$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA2CC/F26E06CE11F911EA9CB88C35C4F9AE02/kKmEULnak4EYotWtU02IKPS5RjQ.mft File: kKmEULnak4EYotWtU02IKPS5RjQ.mft (raw, json) Hash identifier: bAvCmHJqAw8a1D3/ArcBXwnI5WiQOSc46kC3gEXeQHA= Subject key identifier: ED:1F:47:8F:3E:AE:9B:52:05:EC:14:9E:AB:96:E3:A1:B9:02:42:53 Authority key identifier: 90:A9:84:50:B9:DA:93:81:18:A2:D5:AD:53:4D:88:28:F4:B9:46:34 Certificate issuer: /CN=A91EA2CC/serialNumber=90A98450B9DA938118A2D5AD534D8828F4B94634 Certificate serial: 0C01 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKmEULnak4EYotWtU02IKPS5RjQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA2CC/F26E06CE11F911EA9CB88C35C4F9AE02/kKmEULnak4EYotWtU02IKPS5RjQ.mft Manifest number: 0BEF Signing time: Wed 02 Apr 2025 18:47:36 +0000 Manifest this update: Wed 02 Apr 2025 18:47:35 +0000 Manifest next update: Wed 09 Apr 2025 18:47:35 +0000 Files and hashes: 1: kKmEULnak4EYotWtU02IKPS5RjQ.crl (hash: OWLeNuKVhTNIqdshWWXU34JU6pCHA53N3YKa1288oWg=) 2: D376CA2E63B311EFBEFCDF10C4F9AE02.roa (hash: G+U7uQFgAb2U+N/txdaeFUXvdA97Z5VnhrdZ+BD6M4c=) 3: E6144BC6F52011EFB886A255C4F9AE02.roa (hash: aEMS3M29hCCeByUCXZ+uvfYFpf4/VBfRmYpl07QvYhY=) 4: C9989D9EF52011EF88416555C4F9AE02.roa (hash: 5ttWZpUai22oFSUg02AkUKazNYGpWMAvqC2hReQsDD4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA2CC/F26E06CE11F911EA9CB88C35C4F9AE02/kKmEULnak4EYotWtU02IKPS5RjQ.crl rsync://rpki.apnic.net/member_repository/A91EA2CC/F26E06CE11F911EA9CB88C35C4F9AE02/kKmEULnak4EYotWtU02IKPS5RjQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKmEULnak4EYotWtU02IKPS5RjQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 18:47:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3073 (0xc01) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA2CC Validity Not Before: Apr 2 18:47:35 2025 GMT Not After : Apr 9 18:47:35 2025 GMT Subject: CN=67ed8647-a2a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e8:1f:19:f7:04:27:e4:26:d9:4d:a8:d7:30: 8f:7c:67:bb:1b:4f:6d:e0:78:21:df:7f:9a:aa:47: 15:b6:a5:7a:fc:a6:f0:e7:33:66:05:30:48:1d:4b: ce:18:cf:99:82:e6:95:55:3c:fb:a6:a9:26:f6:b3: 37:90:99:a7:00:19:2b:db:19:f3:e9:85:3f:28:80: 0c:7d:0d:7a:61:f1:13:09:ac:f1:4b:08:13:b4:7d: 68:1c:06:dc:b5:f6:df:f9:ef:39:f0:42:7f:89:ed: 4f:18:ba:3e:61:15:9b:83:c4:4f:9d:f6:5b:a4:90: 69:8e:1d:59:b8:38:42:63:85:a6:7b:77:62:11:48: b0:f7:fa:1f:b7:6c:41:65:81:a0:c3:f0:9b:82:ea: 70:f0:6b:6a:9d:a1:90:4c:8b:0a:81:3b:ec:2e:01: 7f:da:04:ee:db:f7:fc:ed:67:54:3d:be:44:39:a6: 89:12:0a:49:ff:c8:eb:5c:71:73:1d:7b:9a:e1:65: 03:37:81:d1:2f:10:ec:13:41:39:28:f9:90:c8:af: 03:30:40:e6:51:59:a2:35:f8:7b:c4:d0:aa:9b:01: 8d:4a:d9:f0:6b:a1:7d:c2:a3:84:4f:c9:35:b3:d9: 70:71:cd:3a:fb:cf:fd:f8:96:70:fb:87:d9:dd:e8: c2:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:1F:47:8F:3E:AE:9B:52:05:EC:14:9E:AB:96:E3:A1:B9:02:42:53 X509v3 Authority Key Identifier: keyid:90:A9:84:50:B9:DA:93:81:18:A2:D5:AD:53:4D:88:28:F4:B9:46:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA2CC/F26E06CE11F911EA9CB88C35C4F9AE02/kKmEULnak4EYotWtU02IKPS5RjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKmEULnak4EYotWtU02IKPS5RjQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA2CC/F26E06CE11F911EA9CB88C35C4F9AE02/kKmEULnak4EYotWtU02IKPS5RjQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:82:64:fb:05:9b:33:da:cb:ca:de:e5:61:f2:c4:02:18:12: 2e:a4:a1:ca:a7:69:de:7d:bd:f7:af:c2:4d:cb:2d:8f:7c:77: e7:07:ba:7b:ba:e7:d8:8f:b4:01:27:e6:b2:ae:73:f6:9b:ff: a0:9c:88:cd:49:58:59:8c:ff:3d:c1:fc:c3:40:5d:94:81:8d: 54:42:f7:28:7b:92:1a:ca:cf:5c:81:45:62:f8:d5:52:7f:03: 73:85:03:90:f8:e8:b3:cc:0f:1a:e1:82:bf:ed:f5:fa:d1:bb: 54:34:b0:8e:82:8c:be:36:d4:21:e4:33:06:6a:24:ee:7c:fe: d0:e5:48:03:99:b6:22:20:4d:4a:be:78:21:ea:fb:01:74:d6: 58:1a:9c:06:6d:ec:9f:c0:68:56:7e:f9:c9:6c:aa:7e:04:fd: 6f:14:3e:ab:11:dd:c1:5c:50:71:a3:44:6b:73:a2:55:38:88: e4:86:7b:91:8a:f8:23:ef:e1:f6:20:07:d4:85:e0:7b:2e:2c: f6:10:99:8b:e1:ff:88:08:dd:88:80:b9:61:ab:a2:2a:25:b9: 9e:b6:57:87:6f:72:7f:b3:5e:ca:55:8c:d7:c0:91:62:6d:fd: 8a:3c:1c:03:ac:dd:88:49:e4:da:12:e4:59:13:a2:2a:21:47: 30:4d:e9:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDAEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUEyQ0MxMTAvBgNVBAUTKDkwQTk4NDUwQjlEQTkzODExOEEyRDVBRDUzNEQ4ODI4 RjRCOTQ2MzQwHhcNMjUwNDAyMTg0NzM1WhcNMjUwNDA5MTg0NzM1WjAYMRYwFAYD VQQDEw02N2VkODY0Ny1hMmE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv+gfGfcEJ+Qm2U2o1zCPfGe7G09t4Hgh33+aqkcVtqV6/Kbw5zNmBTBIHUvO GM+ZguaVVTz7pqkm9rM3kJmnABkr2xnz6YU/KIAMfQ16YfETCazxSwgTtH1oHAbc tfbf+e858EJ/ie1PGLo+YRWbg8RPnfZbpJBpjh1ZuDhCY4Wme3diEUiw9/oft2xB ZYGgw/Cbgupw8GtqnaGQTIsKgTvsLgF/2gTu2/f87WdUPb5EOaaJEgpJ/8jrXHFz HXua4WUDN4HRLxDsE0E5KPmQyK8DMEDmUVmiNfh7xNCqmwGNStnwa6F9wqOET8k1 s9lwcc06+8/9+JZw+4fZ3ejCNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO0fR48+ rptSBewUnquW46G5AkJTMB8GA1UdIwQYMBaAFJCphFC52pOBGKLVrVNNiCj0uUY0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTJDQy9GMjZFMDZDRTEx RjkxMUVBOUNCODhDMzVDNEY5QUUwMi9rS21FVUxuYWs0RVlvdFd0VTAySUtQUzVS alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tLbUVVTG5hazRFWW90V3RVMDJJS1BTNVJqUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTJDQy9GMjZFMDZDRTExRjkxMUVBOUNCODhDMzVDNEY5QUUwMi9rS21FVUxuYWs0 RVlvdFd0VTAySUtQUzVSalEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCgmT7BZsz2svK3uVh8sQCGBIupKHKp2nefb33r8JNyy2PfHfnB7p7 uufYj7QBJ+ayrnP2m/+gnIjNSVhZjP89wfzDQF2UgY1UQvcoe5Iays9cgUVi+NVS fwNzhQOQ+OizzA8a4YK/7fX60btUNLCOgoy+NtQh5DMGaiTufP7Q5UgDmbYiIE1K vngh6vsBdNZYGpwGbeyfwGhWfvnJbKp+BP1vFD6rEd3BXFBxo0Rrc6JVOIjkhnuR ivgj7+H2IAfUheB7Liz2EJmL4f+ICN2IgLlhq6IqJbmetleHb3J/s17KVYzXwJFi bf2KPBwDrN2ISeTaEuRZE6IqIUcwTemn -----END CERTIFICATE-----Generated at Fri Apr 4 18:35:53 2025 by rpki-client