$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE25A/2C96F508409611EEB46E6F3FC4F9AE02/K8oS1G1GEe1u8YhvNkRo3z0C7eU.mft File: K8oS1G1GEe1u8YhvNkRo3z0C7eU.mft (raw, json) Hash identifier: NGWMdr1TIUYrVGxq9KosL89jYLruVRJkwhVhBbkcekE= Subject key identifier: D4:89:76:8F:0C:1D:B1:62:85:8A:8F:10:BE:10:DC:E7:55:B3:FD:ED Authority key identifier: 2B:CA:12:D4:6D:46:11:ED:6E:F1:88:6F:36:44:68:DF:3D:02:ED:E5 Certificate issuer: /CN=A91AE25A/serialNumber=2BCA12D46D4611ED6EF1886F364468DF3D02EDE5 Certificate serial: 012F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8oS1G1GEe1u8YhvNkRo3z0C7eU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE25A/2C96F508409611EEB46E6F3FC4F9AE02/K8oS1G1GEe1u8YhvNkRo3z0C7eU.mft Manifest number: 012D Signing time: Sat 29 Mar 2025 03:58:57 +0000 Manifest this update: Sat 29 Mar 2025 03:58:56 +0000 Manifest next update: Sat 05 Apr 2025 03:58:56 +0000 Files and hashes: 1: K8oS1G1GEe1u8YhvNkRo3z0C7eU.crl (hash: hslwBvz6cNyIIeSXiR28c/4Jzo23tkjKCO4skh79yCw=) 2: AB366D1C409611EE92C55F40C4F9AE02.roa (hash: SQk3Brop+Id762Ic4sBigwZBA29XCDN62FCzcjcGNd0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE25A/2C96F508409611EEB46E6F3FC4F9AE02/K8oS1G1GEe1u8YhvNkRo3z0C7eU.crl rsync://rpki.apnic.net/member_repository/A91AE25A/2C96F508409611EEB46E6F3FC4F9AE02/K8oS1G1GEe1u8YhvNkRo3z0C7eU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8oS1G1GEe1u8YhvNkRo3z0C7eU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 03:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 303 (0x12f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE25A Validity Not Before: Mar 29 03:58:56 2025 GMT Not After : Apr 5 03:58:56 2025 GMT Subject: CN=67e77000-9935 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b3:dd:c2:b8:21:0b:dc:1f:b7:18:c0:19:94: 68:44:42:b7:2c:13:72:e9:a4:0a:8d:c0:f1:63:1a: fa:72:dd:68:4a:32:df:5b:8a:04:0a:9c:95:4c:4d: 90:37:82:ce:7d:e9:bf:78:f3:1b:09:d7:ce:85:fe: 20:58:57:4e:da:4f:3f:be:5d:8f:9b:d8:49:78:24: 8c:e0:98:a5:b8:2b:62:a1:76:f1:22:d1:79:bc:7d: 9e:e5:1d:07:65:ca:d9:70:9f:d2:2a:cc:ba:fa:9c: 7b:ae:61:b0:5a:b7:23:4c:d4:67:51:f3:01:b1:ff: 76:81:36:49:0a:5f:5e:85:b9:f5:d4:9e:17:e9:3d: 80:8c:b7:68:0d:c1:3e:b2:c3:0c:a3:22:fa:a2:f1: f0:07:4b:59:b1:18:e1:59:fa:d7:ee:92:15:67:e0: ae:52:7e:eb:1f:b4:81:29:74:a8:ac:53:c7:a4:c0: 74:e3:b9:09:57:0a:c3:64:cd:9a:fb:34:aa:0f:93: 3c:9e:6c:60:27:43:35:4b:9c:4b:8b:a8:75:0e:d8: dc:c8:17:59:bf:c1:de:cf:1a:1b:cc:56:02:4a:51: 7d:03:3a:67:f6:a5:1c:a4:4e:48:a3:2b:45:26:f1: 6a:4a:98:e4:ea:8f:58:a1:a8:8b:ee:6b:b1:a1:84: 3e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:89:76:8F:0C:1D:B1:62:85:8A:8F:10:BE:10:DC:E7:55:B3:FD:ED X509v3 Authority Key Identifier: keyid:2B:CA:12:D4:6D:46:11:ED:6E:F1:88:6F:36:44:68:DF:3D:02:ED:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE25A/2C96F508409611EEB46E6F3FC4F9AE02/K8oS1G1GEe1u8YhvNkRo3z0C7eU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8oS1G1GEe1u8YhvNkRo3z0C7eU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE25A/2C96F508409611EEB46E6F3FC4F9AE02/K8oS1G1GEe1u8YhvNkRo3z0C7eU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:13:a2:92:d6:fa:ed:de:2a:33:1a:4d:fc:08:81:12:d5:e5: b0:27:43:fa:f7:56:32:66:e2:b8:05:0b:3b:a4:0b:18:ea:7e: d3:b1:5a:27:f2:0b:b4:68:b7:03:09:71:7a:83:ec:6d:6a:31: 39:55:32:41:4d:01:c5:32:53:dd:a7:e1:db:30:59:a7:49:b4: 5b:15:94:8d:6f:89:63:34:74:ab:e3:65:ff:23:d5:ab:ae:2e: b6:1c:1f:a2:b4:c1:d8:b0:0d:a6:17:17:d5:02:d8:ba:99:70: 8d:f5:48:f5:8b:c5:28:43:58:be:b2:3c:b3:7a:4e:19:e7:36: a7:35:70:a2:3e:d0:69:c4:9c:9e:d6:04:05:ae:a9:7a:da:33: 08:98:9d:0f:07:9b:74:08:0e:17:c3:c4:ad:5d:9d:9f:cb:f6: 6d:3f:1f:6a:c7:dd:a3:89:33:44:3f:6f:fc:5b:43:fa:5f:63: f4:1a:03:1e:79:5e:eb:e2:de:3e:4f:25:41:c2:3c:64:ce:c1: 95:d9:68:c9:5f:0b:47:0c:5e:19:58:fa:d1:bf:c1:ac:06:5e: 78:75:3d:a7:dc:83:7e:df:34:30:11:bd:6c:e7:c1:57:40:53: bb:cc:c0:16:1b:c9:06:c5:30:7e:25:3d:73:78:19:3c:49:64: df:df:ab:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUUyNUExMTAvBgNVBAUTKDJCQ0ExMkQ0NkQ0NjExRUQ2RUYxODg2RjM2NDQ2OERG M0QwMkVERTUwHhcNMjUwMzI5MDM1ODU2WhcNMjUwNDA1MDM1ODU2WjAYMRYwFAYD VQQDEw02N2U3NzAwMC05OTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtrPdwrghC9wftxjAGZRoREK3LBNy6aQKjcDxYxr6ct1oSjLfW4oECpyVTE2Q N4LOfem/ePMbCdfOhf4gWFdO2k8/vl2Pm9hJeCSM4JiluCtioXbxItF5vH2e5R0H ZcrZcJ/SKsy6+px7rmGwWrcjTNRnUfMBsf92gTZJCl9ehbn11J4X6T2AjLdoDcE+ ssMMoyL6ovHwB0tZsRjhWfrX7pIVZ+CuUn7rH7SBKXSorFPHpMB047kJVwrDZM2a +zSqD5M8nmxgJ0M1S5xLi6h1DtjcyBdZv8HezxobzFYCSlF9Azpn9qUcpE5IoytF JvFqSpjk6o9YoaiL7muxoYQ+HQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNSJdo8M HbFihYqPEL4Q3OdVs/3tMB8GA1UdIwQYMBaAFCvKEtRtRhHtbvGIbzZEaN89Au3l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTI1QS8yQzk2RjUwODQw OTYxMUVFQjQ2RTZGM0ZDNEY5QUUwMi9LOG9TMUcxR0VlMXU4WWh2TmtSbzN6MEM3 ZVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0s4b1MxRzFHRWUxdThZaHZOa1JvM3owQzdlVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTI1QS8yQzk2RjUwODQwOTYxMUVFQjQ2RTZGM0ZDNEY5QUUwMi9LOG9TMUcxR0Vl MXU4WWh2TmtSbzN6MEM3ZVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTE6KS1vrt3iozGk38CIES1eWwJ0P691YyZuK4BQs7pAsY6n7TsVon 8gu0aLcDCXF6g+xtajE5VTJBTQHFMlPdp+HbMFmnSbRbFZSNb4ljNHSr42X/I9Wr ri62HB+itMHYsA2mFxfVAti6mXCN9Uj1i8UoQ1i+sjyzek4Z5zanNXCiPtBpxJye 1gQFrql62jMImJ0PB5t0CA4Xw8StXZ2fy/ZtPx9qx92jiTNEP2/8W0P6X2P0GgMe eV7r4t4+TyVBwjxkzsGV2WjJXwtHDF4ZWPrRv8GsBl54dT2n3IN+3zQwEb1s58FX QFO7zMAWG8kGxTB+JT1zeBk8SWTf36sG -----END CERTIFICATE-----Generated at Fri Apr 4 22:32:02 2025 by rpki-client