$ rpki-client -vvf rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.mft File: KWYvUTolTw218H21gZ--rkD3vxU.mft (raw, json) Hash identifier: TLGnwLeimVZ1VK6OxvdzYqT8FNVM86ahhF7pP/meYDk= Subject key identifier: FF:94:A9:72:5C:73:D3:B2:F8:97:FC:45:89:5B:74:2E:B4:45:1E:BF Authority key identifier: 29:66:2F:51:3A:25:4F:0D:B5:F0:7D:B5:81:9F:BE:AE:40:F7:BF:15 Certificate issuer: /CN=A9146C84/serialNumber=29662F513A254F0DB5F07DB5819FBEAE40F7BF15 Certificate serial: 02D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KWYvUTolTw218H21gZ--rkD3vxU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.mft Manifest number: 02C9 Signing time: Sat 17 May 2025 01:37:54 +0000 Manifest this update: Sat 17 May 2025 01:37:54 +0000 Manifest next update: Sat 24 May 2025 01:37:54 +0000 Files and hashes: 1: KWYvUTolTw218H21gZ--rkD3vxU.crl (hash: na8fz1F4kwN7jUOPCxLYG/JwapS301Ac4cecdICR10I=) 2: F09C691AEBB511ECA410BF6DC4F9AE02.roa (hash: 3t64o2UXNsxTNPIx1fcvAHHTrkMYu5vuFZ50YkMkLZI=) 3: EF6D9D70EBB511ECA410BF6DC4F9AE02.roa (hash: HZusuoH1up8FDoOQyhT/1qoC+ff/aBBAonRcZ28YjMI=) 4: F123461AEBB511ECA410BF6DC4F9AE02.roa (hash: Eku/YHWxKxpsRX6ogTNh3LDNRp5rXVLPBXYqCNfR56g=) 5: EFF97098EBB511ECA410BF6DC4F9AE02.roa (hash: 3ncZT46pze+jMf4M4LYzFO82k2evN1uShAP1OkhdIKI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.crl rsync://rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KWYvUTolTw218H21gZ--rkD3vxU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 01:37:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 729 (0x2d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146C84, serialNumber=29662F513A254F0DB5F07DB5819FBEAE40F7BF15 Validity Not Before: May 17 01:37:54 2025 GMT Not After : May 24 01:37:54 2025 GMT Subject: CN=6827e872-5a3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:92:ea:dc:b5:af:03:41:82:c4:02:6a:2d:15: 2d:d2:c8:27:cf:2c:4b:d0:37:d1:f7:1a:ff:5f:77: 0a:e6:cc:5e:06:fd:79:05:e4:d8:f3:16:6b:8c:5e: 11:e0:ff:0f:8e:10:d7:42:d2:82:46:03:e8:a8:b2: e4:dd:90:d2:11:29:a6:2b:79:b5:9a:6b:36:ba:55: d5:e4:45:82:5f:60:7e:5d:ec:dc:f5:13:a5:bf:cb: 70:0d:77:7a:a5:dc:94:d3:ef:8c:7a:87:ba:c0:dd: 0e:06:3f:9b:d9:9d:3b:1e:7b:4d:f1:e6:8d:98:8d: 35:6f:14:be:31:b7:a8:25:ce:b3:c1:21:2c:a2:c1: 37:e4:1f:aa:76:9e:5f:ef:27:bf:53:23:99:38:78: cc:46:a5:c7:ba:75:10:7e:9c:ac:3c:7a:3e:78:a3: b3:65:75:58:3f:df:33:bb:22:19:a5:1d:75:12:ff: b2:ae:94:6c:3a:3b:d4:f3:63:cf:21:ac:92:3f:74: b5:8e:4f:14:12:49:70:8d:30:9a:94:81:97:7f:c6: b4:90:c8:ac:e0:fe:27:2d:35:6b:ba:51:7f:fb:20: 98:21:b8:e3:48:c3:06:75:f8:1f:77:98:d9:81:76: 00:f5:04:64:fe:b0:2f:80:dd:af:30:03:dd:c3:c3: 4e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:94:A9:72:5C:73:D3:B2:F8:97:FC:45:89:5B:74:2E:B4:45:1E:BF X509v3 Authority Key Identifier: keyid:29:66:2F:51:3A:25:4F:0D:B5:F0:7D:B5:81:9F:BE:AE:40:F7:BF:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KWYvUTolTw218H21gZ--rkD3vxU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:a2:36:10:f5:72:4f:52:a2:9d:21:35:2f:d4:c6:2e:fa:c7: 6a:44:74:d3:1b:c9:37:64:60:67:63:71:35:9c:a1:83:0d:d6: d8:1b:bb:b6:77:75:c8:62:aa:71:d0:09:10:b7:54:6e:d8:99: 3d:93:9d:55:c6:93:be:f2:cc:ae:9f:59:f4:90:94:74:13:23: 00:79:ab:42:6f:ac:3b:2d:a4:11:03:9f:f1:a3:3a:af:e8:e2: 80:6f:fc:6e:75:3c:7c:6b:0f:c1:ee:36:bb:fa:91:60:76:01: 71:e1:8b:79:ef:f9:1d:95:01:db:40:31:e9:68:37:12:49:1c: 8d:de:15:e2:e0:f2:39:4d:f1:e4:56:54:a6:d9:03:3c:d9:4b: 89:7d:aa:b1:a1:09:29:79:00:bc:a3:78:2b:11:99:06:14:df: 8d:12:54:69:a1:d2:95:6f:e8:5e:d3:40:57:ab:c9:3a:40:e8: 78:b5:c8:7c:2b:18:44:32:9c:58:38:3d:19:a3:7e:09:c4:2e: 51:42:ff:59:06:22:4f:80:80:8a:ae:b7:3b:57:f4:2a:1c:af: 0e:11:a5:fe:4b:2e:a4:6b:54:cd:aa:f6:18:44:36:d0:1a:dc: cb:f0:bf:34:96:34:d9:cb:2f:89:4b:54:89:5a:b1:76:12:a0: d4:9e:02:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZDODQxMTAvBgNVBAUTKDI5NjYyRjUxM0EyNTRGMERCNUYwN0RCNTgxOUZCRUFF NDBGN0JGMTUwHhcNMjUwNTE3MDEzNzU0WhcNMjUwNTI0MDEzNzU0WjAYMRYwFAYD VQQDEw02ODI3ZTg3Mi01YTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8ZLq3LWvA0GCxAJqLRUt0sgnzyxL0DfR9xr/X3cK5sxeBv15BeTY8xZrjF4R 4P8PjhDXQtKCRgPoqLLk3ZDSESmmK3m1mms2ulXV5EWCX2B+Xezc9ROlv8twDXd6 pdyU0++Meoe6wN0OBj+b2Z07HntN8eaNmI01bxS+MbeoJc6zwSEsosE35B+qdp5f 7ye/UyOZOHjMRqXHunUQfpysPHo+eKOzZXVYP98zuyIZpR11Ev+yrpRsOjvU82PP IaySP3S1jk8UEklwjTCalIGXf8a0kMis4P4nLTVrulF/+yCYIbjjSMMGdfgfd5jZ gXYA9QRk/rAvgN2vMAPdw8NOEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP+UqXJc c9Oy+Jf8RYlbdC60RR6/MB8GA1UdIwQYMBaAFClmL1E6JU8NtfB9tYGfvq5A978V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkM4NC8yQTlCQjAyNkVC QjExMUVDODZERTM1NjVDNEY5QUUwMi9LV1l2VVRvbFR3MjE4SDIxZ1otLXJrRDN2 eFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXWXZVVG9sVHcyMThIMjFnWi0tcmtEM3Z4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkM4NC8yQTlCQjAyNkVCQjExMUVDODZERTM1NjVDNEY5QUUwMi9LV1l2VVRvbFR3 MjE4SDIxZ1otLXJrRDN2eFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5ojYQ9XJPUqKdITUv1MYu+sdqRHTTG8k3ZGBnY3E1nKGDDdbYG7u2 d3XIYqpx0AkQt1Ru2Jk9k51VxpO+8syun1n0kJR0EyMAeatCb6w7LaQRA5/xozqv 6OKAb/xudTx8aw/B7ja7+pFgdgFx4Yt57/kdlQHbQDHpaDcSSRyN3hXi4PI5TfHk VlSm2QM82UuJfaqxoQkpeQC8o3grEZkGFN+NElRpodKVb+he00BXq8k6QOh4tch8 KxhEMpxYOD0Zo34JxC5RQv9ZBiJPgICKrrc7V/QqHK8OEaX+Sy6ka1TNqvYYRDbQ GtzL8L80ljTZyy+JS1SJWrF2EqDUngIk -----END CERTIFICATE-----Generated at Sat May 17 14:39:14 2025 by rpki-client