$ rpki-client -vvf rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.mft File: KMVnce5JZD_fxE-OMImmvXlf_IQ.mft (raw, json) Hash identifier: N2yODwSgqauEB7yaj3Zbd38zWYbO9y+hTSV2tP4gLGo= Subject key identifier: 15:36:A0:5A:98:B9:72:B0:66:E6:3D:A9:3D:43:75:02:AF:BF:A8:70 Authority key identifier: 28:C5:67:71:EE:49:64:3F:DF:C4:4F:8E:30:89:A6:BD:79:5F:FC:84 Certificate issuer: /CN=A9113C02/serialNumber=28C56771EE49643FDFC44F8E3089A6BD795FFC84 Certificate serial: 0180 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMVnce5JZD_fxE-OMImmvXlf_IQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.mft Manifest number: 249A Signing time: Sat 31 May 2025 16:18:23 +0000 Manifest this update: Sat 31 May 2025 16:18:22 +0000 Manifest next update: Sat 07 Jun 2025 16:18:22 +0000 Files and hashes: 1: KMVnce5JZD_fxE-OMImmvXlf_IQ.crl (hash: m2YzHL8BwIDUG3vBJ7xcqP5C4InJZ27eoWMLENHgxms=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.crl rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMVnce5JZD_fxE-OMImmvXlf_IQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 16:18:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 384 (0x180) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113C02, serialNumber=28C56771EE49643FDFC44F8E3089A6BD795FFC84 Validity Not Before: May 31 16:18:22 2025 GMT Not After : Jun 7 16:18:22 2025 GMT Subject: CN=683b2bce-6dbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4b:e0:58:e4:7c:17:93:1e:91:29:14:c6:1a: 18:4a:32:d1:10:87:0e:00:f0:e6:23:c9:b0:80:79: de:ed:57:1e:46:dd:81:17:2d:fd:f9:74:ae:a0:55: 6a:d2:e7:28:b5:b2:20:b2:5e:db:04:b9:ab:db:f0: 2d:b9:ee:05:d3:34:ae:7d:e2:8a:16:9a:29:e1:0f: f3:bc:bd:37:d8:3e:ab:8b:ee:7e:b9:ce:de:1e:84: 56:5c:07:31:65:f0:5f:46:a9:78:5a:44:7c:5e:e5: e8:00:a2:51:3a:20:54:25:c2:b9:2a:6c:ac:0c:6c: e3:07:93:96:5b:54:48:06:86:72:17:07:25:5b:bd: 77:04:7f:5c:14:84:7b:de:a5:12:34:a1:89:c1:6b: 4b:92:f8:66:66:59:4f:49:15:25:f3:c3:da:ba:f7: b3:39:74:fe:70:87:86:3c:47:3d:5d:64:5d:20:6f: 8f:9a:45:a3:1c:68:45:67:7d:c4:10:e5:53:1f:aa: 31:f2:66:49:07:53:35:ea:87:04:9c:46:0c:80:5c: f5:7c:a1:75:b2:ae:4b:4a:e4:ce:cc:0c:06:c4:2d: 8f:2f:b0:f3:23:a0:3a:72:84:49:c9:a6:11:8c:5b: f2:c8:b1:61:0f:10:85:92:42:32:d6:3f:39:ca:cc: 1f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:36:A0:5A:98:B9:72:B0:66:E6:3D:A9:3D:43:75:02:AF:BF:A8:70 X509v3 Authority Key Identifier: keyid:28:C5:67:71:EE:49:64:3F:DF:C4:4F:8E:30:89:A6:BD:79:5F:FC:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMVnce5JZD_fxE-OMImmvXlf_IQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:82:0c:eb:cb:bc:b9:62:00:17:0a:a1:4b:32:5a:89:7e:95: b5:e3:06:b6:3a:62:26:8f:43:e4:35:12:2e:dd:09:0f:49:3d: aa:34:85:f7:77:9f:7f:fa:57:cb:ee:02:a2:28:af:92:b1:a2: 02:77:7b:67:09:93:0d:41:71:e5:1b:cf:78:5c:85:3b:88:da: 73:81:d0:0d:99:6f:d0:2b:da:14:99:53:05:08:a5:be:3f:18: 08:dc:88:a0:21:89:23:0c:df:2c:d3:d1:01:f5:a1:fe:0c:69: 2d:e2:57:cc:17:7a:30:f0:6f:87:05:5c:7a:14:05:4c:8d:da: cc:37:38:b2:73:1f:80:74:1a:a5:78:41:0e:9d:18:64:08:a2: ed:85:ce:8a:65:c8:cb:bc:8e:5d:11:9a:41:d3:bd:e9:d4:ab: 67:64:f1:bd:d1:9a:e4:8c:13:9e:12:cc:5e:5e:d8:32:96:a6: 6a:7f:98:31:d0:ca:cc:0b:5a:ab:01:19:bc:12:dc:61:ed:e0: 61:7e:3d:35:33:1d:07:d8:3e:af:28:b5:aa:51:2d:a6:bd:03: 5d:87:5c:ee:e0:07:23:42:c8:5f:a1:62:58:7f:f7:63:27:52: af:fd:cf:c4:78:ce:89:cc:2c:05:35:7e:fc:dd:da:71:b6:ae: 80:1f:ae:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTNDMDIxMTAvBgNVBAUTKDI4QzU2NzcxRUU0OTY0M0ZERkM0NEY4RTMwODlBNkJE Nzk1RkZDODQwHhcNMjUwNTMxMTYxODIyWhcNMjUwNjA3MTYxODIyWjAYMRYwFAYD VQQDEw02ODNiMmJjZS02ZGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt0vgWOR8F5MekSkUxhoYSjLREIcOAPDmI8mwgHne7VceRt2BFy39+XSuoFVq 0ucotbIgsl7bBLmr2/Atue4F0zSufeKKFpop4Q/zvL032D6ri+5+uc7eHoRWXAcx ZfBfRql4WkR8XuXoAKJROiBUJcK5KmysDGzjB5OWW1RIBoZyFwclW713BH9cFIR7 3qUSNKGJwWtLkvhmZllPSRUl88PauvezOXT+cIeGPEc9XWRdIG+PmkWjHGhFZ33E EOVTH6ox8mZJB1M16ocEnEYMgFz1fKF1sq5LSuTOzAwGxC2PL7DzI6A6coRJyaYR jFvyyLFhDxCFkkIy1j85yswfcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBU2oFqY uXKwZuY9qT1DdQKvv6hwMB8GA1UdIwQYMBaAFCjFZ3HuSWQ/38RPjjCJpr15X/yE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0MwMi80QzQwNkZCNjQw NTYxMUU3QUYwNDFBMzVDNEY5QUUwMi9LTVZuY2U1SlpEX2Z4RS1PTUltbXZYbGZf SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tNVm5jZTVKWkRfZnhFLU9NSW1tdlhsZl9JUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx M0MwMi80QzQwNkZCNjQwNTYxMUU3QUYwNDFBMzVDNEY5QUUwMi9LTVZuY2U1SlpE X2Z4RS1PTUltbXZYbGZfSVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpggzry7y5YgAXCqFLMlqJfpW14wa2OmImj0PkNRIu3QkPST2qNIX3 d59/+lfL7gKiKK+SsaICd3tnCZMNQXHlG894XIU7iNpzgdANmW/QK9oUmVMFCKW+ PxgI3IigIYkjDN8s09EB9aH+DGkt4lfMF3ow8G+HBVx6FAVMjdrMNziycx+AdBql eEEOnRhkCKLthc6KZcjLvI5dEZpB073p1KtnZPG90ZrkjBOeEsxeXtgylqZqf5gx 0MrMC1qrARm8Etxh7eBhfj01Mx0H2D6vKLWqUS2mvQNdh1zu4AcjQshfoWJYf/dj J1Kv/c/EeM6JzCwFNX783dpxtq6AH67p -----END CERTIFICATE-----Generated at Mon Jun 2 05:34:28 2025 by rpki-client