$ rpki-client -vvf rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.mft File: K0TIiRquK4of20jr9KV-mJrrc2M.mft (raw, json) Hash identifier: mDDn2ZdBTiNyonzaVfvohaVAx02I+z61n8bMv2JF51U= Subject key identifier: 75:C9:E3:E4:7E:B4:13:F3:E2:A7:18:0A:15:C8:70:AA:72:43:19:66 Authority key identifier: 2B:44:C8:89:1A:AE:2B:8A:1F:DB:48:EB:F4:A5:7E:98:9A:EB:73:63 Certificate issuer: /CN=A918BBBA/serialNumber=2B44C8891AAE2B8A1FDB48EBF4A57E989AEB7363 Certificate serial: 045F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0TIiRquK4of20jr9KV-mJrrc2M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.mft Manifest number: 045B Signing time: Sat 10 May 2025 23:44:48 +0000 Manifest this update: Sat 10 May 2025 23:44:48 +0000 Manifest next update: Sat 17 May 2025 23:44:48 +0000 Files and hashes: 1: K0TIiRquK4of20jr9KV-mJrrc2M.crl (hash: 6sibkkzDuRnu+OY0wS/V6B//MSQ4IwwQ+yfhZ2tclc8=) 2: 0CD36EF4500B11EC9430721DC4F9AE02.roa (hash: gK2u6xOFSxtr+xoZ4+/hIrNybEaw24qFNSOsiwBKiyM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.crl rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0TIiRquK4of20jr9KV-mJrrc2M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 23:44:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1119 (0x45f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BBBA, serialNumber=2B44C8891AAE2B8A1FDB48EBF4A57E989AEB7363 Validity Not Before: May 10 23:44:48 2025 GMT Not After : May 17 23:44:48 2025 GMT Subject: CN=681fe4f0-e826 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d4:9d:2b:8b:e0:2e:7e:86:3d:78:d3:97:81: 88:64:a4:60:20:e8:8f:d8:bf:1c:a6:23:ac:03:65: 3f:64:bb:15:c4:a0:32:9e:93:2c:5b:0c:67:f5:be: 9b:72:c2:1e:4e:b1:12:65:38:cb:32:4b:70:15:b6: f2:9f:d1:c2:aa:f0:6d:98:70:22:d8:8c:1b:43:2e: 42:3f:85:ae:33:a9:98:e0:20:a7:dd:f9:12:85:b0: 01:24:6b:90:18:39:f2:09:5f:1e:70:86:86:0a:2d: 90:67:69:ce:3d:6b:ae:07:95:fb:46:df:24:1a:25: 51:db:cb:c1:0a:0b:8d:26:54:de:6a:92:7e:65:c5: 01:47:b6:a1:4c:17:66:45:ed:02:22:e6:4e:3f:8d: fb:5a:8a:80:1e:a2:a0:bc:be:b7:27:c4:34:2b:ea: ee:f7:e7:61:7a:f3:01:b3:54:2b:57:39:ae:33:28: b8:bb:bb:56:77:07:1e:a1:b3:f3:c6:5a:18:92:a4: 95:96:20:a5:20:1e:91:5b:3f:3c:c1:c8:b9:0a:54: b2:06:dc:ac:5c:2e:86:e5:17:ea:0d:26:15:0d:95: 3c:55:04:26:c2:d5:51:eb:cd:fe:cc:02:96:51:73: b0:c5:78:69:d6:2e:d1:56:aa:62:93:e5:6f:8c:36: ff:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:C9:E3:E4:7E:B4:13:F3:E2:A7:18:0A:15:C8:70:AA:72:43:19:66 X509v3 Authority Key Identifier: keyid:2B:44:C8:89:1A:AE:2B:8A:1F:DB:48:EB:F4:A5:7E:98:9A:EB:73:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0TIiRquK4of20jr9KV-mJrrc2M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:6d:77:aa:86:7d:d7:62:56:36:b3:b1:ad:fb:1a:19:1b:b0: d2:c3:1e:80:90:51:5c:a9:69:75:2d:59:d0:7e:8f:6a:12:26: 0a:4d:7c:5b:1f:93:c4:3b:ec:be:46:f8:64:2e:8b:15:93:11: d7:94:82:ba:43:0b:11:21:e3:e1:33:b8:56:6b:c0:25:a2:1c: 71:af:59:54:51:c5:f7:7f:23:80:22:94:a8:9a:86:95:9a:5d: 6d:5f:24:e4:ff:19:86:95:63:aa:f1:9e:d8:2e:f8:b8:f2:2f: 01:eb:ac:89:7e:8c:3d:57:30:32:4b:15:49:52:57:7f:ff:e5: cc:e0:79:41:a2:8f:d4:27:5a:b4:4b:ad:c8:3a:05:75:6f:9c: c6:b0:9f:3c:49:04:53:4b:5e:07:e6:39:89:5e:18:75:92:ce: 6b:50:7f:7d:71:8c:fa:0c:fd:93:35:74:7c:e6:b4:57:9e:22: 5e:22:a9:35:d2:5c:ad:ef:01:b7:2b:b2:3d:17:81:2c:58:40: 06:f7:f9:e7:ba:13:65:2a:66:24:80:05:3f:aa:08:f7:35:53: c6:ed:ee:f8:97:47:f3:67:5c:5b:35:e7:64:e9:16:55:79:56: e4:89:22:a6:d0:d8:93:c4:d3:6c:33:5a:f4:aa:6f:a4:0a:8b: ea:49:a4:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBF8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJCQkExMTAvBgNVBAUTKDJCNDRDODg5MUFBRTJCOEExRkRCNDhFQkY0QTU3RTk4 OUFFQjczNjMwHhcNMjUwNTEwMjM0NDQ4WhcNMjUwNTE3MjM0NDQ4WjAYMRYwFAYD VQQDEw02ODFmZTRmMC1lODI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvdSdK4vgLn6GPXjTl4GIZKRgIOiP2L8cpiOsA2U/ZLsVxKAynpMsWwxn9b6b csIeTrESZTjLMktwFbbyn9HCqvBtmHAi2IwbQy5CP4WuM6mY4CCn3fkShbABJGuQ GDnyCV8ecIaGCi2QZ2nOPWuuB5X7Rt8kGiVR28vBCguNJlTeapJ+ZcUBR7ahTBdm Re0CIuZOP437WoqAHqKgvL63J8Q0K+ru9+dhevMBs1QrVzmuMyi4u7tWdwceobPz xloYkqSVliClIB6RWz88wci5ClSyBtysXC6G5RfqDSYVDZU8VQQmwtVR683+zAKW UXOwxXhp1i7RVqpik+VvjDb/OQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHXJ4+R+ tBPz4qcYChXIcKpyQxlmMB8GA1UdIwQYMBaAFCtEyIkariuKH9tI6/Slfpia63Nj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkJCQS9GOTEzQzBCQTRD NDIxMUVDOTY2NThBMzFDNEY5QUUwMi9LMFRJaVJxdUs0b2YyMGpyOUtWLW1KcnJj Mk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0swVElpUnF1SzRvZjIwanI5S1YtbUpycmMyTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QkJCQS9GOTEzQzBCQTRDNDIxMUVDOTY2NThBMzFDNEY5QUUwMi9LMFRJaVJxdUs0 b2YyMGpyOUtWLW1KcnJjMk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhbXeqhn3XYlY2s7Gt+xoZG7DSwx6AkFFcqWl1LVnQfo9qEiYKTXxb H5PEO+y+RvhkLosVkxHXlIK6QwsRIePhM7hWa8Alohxxr1lUUcX3fyOAIpSomoaV ml1tXyTk/xmGlWOq8Z7YLvi48i8B66yJfow9VzAySxVJUld//+XM4HlBoo/UJ1q0 S63IOgV1b5zGsJ88SQRTS14H5jmJXhh1ks5rUH99cYz6DP2TNXR85rRXniJeIqk1 0lyt7wG3K7I9F4EsWEAG9/nnuhNlKmYkgAU/qgj3NVPG7e74l0fzZ1xbNedk6RZV eVbkiSKm0NiTxNNsM1r0qm+kCovqSaTw -----END CERTIFICATE-----Generated at Mon May 12 23:22:01 2025 by rpki-client