:9F:9F:A3:DA:65:0E:DB:8D:B7:CF:2D Certificate issuer: /CN=A918B9B8/serialNumber=925C2E751E13F54B2A9F9FA3DA650EDB8DB7CF2D Certificate serial: 09C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klwudR4T9Usqn5-j2mUO2423zy0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.mft Manifest number: 09BB Signing time: Thu 10 Apr 2025 19:55:23 +0000 Manifest this update: Thu 10 Apr 2025 19:55:23 +0000 Manifest next update: Thu 17 Apr 2025 19:55:23 +0000 Files and hashes: 1: klwudR4T9Usqn5-j2mUO2423zy0.crl (hash: SGI3B6c2ccjlHM3pkDgC4UBFVkw0wqstdmmsuT5Az2E=) 2: 275694947E2111EABA287C6DC4F9AE02.roa (hash: 7d4ZQMpLwZNv6c2aTJKagStC5pu82EAlUBC22iAZFbM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.crl rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klwudR4T9Usqn5-j2mUO2423zy0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 19:55:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2497 (0x9c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B9B8, serialNumber=925C2E751E13F54B2A9F9FA3DA650EDB8DB7CF2D Validity Not Before: Apr 10 19:55:23 2025 GMT Not After : Apr 17 19:55:23 2025 GMT Subject: CN=67f8222b-b386 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:49:1d:68:9b:e2:ff:ee:82:9f:b8:40:79:29: f8:b2:87:4d:dd:c0:51:29:ba:ab:8d:a3:45:fb:02: d0:88:11:ed:36:de:15:31:d0:05:2d:7c:35:c8:2c: 6e:0d:f8:97:95:ec:7e:84:e1:5c:c2:d6:58:29:7a: 1d:33:62:3b:41:66:b8:92:c3:0b:a0:31:9e:44:35: 8a:5c:b4:c9:10:d2:ce:dd:3f:a8:ec:f2:ca:c9:e0: 42:84:42:f4:c4:9b:6b:f2:97:4e:d2:29:09:d2:d2: 1b:00:42:6a:6d:82:9f:c0:5a:f0:c3:21:56:14:37: 98:99:17:e7:ae:80:d6:fd:f4:15:bb:a7:c4:a1:5d: 30:a7:b9:c3:6c:8a:a0:df:32:82:17:35:7a:a5:fe: 67:88:68:7c:8f:6c:87:e0:ff:d2:12:f0:f4:f4:89: 26:8a:0f:58:47:de:50:c8:ab:98:00:63:3e:57:16: bb:b9:f4:d1:01:01:37:53:32:70:07:c5:4b:69:ae: fc:29:e7:1d:48:13:63:ab:63:e4:38:ce:f6:1a:bc: 70:d5:22:eb:0c:d1:0a:f2:cd:7d:2e:b0:04:38:53: 9e:b2:7c:c4:94:c5:99:c8:10:94:c6:95:4a:d1:16: b0:c4:ed:ae:11:e4:dc:98:e5:9d:9e:1b:ae:bf:b5: a9:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:C5:A0:84:21:56:7A:D6:F9:BB:09:97:78:D8:95:FD:DA:75:64:BE X509v3 Authority Key Identifier: keyid:92:5C:2E:75:1E:13:F5:4B:2A:9F:9F:A3:DA:65:0E:DB:8D:B7:CF:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klwudR4T9Usqn5-j2mUO2423zy0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:a4:bf:47:92:c2:b1:7c:5b:03:5c:5c:6c:35:f8:2c:1d:14: f6:56:c0:b0:2a:a5:74:46:e9:85:14:67:59:bc:d0:94:f5:b0: da:29:a5:31:bd:03:fc:e1:a4:20:45:74:9e:dc:94:6c:ed:78: 95:57:95:17:02:95:36:d6:f8:a9:53:25:ab:65:a7:67:b0:27: 25:1a:ce:70:6a:62:ac:a7:9d:89:2c:25:19:55:7a:3c:7b:18: e4:b8:dc:36:bb:65:a5:55:11:70:5e:6b:9e:74:2c:a8:d6:74: 43:b1:d6:b4:cf:ff:d8:e6:c0:b1:fb:43:46:3c:b0:c2:41:8c: 4c:32:c0:00:55:64:2a:3e:be:b7:23:2c:4b:10:09:76:97:89: 2e:29:73:6c:6c:48:70:d7:bc:07:53:bc:7f:b2:6d:f6:68:d6: 51:ae:79:48:94:a6:66:ed:19:ba:60:ca:0d:78:3e:20:1e:11: 31:0a:62:9b:d5:69:a2:36:a5:23:4d:48:1b:3b:5b:af:32:c0: c2:be:04:20:e7:df:c7:d7:6c:e0:18:e9:d5:fa:08:cf:9d:0e: 79:f6:ad:78:fa:18:41:44:bf:c4:68:58:db:a4:ea:3d:b4:d9: 96:fe:77:54:23:f3:8b:e7:05:04:f9:4f:93:47:d5:24:2b:ae: 1f:57:64:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEI5QjgxMTAvBgNVBAUTKDkyNUMyRTc1MUUxM0Y1NEIyQTlGOUZBM0RBNjUwRURC OERCN0NGMkQwHhcNMjUwNDEwMTk1NTIzWhcNMjUwNDE3MTk1NTIzWjAYMRYwFAYD VQQDEw02N2Y4MjIyYi1iMzg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqkkdaJvi/+6Cn7hAeSn4sodN3cBRKbqrjaNF+wLQiBHtNt4VMdAFLXw1yCxu DfiXlex+hOFcwtZYKXodM2I7QWa4ksMLoDGeRDWKXLTJENLO3T+o7PLKyeBChEL0 xJtr8pdO0ikJ0tIbAEJqbYKfwFrwwyFWFDeYmRfnroDW/fQVu6fEoV0wp7nDbIqg 3zKCFzV6pf5niGh8j2yH4P/SEvD09Ikmig9YR95QyKuYAGM+Vxa7ufTRAQE3UzJw B8VLaa78KecdSBNjq2PkOM72Grxw1SLrDNEK8s19LrAEOFOesnzElMWZyBCUxpVK 0RawxO2uEeTcmOWdnhuuv7WpLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLDFoIQh VnrW+bsJl3jYlf3adWS+MB8GA1UdIwQYMBaAFJJcLnUeE/VLKp+fo9plDtuNt88t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjlCOC8zREU5MDYwMjdF MjAxMUVBODQ2RjIzNkRDNEY5QUUwMi9rbHd1ZFI0VDlVc3FuNS1qMm1VTzI0MjN6 eTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tsd3VkUjRUOVVzcW41LWoybVVPMjQyM3p5MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjlCOC8zREU5MDYwMjdFMjAxMUVBODQ2RjIzNkRDNEY5QUUwMi9rbHd1ZFI0VDlV c3FuNS1qMm1VTzI0MjN6eTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKpL9HksKxfFsDXFxsNfgsHRT2VsCwKqV0RumFFGdZvNCU9bDaKaUx vQP84aQgRXSe3JRs7XiVV5UXApU21vipUyWrZadnsCclGs5wamKsp52JLCUZVXo8 exjkuNw2u2WlVRFwXmuedCyo1nRDsda0z//Y5sCx+0NGPLDCQYxMMsAAVWQqPr63 IyxLEAl2l4kuKXNsbEhw17wHU7x/sm32aNZRrnlIlKZm7Rm6YMoNeD4gHhExCmKb 1WmiNqUjTUgbO1uvMsDCvgQg59/H12zgGOnV+gjPnQ559q14+hhBRL/EaFjbpOo9 tNmW/ndUI/OL5wUE+U+TR9UkK64fV2Ts -----END CERTIFICATE-----Generated at Sat Apr 12 19:14:36 2025 by rpki-client