$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft File: kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft (raw, json) Hash identifier: AJtMZ3iM5WbZuoOoRmWS3IFzg0aRZRoX2IZTO/dXwKA= Subject key identifier: 96:AE:38:07:91:69:84:53:30:27:73:2C:6D:E9:C7:84:38:31:14:3D Authority key identifier: 90:C6:B6:8D:16:AE:43:92:ED:F0:E9:0F:E1:37:38:0E:3C:44:37:E7 Certificate issuer: /CN=A91F7935/serialNumber=90C6B68D16AE4392EDF0E90FE137380E3C4437E7 Certificate serial: 0385 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft Manifest number: 0381 Signing time: Fri 11 Apr 2025 00:48:15 +0000 Manifest this update: Fri 11 Apr 2025 00:48:15 +0000 Manifest next update: Fri 18 Apr 2025 00:48:15 +0000 Files and hashes: 1: kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.crl (hash: DXOxHeLkSJY3bsVFhJBg1JNP2hjD1dCZBnt/A2YgtHI=) 2: 76B3E9929B9811EC8CE35458C4F9AE02.roa (hash: SgiMSTFsjgeREQPyRLpKSW3muW+9eyekiQ9Ab0wfEaI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.crl rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 00:48:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 901 (0x385) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7935, serialNumber=90C6B68D16AE4392EDF0E90FE137380E3C4437E7 Validity Not Before: Apr 11 00:48:15 2025 GMT Not After : Apr 18 00:48:15 2025 GMT Subject: CN=67f866cf-6bb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e7:b9:89:2c:8a:00:d3:80:47:0f:87:a5:19: 3f:f6:f2:a4:91:68:79:9b:7e:15:ba:0e:e1:94:2f: 73:dc:93:11:71:86:c7:fd:63:6c:0a:bf:3e:71:76: bd:06:bb:07:41:3b:14:6f:9a:63:26:6c:61:88:3b: bb:0d:7b:e0:ff:94:f8:1b:80:7a:7b:15:0c:d3:c2: fd:42:24:70:08:58:50:ce:15:24:d9:89:e6:8e:97: 4d:72:51:cb:9d:00:3c:17:27:8c:c2:29:36:ed:1b: d6:68:0f:1c:64:c5:21:ae:23:db:cc:b3:bc:4a:02: 63:84:d8:63:20:c9:b2:9c:65:ec:e5:b7:44:06:d5: 75:5c:8b:fe:2e:6e:7d:eb:d6:0a:cf:89:d3:8a:8e: 11:ea:55:ee:09:17:79:62:08:74:e6:fc:f7:e6:76: 4a:cc:0a:c2:80:7f:b4:a4:08:cc:c4:85:6c:42:ee: 6c:24:f0:37:0f:08:db:34:83:32:45:1f:57:b0:11: 1b:44:61:4e:a4:66:9c:1d:af:5b:77:bf:5c:6f:12: f0:4c:b5:aa:82:f2:e8:d9:aa:a1:9f:20:8a:76:d2: 99:48:f7:c7:ae:89:65:41:42:f7:5d:0e:24:30:ef: ba:02:2c:0a:15:ed:ef:11:bc:ce:a4:8c:ec:e3:f8: 41:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:AE:38:07:91:69:84:53:30:27:73:2C:6D:E9:C7:84:38:31:14:3D X509v3 Authority Key Identifier: keyid:90:C6:B6:8D:16:AE:43:92:ED:F0:E9:0F:E1:37:38:0E:3C:44:37:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:52:ba:e9:6c:a2:3f:b5:45:0c:7b:29:c3:eb:de:ac:39:42: 54:5f:75:bf:63:ba:7c:12:fa:66:11:aa:a9:6d:91:a2:bd:b2: cf:a0:15:50:14:e8:00:d8:0c:67:1d:2f:9c:e6:35:19:f0:fb: 03:46:15:e5:f6:ed:95:dc:19:83:ff:79:96:fb:3a:bc:c5:c8: e7:b4:c9:f5:1c:dc:a8:c4:6e:e2:0b:9e:9c:b8:2e:3c:55:dc: 7a:1e:5a:12:ec:7a:6c:e6:0d:74:fb:0b:19:0e:4c:ad:9f:eb: 84:d7:0f:a0:10:99:bd:02:8e:09:83:ee:41:20:9e:58:9a:c0: 3a:bc:67:bd:a8:ad:63:b2:a7:8b:16:1e:df:18:4b:8a:f9:e0: 16:0f:7f:fe:66:2e:7a:3a:18:33:2e:05:f4:16:66:c9:dc:93: c9:85:48:a8:07:fa:0c:40:87:b4:45:c9:99:e7:f2:49:1b:4b: b5:3c:1d:31:80:72:b5:25:14:00:f3:67:8b:e8:17:e4:f9:31: 87:67:08:4a:8e:23:6d:c7:95:37:3e:91:be:68:4f:a0:ed:74: b3:38:64:c3:2d:8d:e3:09:fd:53:0d:03:8e:c5:91:c4:99:e7: ee:e8:58:99:a2:44:68:f6:c9:f6:42:f6:c9:46:be:e5:2a:8c: f6:b8:47:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjc5MzUxMTAvBgNVBAUTKDkwQzZCNjhEMTZBRTQzOTJFREYwRTkwRkUxMzczODBF M0M0NDM3RTcwHhcNMjUwNDExMDA0ODE1WhcNMjUwNDE4MDA0ODE1WjAYMRYwFAYD VQQDEw02N2Y4NjZjZi02YmI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxee5iSyKANOARw+HpRk/9vKkkWh5m34Vug7hlC9z3JMRcYbH/WNsCr8+cXa9 BrsHQTsUb5pjJmxhiDu7DXvg/5T4G4B6exUM08L9QiRwCFhQzhUk2YnmjpdNclHL nQA8FyeMwik27RvWaA8cZMUhriPbzLO8SgJjhNhjIMmynGXs5bdEBtV1XIv+Lm59 69YKz4nTio4R6lXuCRd5Ygh05vz35nZKzArCgH+0pAjMxIVsQu5sJPA3DwjbNIMy RR9XsBEbRGFOpGacHa9bd79cbxLwTLWqgvLo2aqhnyCKdtKZSPfHrollQUL3XQ4k MO+6AiwKFe3vEbzOpIzs4/hBXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJauOAeR aYRTMCdzLG3px4Q4MRQ9MB8GA1UdIwQYMBaAFJDGto0WrkOS7fDpD+E3OA48RDfn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzkzNS85MDVBM0E0ODlC OTUxMUVDQUUzRjBDNEZDNEY5QUUwMi9rTWEyalJhdVE1THQ4T2tQNFRjNERqeEVO LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tNYTJqUmF1UTVMdDhPa1A0VGM0RGp4RU4tYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzkzNS85MDVBM0E0ODlCOTUxMUVDQUUzRjBDNEZDNEY5QUUwMi9rTWEyalJhdVE1 THQ4T2tQNFRjNERqeEVOLWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHUrrpbKI/tUUMeynD696sOUJUX3W/Y7p8EvpmEaqpbZGivbLPoBVQ FOgA2AxnHS+c5jUZ8PsDRhXl9u2V3BmD/3mW+zq8xcjntMn1HNyoxG7iC56cuC48 Vdx6HloS7Hps5g10+wsZDkytn+uE1w+gEJm9Ao4Jg+5BIJ5YmsA6vGe9qK1jsqeL Fh7fGEuK+eAWD3/+Zi56OhgzLgX0FmbJ3JPJhUioB/oMQIe0RcmZ5/JJG0u1PB0x gHK1JRQA82eL6Bfk+TGHZwhKjiNtx5U3PpG+aE+g7XSzOGTDLY3jCf1TDQOOxZHE mefu6FiZokRo9sn2QvbJRr7lKoz2uEdw -----END CERTIFICATE-----Generated at Sat Apr 12 17:43:11 2025 by rpki-client