$ rpki-client -vvf rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.mft File: K0TIiRquK4of20jr9KV-mJrrc2M.mft (raw, json) Hash identifier: jVJ2L1uGu20U6EhKEGLeIuS6hE5PLuPuAkJ5sWpaSjw= Subject key identifier: 6D:5C:22:66:50:08:6F:C3:C3:06:FA:B7:15:B1:FB:00:BA:81:66:8D Authority key identifier: 2B:44:C8:89:1A:AE:2B:8A:1F:DB:48:EB:F4:A5:7E:98:9A:EB:73:63 Certificate issuer: /CN=A918BBBA/serialNumber=2B44C8891AAE2B8A1FDB48EBF4A57E989AEB7363 Certificate serial: 0449 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0TIiRquK4of20jr9KV-mJrrc2M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.mft Manifest number: 0445 Signing time: Sat 29 Mar 2025 00:29:36 +0000 Manifest this update: Sat 29 Mar 2025 00:29:35 +0000 Manifest next update: Sat 05 Apr 2025 00:29:35 +0000 Files and hashes: 1: K0TIiRquK4of20jr9KV-mJrrc2M.crl (hash: exCiJv83/ZciPUyUhApiG+cUwpRJqniEp/O8Qlz9V4k=) 2: 0CD36EF4500B11EC9430721DC4F9AE02.roa (hash: gK2u6xOFSxtr+xoZ4+/hIrNybEaw24qFNSOsiwBKiyM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.crl rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0TIiRquK4of20jr9KV-mJrrc2M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 00:29:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1097 (0x449) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BBBA Validity Not Before: Mar 29 00:29:35 2025 GMT Not After : Apr 5 00:29:35 2025 GMT Subject: CN=67e73eef-9252 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3a:b6:6a:1b:22:9f:72:b4:91:58:4a:c7:1f: 45:73:95:13:8e:e3:92:9d:d9:bf:75:f9:11:99:9c: b4:b6:31:0a:73:ef:1b:a3:db:af:6d:b8:64:80:51: 0d:ac:fd:03:af:81:39:de:9e:26:c1:c1:9c:84:0d: f2:19:40:ad:0e:d3:a6:cf:08:7a:a4:54:4c:de:54: 27:68:06:dd:ba:5d:cb:7a:a4:12:69:cc:d6:5f:c5: 2a:d5:1c:eb:28:82:a0:fc:2d:96:58:3c:06:69:f9: 2b:07:f8:13:1f:30:12:4f:db:8c:c6:00:bf:bb:05: 9f:5b:c0:1b:b2:e8:25:d5:70:16:2d:72:7f:2f:38: ee:45:72:1c:be:55:0c:b8:5a:b3:5b:e9:da:f9:3e: 2b:a5:e5:0f:28:5c:cb:74:df:3d:17:d8:aa:c1:82: ff:f5:84:f9:87:e3:c8:9f:df:a4:70:75:db:20:ba: 39:2c:e7:ba:8a:09:89:87:c4:ef:cc:ee:a0:a4:2e: 83:9f:b3:5b:de:cc:25:d4:76:9c:5c:7f:57:cb:ba: 5e:57:d0:f2:ae:48:4e:5b:47:77:cb:7b:88:da:20: cf:60:04:fd:81:21:48:a0:a7:ca:20:35:f2:44:56: 84:a0:9a:b4:d5:15:60:ec:d1:6f:d2:72:64:24:86: 09:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:5C:22:66:50:08:6F:C3:C3:06:FA:B7:15:B1:FB:00:BA:81:66:8D X509v3 Authority Key Identifier: keyid:2B:44:C8:89:1A:AE:2B:8A:1F:DB:48:EB:F4:A5:7E:98:9A:EB:73:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0TIiRquK4of20jr9KV-mJrrc2M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:b5:12:c1:a2:fd:90:7b:e4:c1:dc:bb:f6:12:7f:32:5f:27: b9:b3:36:86:64:f0:33:71:56:6b:a6:ac:f3:2c:ec:07:f5:fd: 3a:e1:3c:45:04:de:06:c8:77:c7:a8:ac:15:bc:11:c2:6e:15: 4e:c4:c3:97:53:c2:fd:04:53:34:f1:f2:ee:55:00:2b:a0:ff: 52:19:96:db:13:c3:71:95:87:b2:92:61:0c:4a:d2:34:a1:c3: e7:59:1d:dd:48:d7:6b:14:d3:a8:68:71:41:e5:3c:9d:ef:2f: 01:f0:48:cf:29:75:18:59:d6:2a:10:9d:03:b5:7e:65:75:85: 55:be:67:28:1c:24:f3:46:67:db:8c:c5:3b:6d:81:aa:d7:dd: c8:57:d0:1d:06:a2:b2:96:3d:53:6d:d7:61:94:a3:00:66:eb: 1d:02:7c:f4:ee:23:be:d7:cd:80:ff:62:01:3d:4d:21:9e:71: 69:27:7a:81:46:09:b0:1e:ff:8a:66:3a:c0:ca:2f:ec:82:cc: ea:bb:52:15:bf:e4:70:7a:c7:b6:aa:0e:2f:94:24:f6:e4:a5: ce:d1:50:f9:b6:9f:cc:61:88:29:e1:32:b4:4d:ec:73:ee:2a: fd:9a:ec:66:3f:d8:f9:36:a1:61:84:23:16:c7:4d:cd:29:0b: 40:4d:1a:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJCQkExMTAvBgNVBAUTKDJCNDRDODg5MUFBRTJCOEExRkRCNDhFQkY0QTU3RTk4 OUFFQjczNjMwHhcNMjUwMzI5MDAyOTM1WhcNMjUwNDA1MDAyOTM1WjAYMRYwFAYD VQQDEw02N2U3M2VlZi05MjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtjq2ahsin3K0kVhKxx9Fc5UTjuOSndm/dfkRmZy0tjEKc+8bo9uvbbhkgFEN rP0Dr4E53p4mwcGchA3yGUCtDtOmzwh6pFRM3lQnaAbdul3LeqQSaczWX8Uq1Rzr KIKg/C2WWDwGafkrB/gTHzAST9uMxgC/uwWfW8Absugl1XAWLXJ/LzjuRXIcvlUM uFqzW+na+T4rpeUPKFzLdN89F9iqwYL/9YT5h+PIn9+kcHXbILo5LOe6igmJh8Tv zO6gpC6Dn7Nb3swl1HacXH9Xy7peV9DyrkhOW0d3y3uI2iDPYAT9gSFIoKfKIDXy RFaEoJq01RVg7NFv0nJkJIYJRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG1cImZQ CG/Dwwb6txWx+wC6gWaNMB8GA1UdIwQYMBaAFCtEyIkariuKH9tI6/Slfpia63Nj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkJCQS9GOTEzQzBCQTRD NDIxMUVDOTY2NThBMzFDNEY5QUUwMi9LMFRJaVJxdUs0b2YyMGpyOUtWLW1KcnJj Mk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0swVElpUnF1SzRvZjIwanI5S1YtbUpycmMyTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QkJCQS9GOTEzQzBCQTRDNDIxMUVDOTY2NThBMzFDNEY5QUUwMi9LMFRJaVJxdUs0 b2YyMGpyOUtWLW1KcnJjMk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2tRLBov2Qe+TB3Lv2En8yXye5szaGZPAzcVZrpqzzLOwH9f064TxF BN4GyHfHqKwVvBHCbhVOxMOXU8L9BFM08fLuVQAroP9SGZbbE8NxlYeykmEMStI0 ocPnWR3dSNdrFNOoaHFB5Tyd7y8B8EjPKXUYWdYqEJ0DtX5ldYVVvmcoHCTzRmfb jMU7bYGq193IV9AdBqKylj1TbddhlKMAZusdAnz07iO+182A/2IBPU0hnnFpJ3qB RgmwHv+KZjrAyi/sgszqu1IVv+Rwese2qg4vlCT25KXO0VD5tp/MYYgp4TK0Texz 7ir9muxmP9j5NqFhhCMWx03NKQtATRqH -----END CERTIFICATE-----Generated at Fri Apr 4 22:00:36 2025 by rpki-client