$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBA0E/DBBED206C00511EDA255FA10C4F9AE02/km2a3G-4c9dlu0EicoDB8RhG7hc.mft File: km2a3G-4c9dlu0EicoDB8RhG7hc.mft (raw, json) Hash identifier: 2TbZfZpaMQx0ZzjwGDWqI/dyVLAngDS+zObmbSltlZ0= Subject key identifier: 48:3B:38:08:5C:8F:2C:71:F1:6F:CE:3D:A0:5F:2F:B5:CF:E0:55:A6 Authority key identifier: 92:6D:9A:DC:6F:B8:73:D7:65:BB:41:22:72:80:C1:F1:18:46:EE:17 Certificate issuer: /CN=A91EBA0E/serialNumber=926D9ADC6FB873D765BB41227280C1F11846EE17 Certificate serial: 019C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/km2a3G-4c9dlu0EicoDB8RhG7hc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBA0E/DBBED206C00511EDA255FA10C4F9AE02/km2a3G-4c9dlu0EicoDB8RhG7hc.mft Manifest number: 0192 Signing time: Sat 05 Apr 2025 03:03:00 +0000 Manifest this update: Sat 05 Apr 2025 03:03:00 +0000 Manifest next update: Sat 12 Apr 2025 03:03:00 +0000 Files and hashes: 1: km2a3G-4c9dlu0EicoDB8RhG7hc.crl (hash: PTt0LEbYZ5qLmspxXsZ30PbYfnoxOFGy+x58IOOrRVA=) 2: 1B5E26228FA911EF90043A7CC4F9AE02.roa (hash: Kf03AsTj/sjKaJ/vafb1jrYT0WQ+1IyxISSmBFOh+2M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBA0E/DBBED206C00511EDA255FA10C4F9AE02/km2a3G-4c9dlu0EicoDB8RhG7hc.crl rsync://rpki.apnic.net/member_repository/A91EBA0E/DBBED206C00511EDA255FA10C4F9AE02/km2a3G-4c9dlu0EicoDB8RhG7hc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/km2a3G-4c9dlu0EicoDB8RhG7hc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 03:02:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 412 (0x19c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBA0E Validity Not Before: Apr 5 03:03:00 2025 GMT Not After : Apr 12 03:03:00 2025 GMT Subject: CN=67f09d64-25a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:eb:71:1d:8d:09:ee:fd:8e:3d:f5:e7:70:92: 02:00:49:d5:40:e4:85:be:a0:d0:48:2e:e2:d2:42: 8e:58:b2:de:72:67:48:aa:4a:6e:3b:ef:b3:7a:91: 6d:4f:c8:5f:bf:f3:88:bd:ce:40:9a:cf:8f:6c:10: b8:6b:67:bf:8f:1a:12:5f:97:6c:e8:36:d8:55:40: e4:dd:23:04:7f:de:3a:2f:7b:78:08:d1:8d:84:b5: 2c:40:66:09:fa:95:09:91:16:3c:6d:ee:f3:41:30: 91:fc:60:de:07:87:e7:61:32:ab:6f:f1:56:fb:c1: 7f:75:4f:e5:51:b8:f6:75:e3:fb:a4:5b:fe:03:dd: 1b:36:12:a5:73:50:66:c1:46:f5:b9:0f:8f:75:6b: cf:c8:65:ac:03:62:c3:41:a1:43:d8:b6:23:83:82: d1:02:79:07:a9:39:c8:69:e4:ae:b9:03:ac:9b:31: fe:da:a2:f5:86:03:9f:97:e9:0a:f1:44:4e:dd:2d: aa:d1:27:0f:97:09:0a:cc:5f:7f:05:ed:b6:1d:9b: ed:58:03:44:a3:f7:26:71:58:e3:d2:d1:98:28:be: 7c:d4:b0:c7:89:4e:3b:cd:92:f7:6a:cd:2e:53:6f: 33:fe:58:a0:37:df:30:3f:64:d5:db:93:d4:b5:0e: 88:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:3B:38:08:5C:8F:2C:71:F1:6F:CE:3D:A0:5F:2F:B5:CF:E0:55:A6 X509v3 Authority Key Identifier: keyid:92:6D:9A:DC:6F:B8:73:D7:65:BB:41:22:72:80:C1:F1:18:46:EE:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBA0E/DBBED206C00511EDA255FA10C4F9AE02/km2a3G-4c9dlu0EicoDB8RhG7hc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/km2a3G-4c9dlu0EicoDB8RhG7hc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBA0E/DBBED206C00511EDA255FA10C4F9AE02/km2a3G-4c9dlu0EicoDB8RhG7hc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:f6:4a:48:b1:34:0e:8c:ff:b5:f1:d4:20:f2:1b:ab:a5:8c: 0c:a2:91:53:06:d6:b6:4c:04:5e:f9:ab:ec:03:e2:05:43:69: 47:4b:9d:5b:31:2c:f7:95:92:eb:08:6a:cf:cd:74:37:ab:55: 60:90:eb:a4:1d:c4:1f:ca:0f:ae:ee:63:56:97:50:68:12:62: 5c:bc:e6:55:00:1c:61:8f:aa:eb:07:b9:6d:88:37:93:12:f9: 5c:69:f2:8b:56:ac:11:63:a3:c3:4a:d9:7b:d8:52:55:94:cd: e3:4d:d6:6c:9f:15:5d:8c:3e:73:94:ee:18:bb:d5:52:86:f3: d0:d1:01:03:e3:56:cf:6b:8e:cb:00:97:d2:84:9d:ad:5a:21: 30:ef:16:4c:b8:7b:17:23:d9:8a:94:33:b6:98:e8:e2:f3:05: 1c:5c:0b:63:c0:f3:0a:de:c9:e3:02:b6:13:db:73:ed:93:35: c5:7b:3f:7e:a5:b0:d4:4f:96:67:72:4f:c6:92:84:74:82:71: 72:ca:c4:2d:c0:47:d9:e7:dd:8a:b0:87:54:07:19:d3:1c:53: 1b:1a:23:11:99:6f:48:a6:df:97:e7:32:13:3c:e7:e8:f6:b2: a9:5a:83:1c:fb:79:9a:b6:b4:6e:48:f9:cd:74:ee:b0:ab:5b: e7:62:59:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJBMEUxMTAvBgNVBAUTKDkyNkQ5QURDNkZCODczRDc2NUJCNDEyMjcyODBDMUYx MTg0NkVFMTcwHhcNMjUwNDA1MDMwMzAwWhcNMjUwNDEyMDMwMzAwWjAYMRYwFAYD VQQDEw02N2YwOWQ2NC0yNWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwOtxHY0J7v2OPfXncJICAEnVQOSFvqDQSC7i0kKOWLLecmdIqkpuO++zepFt T8hfv/OIvc5Ams+PbBC4a2e/jxoSX5ds6DbYVUDk3SMEf946L3t4CNGNhLUsQGYJ +pUJkRY8be7zQTCR/GDeB4fnYTKrb/FW+8F/dU/lUbj2deP7pFv+A90bNhKlc1Bm wUb1uQ+PdWvPyGWsA2LDQaFD2LYjg4LRAnkHqTnIaeSuuQOsmzH+2qL1hgOfl+kK 8URO3S2q0ScPlwkKzF9/Be22HZvtWANEo/cmcVjj0tGYKL581LDHiU47zZL3as0u U28z/ligN98wP2TV25PUtQ6I3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEg7OAhc jyxx8W/OPaBfL7XP4FWmMB8GA1UdIwQYMBaAFJJtmtxvuHPXZbtBInKAwfEYRu4X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkEwRS9EQkJFRDIwNkMw MDUxMUVEQTI1NUZBMTBDNEY5QUUwMi9rbTJhM0ctNGM5ZGx1MEVpY29EQjhSaEc3 aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ttMmEzRy00YzlkbHUwRWljb0RCOFJoRzdoYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkEwRS9EQkJFRDIwNkMwMDUxMUVEQTI1NUZBMTBDNEY5QUUwMi9rbTJhM0ctNGM5 ZGx1MEVpY29EQjhSaEc3aGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDA9kpIsTQOjP+18dQg8hurpYwMopFTBta2TARe+avsA+IFQ2lHS51b MSz3lZLrCGrPzXQ3q1VgkOukHcQfyg+u7mNWl1BoEmJcvOZVABxhj6rrB7ltiDeT EvlcafKLVqwRY6PDStl72FJVlM3jTdZsnxVdjD5zlO4Yu9VShvPQ0QED41bPa47L AJfShJ2tWiEw7xZMuHsXI9mKlDO2mOji8wUcXAtjwPMK3snjArYT23PtkzXFez9+ pbDUT5Znck/GkoR0gnFyysQtwEfZ592KsIdUBxnTHFMbGiMRmW9Ipt+X5zITPOfo 9rKpWoMc+3matrRuSPnNdO6wq1vnYlkr -----END CERTIFICATE-----Generated at Sat Apr 5 22:34:49 2025 by rpki-client