$ rpki-client -vvf rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.mft File: KIN0Gw9bynZPTTyD0-1qDyfNIpg.mft (raw, json) Hash identifier: 2bB0FQaO4le4TbRdc1oJwzK9ucGYVUsZOM3NeqwiDfw= Subject key identifier: 8C:9D:85:E3:C9:95:AD:4D:14:C2:88:89:75:C6:AD:AA:C2:76:0E:2B Authority key identifier: 28:83:74:1B:0F:5B:CA:76:4F:4D:3C:83:D3:ED:6A:0F:27:CD:22:98 Certificate issuer: /CN=A91E04FE/serialNumber=2883741B0F5BCA764F4D3C83D3ED6A0F27CD2298 Certificate serial: EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KIN0Gw9bynZPTTyD0-1qDyfNIpg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.mft Manifest number: E8 Signing time: Mon 07 Apr 2025 04:20:37 +0000 Manifest this update: Mon 07 Apr 2025 04:20:37 +0000 Manifest next update: Mon 14 Apr 2025 04:20:37 +0000 Files and hashes: 1: KIN0Gw9bynZPTTyD0-1qDyfNIpg.crl (hash: 36e5TDvS/NLBhby2L1PE040crFQ5vJHsWIpLYt0S6Cc=) 2: 5EE215CCC33D11EE97B67979C4F9AE02.roa (hash: qIW59Vu75lotEAXz2XFEI0+6mfrqPvKAPSHChiVChpE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.crl rsync://rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KIN0Gw9bynZPTTyD0-1qDyfNIpg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Apr 2025 04:20:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 236 (0xec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E04FE Validity Not Before: Apr 7 04:20:37 2025 GMT Not After : Apr 14 04:20:37 2025 GMT Subject: CN=67f35295-a451 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:02:43:39:84:80:ce:51:fc:1b:a4:ad:8c:bd: 24:90:c3:f8:8d:b5:7c:40:8c:c8:23:e8:1b:ab:49: 31:6e:71:ba:b1:0d:78:94:86:c8:94:c1:ab:45:74: 76:cb:68:6e:e6:93:3e:2d:04:85:d0:1b:97:c4:96: 36:ce:3e:a8:e4:c8:db:2b:1e:d7:bd:3a:25:e7:5e: f8:78:15:e8:94:81:7c:49:0f:0e:26:5f:ed:59:62: 56:06:c2:d2:09:53:8a:85:4a:be:63:71:55:e4:61: 50:58:65:0f:30:32:ab:2c:79:b4:57:0a:97:a8:54: 29:f2:2c:77:67:04:0e:ba:a1:5f:73:81:4c:e8:da: d6:35:33:ff:03:13:ab:96:9e:61:22:f9:18:a1:08: 2f:65:7c:5a:cd:d6:9d:be:69:c6:9f:d6:ed:7a:e1: 5e:0a:cc:c4:89:0d:a9:fd:0e:e3:df:52:e1:ce:e7: af:f0:6b:72:53:ab:b2:97:6e:45:44:8f:53:de:0e: cd:c8:7a:97:4b:21:e9:84:40:3f:95:28:61:5c:f0: 4f:c3:22:cc:f3:f6:d9:3d:0a:c1:d7:e2:77:21:a7: e4:70:38:a3:e5:de:c7:7f:42:a9:1a:6c:13:d1:c4: 8d:7d:c4:2c:0f:a0:1c:ff:94:0a:b7:33:b0:d2:cc: 62:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:9D:85:E3:C9:95:AD:4D:14:C2:88:89:75:C6:AD:AA:C2:76:0E:2B X509v3 Authority Key Identifier: keyid:28:83:74:1B:0F:5B:CA:76:4F:4D:3C:83:D3:ED:6A:0F:27:CD:22:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KIN0Gw9bynZPTTyD0-1qDyfNIpg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:6e:04:57:53:8f:91:cd:0e:8d:f7:d7:a1:9b:70:1e:8e:5c: 72:79:5e:45:f4:82:55:be:dc:f7:06:3d:98:80:1b:39:13:bf: ae:aa:0c:4c:f9:67:9d:29:03:b3:69:d1:57:9e:3b:44:09:bd: 1a:c9:f8:3c:d2:13:0b:33:8a:75:09:02:55:c4:9d:d7:72:09: 5c:2d:c4:98:3b:a3:ba:56:a8:27:89:df:d9:43:8d:09:53:06: 11:c8:9f:be:c9:f0:ec:94:2a:2e:a4:70:40:f5:27:22:90:6a: bb:b1:21:8b:d5:af:e1:87:ce:71:b8:cc:4b:6a:a5:0a:54:c1: 70:20:ae:20:38:f9:39:bc:2b:20:b3:0f:ed:18:be:e3:bb:f6: 53:c1:f8:58:51:dd:3c:65:f6:d4:db:30:36:2b:d0:54:a7:17: f0:b8:9b:df:b9:54:c8:b0:20:54:ea:91:55:91:f4:38:73:fa: 20:49:ab:49:05:9f:90:de:56:e0:ca:25:66:3d:97:a9:f6:5f: 2e:88:c5:09:09:96:90:19:7d:2b:b3:11:b9:4e:38:98:7e:8f: 8c:50:65:7d:81:99:ed:5b:f9:4e:98:78:14:5c:67:d0:3b:c7: 0a:9c:04:b2:5f:68:71:1c:01:a2:0b:d6:b7:e4:a9:f0:83:5b: ce:17:5f:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTA0RkUxMTAvBgNVBAUTKDI4ODM3NDFCMEY1QkNBNzY0RjREM0M4M0QzRUQ2QTBG MjdDRDIyOTgwHhcNMjUwNDA3MDQyMDM3WhcNMjUwNDE0MDQyMDM3WjAYMRYwFAYD VQQDEw02N2YzNTI5NS1hNDUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuQJDOYSAzlH8G6StjL0kkMP4jbV8QIzII+gbq0kxbnG6sQ14lIbIlMGrRXR2 y2hu5pM+LQSF0BuXxJY2zj6o5MjbKx7XvTol5174eBXolIF8SQ8OJl/tWWJWBsLS CVOKhUq+Y3FV5GFQWGUPMDKrLHm0VwqXqFQp8ix3ZwQOuqFfc4FM6NrWNTP/AxOr lp5hIvkYoQgvZXxazdadvmnGn9bteuFeCszEiQ2p/Q7j31Lhzuev8GtyU6uyl25F RI9T3g7NyHqXSyHphEA/lShhXPBPwyLM8/bZPQrB1+J3IafkcDij5d7Hf0KpGmwT 0cSNfcQsD6Ac/5QKtzOw0sxi2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIydhePJ la1NFMKIiXXGrarCdg4rMB8GA1UdIwQYMBaAFCiDdBsPW8p2T008g9Ptag8nzSKY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDRGRS84NkE2RjY1NEI3 M0YxMUVFQUYxMkI4N0JDNEY5QUUwMi9LSU4wR3c5YnluWlBUVHlEMC0xcUR5Zk5J cGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tJTjBHdzlieW5aUFRUeUQwLTFxRHlmTklwZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDRGRS84NkE2RjY1NEI3M0YxMUVFQUYxMkI4N0JDNEY5QUUwMi9LSU4wR3c5Ynlu WlBUVHlEMC0xcUR5Zk5JcGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDIbgRXU4+RzQ6N99ehm3AejlxyeV5F9IJVvtz3Bj2YgBs5E7+uqgxM +WedKQOzadFXnjtECb0ayfg80hMLM4p1CQJVxJ3XcglcLcSYO6O6Vqgnid/ZQ40J UwYRyJ++yfDslCoupHBA9ScikGq7sSGL1a/hh85xuMxLaqUKVMFwIK4gOPk5vCsg sw/tGL7ju/ZTwfhYUd08ZfbU2zA2K9BUpxfwuJvfuVTIsCBU6pFVkfQ4c/ogSatJ BZ+Q3lbgyiVmPZep9l8uiMUJCZaQGX0rsxG5TjiYfo+MUGV9gZntW/lOmHgUXGfQ O8cKnASyX2hxHAGiC9a35Knwg1vOF1/V -----END CERTIFICATE-----Generated at Tue Apr 8 01:07:32 2025 by rpki-client