$ rpki-client -vvf rpki.apnic.net/member_repository/A91900BF/FEA1CD68B6E311ECBE59992DC4F9AE02/KOoVV7meKxJ1Uc00DDqvTAphAGs.mft File: KOoVV7meKxJ1Uc00DDqvTAphAGs.mft (raw, json) Hash identifier: A8J2WnGtz85yg8IS7b9Q5A3NaKNCrSGkUmEg3bs2pII= Subject key identifier: 31:55:40:7D:60:3A:AB:BA:A5:61:3E:A9:71:01:2C:4B:BC:15:3B:FC Authority key identifier: 28:EA:15:57:B9:9E:2B:12:75:51:CD:34:0C:3A:AF:4C:0A:61:00:6B Certificate issuer: /CN=A91900BF/serialNumber=28EA1557B99E2B127551CD340C3AAF4C0A61006B Certificate serial: 0370 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOoVV7meKxJ1Uc00DDqvTAphAGs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91900BF/FEA1CD68B6E311ECBE59992DC4F9AE02/KOoVV7meKxJ1Uc00DDqvTAphAGs.mft Manifest number: 0363 Signing time: Sat 31 May 2025 01:11:08 +0000 Manifest this update: Sat 31 May 2025 01:11:07 +0000 Manifest next update: Sat 07 Jun 2025 01:11:07 +0000 Files and hashes: 1: KOoVV7meKxJ1Uc00DDqvTAphAGs.crl (hash: MymXcDxlpjh36S9oKCI9UmtnfWBewOQRzlT7V1ZVRbY=) 2: BFFAF880912711EE92065180C4F9AE02.roa (hash: +cOVT6IUlf5AF9Iwe8S2ZR7C+kK58G6HwMNDUoEK6dU=) 3: F505DCE605AB11EEAAC9A54DC4F9AE02.roa (hash: TgaszdDD0RtD3WBLop2xKd2Re72k68i95Zea6tpoI9M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91900BF/FEA1CD68B6E311ECBE59992DC4F9AE02/KOoVV7meKxJ1Uc00DDqvTAphAGs.crl rsync://rpki.apnic.net/member_repository/A91900BF/FEA1CD68B6E311ECBE59992DC4F9AE02/KOoVV7meKxJ1Uc00DDqvTAphAGs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOoVV7meKxJ1Uc00DDqvTAphAGs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:11:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 880 (0x370) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91900BF, serialNumber=28EA1557B99E2B127551CD340C3AAF4C0A61006B Validity Not Before: May 31 01:11:07 2025 GMT Not After : Jun 7 01:11:07 2025 GMT Subject: CN=683a572b-2f75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:65:ce:33:b1:7b:3d:15:cf:c6:fa:b1:fd:07: ad:19:7b:b1:bf:14:11:38:11:f1:3d:48:e7:24:ed: c1:1d:ff:36:ac:f8:45:b9:40:13:5b:14:b9:28:25: 06:a9:c0:8e:52:6a:6c:64:ca:21:4c:f7:ea:41:53: fa:79:62:dd:bb:7b:e6:47:13:fc:a9:e5:a5:82:5d: 8a:c0:ad:b5:71:c7:b4:14:52:dc:59:0c:c7:60:99: 9d:bd:6f:be:cd:44:9a:58:41:89:b6:51:38:10:d2: a3:03:b4:c7:b6:ed:98:ee:c1:d8:6c:8b:90:71:54: ca:1a:f1:df:be:5b:cf:e7:9a:f6:01:ce:47:44:46: 11:8d:47:48:b7:b6:78:12:62:15:0e:e3:c1:7e:ef: 4c:4a:9a:2d:1f:e0:25:f9:8f:22:22:b4:9e:4f:ae: 43:03:71:68:af:93:57:24:8a:5e:a8:50:9b:11:82: 45:ef:27:08:f5:77:0a:58:55:ff:39:73:1c:f2:20: 4f:f6:dd:68:f3:68:c7:d7:84:0a:7d:dd:44:d1:c9: 82:33:07:d5:1f:a0:85:36:bd:66:41:6c:2f:41:91: 11:d8:42:55:65:37:0d:5a:eb:f1:25:e4:6a:69:a4: 20:cd:bd:df:91:fe:53:df:1a:f3:4d:62:f4:5f:df: 4e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:55:40:7D:60:3A:AB:BA:A5:61:3E:A9:71:01:2C:4B:BC:15:3B:FC X509v3 Authority Key Identifier: keyid:28:EA:15:57:B9:9E:2B:12:75:51:CD:34:0C:3A:AF:4C:0A:61:00:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91900BF/FEA1CD68B6E311ECBE59992DC4F9AE02/KOoVV7meKxJ1Uc00DDqvTAphAGs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOoVV7meKxJ1Uc00DDqvTAphAGs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91900BF/FEA1CD68B6E311ECBE59992DC4F9AE02/KOoVV7meKxJ1Uc00DDqvTAphAGs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:3f:fa:59:74:c7:98:07:86:ab:27:6c:08:91:52:db:b7:a0: 03:63:92:90:b7:4d:08:0f:ca:2e:a0:40:f3:40:8c:b7:8b:7f: 7c:32:81:74:55:4c:0a:1e:33:6e:36:7d:69:7a:3b:43:6c:d5: 75:aa:d9:a2:2c:bb:0b:99:2f:ab:86:a3:17:9e:ea:e5:b8:1b: 5c:95:44:44:83:ce:38:53:50:75:ba:3e:b1:6d:6d:54:e2:32: 1e:53:1d:d6:39:c0:d3:2c:b9:0e:f3:68:77:dd:da:29:50:1c: e6:1a:61:78:85:80:48:01:ca:f5:bb:45:05:82:21:0e:6f:ab: a1:68:6e:b9:8e:9b:75:d6:ff:16:28:d1:51:a0:11:cb:9c:06: ee:66:b1:6c:d1:c8:b3:d1:e4:c7:9b:87:fc:82:eb:8f:8e:ac: eb:61:a1:f9:ae:ee:f7:a8:ab:4a:b8:ee:06:be:dc:63:29:05: b8:a3:94:42:f3:db:bc:ed:f5:26:e6:d7:36:65:63:d6:25:1a: b5:c6:af:bf:98:e6:91:bb:79:0a:91:fe:e2:67:a9:11:60:fe: bc:ec:eb:4f:32:b3:d0:b5:4b:53:a5:d0:78:da:23:74:e8:d5: 78:ae:c0:ad:7b:9c:d6:01:8e:83:36:c3:da:14:ef:3f:af:d5: 22:be:49:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTAwQkYxMTAvBgNVBAUTKDI4RUExNTU3Qjk5RTJCMTI3NTUxQ0QzNDBDM0FBRjRD MEE2MTAwNkIwHhcNMjUwNTMxMDExMTA3WhcNMjUwNjA3MDExMTA3WjAYMRYwFAYD VQQDEw02ODNhNTcyYi0yZjc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuGXOM7F7PRXPxvqx/QetGXuxvxQROBHxPUjnJO3BHf82rPhFuUATWxS5KCUG qcCOUmpsZMohTPfqQVP6eWLdu3vmRxP8qeWlgl2KwK21cce0FFLcWQzHYJmdvW++ zUSaWEGJtlE4ENKjA7THtu2Y7sHYbIuQcVTKGvHfvlvP55r2Ac5HREYRjUdIt7Z4 EmIVDuPBfu9MSpotH+Al+Y8iIrSeT65DA3For5NXJIpeqFCbEYJF7ycI9XcKWFX/ OXMc8iBP9t1o82jH14QKfd1E0cmCMwfVH6CFNr1mQWwvQZER2EJVZTcNWuvxJeRq aaQgzb3fkf5T3xrzTWL0X99OVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDFVQH1g Oqu6pWE+qXEBLEu8FTv8MB8GA1UdIwQYMBaAFCjqFVe5nisSdVHNNAw6r0wKYQBr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDBCRi9GRUExQ0Q2OEI2 RTMxMUVDQkU1OTk5MkRDNEY5QUUwMi9LT29WVjdtZUt4SjFVYzAwRERxdlRBcGhB R3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tPb1ZWN21lS3hKMVVjMDBERHF2VEFwaEFHcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MDBCRi9GRUExQ0Q2OEI2RTMxMUVDQkU1OTk5MkRDNEY5QUUwMi9LT29WVjdtZUt4 SjFVYzAwRERxdlRBcGhBR3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZP/pZdMeYB4arJ2wIkVLbt6ADY5KQt00ID8ouoEDzQIy3i398MoF0 VUwKHjNuNn1pejtDbNV1qtmiLLsLmS+rhqMXnurluBtclUREg844U1B1uj6xbW1U 4jIeUx3WOcDTLLkO82h33dopUBzmGmF4hYBIAcr1u0UFgiEOb6uhaG65jpt11v8W KNFRoBHLnAbuZrFs0ciz0eTHm4f8guuPjqzrYaH5ru73qKtKuO4GvtxjKQW4o5RC 89u87fUm5tc2ZWPWJRq1xq+/mOaRu3kKkf7iZ6kRYP687OtPMrPQtUtTpdB42iN0 6NV4rsCte5zWAY6DNsPaFO8/r9UivkkQ -----END CERTIFICATE-----Generated at Sat May 31 16:56:17 2025 by rpki-client