$ rpki-client -vvf rpki.apnic.net/member_repository/A91900BF/FEA1CD68B6E311ECBE59992DC4F9AE02/KOoVV7meKxJ1Uc00DDqvTAphAGs.mft File: KOoVV7meKxJ1Uc00DDqvTAphAGs.mft (raw, json) Hash identifier: 1fpPV67KN8cjZme0UrehsLWHrsYH0p99zC2Q3zbJXfQ= Subject key identifier: 67:72:05:D5:8C:80:4D:69:13:53:E5:A5:B6:59:73:BF:10:9B:FC:54 Authority key identifier: 28:EA:15:57:B9:9E:2B:12:75:51:CD:34:0C:3A:AF:4C:0A:61:00:6B Certificate issuer: /CN=A91900BF/serialNumber=28EA1557B99E2B127551CD340C3AAF4C0A61006B Certificate serial: 0368 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOoVV7meKxJ1Uc00DDqvTAphAGs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91900BF/FEA1CD68B6E311ECBE59992DC4F9AE02/KOoVV7meKxJ1Uc00DDqvTAphAGs.mft Manifest number: 035B Signing time: Tue 13 May 2025 00:48:55 +0000 Manifest this update: Tue 13 May 2025 00:48:55 +0000 Manifest next update: Tue 20 May 2025 00:48:55 +0000 Files and hashes: 1: KOoVV7meKxJ1Uc00DDqvTAphAGs.crl (hash: vQ6zLjjb8kcaj+1gXA5gVS8lWHuU6UgJ1GHDPAzo6p4=) 2: BFFAF880912711EE92065180C4F9AE02.roa (hash: +cOVT6IUlf5AF9Iwe8S2ZR7C+kK58G6HwMNDUoEK6dU=) 3: F505DCE605AB11EEAAC9A54DC4F9AE02.roa (hash: TgaszdDD0RtD3WBLop2xKd2Re72k68i95Zea6tpoI9M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91900BF/FEA1CD68B6E311ECBE59992DC4F9AE02/KOoVV7meKxJ1Uc00DDqvTAphAGs.crl rsync://rpki.apnic.net/member_repository/A91900BF/FEA1CD68B6E311ECBE59992DC4F9AE02/KOoVV7meKxJ1Uc00DDqvTAphAGs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOoVV7meKxJ1Uc00DDqvTAphAGs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 00:48:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 872 (0x368) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91900BF, serialNumber=28EA1557B99E2B127551CD340C3AAF4C0A61006B Validity Not Before: May 13 00:48:55 2025 GMT Not After : May 20 00:48:55 2025 GMT Subject: CN=682296f7-755c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b8:b4:d7:87:0e:bb:f3:5e:c7:75:a9:13:3d: e9:44:85:c9:77:f8:d4:69:bb:29:30:99:e6:8b:28: 6b:40:4f:68:86:f1:78:18:b8:5b:48:0c:b8:5e:9b: 98:cc:ac:31:44:48:9c:d4:0d:e6:ac:1f:10:66:90: 62:65:8a:47:34:4f:02:ad:33:44:cf:13:93:98:61: 7e:70:9b:d3:ba:24:61:fd:15:fe:29:c8:60:15:5c: dc:ed:89:b3:5f:f0:fa:e6:7c:9f:a6:96:39:76:42: bc:0b:3a:ff:a1:48:9d:c5:63:5c:f9:3a:12:6d:09: 07:e5:bf:6e:e8:db:a0:a3:5a:20:02:cb:7c:f1:66: 40:a1:9e:09:2c:68:e7:2e:ad:5a:1e:a1:e4:f4:fa: 72:23:1f:6b:cd:b6:59:b8:bb:0c:20:d8:a1:5a:5c: aa:81:32:1c:0a:d1:25:bd:f5:2b:8a:e5:83:1c:10: 1c:8f:a3:97:a7:7d:73:30:8a:23:f4:ec:cc:6c:8f: b9:e3:d2:e3:62:5d:c1:16:bb:53:fa:4a:95:30:6c: 1c:46:cd:e0:ed:11:91:36:58:db:71:65:30:92:77: ec:32:30:0b:02:c4:b7:38:51:41:90:c1:22:00:73: 9c:8f:89:6a:8f:07:20:2f:54:4e:40:92:c6:21:fb: e5:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:72:05:D5:8C:80:4D:69:13:53:E5:A5:B6:59:73:BF:10:9B:FC:54 X509v3 Authority Key Identifier: keyid:28:EA:15:57:B9:9E:2B:12:75:51:CD:34:0C:3A:AF:4C:0A:61:00:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91900BF/FEA1CD68B6E311ECBE59992DC4F9AE02/KOoVV7meKxJ1Uc00DDqvTAphAGs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOoVV7meKxJ1Uc00DDqvTAphAGs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91900BF/FEA1CD68B6E311ECBE59992DC4F9AE02/KOoVV7meKxJ1Uc00DDqvTAphAGs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:09:1c:e1:3b:6d:fa:fb:24:de:ce:f5:69:2b:22:a5:33:6b: 44:41:97:96:b3:25:61:44:bf:a7:b1:f1:89:ef:ab:f0:24:07: 2e:78:e6:a9:d4:95:67:53:f6:dd:93:11:49:b3:a2:ad:a4:87: 65:4e:27:3d:c2:47:45:90:ae:3e:13:27:dd:3b:61:11:3b:5c: fc:71:9d:4b:39:99:70:a2:34:f4:63:c4:d4:d8:7b:49:a0:37: 1e:f1:41:7f:c8:b8:e3:d5:25:8c:da:4f:5e:55:c6:a7:49:53: 8a:98:a1:ed:6c:be:98:90:6b:80:c3:28:c4:c1:f2:e7:f8:dc: e9:fe:93:5f:63:73:ad:70:7e:53:7a:a9:4f:a0:f1:a0:20:5e: d8:98:2c:e1:1b:f1:67:13:6c:d9:5d:87:0c:a6:48:3e:af:0f: 77:a6:df:ab:a7:08:1e:7d:77:6f:e5:78:54:85:73:c5:de:eb: 98:b7:ce:e0:ae:37:2a:73:17:4b:4b:f9:2a:31:49:64:48:f5: 6d:1f:6e:63:6d:a8:ad:77:b9:28:f8:05:95:8f:ba:c1:2f:40: 72:fb:3a:a6:61:bd:c3:b3:74:ee:be:a6:2b:9e:be:e3:89:9f: 27:8b:fc:e6:5c:cd:21:0f:10:39:bd:b1:45:67:9a:d8:93:4a: 31:27:1e:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTAwQkYxMTAvBgNVBAUTKDI4RUExNTU3Qjk5RTJCMTI3NTUxQ0QzNDBDM0FBRjRD MEE2MTAwNkIwHhcNMjUwNTEzMDA0ODU1WhcNMjUwNTIwMDA0ODU1WjAYMRYwFAYD VQQDEw02ODIyOTZmNy03NTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp7i014cOu/Nex3WpEz3pRIXJd/jUabspMJnmiyhrQE9ohvF4GLhbSAy4XpuY zKwxREic1A3mrB8QZpBiZYpHNE8CrTNEzxOTmGF+cJvTuiRh/RX+KchgFVzc7Ymz X/D65nyfppY5dkK8Czr/oUidxWNc+ToSbQkH5b9u6Nugo1ogAst88WZAoZ4JLGjn Lq1aHqHk9PpyIx9rzbZZuLsMINihWlyqgTIcCtElvfUriuWDHBAcj6OXp31zMIoj 9OzMbI+549LjYl3BFrtT+kqVMGwcRs3g7RGRNljbcWUwknfsMjALAsS3OFFBkMEi AHOcj4lqjwcgL1ROQJLGIfvleQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGdyBdWM gE1pE1PlpbZZc78Qm/xUMB8GA1UdIwQYMBaAFCjqFVe5nisSdVHNNAw6r0wKYQBr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDBCRi9GRUExQ0Q2OEI2 RTMxMUVDQkU1OTk5MkRDNEY5QUUwMi9LT29WVjdtZUt4SjFVYzAwRERxdlRBcGhB R3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tPb1ZWN21lS3hKMVVjMDBERHF2VEFwaEFHcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MDBCRi9GRUExQ0Q2OEI2RTMxMUVDQkU1OTk5MkRDNEY5QUUwMi9LT29WVjdtZUt4 SjFVYzAwRERxdlRBcGhBR3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBCRzhO236+yTezvVpKyKlM2tEQZeWsyVhRL+nsfGJ76vwJAcueOap 1JVnU/bdkxFJs6KtpIdlTic9wkdFkK4+EyfdO2ERO1z8cZ1LOZlwojT0Y8TU2HtJ oDce8UF/yLjj1SWM2k9eVcanSVOKmKHtbL6YkGuAwyjEwfLn+Nzp/pNfY3OtcH5T eqlPoPGgIF7YmCzhG/FnE2zZXYcMpkg+rw93pt+rpwgefXdv5XhUhXPF3uuYt87g rjcqcxdLS/kqMUlkSPVtH25jbaitd7ko+AWVj7rBL0By+zqmYb3Ds3TuvqYrnr7j iZ8ni/zmXM0hDxA5vbFFZ5rYk0oxJx6O -----END CERTIFICATE-----Generated at Tue May 13 18:07:55 2025 by rpki-client