$ rpki-client -vvf rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.mft File: KpAHNMXjuTrKlHDj9a3a3C8hWzE.mft (raw, json) Hash identifier: KZhvnUaadPlie0aesKvUU+S3YgQgwnbBa8tNmNPBfWw= Subject key identifier: FC:3F:2A:99:CD:61:1C:EB:54:2B:AC:AB:3E:5B:20:5D:8F:D9:7A:CA Authority key identifier: 2A:90:07:34:C5:E3:B9:3A:CA:94:70:E3:F5:AD:DA:DC:2F:21:5B:31 Certificate issuer: /CN=A9190960/serialNumber=2A900734C5E3B93ACA9470E3F5ADDADC2F215B31 Certificate serial: 06AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpAHNMXjuTrKlHDj9a3a3C8hWzE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.mft Manifest number: 06A6 Signing time: Sun 04 May 2025 21:51:37 +0000 Manifest this update: Sun 04 May 2025 21:51:37 +0000 Manifest next update: Sun 11 May 2025 21:51:37 +0000 Files and hashes: 1: KpAHNMXjuTrKlHDj9a3a3C8hWzE.crl (hash: BUnkSTwQb5qb8gjIY08+Ry4t1uncWP35+negE8LPPKs=) 2: ED534930C8B511ED9A1D817EC4F9AE02.roa (hash: cWc+J1TIBwheicFkr/uWy0LuYQxsGfxktq1Xam8BBXI=) 3: 9398F508619611EBA485B448C4F9AE02.roa (hash: Nd8Cn8Kc0/NAG96VlpahXIFBzBlttK0FrKVnW80S2cI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.crl rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpAHNMXjuTrKlHDj9a3a3C8hWzE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 21:51:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1711 (0x6af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190960, serialNumber=2A900734C5E3B93ACA9470E3F5ADDADC2F215B31 Validity Not Before: May 4 21:51:37 2025 GMT Not After : May 11 21:51:37 2025 GMT Subject: CN=6817e169-4542 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:79:bf:e9:e7:b5:62:4a:0a:2e:3d:b8:69:7f: 2a:09:fa:23:47:2a:96:1c:c5:dc:8c:72:4f:56:8f: a9:21:9b:3d:92:0a:d4:92:6a:56:5d:de:fd:12:66: d6:7b:a3:67:6f:22:2a:26:54:1a:8a:66:9c:d3:df: 5c:41:74:76:61:ee:c7:d3:49:eb:e3:4e:5a:c8:9a: 78:eb:33:7b:6e:e7:d2:b1:17:5e:9a:06:4a:12:56: f5:ef:7a:e2:d3:11:55:56:15:d1:9c:92:fb:e0:f5: 3f:3e:c0:a0:5f:73:36:a6:ed:cb:d4:35:01:35:e3: 41:f0:08:c3:0f:3c:99:9a:b9:1d:3b:9e:f7:54:db: 7c:ae:a3:87:f6:c6:43:b0:84:13:bb:da:8a:02:60: 2b:31:78:55:a1:3a:f4:4e:86:98:5f:b8:15:1e:35: ba:0c:23:16:34:19:ff:3b:31:76:cb:e7:7a:8d:cf: 84:72:ae:86:ab:3e:b9:c6:10:5c:3b:20:d8:f2:a7: e3:4c:99:6c:2c:c9:74:cf:15:a2:77:f0:8e:af:79: c5:a3:38:19:45:43:0c:99:d9:c0:cc:7d:f6:5b:d8: 78:8d:2e:85:7d:b9:5b:b6:36:a0:33:61:ce:0a:7c: 46:b8:3d:66:ae:28:da:1c:10:6e:b2:68:99:f7:16: 3a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:3F:2A:99:CD:61:1C:EB:54:2B:AC:AB:3E:5B:20:5D:8F:D9:7A:CA X509v3 Authority Key Identifier: keyid:2A:90:07:34:C5:E3:B9:3A:CA:94:70:E3:F5:AD:DA:DC:2F:21:5B:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpAHNMXjuTrKlHDj9a3a3C8hWzE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:c3:41:f4:1d:64:8a:70:d9:2c:f5:2d:4c:0d:c8:3b:8f:fd: cc:64:9a:ec:3a:f8:4e:2f:67:1d:bd:d9:0a:21:aa:34:b6:aa: ac:f9:85:9f:9b:33:eb:69:6e:7f:6f:f8:76:12:07:1e:d9:22: 0e:d9:db:54:ad:81:71:c3:e7:fe:4a:5a:1d:8f:1d:8a:97:ef: 90:b5:36:30:ea:9a:27:e2:4b:d7:89:4e:8c:04:20:8c:8a:f0: eb:11:1c:d0:eb:ec:3e:79:c6:7a:32:86:08:ec:19:fc:13:3f: 33:51:d3:fd:2f:18:10:63:bf:f2:ac:85:14:dd:fc:e1:33:ca: ce:51:d8:4e:75:c8:b5:46:c7:fb:78:dc:39:60:3c:c8:40:19: 9c:ed:89:3d:84:eb:bb:1f:b7:80:e1:d9:33:b5:9e:73:a8:14: e1:32:cc:3b:21:39:40:2d:8d:e2:7f:76:98:c1:39:85:c4:58: 6d:93:ad:98:56:2e:58:47:75:3b:f8:7e:f8:ac:47:d5:ec:2a: 8d:5a:7e:7c:ee:e4:06:21:b3:b3:70:f0:71:2d:fe:d6:64:63: 36:98:ac:f0:1f:87:5d:70:60:2d:96:b9:6b:6b:93:aa:38:c8: f0:b7:3d:50:a0:2c:1f:cf:07:d4:88:97:38:0e:32:3c:da:2e: f7:a8:7c:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBq8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTA5NjAxMTAvBgNVBAUTKDJBOTAwNzM0QzVFM0I5M0FDQTk0NzBFM0Y1QUREQURD MkYyMTVCMzEwHhcNMjUwNTA0MjE1MTM3WhcNMjUwNTExMjE1MTM3WjAYMRYwFAYD VQQDEw02ODE3ZTE2OS00NTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA63m/6ee1YkoKLj24aX8qCfojRyqWHMXcjHJPVo+pIZs9kgrUkmpWXd79EmbW e6NnbyIqJlQaimac099cQXR2Ye7H00nr405ayJp46zN7bufSsRdemgZKElb173ri 0xFVVhXRnJL74PU/PsCgX3M2pu3L1DUBNeNB8AjDDzyZmrkdO573VNt8rqOH9sZD sIQTu9qKAmArMXhVoTr0ToaYX7gVHjW6DCMWNBn/OzF2y+d6jc+Ecq6Gqz65xhBc OyDY8qfjTJlsLMl0zxWid/COr3nFozgZRUMMmdnAzH32W9h4jS6FfblbtjagM2HO CnxGuD1mrijaHBBusmiZ9xY6eQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPw/KpnN YRzrVCusqz5bIF2P2XrKMB8GA1UdIwQYMBaAFCqQBzTF47k6ypRw4/Wt2twvIVsx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDk2MC85QzZGN0JFQTYx OTQxMUVCQkZEMkFBMkFDNEY5QUUwMi9LcEFITk1YanVUcktsSERqOWEzYTNDOGhX ekUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0twQUhOTVhqdVRyS2xIRGo5YTNhM0M4aFd6RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MDk2MC85QzZGN0JFQTYxOTQxMUVCQkZEMkFBMkFDNEY5QUUwMi9LcEFITk1YanVU cktsSERqOWEzYTNDOGhXekUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKw0H0HWSKcNks9S1MDcg7j/3MZJrsOvhOL2cdvdkKIao0tqqs+YWf mzPraW5/b/h2Egce2SIO2dtUrYFxw+f+Slodjx2Kl++QtTYw6pon4kvXiU6MBCCM ivDrERzQ6+w+ecZ6MoYI7Bn8Ez8zUdP9LxgQY7/yrIUU3fzhM8rOUdhOdci1Rsf7 eNw5YDzIQBmc7Yk9hOu7H7eA4dkztZ5zqBThMsw7ITlALY3if3aYwTmFxFhtk62Y Vi5YR3U7+H74rEfV7CqNWn587uQGIbOzcPBxLf7WZGM2mKzwH4ddcGAtlrlra5Oq OMjwtz1QoCwfzwfUiJc4DjI82i73qHxk -----END CERTIFICATE-----Generated at Mon May 5 02:57:45 2025 by rpki-client