$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA252/F081716886DC11EA9BD3C466C4F9AE02/KPGOx0nqkbWjKZdJ8qvieIoQxpE.mft File: KPGOx0nqkbWjKZdJ8qvieIoQxpE.mft (raw, json) Hash identifier: tYqI+/20eramY71r6/bdSunfUKDX5yYdmO3ErSURKTs= Subject key identifier: 33:CD:3E:3C:9F:93:36:EA:C6:A6:AC:A1:5B:CE:8E:E3:98:1F:3C:08 Authority key identifier: 28:F1:8E:C7:49:EA:91:B5:A3:29:97:49:F2:AB:E2:78:8A:10:C6:91 Certificate issuer: /CN=A91DA252/serialNumber=28F18EC749EA91B5A3299749F2ABE2788A10C691 Certificate serial: 0990 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPGOx0nqkbWjKZdJ8qvieIoQxpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA252/F081716886DC11EA9BD3C466C4F9AE02/KPGOx0nqkbWjKZdJ8qvieIoQxpE.mft Manifest number: 098A Signing time: Wed 02 Apr 2025 20:09:15 +0000 Manifest this update: Wed 02 Apr 2025 20:09:15 +0000 Manifest next update: Wed 09 Apr 2025 20:09:15 +0000 Files and hashes: 1: KPGOx0nqkbWjKZdJ8qvieIoQxpE.crl (hash: t7qJOv357eINoRvaX5D0JrYzpFdzu8GBRJyLMIywWq0=) 2: 81E66AB486DD11EAA5DCD466C4F9AE02.roa (hash: PABbUqoLwf3xZn77dm2ppG3YXtLL0LLzakgXhNUgKAg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA252/F081716886DC11EA9BD3C466C4F9AE02/KPGOx0nqkbWjKZdJ8qvieIoQxpE.crl rsync://rpki.apnic.net/member_repository/A91DA252/F081716886DC11EA9BD3C466C4F9AE02/KPGOx0nqkbWjKZdJ8qvieIoQxpE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPGOx0nqkbWjKZdJ8qvieIoQxpE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 20:09:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2448 (0x990) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA252 Validity Not Before: Apr 2 20:09:15 2025 GMT Not After : Apr 9 20:09:15 2025 GMT Subject: CN=67ed996b-9acd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f7:90:cf:58:39:5a:49:cf:72:0d:85:a4:88: 5b:83:54:38:83:a3:bb:63:7b:6a:10:5a:9c:95:70: a2:fa:32:84:9f:84:25:c7:0d:95:3e:47:89:60:d2: 21:25:72:8e:20:af:f1:7a:93:a6:d1:f5:2a:e0:59: 84:51:27:c0:d2:8d:f0:3c:22:52:46:8a:33:04:d5: c6:d5:bd:4b:d0:ea:49:66:55:9f:e7:31:c4:e8:25: e7:f9:81:e1:fc:b0:a0:e9:01:15:e7:6f:6d:91:d9: a9:a9:d3:b1:6d:c8:03:65:1e:da:55:2f:12:b5:aa: f4:12:6e:c4:f7:e8:ce:97:56:a1:79:60:3f:d3:08: 8e:2a:7b:91:62:10:dd:a1:bd:12:fa:ed:d3:84:5a: fd:35:f2:1a:30:0c:51:11:45:f0:1d:1d:52:52:f8: 60:f6:6d:11:c6:09:23:17:a6:b6:89:18:48:1b:c9: d7:a0:18:c3:73:2e:a2:ae:0c:32:ae:29:49:bb:94: 35:4d:78:c9:74:3a:5a:3a:50:0c:d3:5a:2f:64:9b: e7:4e:8d:5e:c0:8c:d2:09:cf:b7:76:65:c3:6f:78: 0c:4c:4d:fd:3d:c6:4c:3a:a1:43:65:f6:5a:ba:e9: 87:3d:23:5f:86:06:54:a7:db:d4:f1:96:17:7a:c7: 0e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:CD:3E:3C:9F:93:36:EA:C6:A6:AC:A1:5B:CE:8E:E3:98:1F:3C:08 X509v3 Authority Key Identifier: keyid:28:F1:8E:C7:49:EA:91:B5:A3:29:97:49:F2:AB:E2:78:8A:10:C6:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA252/F081716886DC11EA9BD3C466C4F9AE02/KPGOx0nqkbWjKZdJ8qvieIoQxpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPGOx0nqkbWjKZdJ8qvieIoQxpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA252/F081716886DC11EA9BD3C466C4F9AE02/KPGOx0nqkbWjKZdJ8qvieIoQxpE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:da:b4:ae:5b:d4:e3:e6:7d:cd:36:91:18:d1:ec:30:80:3e: c8:db:b3:b2:59:25:30:35:ca:ab:ac:8c:3d:b1:9c:85:a4:02: db:ab:3f:42:aa:01:d3:38:f5:01:d4:68:be:74:70:61:18:12: 4a:48:98:41:d6:5a:e0:e1:7a:dd:18:98:b4:ea:7a:4d:4b:6a: 88:c0:56:cf:c8:4a:8c:d6:a0:46:08:8b:94:59:9a:69:a2:85: 62:4a:d3:45:04:d4:0b:37:92:17:e0:b0:ca:da:b5:be:c9:da: 36:78:9b:a2:8d:f5:ac:ae:4a:6d:e2:32:aa:16:99:c6:30:8d: a8:71:cd:40:50:fe:f9:31:ee:20:ca:33:db:4c:b4:32:41:ee: 3b:49:f8:c4:c4:18:3b:36:29:cd:ba:96:48:46:76:7c:4d:0b: a7:5d:72:11:f4:8d:73:81:9c:6d:3f:6d:bc:b0:c0:a5:67:4d: 28:51:67:8d:99:a4:0f:7f:eb:73:6b:4b:58:bb:f9:fb:a5:52: 2e:bf:f4:32:48:17:01:3f:38:24:49:e4:51:a4:dd:a1:14:29: 11:f5:8b:cc:05:52:1e:74:03:13:05:22:16:05:eb:34:4e:c7: 30:3a:43:79:1e:e5:d8:bf:b5:ca:e0:27:3c:82:37:38:56:08: 75:d7:b9:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCZAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REEyNTIxMTAvBgNVBAUTKDI4RjE4RUM3NDlFQTkxQjVBMzI5OTc0OUYyQUJFMjc4 OEExMEM2OTEwHhcNMjUwNDAyMjAwOTE1WhcNMjUwNDA5MjAwOTE1WjAYMRYwFAYD VQQDEw02N2VkOTk2Yi05YWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn/eQz1g5WknPcg2FpIhbg1Q4g6O7Y3tqEFqclXCi+jKEn4Qlxw2VPkeJYNIh JXKOIK/xepOm0fUq4FmEUSfA0o3wPCJSRoozBNXG1b1L0OpJZlWf5zHE6CXn+YHh /LCg6QEV529tkdmpqdOxbcgDZR7aVS8Star0Em7E9+jOl1aheWA/0wiOKnuRYhDd ob0S+u3ThFr9NfIaMAxREUXwHR1SUvhg9m0RxgkjF6a2iRhIG8nXoBjDcy6irgwy rilJu5Q1TXjJdDpaOlAM01ovZJvnTo1ewIzSCc+3dmXDb3gMTE39PcZMOqFDZfZa uumHPSNfhgZUp9vU8ZYXescOlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDPNPjyf kzbqxqasoVvOjuOYHzwIMB8GA1UdIwQYMBaAFCjxjsdJ6pG1oymXSfKr4niKEMaR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTI1Mi9GMDgxNzE2ODg2 REMxMUVBOUJEM0M0NjZDNEY5QUUwMi9LUEdPeDBucWtiV2pLWmRKOHF2aWVJb1F4 cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tQR094MG5xa2JXaktaZEo4cXZpZUlvUXhwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTI1Mi9GMDgxNzE2ODg2REMxMUVBOUJEM0M0NjZDNEY5QUUwMi9LUEdPeDBucWti V2pLWmRKOHF2aWVJb1F4cEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAV2rSuW9Tj5n3NNpEY0ewwgD7I27OyWSUwNcqrrIw9sZyFpALbqz9C qgHTOPUB1Gi+dHBhGBJKSJhB1lrg4XrdGJi06npNS2qIwFbPyEqM1qBGCIuUWZpp ooViStNFBNQLN5IX4LDK2rW+ydo2eJuijfWsrkpt4jKqFpnGMI2occ1AUP75Me4g yjPbTLQyQe47SfjExBg7NinNupZIRnZ8TQunXXIR9I1zgZxtP228sMClZ00oUWeN maQPf+tza0tYu/n7pVIuv/QySBcBPzgkSeRRpN2hFCkR9YvMBVIedAMTBSIWBes0 TscwOkN5HuXYv7XK4Cc8gjc4Vgh117n9 -----END CERTIFICATE-----Generated at Fri Apr 4 22:01:48 2025 by rpki-client