$ rpki-client -vvf rpki.apnic.net/member_repository/A91A014A/CC07DAB674FF11EDAB9C9075C4F9AE02/kL0d8TqZHDHxGE1RGvMDFvwAIQI.mft File: kL0d8TqZHDHxGE1RGvMDFvwAIQI.mft (raw, json) Hash identifier: +cZrnACFV7AVOG5bSEOgK86H1Nps5tSC2i9gyMc4V5s= Subject key identifier: 4F:8A:52:33:FB:B6:43:44:0E:BA:D3:80:D1:77:91:0E:37:54:6F:22 Authority key identifier: 90:BD:1D:F1:3A:99:1C:31:F1:18:4D:51:1A:F3:03:16:FC:00:21:02 Certificate issuer: /CN=A91A014A/serialNumber=90BD1DF13A991C31F1184D511AF30316FC002102 Certificate serial: 01C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kL0d8TqZHDHxGE1RGvMDFvwAIQI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A014A/CC07DAB674FF11EDAB9C9075C4F9AE02/kL0d8TqZHDHxGE1RGvMDFvwAIQI.mft Manifest number: 01BE Signing time: Sat 19 Apr 2025 02:22:43 +0000 Manifest this update: Sat 19 Apr 2025 02:22:42 +0000 Manifest next update: Sat 26 Apr 2025 02:22:42 +0000 Files and hashes: 1: kL0d8TqZHDHxGE1RGvMDFvwAIQI.crl (hash: ydc4oNqH7vCDZi31lNaISkUOtQfMPWe/AIH7xAI0GQ8=) 2: 203FA37E750611ED95126872C4F9AE02.roa (hash: dipdNfnJaJs6s5CVnvO1Wlubse6AOUfgpacGaixKSoQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A014A/CC07DAB674FF11EDAB9C9075C4F9AE02/kL0d8TqZHDHxGE1RGvMDFvwAIQI.crl rsync://rpki.apnic.net/member_repository/A91A014A/CC07DAB674FF11EDAB9C9075C4F9AE02/kL0d8TqZHDHxGE1RGvMDFvwAIQI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kL0d8TqZHDHxGE1RGvMDFvwAIQI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 02:22:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 450 (0x1c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A014A, serialNumber=90BD1DF13A991C31F1184D511AF30316FC002102 Validity Not Before: Apr 19 02:22:42 2025 GMT Not After : Apr 26 02:22:42 2025 GMT Subject: CN=680308f3-1939 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:11:55:b7:87:e9:39:88:ee:ec:b9:11:46:b7: 10:ec:1a:6a:34:25:56:62:14:f3:dc:d4:a9:9c:e5: e3:af:15:d0:30:cf:52:36:54:30:2c:e6:07:45:ce: a0:9d:24:96:f4:ea:9e:f0:51:8d:12:af:0d:e2:89: ed:d3:fe:e3:eb:ec:c1:a1:b4:8e:74:6e:54:1e:cb: 5f:9e:17:6b:af:28:b1:42:c7:53:ce:51:56:2b:57: 47:51:90:ff:db:d5:8f:1f:4a:44:e1:af:15:c5:7d: ca:31:3b:29:59:cf:94:4c:21:67:d6:ae:58:de:42: 58:80:de:be:d2:45:9e:e2:47:0a:23:4f:f1:a1:e4: 5f:4b:bd:9f:36:95:13:ef:8e:57:07:8b:b1:7a:2c: 28:a4:8d:39:2f:11:86:5b:ab:6b:6d:a9:4a:54:51: 3e:bf:b7:95:a1:44:66:06:9e:bb:30:c7:2d:d8:12: 9d:f6:e3:58:46:e4:41:8d:37:45:d4:1c:14:ec:98: 5c:1e:51:34:ad:d7:22:51:68:54:af:33:a6:dc:e0: db:15:f3:bc:7f:3e:34:22:fc:1e:f9:4e:d4:7f:6b: b0:df:4a:17:ac:6d:02:66:ed:9d:fa:eb:a3:6d:0e: b9:38:2a:cc:65:fd:51:2e:36:f8:b7:32:7a:ac:0e: 70:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:8A:52:33:FB:B6:43:44:0E:BA:D3:80:D1:77:91:0E:37:54:6F:22 X509v3 Authority Key Identifier: keyid:90:BD:1D:F1:3A:99:1C:31:F1:18:4D:51:1A:F3:03:16:FC:00:21:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A014A/CC07DAB674FF11EDAB9C9075C4F9AE02/kL0d8TqZHDHxGE1RGvMDFvwAIQI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kL0d8TqZHDHxGE1RGvMDFvwAIQI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A014A/CC07DAB674FF11EDAB9C9075C4F9AE02/kL0d8TqZHDHxGE1RGvMDFvwAIQI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:fc:54:4f:67:6f:ca:25:d0:72:56:7a:6b:02:2a:22:01:28: 3d:91:05:3c:b3:c0:e4:c2:2b:4b:ec:7e:db:f0:23:12:10:8e: b2:11:30:e2:4c:17:d0:d3:92:e4:29:41:53:a6:55:2c:ad:a6: c2:c1:ce:15:67:c5:0a:77:a4:e6:a3:e5:ac:9e:8f:9a:f8:b1: 5d:84:51:6e:b0:a4:05:65:56:d3:63:05:1d:63:aa:6e:42:c8: d3:4e:e3:ec:f2:b3:a0:f1:28:a6:c8:3f:64:c2:1b:7e:58:ba: 1d:5f:66:16:61:07:3b:61:4a:aa:28:4f:f6:34:63:66:bb:d3: 90:5f:bc:06:70:92:1e:d5:69:65:fa:8e:2e:9a:2c:60:fb:6e: f1:e8:1a:04:63:31:a1:f3:46:f4:35:15:98:d5:9b:de:b1:83: d2:b2:c7:ab:55:2a:12:66:df:5f:e5:9a:37:b8:9b:e2:cd:fe: f3:ed:a2:ea:b5:1f:08:5d:06:2c:9f:ad:6b:0a:8d:54:a4:af: 15:08:6d:4a:e9:c7:59:e1:9d:50:55:d8:fd:f1:07:b0:b3:36: 75:ac:6e:ea:eb:ec:2f:5d:a9:ec:da:af:21:87:81:7a:bb:e2: 86:fe:d3:52:16:e0:9c:38:5c:9b:3b:5d:15:b4:1b:d6:2c:5d: c7:30:8b:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTAxNEExMTAvBgNVBAUTKDkwQkQxREYxM0E5OTFDMzFGMTE4NEQ1MTFBRjMwMzE2 RkMwMDIxMDIwHhcNMjUwNDE5MDIyMjQyWhcNMjUwNDI2MDIyMjQyWjAYMRYwFAYD VQQDEw02ODAzMDhmMy0xOTM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4BFVt4fpOYju7LkRRrcQ7BpqNCVWYhTz3NSpnOXjrxXQMM9SNlQwLOYHRc6g nSSW9Oqe8FGNEq8N4ont0/7j6+zBobSOdG5UHstfnhdrryixQsdTzlFWK1dHUZD/ 29WPH0pE4a8VxX3KMTspWc+UTCFn1q5Y3kJYgN6+0kWe4kcKI0/xoeRfS72fNpUT 745XB4uxeiwopI05LxGGW6trbalKVFE+v7eVoURmBp67MMct2BKd9uNYRuRBjTdF 1BwU7JhcHlE0rdciUWhUrzOm3ODbFfO8fz40Ivwe+U7Uf2uw30oXrG0CZu2d+uuj bQ65OCrMZf1RLjb4tzJ6rA5woQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE+KUjP7 tkNEDrrTgNF3kQ43VG8iMB8GA1UdIwQYMBaAFJC9HfE6mRwx8RhNURrzAxb8ACEC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDE0QS9DQzA3REFCNjc0 RkYxMUVEQUI5QzkwNzVDNEY5QUUwMi9rTDBkOFRxWkhESHhHRTFSR3ZNREZ2d0FJ UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tMMGQ4VHFaSERIeEdFMVJHdk1ERnZ3QUlRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDE0QS9DQzA3REFCNjc0RkYxMUVEQUI5QzkwNzVDNEY5QUUwMi9rTDBkOFRxWkhE SHhHRTFSR3ZNREZ2d0FJUUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBV/FRPZ2/KJdByVnprAioiASg9kQU8s8DkwitL7H7b8CMSEI6yETDi TBfQ05LkKUFTplUsrabCwc4VZ8UKd6Tmo+Wsno+a+LFdhFFusKQFZVbTYwUdY6pu QsjTTuPs8rOg8SimyD9kwht+WLodX2YWYQc7YUqqKE/2NGNmu9OQX7wGcJIe1Wll +o4umixg+27x6BoEYzGh80b0NRWY1ZvesYPSsserVSoSZt9f5Zo3uJvizf7z7aLq tR8IXQYsn61rCo1UpK8VCG1K6cdZ4Z1QVdj98QewszZ1rG7q6+wvXans2q8hh4F6 u+KG/tNSFuCcOFybO10VtBvWLF3HMIu9 -----END CERTIFICATE-----Generated at Sun Apr 20 12:57:00 2025 by rpki-client