$ rpki-client -vvf rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/KwN-XtvChKOTiNGbzUXS2UdLMZs.mft File: KwN-XtvChKOTiNGbzUXS2UdLMZs.mft (raw, json) Hash identifier: c0kc02ni7X6IHF4arZUAzSfn6NtJ83uQ9ICu7sN2n+s= Subject key identifier: C0:7D:5A:31:C0:8F:C4:8E:38:0F:31:49:E6:F7:D8:C3:77:B8:2D:85 Authority key identifier: 2B:03:7E:5E:DB:C2:84:A3:93:88:D1:9B:CD:45:D2:D9:47:4B:31:9B Certificate issuer: /CN=A9183A80/serialNumber=2B037E5EDBC284A39388D19BCD45D2D9474B319B Certificate serial: 03CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KwN-XtvChKOTiNGbzUXS2UdLMZs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/KwN-XtvChKOTiNGbzUXS2UdLMZs.mft Manifest number: 046C Signing time: Thu 15 May 2025 00:40:22 +0000 Manifest this update: Thu 15 May 2025 00:40:21 +0000 Manifest next update: Thu 22 May 2025 00:40:21 +0000 Files and hashes: 1: KwN-XtvChKOTiNGbzUXS2UdLMZs.crl (hash: UkG3+pxaNg77w2e1tI/QXkjC5DTeCrY3dHUFWR1cEbk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/KwN-XtvChKOTiNGbzUXS2UdLMZs.crl rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/KwN-XtvChKOTiNGbzUXS2UdLMZs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KwN-XtvChKOTiNGbzUXS2UdLMZs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 00:40:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 972 (0x3cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183A80, serialNumber=2B037E5EDBC284A39388D19BCD45D2D9474B319B Validity Not Before: May 15 00:40:21 2025 GMT Not After : May 22 00:40:21 2025 GMT Subject: CN=682537f6-a3d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:cf:a8:d7:15:f5:b8:ad:75:0b:66:2c:d2:90: 35:ec:2d:eb:b7:0c:03:53:c3:67:92:21:e2:90:23: e1:40:11:cb:94:e8:1e:04:47:dd:dc:23:29:fe:01: 61:37:e1:76:d4:a5:86:72:d1:0e:0f:c1:63:6e:d0: bc:25:b6:33:fa:c5:f4:45:ba:d9:b5:85:6b:06:ce: 03:f1:3d:22:03:93:58:f9:4c:18:bb:2d:7e:59:6a: 21:c9:67:79:20:e3:2b:17:f6:eb:3e:9f:41:50:55: fd:12:df:98:24:5a:2b:9f:3b:c4:ce:6d:d7:1b:03: 6d:0e:66:2c:94:7f:18:7c:b8:14:3b:6c:31:f6:72: a6:33:41:cb:ca:b6:2d:47:0e:20:2d:81:dc:71:8d: e1:35:99:37:0f:74:c1:9c:c7:60:94:40:0b:b6:a7: 1e:de:d8:c5:5b:da:b1:43:12:9b:92:61:3b:04:5b: 61:cb:6f:d2:ad:22:49:43:2e:e1:c3:83:04:40:4e: a2:70:a0:82:a8:6c:aa:f2:7c:95:82:87:a9:72:95: 1e:11:aa:8a:8a:e9:16:17:e1:fa:87:85:83:3a:95: c4:f6:c8:b4:f3:63:c8:0f:40:28:63:9c:12:71:96: 71:25:9e:87:cd:4c:c8:79:97:6e:fa:1f:f1:39:7d: f6:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:7D:5A:31:C0:8F:C4:8E:38:0F:31:49:E6:F7:D8:C3:77:B8:2D:85 X509v3 Authority Key Identifier: keyid:2B:03:7E:5E:DB:C2:84:A3:93:88:D1:9B:CD:45:D2:D9:47:4B:31:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/KwN-XtvChKOTiNGbzUXS2UdLMZs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KwN-XtvChKOTiNGbzUXS2UdLMZs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/KwN-XtvChKOTiNGbzUXS2UdLMZs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:06:54:b0:88:d9:e1:af:e0:f8:1c:5a:d4:ab:03:58:06:a0: 7d:bf:da:68:bb:e9:4e:fa:a3:af:0a:b0:02:08:91:cc:7c:3f: 07:75:d9:59:89:a0:4c:5d:50:15:de:68:59:4a:2a:b4:b2:85: 3a:f4:cd:aa:5f:96:bf:17:67:b0:1b:b8:f2:4e:d3:90:7a:dc: 9c:8b:3f:70:c3:23:89:48:0e:59:d3:d3:c2:66:d7:04:5b:02: 0d:f1:53:6a:03:24:80:df:71:f4:25:06:a3:22:6c:fb:0b:45: 5a:94:ec:40:a9:38:83:a2:7f:f6:01:12:62:ab:6a:5e:7b:7b: a7:68:eb:83:b7:34:f7:75:46:be:b3:f5:c4:4f:b4:f1:1d:81: 84:67:cf:a8:c3:84:64:2e:3c:c3:75:87:c4:fa:a1:8d:a6:5e: 16:7f:de:40:28:cb:0b:9e:dc:d2:40:1c:1c:b2:aa:ed:03:34: b7:6e:be:e5:15:c2:a1:d9:77:7e:42:ed:31:28:92:76:fb:9d: 53:80:d2:85:be:25:f1:ee:7d:85:94:76:56:9b:4a:a3:22:b1: 6e:89:54:09:d8:b6:9e:46:05:5c:51:b3:dc:b4:66:e8:7c:e2: 5e:3d:6d:90:e5:76:c3:8e:db:87:4c:2f:74:32:e7:93:45:e5: 41:d0:20:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODNBODAxMTAvBgNVBAUTKDJCMDM3RTVFREJDMjg0QTM5Mzg4RDE5QkNENDVEMkQ5 NDc0QjMxOUIwHhcNMjUwNTE1MDA0MDIxWhcNMjUwNTIyMDA0MDIxWjAYMRYwFAYD VQQDEw02ODI1MzdmNi1hM2Q1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2c+o1xX1uK11C2Ys0pA17C3rtwwDU8NnkiHikCPhQBHLlOgeBEfd3CMp/gFh N+F21KWGctEOD8FjbtC8JbYz+sX0RbrZtYVrBs4D8T0iA5NY+UwYuy1+WWohyWd5 IOMrF/brPp9BUFX9Et+YJFornzvEzm3XGwNtDmYslH8YfLgUO2wx9nKmM0HLyrYt Rw4gLYHccY3hNZk3D3TBnMdglEALtqce3tjFW9qxQxKbkmE7BFthy2/SrSJJQy7h w4MEQE6icKCCqGyq8nyVgoepcpUeEaqKiukWF+H6h4WDOpXE9si082PID0AoY5wS cZZxJZ6HzUzIeZdu+h/xOX32GQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMB9WjHA j8SOOA8xSeb32MN3uC2FMB8GA1UdIwQYMBaAFCsDfl7bwoSjk4jRm81F0tlHSzGb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0E4MC82OTAxMTlEMjg4 MUExMUVDQkNDRkEwMEZDNEY5QUUwMi9Ld04tWHR2Q2hLT1RpTkdielVYUzJVZExN WnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0t3Ti1YdHZDaEtPVGlOR2J6VVhTMlVkTE1acy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 M0E4MC82OTAxMTlEMjg4MUExMUVDQkNDRkEwMEZDNEY5QUUwMi9Ld04tWHR2Q2hL T1RpTkdielVYUzJVZExNWnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeBlSwiNnhr+D4HFrUqwNYBqB9v9pou+lO+qOvCrACCJHMfD8HddlZ iaBMXVAV3mhZSiq0soU69M2qX5a/F2ewG7jyTtOQetyciz9wwyOJSA5Z09PCZtcE WwIN8VNqAySA33H0JQajImz7C0ValOxAqTiDon/2ARJiq2pee3unaOuDtzT3dUa+ s/XET7TxHYGEZ8+ow4RkLjzDdYfE+qGNpl4Wf95AKMsLntzSQBwcsqrtAzS3br7l FcKh2Xd+Qu0xKJJ2+51TgNKFviXx7n2FlHZWm0qjIrFuiVQJ2LaeRgVcUbPctGbo fOJePW2Q5XbDjtuHTC90MueTReVB0CDP -----END CERTIFICATE-----Generated at Fri May 16 15:10:50 2025 by rpki-client