$ rpki-client -vvf rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/K0QMfEWQAwVRV2J95yFOnKwSi0w.mft File: K0QMfEWQAwVRV2J95yFOnKwSi0w.mft (raw, json) Hash identifier: VmGKoI76qLErIUJaC6QQuMcZuL6uj8vSBV+hgFgDWDg= Subject key identifier: FD:BE:A6:D3:AC:B7:BF:2D:7D:D8:24:0D:1B:D8:7F:75:BE:56:A3:8F Authority key identifier: 2B:44:0C:7C:45:90:03:05:51:57:62:7D:E7:21:4E:9C:AC:12:8B:4C Certificate issuer: /CN=A9187729/serialNumber=2B440C7C459003055157627DE7214E9CAC128B4C Certificate serial: 03C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0QMfEWQAwVRV2J95yFOnKwSi0w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/K0QMfEWQAwVRV2J95yFOnKwSi0w.mft Manifest number: 03C2 Signing time: Tue 13 May 2025 00:27:02 +0000 Manifest this update: Tue 13 May 2025 00:27:01 +0000 Manifest next update: Tue 20 May 2025 00:27:01 +0000 Files and hashes: 1: K0QMfEWQAwVRV2J95yFOnKwSi0w.crl (hash: waGUJwCwpKCJeD981w4XCq3LlaZCXBE+X2UbGjssZFg=) 2: 394B48F6889811EC9D1DF920C4F9AE02.roa (hash: zNdiJ1pBffbcNnWg75GFO6PkHkmsjOTQiX3Av0Ret+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/K0QMfEWQAwVRV2J95yFOnKwSi0w.crl rsync://rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/K0QMfEWQAwVRV2J95yFOnKwSi0w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0QMfEWQAwVRV2J95yFOnKwSi0w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 00:27:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 966 (0x3c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187729, serialNumber=2B440C7C459003055157627DE7214E9CAC128B4C Validity Not Before: May 13 00:27:01 2025 GMT Not After : May 20 00:27:01 2025 GMT Subject: CN=682291d5-f26c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:95:c4:fd:77:05:15:b1:e8:88:8d:73:a0:72: 4c:57:b0:87:3a:f0:72:a7:15:0d:14:21:a9:95:88: 6d:54:48:63:db:b8:e1:d5:96:b6:b0:e8:52:a0:76: ca:01:34:2f:f2:b9:99:67:10:57:39:4e:13:17:3d: 45:29:f7:70:dd:ae:e4:79:0f:95:2f:c7:a0:c2:2e: 3f:44:3a:27:9c:e3:57:db:6c:0d:c1:86:37:b2:b4: 13:63:1d:f4:b3:b1:66:90:24:19:f0:1d:39:dc:2a: fe:c1:f2:bc:d4:33:48:9d:20:a5:94:5c:40:6c:e5: 5d:9f:d8:d0:8a:58:a9:76:48:53:19:08:d5:64:45: 2d:46:5b:97:8b:25:d1:c4:84:f6:b9:60:2a:0e:ca: 7e:48:a7:a0:f6:87:90:72:f5:19:d3:a5:27:dd:ea: de:b1:9e:24:c1:15:58:d2:62:8e:c3:cd:93:70:2c: a9:4d:1e:85:c2:89:56:96:b5:69:27:69:28:37:b2: 6d:18:4d:f2:4e:6a:50:f5:06:a2:38:d2:43:d8:86: 76:bc:38:5f:c4:10:48:39:a3:62:f5:d4:ab:e9:8f: 5f:84:d0:d7:79:12:00:5c:8c:65:1b:ea:4e:60:80: 43:ff:fb:ad:fc:4f:d0:fb:61:92:76:57:7f:3d:1a: 71:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:BE:A6:D3:AC:B7:BF:2D:7D:D8:24:0D:1B:D8:7F:75:BE:56:A3:8F X509v3 Authority Key Identifier: keyid:2B:44:0C:7C:45:90:03:05:51:57:62:7D:E7:21:4E:9C:AC:12:8B:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/K0QMfEWQAwVRV2J95yFOnKwSi0w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0QMfEWQAwVRV2J95yFOnKwSi0w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/K0QMfEWQAwVRV2J95yFOnKwSi0w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:f0:f2:ca:66:6d:64:16:6d:a6:17:9c:34:8c:c7:43:43:3f: 02:8c:9d:93:7a:24:79:86:7d:31:19:a5:8b:34:a5:57:f4:65: 60:da:58:28:1c:21:ce:3b:0e:ef:39:3b:23:35:e4:85:60:1a: f1:92:1d:e6:e5:c4:91:3b:fd:b7:81:0e:4b:42:7d:a3:b5:a2: 2a:8a:63:30:8f:a1:24:a0:ca:09:f3:eb:5a:4c:1e:4a:4c:56: 83:e3:69:e4:c5:e4:35:3f:60:27:3c:8b:17:0e:2b:0d:80:63: 4f:c8:0e:40:a0:1d:c7:df:ce:26:03:37:d1:78:3a:bd:90:f8: f3:83:96:e4:1d:44:35:d4:7b:b7:16:96:c0:bb:99:32:50:7b: 2c:e5:45:14:a5:3f:e7:31:b6:d4:52:3b:33:ef:e1:f4:0c:27: b8:a1:84:c4:27:05:29:d4:96:87:e7:cb:7b:ee:5b:8b:96:06: c1:bf:6b:f3:30:4b:0b:62:7e:12:ce:e6:75:6a:26:d3:fe:31: e2:50:49:e6:e2:f5:2f:71:0f:99:9f:f8:a5:1f:23:09:f2:4e: e1:bc:79:19:8e:a2:17:5e:76:c7:3b:ab:94:ac:e2:1b:40:38: 08:71:1d:37:a4:df:a9:04:33:f1:5d:30:f9:a2:14:ee:bb:21: 18:f8:f5:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc3MjkxMTAvBgNVBAUTKDJCNDQwQzdDNDU5MDAzMDU1MTU3NjI3REU3MjE0RTlD QUMxMjhCNEMwHhcNMjUwNTEzMDAyNzAxWhcNMjUwNTIwMDAyNzAxWjAYMRYwFAYD VQQDEw02ODIyOTFkNS1mMjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnZXE/XcFFbHoiI1zoHJMV7CHOvBypxUNFCGplYhtVEhj27jh1Za2sOhSoHbK ATQv8rmZZxBXOU4TFz1FKfdw3a7keQ+VL8egwi4/RDonnONX22wNwYY3srQTYx30 s7FmkCQZ8B053Cr+wfK81DNInSCllFxAbOVdn9jQilipdkhTGQjVZEUtRluXiyXR xIT2uWAqDsp+SKeg9oeQcvUZ06Un3eresZ4kwRVY0mKOw82TcCypTR6FwolWlrVp J2koN7JtGE3yTmpQ9QaiONJD2IZ2vDhfxBBIOaNi9dSr6Y9fhNDXeRIAXIxlG+pO YIBD//ut/E/Q+2GSdld/PRpxTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP2+ptOs t78tfdgkDRvYf3W+VqOPMB8GA1UdIwQYMBaAFCtEDHxFkAMFUVdifechTpysEotM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzcyOS8xMzEyRjkwODg4 OTQxMUVDQjIwQjgzNzJDNEY5QUUwMi9LMFFNZkVXUUF3VlJWMko5NXlGT25Ld1Np MHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0swUU1mRVdRQXdWUlYySjk1eUZPbkt3U2kwdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzcyOS8xMzEyRjkwODg4OTQxMUVDQjIwQjgzNzJDNEY5QUUwMi9LMFFNZkVXUUF3 VlJWMko5NXlGT25Ld1NpMHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCB8PLKZm1kFm2mF5w0jMdDQz8CjJ2TeiR5hn0xGaWLNKVX9GVg2lgo HCHOOw7vOTsjNeSFYBrxkh3m5cSRO/23gQ5LQn2jtaIqimMwj6EkoMoJ8+taTB5K TFaD42nkxeQ1P2AnPIsXDisNgGNPyA5AoB3H384mAzfReDq9kPjzg5bkHUQ11Hu3 FpbAu5kyUHss5UUUpT/nMbbUUjsz7+H0DCe4oYTEJwUp1JaH58t77luLlgbBv2vz MEsLYn4SzuZ1aibT/jHiUEnm4vUvcQ+Zn/ilHyMJ8k7hvHkZjqIXXnbHO6uUrOIb QDgIcR03pN+pBDPxXTD5ohTuuyEY+PWk -----END CERTIFICATE-----Generated at Wed May 14 15:10:35 2025 by rpki-client