$ rpki-client -vvf rpki.apnic.net/member_repository/A91F79A2/1A05E6EE2D2E11EFA54C8042C4F9AE02/kTOsvs_e7PTaOiIigng09bc6-qc.mft File: kTOsvs_e7PTaOiIigng09bc6-qc.mft (raw, json) Hash identifier: F0ucLp352mu7a2PuByVUn9658z2x/4cAEEKvzSd+Cyg= Subject key identifier: C1:73:3C:78:B9:8D:F5:38:89:60:92:83:61:DF:A7:D2:FB:4D:1D:F1 Authority key identifier: 91:33:AC:BE:CF:DE:EC:F4:DA:3A:22:22:82:78:34:F5:B7:3A:FA:A7 Certificate issuer: /CN=A91F79A2/serialNumber=9133ACBECFDEECF4DA3A2222827834F5B73AFAA7 Certificate serial: 8A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kTOsvs_e7PTaOiIigng09bc6-qc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F79A2/1A05E6EE2D2E11EFA54C8042C4F9AE02/kTOsvs_e7PTaOiIigng09bc6-qc.mft Manifest number: 8A Signing time: Thu 13 Mar 2025 04:31:17 +0000 Manifest this update: Thu 13 Mar 2025 04:31:17 +0000 Manifest next update: Thu 20 Mar 2025 04:31:17 +0000 Files and hashes: 1: kTOsvs_e7PTaOiIigng09bc6-qc.crl (hash: 6ru6PLcP9ZXjGMxvJgB33u0hfcbgPsPADBXsgyij6jI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F79A2/1A05E6EE2D2E11EFA54C8042C4F9AE02/kTOsvs_e7PTaOiIigng09bc6-qc.crl rsync://rpki.apnic.net/member_repository/A91F79A2/1A05E6EE2D2E11EFA54C8042C4F9AE02/kTOsvs_e7PTaOiIigng09bc6-qc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kTOsvs_e7PTaOiIigng09bc6-qc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Mar 2025 04:31:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 138 (0x8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F79A2 Validity Not Before: Mar 13 04:31:17 2025 GMT Not After : Mar 20 04:31:17 2025 GMT Subject: CN=67d25f95-b5b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:ca:c8:b4:71:48:b2:41:a7:40:aa:e3:cf:ca: 37:8c:ad:1c:70:a4:31:36:41:8a:50:d0:7c:f7:b3: c9:eb:eb:d4:7b:70:a7:12:13:b8:b6:4d:52:08:8d: 81:01:cf:18:f2:5f:5f:3f:d5:a3:61:96:84:58:7b: c7:47:fc:67:db:7b:17:7d:b9:3b:aa:99:8c:6f:4b: e9:2a:f1:33:a6:9b:b3:0c:6c:c0:b9:3b:f2:b5:de: ab:ac:93:60:a5:42:93:64:66:c9:1f:a7:19:22:0a: 62:6c:1f:8b:97:d5:64:5b:e4:c7:02:4b:da:c2:ec: b2:31:5b:af:02:f5:5a:fc:a7:1f:1f:c6:f3:c3:d5: b7:ab:b3:ba:c8:88:26:09:d3:ad:b0:8e:80:7f:cf: 06:73:f0:9e:c1:7c:90:e6:a9:9e:44:de:cd:4b:0e: 48:43:8c:d3:44:f3:ec:20:23:52:d5:55:2c:0a:d4: bf:51:34:ec:2c:84:2f:51:2d:1f:ed:f0:f8:76:d6: c7:62:27:89:62:cb:60:2e:ba:2a:f9:76:53:0f:26: f2:0f:c8:5a:89:fc:a2:ab:0c:9c:e6:b7:32:12:11: 5f:33:01:e3:c6:03:80:a1:e9:5f:5a:26:c4:99:a9: 45:3c:81:86:17:bf:21:00:3f:96:83:6e:2c:45:3c: eb:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:73:3C:78:B9:8D:F5:38:89:60:92:83:61:DF:A7:D2:FB:4D:1D:F1 X509v3 Authority Key Identifier: keyid:91:33:AC:BE:CF:DE:EC:F4:DA:3A:22:22:82:78:34:F5:B7:3A:FA:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F79A2/1A05E6EE2D2E11EFA54C8042C4F9AE02/kTOsvs_e7PTaOiIigng09bc6-qc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kTOsvs_e7PTaOiIigng09bc6-qc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F79A2/1A05E6EE2D2E11EFA54C8042C4F9AE02/kTOsvs_e7PTaOiIigng09bc6-qc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:93:5c:ed:55:25:c2:cf:60:1f:19:93:e8:6f:6a:d7:1b:1e: b0:f1:3f:1e:3a:d7:e3:3d:0f:02:68:d8:32:14:19:dd:b2:2a: da:d2:20:e5:be:ff:18:61:7d:11:8b:77:5b:73:65:2d:d3:10: c7:17:75:79:fd:1d:33:60:50:19:c3:49:c5:07:de:39:35:78: bf:f6:aa:80:4b:06:da:a6:eb:d0:37:8a:fe:0c:8d:74:b0:36: 16:e4:98:05:ed:53:35:3e:69:f8:3b:13:64:36:51:9e:85:f1: d7:d9:cc:93:f0:a7:28:4d:e5:d3:8c:64:37:ea:16:bd:e4:a8: 03:40:b6:59:de:2d:a6:bf:b6:6c:55:cf:46:3c:07:f5:ab:7b: 86:69:3d:15:71:93:08:87:74:38:c4:3f:90:84:46:48:fc:77: a9:f7:66:f7:70:24:73:fa:09:93:13:b8:22:f9:03:02:28:b6: fb:fb:cb:c0:6b:e5:fe:0c:5b:65:3e:ce:5a:19:ee:d0:7c:61: 4a:5a:b1:2f:95:1c:90:75:7c:36:d9:be:d5:38:90:db:9a:34: 9c:a7:51:d6:c7:22:f0:8e:ad:2f:76:88:70:32:60:0c:07:13: af:a4:ef:ee:eb:f9:2a:8c:d6:03:69:2b:54:69:29:7a:c9:42: 25:4d:0c:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjc5QTIxMTAvBgNVBAUTKDkxMzNBQ0JFQ0ZERUVDRjREQTNBMjIyMjgyNzgzNEY1 QjczQUZBQTcwHhcNMjUwMzEzMDQzMTE3WhcNMjUwMzIwMDQzMTE3WjAYMRYwFAYD VQQDEw02N2QyNWY5NS1iNWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+crItHFIskGnQKrjz8o3jK0ccKQxNkGKUNB897PJ6+vUe3CnEhO4tk1SCI2B Ac8Y8l9fP9WjYZaEWHvHR/xn23sXfbk7qpmMb0vpKvEzppuzDGzAuTvytd6rrJNg pUKTZGbJH6cZIgpibB+Ll9VkW+THAkvawuyyMVuvAvVa/KcfH8bzw9W3q7O6yIgm CdOtsI6Af88Gc/CewXyQ5qmeRN7NSw5IQ4zTRPPsICNS1VUsCtS/UTTsLIQvUS0f 7fD4dtbHYieJYstgLroq+XZTDybyD8haifyiqwyc5rcyEhFfMwHjxgOAoelfWibE malFPIGGF78hAD+Wg24sRTzrTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMFzPHi5 jfU4iWCSg2Hfp9L7TR3xMB8GA1UdIwQYMBaAFJEzrL7P3uz02joiIoJ4NPW3Ovqn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzlBMi8xQTA1RTZFRTJE MkUxMUVGQTU0QzgwNDJDNEY5QUUwMi9rVE9zdnNfZTdQVGFPaUlpZ25nMDliYzYt cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2tUT3N2c19lN1BUYU9pSWlnbmcwOWJjNi1xYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzlBMi8xQTA1RTZFRTJEMkUxMUVGQTU0QzgwNDJDNEY5QUUwMi9rVE9zdnNfZTdQ VGFPaUlpZ25nMDliYzYtcWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5k1ztVSXCz2AfGZPob2rXGx6w8T8eOtfjPQ8CaNgyFBndsira0iDl vv8YYX0Ri3dbc2Ut0xDHF3V5/R0zYFAZw0nFB945NXi/9qqASwbapuvQN4r+DI10 sDYW5JgF7VM1Pmn4OxNkNlGehfHX2cyT8KcoTeXTjGQ36ha95KgDQLZZ3i2mv7Zs Vc9GPAf1q3uGaT0VcZMIh3Q4xD+QhEZI/Hep92b3cCRz+gmTE7gi+QMCKLb7+8vA a+X+DFtlPs5aGe7QfGFKWrEvlRyQdXw22b7VOJDbmjScp1HWxyLwjq0vdohwMmAM BxOvpO/u6/kqjNYDaStUaSl6yUIlTQyU -----END CERTIFICATE-----Generated at Thu Mar 13 21:30:58 2025 by rpki-client