$ rpki-client -vvf rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.mft File: iEthKajamClnFMU6WhKA_RAZ-KM.mft (raw, json) Hash identifier: P/2DtZ3pKj6Gs4WMDF+iDss6YfU9pOBhXqqbsy+ejOk= Subject key identifier: C9:62:D1:E2:51:B3:45:35:E5:9A:1F:49:BD:B6:B6:4F:72:30:35:A5 Authority key identifier: 88:4B:61:29:A8:DA:98:29:67:14:C5:3A:5A:12:80:FD:10:19:F8:A3 Certificate issuer: /CN=A915F6E4/serialNumber=884B6129A8DA98296714C53A5A1280FD1019F8A3 Certificate serial: 0150 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEthKajamClnFMU6WhKA_RAZ-KM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.mft Manifest number: 0149 Signing time: Sat 31 May 2025 03:56:43 +0000 Manifest this update: Sat 31 May 2025 03:56:43 +0000 Manifest next update: Sat 07 Jun 2025 03:56:43 +0000 Files and hashes: 1: iEthKajamClnFMU6WhKA_RAZ-KM.crl (hash: PeumRFqB8c5Sg87GX6aKZRp2huklklVFsWqz7mTx04M=) 2: E1B42772611A11EE9022C77EC4F9AE02.roa (hash: UvdgbLYF5+vRHqxdggCtIs+aJSz12jANKpYmMkrt0HU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.crl rsync://rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEthKajamClnFMU6WhKA_RAZ-KM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:56:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 336 (0x150) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F6E4, serialNumber=884B6129A8DA98296714C53A5A1280FD1019F8A3 Validity Not Before: May 31 03:56:43 2025 GMT Not After : Jun 7 03:56:43 2025 GMT Subject: CN=683a7dfb-7541 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:00:df:8c:c5:67:28:7d:93:97:6a:05:1c:41: 8b:e6:da:1b:8c:9c:3d:95:81:80:44:00:4d:8f:46: ee:37:87:91:bd:ac:75:ed:1a:64:07:e2:99:49:fe: d5:80:9e:fd:a9:38:18:46:31:f5:9c:e7:05:8e:75: 60:48:0b:8a:ce:1e:66:a1:5c:6c:89:f3:75:fd:58: 95:ff:a3:ac:b6:d2:f2:ed:88:e9:7e:68:0e:0b:96: 04:29:28:c0:a3:98:21:23:43:cd:74:c3:ff:2f:55: d7:0e:72:22:3c:32:0c:49:3d:c5:a3:58:36:3f:c8: 09:47:f1:87:1a:72:37:69:a7:59:61:53:07:90:39: 8f:e6:92:c1:4d:25:26:12:2d:31:fc:a3:cb:de:66: 64:3c:1d:c4:3a:e4:dc:19:c0:ab:3f:93:85:2b:9b: 31:52:86:87:15:a8:5b:b2:c1:bc:41:89:e2:bb:81: 20:82:2a:d2:2e:73:42:44:42:61:57:e1:8b:80:88: 97:40:58:24:af:c5:6d:8d:99:2d:e5:4b:fe:b5:e9: 5d:1f:de:16:eb:4e:1d:66:7b:35:f2:3b:ae:e1:9f: 7a:08:4b:70:e2:88:a7:a0:09:bc:4d:f9:c7:55:27: 5a:df:62:df:82:0f:2f:ba:08:0a:3e:d9:5f:a9:58: 2e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:62:D1:E2:51:B3:45:35:E5:9A:1F:49:BD:B6:B6:4F:72:30:35:A5 X509v3 Authority Key Identifier: keyid:88:4B:61:29:A8:DA:98:29:67:14:C5:3A:5A:12:80:FD:10:19:F8:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEthKajamClnFMU6WhKA_RAZ-KM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:c3:ad:a8:cc:6a:0d:b4:b1:ad:15:0d:ab:64:cd:c1:a0:5b: b9:71:8c:3c:7b:5c:f5:10:16:12:cd:60:2f:1d:46:51:b8:a8: c4:8f:cc:9d:d2:8a:ed:f4:c8:56:ae:d8:ad:8c:88:37:bd:3d: c1:a7:cc:79:4c:42:68:f0:c2:a1:c4:6e:dc:71:d8:fe:fb:38: f4:af:6c:12:b9:cf:c3:4c:30:59:d4:4b:cf:c1:f7:2e:48:05: a3:35:49:1a:c9:65:cd:03:67:82:f1:25:74:78:54:63:2a:31: 84:f2:5c:05:fd:1d:c7:c5:d8:89:84:35:da:d7:a4:d8:4a:ef: c8:18:ed:7e:97:32:50:f5:a0:07:9d:c0:42:c5:a4:5e:fd:8a: e9:f1:d4:7c:8d:40:29:fd:af:7a:db:b1:41:9b:45:8f:1b:42: bf:e0:ec:e7:4c:e5:8d:a7:00:c1:f2:89:3f:32:86:6e:ee:aa: 63:71:c9:60:af:8e:b9:73:c0:43:46:9a:1f:ed:7d:e1:74:1d: 4c:fd:ce:d4:de:8c:5e:9e:55:94:52:f5:28:e0:27:12:da:51: 55:b4:dd:2c:11:77:83:1c:db:0a:cf:ec:2c:9c:d6:2c:40:d8: 32:ec:95:89:d0:7f:de:57:d9:2e:c4:f6:14:1b:b7:65:89:51: bc:d4:9e:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUY2RTQxMTAvBgNVBAUTKDg4NEI2MTI5QThEQTk4Mjk2NzE0QzUzQTVBMTI4MEZE MTAxOUY4QTMwHhcNMjUwNTMxMDM1NjQzWhcNMjUwNjA3MDM1NjQzWjAYMRYwFAYD VQQDEw02ODNhN2RmYi03NTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAogDfjMVnKH2Tl2oFHEGL5tobjJw9lYGARABNj0buN4eRvax17RpkB+KZSf7V gJ79qTgYRjH1nOcFjnVgSAuKzh5moVxsifN1/ViV/6OsttLy7YjpfmgOC5YEKSjA o5ghI0PNdMP/L1XXDnIiPDIMST3Fo1g2P8gJR/GHGnI3aadZYVMHkDmP5pLBTSUm Ei0x/KPL3mZkPB3EOuTcGcCrP5OFK5sxUoaHFahbssG8QYniu4EggirSLnNCREJh V+GLgIiXQFgkr8VtjZkt5Uv+teldH94W604dZns18juu4Z96CEtw4oinoAm8TfnH VSda32Lfgg8vuggKPtlfqVgupwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMli0eJR s0U15ZofSb22tk9yMDWlMB8GA1UdIwQYMBaAFIhLYSmo2pgpZxTFOloSgP0QGfij MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RjZFNC9DQTgxRDlGRTRF MTAxMUVFOUZFMEJEMjZDNEY5QUUwMi9pRXRoS2FqYW1DbG5GTVU2V2hLQV9SQVot S00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lFdGhLYWphbUNsbkZNVTZXaEtBX1JBWi1LTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RjZFNC9DQTgxRDlGRTRFMTAxMUVFOUZFMEJEMjZDNEY5QUUwMi9pRXRoS2FqYW1D bG5GTVU2V2hLQV9SQVotS00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUw62ozGoNtLGtFQ2rZM3BoFu5cYw8e1z1EBYSzWAvHUZRuKjEj8yd 0ort9MhWrtitjIg3vT3Bp8x5TEJo8MKhxG7ccdj++zj0r2wSuc/DTDBZ1EvPwfcu SAWjNUkayWXNA2eC8SV0eFRjKjGE8lwF/R3HxdiJhDXa16TYSu/IGO1+lzJQ9aAH ncBCxaRe/Yrp8dR8jUAp/a9627FBm0WPG0K/4OznTOWNpwDB8ok/MoZu7qpjcclg r465c8BDRpof7X3hdB1M/c7U3oxenlWUUvUo4CcS2lFVtN0sEXeDHNsKz+wsnNYs QNgy7JWJ0H/eV9kuxPYUG7dliVG81J4V -----END CERTIFICATE-----Generated at Sat May 31 17:00:20 2025 by rpki-client