$ rpki-client -vvf rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.mft File: KISNw_Gedyn_43735PClycW0kOk.mft (raw, json) Hash identifier: 7Mg8wdRFU4aQFLZ+8YlccjVRlcvojKMQ34xS/D4bxpg= Subject key identifier: 83:06:C9:34:FB:0F:97:03:A4:29:0D:D8:D0:BF:07:67:B2:72:D5:0A Authority key identifier: 28:84:8D:C3:F1:9E:77:29:FF:E3:7E:F7:E4:F0:A5:C9:C5:B4:90:E9 Certificate issuer: /CN=A9141B5B/serialNumber=28848DC3F19E7729FFE37EF7E4F0A5C9C5B490E9 Certificate serial: 0193 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KISNw_Gedyn_43735PClycW0kOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.mft Manifest number: 0189 Signing time: Sun 11 May 2025 02:34:15 +0000 Manifest this update: Sun 11 May 2025 02:34:15 +0000 Manifest next update: Sun 18 May 2025 02:34:15 +0000 Files and hashes: 1: KISNw_Gedyn_43735PClycW0kOk.crl (hash: CfxXXfNhBTHfuDOVU93uizXnjrtFzVN1QWZxWE26ITw=) 2: EC61C060DDB411ED93355C4FC4F9AE02.roa (hash: Ds1Oggb1CXmheiOx4YZNVxU2i1qg8eEHn8KdU83omHg=) 3: 6C0C84D8DD9E11EDB661B12CC4F9AE02.roa (hash: NvHtd8ujE1yELsuYXTHpNbSZA6sMXQEq9scs3taiBxY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.crl rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KISNw_Gedyn_43735PClycW0kOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:34:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 403 (0x193) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141B5B, serialNumber=28848DC3F19E7729FFE37EF7E4F0A5C9C5B490E9 Validity Not Before: May 11 02:34:15 2025 GMT Not After : May 18 02:34:15 2025 GMT Subject: CN=68200ca7-dd79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e6:ba:0a:09:be:07:8d:fc:5f:3d:6a:d5:c7: f6:a6:b6:41:f8:e7:ec:d1:4e:b9:f9:fc:53:41:06: 0a:55:58:9a:53:4b:9f:66:10:22:9c:e5:be:a6:f7: e9:cf:24:bb:71:54:27:e8:43:0c:09:79:69:91:6f: ee:89:34:9e:00:07:5c:8f:46:10:ab:86:13:d2:76: 7c:2f:a7:e1:5b:d2:ac:ef:00:e8:c1:19:fe:80:8d: 50:b0:e8:eb:8e:df:0e:8d:75:97:14:21:2d:f3:46: 47:65:39:c2:84:d8:d0:a2:47:c3:88:5b:3c:01:71: d1:96:76:69:24:d4:9e:a8:0c:bd:33:3f:18:93:34: 3b:fb:ed:ca:d2:af:fc:59:bf:67:13:63:65:c8:5a: 48:4f:05:70:29:b1:f2:c9:bf:8f:7f:e9:46:d7:f0: 8b:24:5b:ec:16:8e:89:2f:5c:7e:54:d0:7e:5f:79: a7:9e:47:6f:3f:17:8d:f3:14:f0:38:91:d9:5f:17: 83:19:e3:43:f0:cf:88:2f:ec:c5:a6:00:0e:fc:66: 5a:82:03:3a:4a:c4:d4:f9:bc:cf:86:ae:a8:29:2f: 96:0f:29:3d:74:f0:00:fd:ba:46:37:22:69:56:52: 76:d1:44:dd:cb:6f:22:11:12:60:58:aa:b2:14:8e: f6:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:06:C9:34:FB:0F:97:03:A4:29:0D:D8:D0:BF:07:67:B2:72:D5:0A X509v3 Authority Key Identifier: keyid:28:84:8D:C3:F1:9E:77:29:FF:E3:7E:F7:E4:F0:A5:C9:C5:B4:90:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KISNw_Gedyn_43735PClycW0kOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:3c:81:59:41:2b:e7:7b:ba:44:0c:c2:ee:76:ea:60:3b:92: 17:26:24:4b:ba:3e:54:1e:38:46:c5:ad:e6:81:d5:4d:83:1b: 13:df:f7:de:35:12:34:75:c7:9a:4a:c1:c3:62:32:03:24:ee: a4:c4:ee:2c:8c:88:dd:f0:d2:9e:9e:1c:fb:f1:31:fa:66:81: dc:90:90:89:07:29:9c:9c:62:11:06:3a:71:a9:16:98:4c:ab: 8c:db:71:94:04:4b:74:3e:63:9b:58:ea:0a:f6:ad:84:a3:de: 75:41:ac:ea:1d:85:a4:0b:fb:25:39:95:f3:aa:7c:b8:45:8b: 77:84:4e:c9:56:13:34:ae:7c:41:94:f7:df:0f:6b:bf:84:76: ef:b6:2a:e5:4b:2c:12:d9:56:93:80:42:02:d6:3f:a4:b3:99: 85:1c:2a:0a:5f:2c:e4:51:21:e9:d0:0e:8d:b9:6a:73:d5:0a: ae:50:f3:51:88:56:83:fc:a4:2d:17:8c:dc:d8:e1:51:cf:7e: 13:f4:a1:84:de:ad:c5:cd:2f:88:da:64:c2:5b:ce:5b:00:67: d2:67:51:44:fe:7f:7d:62:4d:17:f1:cf:8e:60:3e:20:54:8f: 0f:a9:9a:98:f1:66:b9:a5:bd:21:0f:c3:b4:4e:31:5d:86:89: 0b:48:9d:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDFCNUIxMTAvBgNVBAUTKDI4ODQ4REMzRjE5RTc3MjlGRkUzN0VGN0U0RjBBNUM5 QzVCNDkwRTkwHhcNMjUwNTExMDIzNDE1WhcNMjUwNTE4MDIzNDE1WjAYMRYwFAYD VQQDEw02ODIwMGNhNy1kZDc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxOa6Cgm+B438Xz1q1cf2prZB+Ofs0U65+fxTQQYKVViaU0ufZhAinOW+pvfp zyS7cVQn6EMMCXlpkW/uiTSeAAdcj0YQq4YT0nZ8L6fhW9Ks7wDowRn+gI1QsOjr jt8OjXWXFCEt80ZHZTnChNjQokfDiFs8AXHRlnZpJNSeqAy9Mz8YkzQ7++3K0q/8 Wb9nE2NlyFpITwVwKbHyyb+Pf+lG1/CLJFvsFo6JL1x+VNB+X3mnnkdvPxeN8xTw OJHZXxeDGeND8M+IL+zFpgAO/GZaggM6SsTU+bzPhq6oKS+WDyk9dPAA/bpGNyJp VlJ20UTdy28iERJgWKqyFI72dwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIMGyTT7 D5cDpCkN2NC/B2eyctUKMB8GA1UdIwQYMBaAFCiEjcPxnncp/+N+9+TwpcnFtJDp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MUI1Qi84RDU3RTE3Q0RE OTUxMUVEQUU4QzZDN0FDNEY5QUUwMi9LSVNOd19HZWR5bl80MzczNVBDbHljVzBr T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tJU053X0dlZHluXzQzNzM1UENseWNXMGtPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MUI1Qi84RDU3RTE3Q0REOTUxMUVEQUU4QzZDN0FDNEY5QUUwMi9LSVNOd19HZWR5 bl80MzczNVBDbHljVzBrT2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNPIFZQSvne7pEDMLudupgO5IXJiRLuj5UHjhGxa3mgdVNgxsT3/fe NRI0dceaSsHDYjIDJO6kxO4sjIjd8NKenhz78TH6ZoHckJCJBymcnGIRBjpxqRaY TKuM23GUBEt0PmObWOoK9q2Eo951QazqHYWkC/slOZXzqny4RYt3hE7JVhM0rnxB lPffD2u/hHbvtirlSywS2VaTgEIC1j+ks5mFHCoKXyzkUSHp0A6NuWpz1QquUPNR iFaD/KQtF4zc2OFRz34T9KGE3q3FzS+I2mTCW85bAGfSZ1FE/n99Yk0X8c+OYD4g VI8PqZqY8Wa5pb0hD8O0TjFdhokLSJ3V -----END CERTIFICATE-----Generated at Mon May 12 05:33:38 2025 by rpki-client