$ rpki-client -vvf rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.mft File: kpW_omLgV8ybyCF13K40eslspJE.mft (raw, json) Hash identifier: 4ogZIeGFl41J86ugBpEQ0FPvWKCqtp5Pv/bHq0fwVXo= Subject key identifier: A4:91:D4:FF:38:C8:6B:EF:A6:93:F3:61:A7:DE:5A:AD:EF:BB:94:31 Authority key identifier: 92:95:BF:A2:62:E0:57:CC:9B:C8:21:75:DC:AE:34:7A:C9:6C:A4:91 Certificate issuer: /CN=A91154E1/serialNumber=9295BFA262E057CC9BC82175DCAE347AC96CA491 Certificate serial: 09FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpW_omLgV8ybyCF13K40eslspJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.mft Manifest number: 09F9 Signing time: Sat 10 May 2025 19:35:58 +0000 Manifest this update: Sat 10 May 2025 19:35:58 +0000 Manifest next update: Sat 17 May 2025 19:35:58 +0000 Files and hashes: 1: kpW_omLgV8ybyCF13K40eslspJE.crl (hash: 7nPjfpB5EpoufueuefeK0niXZMW4KiNF1d1yJBCJw5w=) 2: FA6E4ECC755B11EAA7D9532EC4F9AE02.roa (hash: 8FzeKBFXv99yFqvBAS0u3OPnou1QCr+Lbmbr/8Rb56w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.crl rsync://rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpW_omLgV8ybyCF13K40eslspJE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 19:35:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2559 (0x9ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91154E1, serialNumber=9295BFA262E057CC9BC82175DCAE347AC96CA491 Validity Not Before: May 10 19:35:58 2025 GMT Not After : May 17 19:35:58 2025 GMT Subject: CN=681faa9e-0c09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:77:2b:b6:cf:a0:a4:e3:cc:cc:90:7e:b2:52: c6:05:cc:d4:20:ae:cb:ef:24:aa:e7:9d:ba:e0:e8: 1e:4d:d5:ed:f3:db:c8:0d:37:a0:7b:f2:e7:72:1f: 26:5f:2f:a3:23:7f:cf:c5:28:73:95:29:bc:d6:f3: 46:1e:1a:00:58:ca:62:59:0b:77:4d:c0:50:90:a7: 0b:99:d7:93:b9:1c:ff:5e:f6:07:5c:90:2b:61:e3: d8:ab:96:4c:cd:51:fe:31:51:e7:62:a3:5c:f4:bc: b3:8d:b5:d8:d4:42:3e:56:9e:37:60:28:33:2a:4d: 8d:c1:98:1f:c2:d2:ff:a1:b0:51:74:06:c5:c4:86: 37:2e:b5:7d:72:be:a7:a7:aa:cb:36:0c:b3:1a:b4: cf:3a:62:5f:01:6f:fe:26:92:3e:53:56:25:73:5b: 46:19:ff:c9:b0:0d:ae:78:b1:12:f9:7f:df:9e:96: 19:8d:5e:92:3c:1b:06:4e:c5:d4:a8:b2:67:7a:a2: 2c:98:57:5d:c5:6c:25:66:32:d5:13:0c:7f:10:38: ae:85:96:a4:c3:72:bc:7c:e5:5c:29:bc:57:b6:34: 4f:d6:3e:1f:db:0d:0f:ec:fe:a9:4e:79:6b:74:4d: 3b:39:12:47:6c:f1:81:c8:f9:e1:56:86:ea:c5:ad: 08:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:91:D4:FF:38:C8:6B:EF:A6:93:F3:61:A7:DE:5A:AD:EF:BB:94:31 X509v3 Authority Key Identifier: keyid:92:95:BF:A2:62:E0:57:CC:9B:C8:21:75:DC:AE:34:7A:C9:6C:A4:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpW_omLgV8ybyCF13K40eslspJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:19:b8:33:f9:67:92:80:c0:26:b9:e0:7a:d2:02:01:bc:4a: 48:ff:6e:9f:ae:e7:a1:70:99:d9:cd:bf:db:c1:7a:ec:73:2f: 23:da:98:b7:46:75:62:ba:59:5a:a3:a0:14:72:60:16:f2:67: 32:ad:a2:5d:df:ef:dc:7a:69:c6:96:51:6e:11:bc:a3:b0:f3: 7a:a3:c9:6c:7d:01:de:1b:d4:ba:88:3f:bc:42:76:cf:ff:25: 22:02:2e:5f:89:3a:0d:01:4b:fe:7b:ce:5f:24:28:1e:ac:0f: 4e:6a:5f:42:16:4e:fc:d1:89:76:48:d9:dc:3b:51:b4:73:4c: 37:36:82:19:48:e2:42:be:e4:09:4a:41:ef:57:1b:04:c6:cf: 39:73:5c:93:60:a3:b9:49:ab:6b:20:96:be:f3:e5:ca:2b:43: 3a:a8:22:34:96:da:95:f8:a9:55:33:4a:44:e4:0d:8c:d2:89: 38:2c:27:b5:0d:32:02:15:2e:c9:b6:07:3b:b7:04:3f:0e:0b: 40:a5:68:c8:fe:ab:a1:66:fb:3a:fd:13:c4:47:d8:32:3e:a3: 17:3a:3d:fd:20:57:73:e1:90:f4:2f:de:c4:69:52:e7:89:82: 1d:b9:23:de:ff:04:b3:42:07:17:37:44:b5:5a:d9:82:36:35: bc:a2:44:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCf8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTU0RTExMTAvBgNVBAUTKDkyOTVCRkEyNjJFMDU3Q0M5QkM4MjE3NURDQUUzNDdB Qzk2Q0E0OTEwHhcNMjUwNTEwMTkzNTU4WhcNMjUwNTE3MTkzNTU4WjAYMRYwFAYD VQQDEw02ODFmYWE5ZS0wYzA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyHcrts+gpOPMzJB+slLGBczUIK7L7ySq55264OgeTdXt89vIDTege/Lnch8m Xy+jI3/PxShzlSm81vNGHhoAWMpiWQt3TcBQkKcLmdeTuRz/XvYHXJArYePYq5ZM zVH+MVHnYqNc9LyzjbXY1EI+Vp43YCgzKk2NwZgfwtL/obBRdAbFxIY3LrV9cr6n p6rLNgyzGrTPOmJfAW/+JpI+U1Ylc1tGGf/JsA2ueLES+X/fnpYZjV6SPBsGTsXU qLJneqIsmFddxWwlZjLVEwx/EDiuhZakw3K8fOVcKbxXtjRP1j4f2w0P7P6pTnlr dE07ORJHbPGByPnhVobqxa0InwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKSR1P84 yGvvppPzYafeWq3vu5QxMB8GA1UdIwQYMBaAFJKVv6Ji4FfMm8ghddyuNHrJbKSR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTRFMS80QTBDQjZGODc1 NDMxMUVBQTc1NzExNjBDNEY5QUUwMi9rcFdfb21MZ1Y4eWJ5Q0YxM0s0MGVzbHNw SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2twV19vbUxnVjh5YnlDRjEzSzQwZXNsc3BKRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NTRFMS80QTBDQjZGODc1NDMxMUVBQTc1NzExNjBDNEY5QUUwMi9rcFdfb21MZ1Y4 eWJ5Q0YxM0s0MGVzbHNwSkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTGbgz+WeSgMAmueB60gIBvEpI/26fruehcJnZzb/bwXrscy8j2pi3 RnViullao6AUcmAW8mcyraJd3+/cemnGllFuEbyjsPN6o8lsfQHeG9S6iD+8QnbP /yUiAi5fiToNAUv+e85fJCgerA9Oal9CFk780Yl2SNncO1G0c0w3NoIZSOJCvuQJ SkHvVxsExs85c1yTYKO5SatrIJa+8+XKK0M6qCI0ltqV+KlVM0pE5A2M0ok4LCe1 DTICFS7Jtgc7twQ/DgtApWjI/quhZvs6/RPER9gyPqMXOj39IFdz4ZD0L97EaVLn iYIduSPe/wSzQgcXN0S1WtmCNjW8okRa -----END CERTIFICATE-----Generated at Mon May 12 19:22:23 2025 by rpki-client