$ rpki-client -vvf rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.mft File: iEthKajamClnFMU6WhKA_RAZ-KM.mft (raw, json) Hash identifier: xPCX6yKalncs2SeVz/K19Evaf4icmiW+pyF1QVdPgFU= Subject key identifier: FB:C1:6E:55:9E:C0:34:69:65:3B:96:E9:7C:56:99:6E:9C:A7:E0:D9 Authority key identifier: 88:4B:61:29:A8:DA:98:29:67:14:C5:3A:5A:12:80:FD:10:19:F8:A3 Certificate issuer: /CN=A915F6E4/serialNumber=884B6129A8DA98296714C53A5A1280FD1019F8A3 Certificate serial: 0149 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEthKajamClnFMU6WhKA_RAZ-KM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.mft Manifest number: 0142 Signing time: Thu 15 May 2025 03:45:31 +0000 Manifest this update: Thu 15 May 2025 03:45:30 +0000 Manifest next update: Thu 22 May 2025 03:45:30 +0000 Files and hashes: 1: iEthKajamClnFMU6WhKA_RAZ-KM.crl (hash: 9NBsrXXlEIJVKUp20CCt5cKJkRzrGyh5wrC+j6MSGIw=) 2: E1B42772611A11EE9022C77EC4F9AE02.roa (hash: UvdgbLYF5+vRHqxdggCtIs+aJSz12jANKpYmMkrt0HU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.crl rsync://rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEthKajamClnFMU6WhKA_RAZ-KM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 03:45:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 329 (0x149) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F6E4, serialNumber=884B6129A8DA98296714C53A5A1280FD1019F8A3 Validity Not Before: May 15 03:45:30 2025 GMT Not After : May 22 03:45:30 2025 GMT Subject: CN=6825635a-926a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:42:c8:d4:77:a2:bc:f9:70:13:ff:e0:c8:74: 31:fa:07:6f:03:6a:a4:40:bd:ce:03:ec:51:49:d5: 77:1c:2d:6d:f1:68:b8:c9:a2:29:89:49:47:f2:76: 0b:d0:97:57:65:53:06:96:17:4d:9b:0f:12:9d:dd: f5:34:f8:25:01:37:57:be:df:db:bf:11:01:01:e8: ff:5e:c6:48:73:f2:28:e7:e2:a2:85:3c:de:4a:2e: 01:38:bc:f0:c8:2a:e3:6b:b3:d1:1f:b0:4e:38:4a: fe:84:4c:6b:20:07:ff:60:fc:1a:c0:62:6e:0d:1b: a5:a1:a2:fa:52:88:e7:c3:5c:ef:c8:fb:37:e5:00: 1e:88:fe:9f:64:60:d4:41:e9:9f:c2:c9:9a:b0:7e: 15:81:d3:c8:f7:2c:e7:09:09:88:3a:cd:8e:dc:8f: dc:38:af:92:d2:9a:da:6f:99:b9:7d:6b:11:16:37: b4:96:4d:26:d3:ae:fb:41:03:da:14:86:16:61:43: 86:40:f8:dd:ee:26:c5:e6:7b:d3:5d:6d:09:c0:2a: c9:87:9e:67:14:56:e9:8e:98:bd:07:8b:96:f0:e4: ac:f1:c4:03:b4:5e:85:3a:9e:2a:66:4e:e7:54:b7: 84:72:1c:10:be:be:7f:58:ee:e0:b8:0d:9e:ad:7f: a4:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:C1:6E:55:9E:C0:34:69:65:3B:96:E9:7C:56:99:6E:9C:A7:E0:D9 X509v3 Authority Key Identifier: keyid:88:4B:61:29:A8:DA:98:29:67:14:C5:3A:5A:12:80:FD:10:19:F8:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEthKajamClnFMU6WhKA_RAZ-KM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:01:50:ed:a5:41:2b:11:36:90:31:95:10:c4:d7:c3:69:e9: cd:18:98:05:e0:14:01:37:99:bf:5d:ed:61:8f:c0:5b:37:df: 06:16:aa:f3:9d:23:65:e2:14:76:dd:ba:4a:e3:cb:74:a1:01: 13:05:fb:16:b9:8d:e6:86:61:b3:e6:2c:8a:a4:2e:ad:9c:c8: d7:a3:f0:48:1c:a3:8b:e5:83:fa:5c:e8:4d:b2:b6:e6:2f:e9: ea:58:dc:f1:d5:a5:16:c0:4c:21:ce:8f:a5:c6:26:1d:7b:16: 3e:65:53:4f:16:57:ef:da:46:7f:bc:df:43:8c:6b:9b:5a:c2: c8:0c:48:9d:98:5e:ef:55:ef:11:3d:07:78:e6:54:b5:6b:95: 0c:f8:67:88:57:2d:c5:32:b0:1f:e5:1b:33:ce:a3:ba:06:fe: f1:c9:43:c1:a3:e2:f1:ca:79:ad:a6:69:5b:e0:7d:9d:86:13: f3:9d:51:63:19:e0:ce:eb:2f:5b:5e:6e:7f:37:ac:38:1c:da: 66:d8:2a:8f:8b:23:bd:71:9c:16:47:7c:d5:fe:0d:83:ea:fe: ff:89:56:d8:f3:ae:ea:d1:28:94:c9:ee:ee:c2:e9:81:32:6b: c9:dc:85:e3:3c:ff:c9:f4:27:0b:d5:f8:e3:9e:1e:c9:6a:68: a1:04:9b:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUY2RTQxMTAvBgNVBAUTKDg4NEI2MTI5QThEQTk4Mjk2NzE0QzUzQTVBMTI4MEZE MTAxOUY4QTMwHhcNMjUwNTE1MDM0NTMwWhcNMjUwNTIyMDM0NTMwWjAYMRYwFAYD VQQDEw02ODI1NjM1YS05MjZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+ULI1HeivPlwE//gyHQx+gdvA2qkQL3OA+xRSdV3HC1t8Wi4yaIpiUlH8nYL 0JdXZVMGlhdNmw8Snd31NPglATdXvt/bvxEBAej/XsZIc/Io5+KihTzeSi4BOLzw yCrja7PRH7BOOEr+hExrIAf/YPwawGJuDRuloaL6Uojnw1zvyPs35QAeiP6fZGDU QemfwsmasH4VgdPI9yznCQmIOs2O3I/cOK+S0prab5m5fWsRFje0lk0m0677QQPa FIYWYUOGQPjd7ibF5nvTXW0JwCrJh55nFFbpjpi9B4uW8OSs8cQDtF6FOp4qZk7n VLeEchwQvr5/WO7guA2erX+kfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPvBblWe wDRpZTuW6XxWmW6cp+DZMB8GA1UdIwQYMBaAFIhLYSmo2pgpZxTFOloSgP0QGfij MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RjZFNC9DQTgxRDlGRTRF MTAxMUVFOUZFMEJEMjZDNEY5QUUwMi9pRXRoS2FqYW1DbG5GTVU2V2hLQV9SQVot S00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lFdGhLYWphbUNsbkZNVTZXaEtBX1JBWi1LTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RjZFNC9DQTgxRDlGRTRFMTAxMUVFOUZFMEJEMjZDNEY5QUUwMi9pRXRoS2FqYW1D bG5GTVU2V2hLQV9SQVotS00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWAVDtpUErETaQMZUQxNfDaenNGJgF4BQBN5m/Xe1hj8BbN98GFqrz nSNl4hR23bpK48t0oQETBfsWuY3mhmGz5iyKpC6tnMjXo/BIHKOL5YP6XOhNsrbm L+nqWNzx1aUWwEwhzo+lxiYdexY+ZVNPFlfv2kZ/vN9DjGubWsLIDEidmF7vVe8R PQd45lS1a5UM+GeIVy3FMrAf5RszzqO6Bv7xyUPBo+Lxynmtpmlb4H2dhhPznVFj GeDO6y9bXm5/N6w4HNpm2CqPiyO9cZwWR3zV/g2D6v7/iVbY867q0SiUye7uwumB MmvJ3IXjPP/J9CcL1fjjnh7JamihBJtg -----END CERTIFICATE-----Generated at Thu May 15 08:53:51 2025 by rpki-client