$ rpki-client -vvf rpki.apnic.net/member_repository/A91900BF/FEA1CD68B6E311ECBE59992DC4F9AE02/KOoVV7meKxJ1Uc00DDqvTAphAGs.mft File: KOoVV7meKxJ1Uc00DDqvTAphAGs.mft (raw, json) Hash identifier: FirzM4Viqxbx/eykMcsqguFJc+e9lkjT7bUkHUOwADM= Subject key identifier: 30:12:A6:96:6A:3C:18:6B:91:60:09:0F:39:09:86:21:2B:EF:5D:49 Authority key identifier: 28:EA:15:57:B9:9E:2B:12:75:51:CD:34:0C:3A:AF:4C:0A:61:00:6B Certificate issuer: /CN=A91900BF/serialNumber=28EA1557B99E2B127551CD340C3AAF4C0A61006B Certificate serial: 0351 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOoVV7meKxJ1Uc00DDqvTAphAGs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91900BF/FEA1CD68B6E311ECBE59992DC4F9AE02/KOoVV7meKxJ1Uc00DDqvTAphAGs.mft Manifest number: 0344 Signing time: Sat 29 Mar 2025 01:19:52 +0000 Manifest this update: Sat 29 Mar 2025 01:19:51 +0000 Manifest next update: Sat 05 Apr 2025 01:19:51 +0000 Files and hashes: 1: KOoVV7meKxJ1Uc00DDqvTAphAGs.crl (hash: HTaBLdiATiIPmuh60nqVlDTjncdovVL7oKEY/2pPaIA=) 2: BFFAF880912711EE92065180C4F9AE02.roa (hash: +cOVT6IUlf5AF9Iwe8S2ZR7C+kK58G6HwMNDUoEK6dU=) 3: F505DCE605AB11EEAAC9A54DC4F9AE02.roa (hash: TgaszdDD0RtD3WBLop2xKd2Re72k68i95Zea6tpoI9M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91900BF/FEA1CD68B6E311ECBE59992DC4F9AE02/KOoVV7meKxJ1Uc00DDqvTAphAGs.crl rsync://rpki.apnic.net/member_repository/A91900BF/FEA1CD68B6E311ECBE59992DC4F9AE02/KOoVV7meKxJ1Uc00DDqvTAphAGs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOoVV7meKxJ1Uc00DDqvTAphAGs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 01:19:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 849 (0x351) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91900BF Validity Not Before: Mar 29 01:19:51 2025 GMT Not After : Apr 5 01:19:51 2025 GMT Subject: CN=67e74ab8-8bc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4b:8a:99:22:aa:40:87:6c:fb:d4:7f:4e:de: af:15:32:54:1d:98:e2:3e:2a:2d:e5:85:8e:22:94: a9:a7:cb:5e:df:d7:00:85:30:c6:e0:3a:43:1e:48: bd:48:2a:bc:7a:ca:62:0e:2e:90:1e:f5:59:9b:4a: 61:f3:f6:dd:09:7e:53:cd:3b:c7:d3:77:6c:90:cc: 77:eb:1d:fe:fd:bd:32:09:49:bc:7d:49:1b:4a:c1: 18:bb:fb:e7:7a:aa:0c:dd:bd:c8:81:32:20:a8:7c: e7:ef:9d:89:c9:da:e2:d2:1b:56:ae:5c:0f:4c:0b: 3e:34:71:db:13:d2:03:55:10:7e:82:b4:6f:a3:10: 66:e7:dd:eb:6b:9d:f1:14:04:a6:78:17:da:0f:0e: 00:ff:c2:21:9a:d8:57:a0:20:8f:58:65:8e:2a:9b: b3:0b:7f:1e:f2:f8:f8:be:e9:ce:a5:94:65:a4:e3: d6:a3:b5:1f:6c:30:34:9a:71:11:b1:eb:9d:e8:7f: 13:89:0a:72:a3:4e:ec:3a:87:8e:88:60:0f:9c:11: 2e:b8:c3:8a:44:a3:9f:8a:4c:c1:32:7b:1e:88:b0: 7a:3e:23:30:a3:57:82:e1:4f:35:a5:48:88:66:ee: ed:89:fc:c3:6b:b0:29:05:bb:21:34:cb:27:b1:ad: 57:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:12:A6:96:6A:3C:18:6B:91:60:09:0F:39:09:86:21:2B:EF:5D:49 X509v3 Authority Key Identifier: keyid:28:EA:15:57:B9:9E:2B:12:75:51:CD:34:0C:3A:AF:4C:0A:61:00:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91900BF/FEA1CD68B6E311ECBE59992DC4F9AE02/KOoVV7meKxJ1Uc00DDqvTAphAGs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOoVV7meKxJ1Uc00DDqvTAphAGs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91900BF/FEA1CD68B6E311ECBE59992DC4F9AE02/KOoVV7meKxJ1Uc00DDqvTAphAGs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:88:34:be:57:80:ce:3d:ae:47:38:72:90:52:87:81:73:65: 32:a4:e4:c6:80:4e:77:12:00:a8:d7:15:02:72:93:0a:e7:81: 3e:25:ea:9c:33:b6:f2:cd:56:24:6f:fd:75:72:95:2f:76:65: e7:dd:86:60:96:8d:16:04:7e:40:a0:cd:a8:93:33:18:bd:97: f9:27:ee:99:d3:9e:50:36:c4:d4:df:18:c2:b1:3d:80:35:bc: 55:55:e2:b7:5a:db:a5:e1:44:4a:c4:fc:de:95:b5:c4:fd:c2: 99:e8:69:eb:36:f5:54:3a:f1:ca:26:ef:bd:9c:3f:8d:c1:3e: a7:1a:8f:1b:6e:24:43:44:cd:11:0b:2c:b1:e4:55:22:79:b5: f3:58:70:36:ec:46:50:5b:65:8a:99:3a:1c:fd:ec:03:9c:68: 16:69:b1:fc:36:03:e9:89:26:ac:ba:66:94:55:2d:fa:77:d3: 98:de:fe:63:ed:f5:50:e3:d8:72:de:cc:c8:44:16:e3:99:b5: e3:fa:54:4b:f3:3e:d6:52:2d:97:0f:62:63:86:0a:59:8e:ee: 9c:b6:f8:86:b1:13:ea:41:69:04:4a:36:3e:84:0b:fe:b7:b0: 89:72:d2:7a:8f:80:ab:d8:14:8e:3e:26:d6:44:99:52:73:e4: 6e:67:37:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTAwQkYxMTAvBgNVBAUTKDI4RUExNTU3Qjk5RTJCMTI3NTUxQ0QzNDBDM0FBRjRD MEE2MTAwNkIwHhcNMjUwMzI5MDExOTUxWhcNMjUwNDA1MDExOTUxWjAYMRYwFAYD VQQDEw02N2U3NGFiOC04YmMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvUuKmSKqQIds+9R/Tt6vFTJUHZjiPiot5YWOIpSpp8te39cAhTDG4DpDHki9 SCq8espiDi6QHvVZm0ph8/bdCX5TzTvH03dskMx36x3+/b0yCUm8fUkbSsEYu/vn eqoM3b3IgTIgqHzn752Jydri0htWrlwPTAs+NHHbE9IDVRB+grRvoxBm593ra53x FASmeBfaDw4A/8IhmthXoCCPWGWOKpuzC38e8vj4vunOpZRlpOPWo7UfbDA0mnER seud6H8TiQpyo07sOoeOiGAPnBEuuMOKRKOfikzBMnseiLB6PiMwo1eC4U81pUiI Zu7tifzDa7ApBbshNMsnsa1XnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDASppZq PBhrkWAJDzkJhiEr711JMB8GA1UdIwQYMBaAFCjqFVe5nisSdVHNNAw6r0wKYQBr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDBCRi9GRUExQ0Q2OEI2 RTMxMUVDQkU1OTk5MkRDNEY5QUUwMi9LT29WVjdtZUt4SjFVYzAwRERxdlRBcGhB R3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tPb1ZWN21lS3hKMVVjMDBERHF2VEFwaEFHcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MDBCRi9GRUExQ0Q2OEI2RTMxMUVDQkU1OTk5MkRDNEY5QUUwMi9LT29WVjdtZUt4 SjFVYzAwRERxdlRBcGhBR3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwiDS+V4DOPa5HOHKQUoeBc2UypOTGgE53EgCo1xUCcpMK54E+Jeqc M7byzVYkb/11cpUvdmXn3YZglo0WBH5AoM2okzMYvZf5J+6Z055QNsTU3xjCsT2A NbxVVeK3Wtul4URKxPzelbXE/cKZ6GnrNvVUOvHKJu+9nD+NwT6nGo8bbiRDRM0R Cyyx5FUiebXzWHA27EZQW2WKmToc/ewDnGgWabH8NgPpiSasumaUVS36d9OY3v5j 7fVQ49hy3szIRBbjmbXj+lRL8z7WUi2XD2JjhgpZju6ctviGsRPqQWkESjY+hAv+ t7CJctJ6j4Cr2BSOPibWRJlSc+RuZzfr -----END CERTIFICATE-----Generated at Fri Apr 4 21:58:08 2025 by rpki-client