$ rpki-client -vvf rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft File: kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft (raw, json) Hash identifier: aJVKLdU6shFi6JnSVuKGpep9ZfLZf7DdrYz0e+jtABI= Subject key identifier: CB:A6:67:2D:3B:25:73:E1:C9:F5:61:B2:1B:73:FA:19:1E:E5:1E:07 Authority key identifier: 90:F5:30:64:D0:48:C0:CC:F8:BC:D8:F8:98:C0:66:A1:31:74:BF:A7 Certificate issuer: /CN=A9181EAA/serialNumber=90F53064D048C0CCF8BCD8F898C066A13174BFA7 Certificate serial: 09C8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kPUwZNBIwMz4vNj4mMBmoTF0v6c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft Manifest number: 09B8 Signing time: Wed 12 Mar 2025 16:08:53 +0000 Manifest this update: Wed 12 Mar 2025 16:08:53 +0000 Manifest next update: Wed 19 Mar 2025 16:08:53 +0000 Files and hashes: 1: kPUwZNBIwMz4vNj4mMBmoTF0v6c.crl (hash: JI04vP3YXb2dBw5zpA/NYMDavcOx8urxzB93zSbPPaM=) 2: C32E05EEA10011EAA9C71D3AC4F9AE02.roa (hash: iLsqzUs1EOc2H2HJP2UkL+mYLQ5HY7IBKFpu82r2gzI=) 3: 24F4E436A10211EABCED8740C4F9AE02.roa (hash: fSyqxt+thtJ8EftQ6rivJuvYTMv0PKjtJE/N/crpwfo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.crl rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kPUwZNBIwMz4vNj4mMBmoTF0v6c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Mar 2025 16:08:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2504 (0x9c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181EAA Validity Not Before: Mar 12 16:08:53 2025 GMT Not After : Mar 19 16:08:53 2025 GMT Subject: CN=67d1b195-0700 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:5f:fb:b0:95:f8:c3:8b:d1:02:0e:f9:7e:51: 2f:a2:ab:0f:97:df:26:23:45:ae:17:b1:88:56:0b: cf:c2:0a:aa:9b:aa:02:c6:c9:f5:86:39:18:73:29: b6:0d:81:e5:f0:86:7c:f6:8d:3c:45:7c:1b:7e:8f: fd:c0:58:17:3d:8b:39:dd:e3:ad:d8:47:aa:60:3f: 8d:ba:b3:0a:99:07:40:ed:29:f6:0e:91:03:56:8c: 4a:8d:e5:e3:bf:b7:50:f3:79:ba:7a:c2:00:f9:fd: 16:c8:f9:df:0d:04:3e:6f:8a:a7:1d:43:f4:5a:30: 3c:76:d8:02:df:fb:18:66:78:3f:ef:05:56:2d:17: 53:59:07:ab:e6:8d:28:de:e4:cf:3f:10:64:0e:fa: bd:27:69:ba:72:8a:6c:71:f0:4b:f0:71:50:33:e2: 7e:8d:60:dc:9b:5d:77:88:c7:18:42:7d:d2:5b:bc: 6a:4a:e7:b8:13:35:cb:0c:d0:1a:f5:d9:30:6c:e0: 4d:98:92:11:4a:43:ac:8d:63:80:f8:d2:65:f4:fc: 71:c9:eb:35:29:82:56:78:00:19:eb:fb:9d:77:80: 6a:df:dd:f9:1d:b2:83:eb:c5:04:3b:18:71:dd:ba: e7:e0:33:dd:8b:b9:7a:67:89:56:01:a5:41:11:d4: da:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:A6:67:2D:3B:25:73:E1:C9:F5:61:B2:1B:73:FA:19:1E:E5:1E:07 X509v3 Authority Key Identifier: keyid:90:F5:30:64:D0:48:C0:CC:F8:BC:D8:F8:98:C0:66:A1:31:74:BF:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kPUwZNBIwMz4vNj4mMBmoTF0v6c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:f4:dc:e3:01:08:7b:92:79:cd:d3:19:08:da:9a:a5:67:18: 4f:7c:98:f1:de:06:61:c8:c9:db:84:55:8e:d1:4c:27:e9:10: 3b:0a:75:7a:fc:a0:68:ef:73:e7:01:b5:73:f0:c3:33:6a:61: 87:04:02:5b:f6:70:19:09:6d:2f:33:e1:38:1c:97:cb:f4:73: 03:4b:2e:75:c9:f5:9d:36:ec:b5:3d:b9:c9:55:de:fd:19:26: ff:0b:34:cb:4d:50:39:7b:56:85:92:fa:92:94:79:dd:82:4d: cc:6d:63:4f:08:38:fc:e3:6d:b1:e4:fb:cb:78:86:48:11:19: 23:a1:67:0c:fa:7d:78:82:33:ab:86:88:ad:28:cf:4e:9f:e2: b6:a5:ba:78:44:08:18:16:f0:ca:40:3f:bb:12:97:cd:46:c7: 4c:b5:b4:d1:45:b1:82:16:2a:c4:89:42:b3:75:23:74:d5:e6: 7d:f6:72:4a:64:89:d1:e6:05:e8:59:86:87:aa:7a:8a:b8:8c: 63:0a:a8:7a:3a:2c:85:95:97:9e:03:6d:90:e6:95:03:3d:9c: ce:47:b7:81:a5:94:b9:a6:73:ef:c7:c9:2b:8b:a2:ab:6d:7a: f0:fc:dc:7c:37:8f:ec:51:ec:b3:cb:e4:93:e4:1c:77:53:72: 2a:34:d5:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCcgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODFFQUExMTAvBgNVBAUTKDkwRjUzMDY0RDA0OEMwQ0NGOEJDRDhGODk4QzA2NkEx MzE3NEJGQTcwHhcNMjUwMzEyMTYwODUzWhcNMjUwMzE5MTYwODUzWjAYMRYwFAYD VQQDEw02N2QxYjE5NS0wNzAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzV/7sJX4w4vRAg75flEvoqsPl98mI0WuF7GIVgvPwgqqm6oCxsn1hjkYcym2 DYHl8IZ89o08RXwbfo/9wFgXPYs53eOt2EeqYD+NurMKmQdA7Sn2DpEDVoxKjeXj v7dQ83m6esIA+f0WyPnfDQQ+b4qnHUP0WjA8dtgC3/sYZng/7wVWLRdTWQer5o0o 3uTPPxBkDvq9J2m6copscfBL8HFQM+J+jWDcm113iMcYQn3SW7xqSue4EzXLDNAa 9dkwbOBNmJIRSkOsjWOA+NJl9Pxxyes1KYJWeAAZ6/udd4Bq3935HbKD68UEOxhx 3brn4DPdi7l6Z4lWAaVBEdTaIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMumZy07 JXPhyfVhshtz+hke5R4HMB8GA1UdIwQYMBaAFJD1MGTQSMDM+LzY+JjAZqExdL+n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MUVBQS8wNzdGQ0RCNDdF RDIxMUVBOUVCOEQ1NzlDNEY5QUUwMi9rUFV3Wk5CSXdNejR2Tmo0bU1CbW9URjB2 NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2tQVXdaTkJJd016NHZOajRtTUJtb1RGMHY2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MUVBQS8wNzdGQ0RCNDdFRDIxMUVBOUVCOEQ1NzlDNEY5QUUwMi9rUFV3Wk5CSXdN ejR2Tmo0bU1CbW9URjB2NmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCc9NzjAQh7knnN0xkI2pqlZxhPfJjx3gZhyMnbhFWO0Uwn6RA7CnV6 /KBo73PnAbVz8MMzamGHBAJb9nAZCW0vM+E4HJfL9HMDSy51yfWdNuy1PbnJVd79 GSb/CzTLTVA5e1aFkvqSlHndgk3MbWNPCDj8422x5PvLeIZIERkjoWcM+n14gjOr hoitKM9On+K2pbp4RAgYFvDKQD+7EpfNRsdMtbTRRbGCFirEiUKzdSN01eZ99nJK ZInR5gXoWYaHqnqKuIxjCqh6OiyFlZeeA22Q5pUDPZzOR7eBpZS5pnPvx8kri6Kr bXrw/Nx8N4/sUeyzy+ST5Bx3U3IqNNUd -----END CERTIFICATE-----Generated at Thu Mar 13 21:31:49 2025 by rpki-client