$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.mft File: kfPcWc0PodJBy3h1fR2qksKsn2A.mft (raw, json) Hash identifier: R2fibV7KIoKrI2gUAz6YedGmLxmL/qQlG/XhvUs7fRg= Subject key identifier: 15:DA:31:CD:22:C8:0A:A6:41:25:0F:D4:D9:D3:0A:97:8F:AC:54:EB Authority key identifier: 91:F3:DC:59:CD:0F:A1:D2:41:CB:78:75:7D:1D:AA:92:C2:AC:9F:60 Certificate issuer: /CN=A91A0432/serialNumber=91F3DC59CD0FA1D241CB78757D1DAA92C2AC9F60 Certificate serial: 0373 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfPcWc0PodJBy3h1fR2qksKsn2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.mft Manifest number: 036D Signing time: Thu 03 Apr 2025 00:58:09 +0000 Manifest this update: Thu 03 Apr 2025 00:58:08 +0000 Manifest next update: Thu 10 Apr 2025 00:58:08 +0000 Files and hashes: 1: kfPcWc0PodJBy3h1fR2qksKsn2A.crl (hash: WcZKVEVamSIwGHZUkR90rZcSkGgWYDnD85t1UiQtZKg=) 2: 4114509A597511EFA2B79A84C4F9AE02.roa (hash: 0e5zzWh6ApozGk/jFChRqF4rHk2hQMmiudaU4V4FOFU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.crl rsync://rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfPcWc0PodJBy3h1fR2qksKsn2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 00:58:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 883 (0x373) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0432 Validity Not Before: Apr 3 00:58:08 2025 GMT Not After : Apr 10 00:58:08 2025 GMT Subject: CN=67eddd20-17be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:dc:67:9a:fa:55:b5:74:ea:e0:01:15:01:f0: 19:39:12:c0:1a:77:0c:dc:c4:d9:3d:ca:ad:db:bd: d6:47:8e:cc:3e:fb:d4:32:33:29:b5:bf:1a:12:85: d9:37:11:9a:9c:d1:1c:2c:1c:a0:15:b4:55:6c:fa: 94:26:f7:d1:00:0c:e9:98:8e:c0:b4:2f:72:7c:48: 2a:34:14:b4:ba:9b:0f:25:a1:14:92:a3:39:df:ec: 47:dd:2e:70:07:70:20:df:35:1c:f1:32:3b:5b:1d: 3c:f1:dd:48:20:6a:6a:4d:dc:c8:88:23:b6:86:d1: ce:b5:4a:35:44:15:fd:85:8d:12:ad:05:47:28:70: d1:c4:ba:63:ee:21:60:e4:db:28:4a:87:73:75:6d: 8a:43:3d:48:a7:bc:9e:82:e3:da:e2:4f:07:24:5a: 2b:6a:31:06:31:6d:37:ba:04:60:39:06:7b:25:86: ac:f4:61:f3:24:d5:f2:30:46:15:8a:09:00:00:ac: 44:09:6a:f9:a8:7e:82:72:6a:3c:49:0e:f5:e5:bb: 03:4f:4e:48:c8:20:d6:15:44:cf:5e:b9:d9:97:d6: 7e:d0:3f:47:99:64:5f:00:66:7d:27:5a:45:6a:b0: 87:be:e7:75:cb:70:a4:5f:64:4e:ca:f4:63:41:d8: 4e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:DA:31:CD:22:C8:0A:A6:41:25:0F:D4:D9:D3:0A:97:8F:AC:54:EB X509v3 Authority Key Identifier: keyid:91:F3:DC:59:CD:0F:A1:D2:41:CB:78:75:7D:1D:AA:92:C2:AC:9F:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfPcWc0PodJBy3h1fR2qksKsn2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:fc:c4:e9:34:e0:34:2f:e7:b4:0f:23:cf:c1:18:77:20:71: a8:47:7b:da:f5:9d:e6:2c:05:27:2a:27:a2:c7:67:95:01:e7: f7:a8:97:3e:bd:10:ea:5d:3f:65:a7:87:d3:86:0e:43:9d:64: 89:05:fc:6c:d4:4a:c2:16:09:c0:46:2e:9d:27:31:57:3d:15: e3:fe:8c:67:60:3c:5c:33:58:19:37:e0:b9:a6:50:15:26:53: b1:25:67:ea:84:1a:ce:18:b0:88:74:67:a2:f5:46:94:05:22: 40:36:8f:92:93:4a:a0:12:72:c5:67:bf:a4:b9:18:18:ac:88: 95:7f:a1:37:55:da:66:84:3c:fd:79:31:9a:da:09:23:a1:ca: 44:d7:4c:51:13:ba:0a:76:88:d5:5d:6e:2d:db:59:7e:10:46: df:5a:2b:09:4e:4d:87:a6:a5:16:c8:5d:6f:d8:a6:1c:49:40: 09:74:3a:8c:da:f5:59:df:02:03:1c:cc:76:a8:0f:d3:00:7c: db:03:c5:78:52:f4:d1:b5:eb:30:b0:14:14:cb:4a:7b:c8:9f: ae:a3:60:7f:ef:33:89:7f:74:2c:c9:17:67:fc:af:b0:2b:3a: ba:f7:14:e9:75:21:59:2b:53:9d:b2:b4:e1:0c:21:0f:67:3c: 87:d8:15:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA0MzIxMTAvBgNVBAUTKDkxRjNEQzU5Q0QwRkExRDI0MUNCNzg3NTdEMURBQTky QzJBQzlGNjAwHhcNMjUwNDAzMDA1ODA4WhcNMjUwNDEwMDA1ODA4WjAYMRYwFAYD VQQDEw02N2VkZGQyMC0xN2JlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvdxnmvpVtXTq4AEVAfAZORLAGncM3MTZPcqt273WR47MPvvUMjMptb8aEoXZ NxGanNEcLBygFbRVbPqUJvfRAAzpmI7AtC9yfEgqNBS0upsPJaEUkqM53+xH3S5w B3Ag3zUc8TI7Wx088d1IIGpqTdzIiCO2htHOtUo1RBX9hY0SrQVHKHDRxLpj7iFg 5NsoSodzdW2KQz1Ip7yeguPa4k8HJForajEGMW03ugRgOQZ7JYas9GHzJNXyMEYV igkAAKxECWr5qH6Ccmo8SQ715bsDT05IyCDWFUTPXrnZl9Z+0D9HmWRfAGZ9J1pF arCHvud1y3CkX2ROyvRjQdhORwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBXaMc0i yAqmQSUP1NnTCpePrFTrMB8GA1UdIwQYMBaAFJHz3FnND6HSQct4dX0dqpLCrJ9g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDQzMi9GNUJGNjk5Q0E0 Q0ExMUVDQUM0RTU3NDRDNEY5QUUwMi9rZlBjV2MwUG9kSkJ5M2gxZlIycWtzS3Nu MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tmUGNXYzBQb2RKQnkzaDFmUjJxa3NLc24yQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDQzMi9GNUJGNjk5Q0E0Q0ExMUVDQUM0RTU3NDRDNEY5QUUwMi9rZlBjV2MwUG9k SkJ5M2gxZlIycWtzS3NuMkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCx/MTpNOA0L+e0DyPPwRh3IHGoR3va9Z3mLAUnKieix2eVAef3qJc+ vRDqXT9lp4fThg5DnWSJBfxs1ErCFgnARi6dJzFXPRXj/oxnYDxcM1gZN+C5plAV JlOxJWfqhBrOGLCIdGei9UaUBSJANo+Sk0qgEnLFZ7+kuRgYrIiVf6E3VdpmhDz9 eTGa2gkjocpE10xRE7oKdojVXW4t21l+EEbfWisJTk2HpqUWyF1v2KYcSUAJdDqM 2vVZ3wIDHMx2qA/TAHzbA8V4UvTRteswsBQUy0p7yJ+uo2B/7zOJf3QsyRdn/K+w Kzq69xTpdSFZK1OdsrThDCEPZzyH2BX9 -----END CERTIFICATE-----Generated at Fri Apr 4 22:27:04 2025 by rpki-client