$ rpki-client -vvf rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.mft File: kWov4qosIKsBxaE9I22knbfqUGI.mft (raw, json) Hash identifier: TzUeV9ScsvjnTSAQYOHTmAsctD2Ttxuy2inpCnyXQLc= Subject key identifier: 37:06:FB:CC:39:42:2D:86:32:1D:B6:CB:77:F3:12:5C:F4:8D:B6:FC Authority key identifier: 91:6A:2F:E2:AA:2C:20:AB:01:C5:A1:3D:23:6D:A4:9D:B7:EA:50:62 Certificate issuer: /CN=A912EF71/serialNumber=916A2FE2AA2C20AB01C5A13D236DA49DB7EA5062 Certificate serial: 0E13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kWov4qosIKsBxaE9I22knbfqUGI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.mft Manifest number: 0E0B Signing time: Fri 16 May 2025 18:04:14 +0000 Manifest this update: Fri 16 May 2025 18:04:14 +0000 Manifest next update: Fri 23 May 2025 18:04:14 +0000 Files and hashes: 1: kWov4qosIKsBxaE9I22knbfqUGI.crl (hash: NDRmPlCZdOkqZFD/M8RCE4Fm+OSU8c4gepQk9Qod2Mc=) 2: 6877A622A9DB11E9B353AF85C4F9AE02.roa (hash: 041/+q2U6C3NS+0FvYUDZgs9ujhQmOXumHp5fUehTOA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.crl rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kWov4qosIKsBxaE9I22knbfqUGI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 18:04:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3603 (0xe13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912EF71, serialNumber=916A2FE2AA2C20AB01C5A13D236DA49DB7EA5062 Validity Not Before: May 16 18:04:14 2025 GMT Not After : May 23 18:04:14 2025 GMT Subject: CN=68277e1e-2967 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:0f:84:6d:e2:ab:8f:d3:b9:ca:6c:96:22:7d: 1c:20:9d:e6:7f:5b:6a:f2:98:a7:6a:a0:04:a9:45: 2a:2c:af:5d:37:fd:cd:b8:aa:2a:a6:58:b4:78:1d: 15:b0:3a:d8:39:38:0b:14:85:47:31:30:5b:da:03: 52:11:6e:d9:b4:af:ef:2e:09:9d:f6:34:e8:16:83: 7f:e6:16:a8:23:f5:d2:04:d5:db:28:11:f0:0b:eb: df:40:41:b0:fe:45:bc:32:1a:90:a5:56:14:12:1b: c1:88:e8:95:71:33:8c:62:97:4e:92:e1:49:af:b1: c0:0f:f3:a8:e8:b6:94:b2:45:45:b6:fd:aa:ce:7e: 8e:1f:dc:65:98:89:ab:a3:b1:e7:9f:5b:77:ae:bb: 61:55:cf:f2:2e:88:0c:ff:49:8b:03:ab:97:62:b2: d6:c9:93:7d:29:73:3d:17:b9:47:64:13:f8:38:c6: 06:f0:34:14:bf:ca:2c:2e:07:79:34:4b:18:41:a1: 78:e6:ac:79:30:61:b2:45:ab:ee:94:43:34:ac:ce: f7:a3:6a:76:02:96:1f:d8:4b:4c:d8:28:eb:f8:6d: 21:d1:dd:a2:45:87:37:d0:b6:92:54:a8:31:64:91: 37:17:1f:74:90:f0:e8:37:81:51:cc:bf:cd:c0:6a: e2:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:06:FB:CC:39:42:2D:86:32:1D:B6:CB:77:F3:12:5C:F4:8D:B6:FC X509v3 Authority Key Identifier: keyid:91:6A:2F:E2:AA:2C:20:AB:01:C5:A1:3D:23:6D:A4:9D:B7:EA:50:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kWov4qosIKsBxaE9I22knbfqUGI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:07:f5:af:8f:ce:d1:7f:d3:39:a4:90:0c:2b:e0:ba:ff:89: ba:5a:f4:d8:e1:57:dd:1a:f6:16:81:eb:54:47:7a:c5:2b:5a: b4:72:01:08:9a:31:b7:9a:26:b7:ff:50:5a:c1:2b:0a:f1:94: dc:23:05:53:dc:56:2b:32:45:5d:49:2d:ef:1f:ed:31:d6:08: 9c:75:e0:c3:79:6f:4e:5a:fb:ac:0b:a3:f1:d4:cf:8d:ea:fc: 77:7c:b7:a4:3a:6b:5a:3f:4d:ce:ef:30:ec:e5:32:79:b7:f3: cf:2b:f8:bd:17:df:8e:b8:7c:cf:66:37:09:6d:01:c9:91:c6: b1:d9:42:c1:c6:34:1d:f3:e4:56:ad:22:f6:32:56:22:cb:88: a7:6e:a4:e7:a4:30:f2:81:8c:0e:04:62:91:b3:fc:77:10:95: 51:9f:95:60:c6:45:47:2c:4f:81:58:31:3f:7f:a3:52:f3:dd: a0:af:21:ad:0a:3c:2d:99:dd:04:80:3f:5d:c4:e6:e8:30:35: 8b:e9:0f:e2:3a:55:65:17:36:72:95:d4:09:7f:2b:b3:8b:0f: 71:40:f7:17:5a:10:30:67:00:2f:78:0e:e0:89:9c:d2:58:a2: dc:5e:8d:df:62:b5:50:09:4c:db:9e:b8:ba:71:a1:51:ab:2a: cc:09:b2:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDhMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkVGNzExMTAvBgNVBAUTKDkxNkEyRkUyQUEyQzIwQUIwMUM1QTEzRDIzNkRBNDlE QjdFQTUwNjIwHhcNMjUwNTE2MTgwNDE0WhcNMjUwNTIzMTgwNDE0WjAYMRYwFAYD VQQDEw02ODI3N2UxZS0yOTY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxw+EbeKrj9O5ymyWIn0cIJ3mf1tq8pinaqAEqUUqLK9dN/3NuKoqpli0eB0V sDrYOTgLFIVHMTBb2gNSEW7ZtK/vLgmd9jToFoN/5haoI/XSBNXbKBHwC+vfQEGw /kW8MhqQpVYUEhvBiOiVcTOMYpdOkuFJr7HAD/Oo6LaUskVFtv2qzn6OH9xlmImr o7Hnn1t3rrthVc/yLogM/0mLA6uXYrLWyZN9KXM9F7lHZBP4OMYG8DQUv8osLgd5 NEsYQaF45qx5MGGyRavulEM0rM73o2p2ApYf2EtM2Cjr+G0h0d2iRYc30LaSVKgx ZJE3Fx90kPDoN4FRzL/NwGribwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDcG+8w5 Qi2GMh22y3fzElz0jbb8MB8GA1UdIwQYMBaAFJFqL+KqLCCrAcWhPSNtpJ236lBi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRUY3MS83RUE4Mjk3Q0E5 REExMUU5OTU0MzM0ODRDNEY5QUUwMi9rV292NHFvc0lLc0J4YUU5STIya25iZnFV R0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tXb3Y0cW9zSUtzQnhhRTlJMjJrbmJmcVVHSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RUY3MS83RUE4Mjk3Q0E5REExMUU5OTU0MzM0ODRDNEY5QUUwMi9rV292NHFvc0lL c0J4YUU5STIya25iZnFVR0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhB/Wvj87Rf9M5pJAMK+C6/4m6WvTY4VfdGvYWgetUR3rFK1q0cgEI mjG3mia3/1BawSsK8ZTcIwVT3FYrMkVdSS3vH+0x1gicdeDDeW9OWvusC6Px1M+N 6vx3fLekOmtaP03O7zDs5TJ5t/PPK/i9F9+OuHzPZjcJbQHJkcax2ULBxjQd8+RW rSL2MlYiy4inbqTnpDDygYwOBGKRs/x3EJVRn5VgxkVHLE+BWDE/f6NS892gryGt Cjwtmd0EgD9dxOboMDWL6Q/iOlVlFzZyldQJfyuziw9xQPcXWhAwZwAveA7giZzS WKLcXo3fYrVQCUzbnri6caFRqyrMCbKx -----END CERTIFICATE-----Generated at Sat May 17 02:36:04 2025 by rpki-client