$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft File: kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft (raw, json) Hash identifier: 7MqmDyO4aaXMWDfIfwxRedOY6IkKqKkrZSaeBgqzTHs= Subject key identifier: 98:44:15:B2:60:CC:25:32:9E:77:03:C5:A3:FD:78:FB:83:E7:1A:6C Authority key identifier: 92:48:66:B4:0C:30:44:2D:69:6F:24:77:01:54:75:C5:F0:70:2A:C8 Certificate issuer: /CN=A91C6A35/serialNumber=924866B40C30442D696F2477015475C5F0702AC8 Certificate serial: 0D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkhmtAwwRC1pbyR3AVR1xfBwKsg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft Manifest number: 0C Signing time: Wed 05 Feb 2025 06:31:53 +0000 Manifest this update: Wed 05 Feb 2025 06:31:53 +0000 Manifest next update: Wed 12 Feb 2025 06:31:53 +0000 Files and hashes: 1: kkhmtAwwRC1pbyR3AVR1xfBwKsg.crl (hash: pCY+SYVGyVb3sTNTXgDsivjHdVl8sQR4OZqyC416UKA=) 2: 06522672D49411EFA8DF5E69C4F9AE02.roa (hash: xnlYEk4KW2VhWwSazH9YyKPxeFaHVTp0cHWmf0iyBnI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.crl rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkhmtAwwRC1pbyR3AVR1xfBwKsg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Feb 2025 06:31:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6A35 Validity Not Before: Feb 5 06:31:53 2025 GMT Not After : Feb 12 06:31:53 2025 GMT Subject: CN=67a305d9-2b7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:99:fd:59:b2:49:21:4d:05:f2:50:ff:1d:34: ee:e9:9f:b6:14:95:1d:1d:13:55:18:42:aa:aa:16: 05:9f:24:04:96:ec:ec:7d:35:e7:0d:2e:13:2f:94: 71:8c:a6:9c:e2:b7:52:92:cd:61:20:14:5a:c6:5d: 97:88:77:74:eb:14:5a:5c:3d:3f:02:36:b9:45:48: 7d:92:6a:ba:2f:c1:03:e8:6f:c5:5b:ab:e4:fc:03: 82:1f:d6:cb:35:b2:82:aa:38:a5:aa:e6:58:6e:a8: 3c:e7:b8:09:e2:a6:f7:5e:63:a8:e8:e5:32:b7:3a: c8:71:a1:3c:6e:48:7b:cc:af:02:b3:c0:8c:56:18: d9:9e:28:e4:3a:68:d2:0f:8d:bc:8f:69:63:60:4c: b3:57:d7:6b:ba:e4:e0:83:f4:a5:91:da:82:98:f8: a6:69:65:fc:ca:a9:ec:87:61:20:25:3b:52:5a:f8: 2b:9b:90:72:c1:dc:54:e0:e3:66:93:11:5a:46:ec: ab:31:d5:c4:18:6b:e3:39:3a:6d:61:bf:0c:38:d9: 45:b4:54:ac:19:e3:94:b5:4b:9c:a5:e1:8b:ed:b9: 38:5e:d8:e6:be:e5:90:63:e0:8f:ea:09:d5:96:ad: 15:7c:d0:4a:14:ad:f0:b8:b3:bc:77:a0:2f:58:51: f3:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:44:15:B2:60:CC:25:32:9E:77:03:C5:A3:FD:78:FB:83:E7:1A:6C X509v3 Authority Key Identifier: keyid:92:48:66:B4:0C:30:44:2D:69:6F:24:77:01:54:75:C5:F0:70:2A:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkhmtAwwRC1pbyR3AVR1xfBwKsg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:7f:71:57:86:cb:be:26:f8:da:c8:68:33:d4:82:39:5d:bd: a3:e7:8c:a1:8f:5d:a9:07:89:72:e7:91:49:e6:5d:ff:3b:5e: dc:57:97:63:a1:35:c7:77:a9:c6:a7:1a:30:f5:5c:02:d4:93: ba:7b:fa:f3:93:eb:4e:4c:53:78:7b:e5:2f:53:06:3b:9c:9a: 17:c4:c5:15:d1:dc:b1:32:60:38:f3:55:ea:f0:c1:5f:84:66: 6e:e7:9e:06:7f:93:cd:e6:cf:7d:38:96:63:83:bb:c2:c1:59: f2:7f:28:3f:49:47:09:3f:24:e1:b4:c4:36:c8:59:68:71:cb: 7f:f7:b2:3e:21:a1:81:d0:61:c9:c7:84:92:88:0d:d9:d9:0e: 51:97:1d:16:d7:69:db:84:0a:63:6c:1e:e8:00:80:5b:d7:a5: 30:5e:ec:1d:b5:91:cc:2e:2d:5e:22:13:27:8d:a8:cf:73:0f: f2:89:c3:2f:ae:4c:e6:10:49:59:c1:7f:92:a3:b1:7c:71:bc: 29:4a:b3:09:fb:ac:ed:d9:d2:88:4c:36:55:ca:c5:72:56:eb: 55:79:ad:8a:91:6a:3e:d3:e2:f2:21:56:a2:d5:e2:3a:91:89: 32:20:32:f2:5d:83:f2:ad:85:2a:ac:32:8d:95:96:be:18:30: 40:fa:07:a0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NkEzNTExMC8GA1UEBRMoOTI0ODY2QjQwQzMwNDQyRDY5NkYyNDc3MDE1NDc1QzVG MDcwMkFDODAeFw0yNTAyMDUwNjMxNTNaFw0yNTAyMTIwNjMxNTNaMBgxFjAUBgNV BAMTDTY3YTMwNWQ5LTJiN2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZmf1ZskkhTQXyUP8dNO7pn7YUlR0dE1UYQqqqFgWfJASW7Ox9NecNLhMvlHGM ppzit1KSzWEgFFrGXZeId3TrFFpcPT8CNrlFSH2SarovwQPob8Vbq+T8A4If1ss1 soKqOKWq5lhuqDznuAnipvdeY6jo5TK3OshxoTxuSHvMrwKzwIxWGNmeKOQ6aNIP jbyPaWNgTLNX12u65OCD9KWR2oKY+KZpZfzKqeyHYSAlO1Ja+CubkHLB3FTg42aT EVpG7Ksx1cQYa+M5Om1hvww42UW0VKwZ45S1S5yl4YvtuThe2Oa+5ZBj4I/qCdWW rRV80EoUrfC4s7x3oC9YUfOJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUmEQVsmDM JTKedwPFo/14+4PnGmwwHwYDVR0jBBgwFoAUkkhmtAwwRC1pbyR3AVR1xfBwKsgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2QTM1Lzk5Mjc3ODQ2RDQ5 MjExRUZCNTY0REU2MkM0RjlBRTAyL2traG10QXd3UkMxcGJ5UjNBVlIxeGZCd0tz Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIva2tobXRBd3dSQzFwYnlSM0FWUjF4ZkJ3S3NnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2 QTM1Lzk5Mjc3ODQ2RDQ5MjExRUZCNTY0REU2MkM0RjlBRTAyL2traG10QXd3UkMx cGJ5UjNBVlIxeGZCd0tzZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEl/cVeGy74m+NrIaDPUgjldvaPnjKGPXakHiXLnkUnmXf87XtxXl2Oh Ncd3qcanGjD1XALUk7p7+vOT605MU3h75S9TBjucmhfExRXR3LEyYDjzVerwwV+E Zm7nngZ/k83mz304lmODu8LBWfJ/KD9JRwk/JOG0xDbIWWhxy3/3sj4hoYHQYcnH hJKIDdnZDlGXHRbXaduECmNsHugAgFvXpTBe7B21kcwuLV4iEyeNqM9zD/KJwy+u TOYQSVnBf5KjsXxxvClKswn7rO3Z0ohMNlXKxXJW61V5rYqRaj7T4vIhVqLV4jqR iTIgMvJdg/KthSqsMo2Vlr4YMED6B6A= -----END CERTIFICATE-----Generated at Wed Feb 5 20:11:57 2025 by rpki-client