$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.mft File: kNimlscsPFwGLY8AJhBf_c0Bz40.mft (raw, json) Hash identifier: KDozwLY4km8NCbDAARCC9HkTGa5fOajCH8Rucmqe2H4= Subject key identifier: 6D:B4:62:DF:45:2B:E6:42:A2:08:B0:BB:C6:1E:EC:72:E7:19:27:9A Authority key identifier: 90:D8:A6:96:C7:2C:3C:5C:06:2D:8F:00:26:10:5F:FD:CD:01:CF:8D Certificate issuer: /CN=A9192C28/serialNumber=90D8A696C72C3C5C062D8F0026105FFDCD01CF8D Certificate serial: 0414 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNimlscsPFwGLY8AJhBf_c0Bz40.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.mft Manifest number: 040C Signing time: Sun 11 May 2025 00:01:26 +0000 Manifest this update: Sun 11 May 2025 00:01:26 +0000 Manifest next update: Sun 18 May 2025 00:01:26 +0000 Files and hashes: 1: kNimlscsPFwGLY8AJhBf_c0Bz40.crl (hash: ZtILxHBDYX1j/dqIq6vuyltj56j+D9dZodupBbQ/Dmk=) 2: 28741DDC85CD11ECA5E28171C4F9AE02.roa (hash: c0Qo/V4Zd6PI/SmvO+fxR2cS+G3poh+IiHb3vxBLGEM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.crl rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNimlscsPFwGLY8AJhBf_c0Bz40.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 00:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1044 (0x414) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192C28, serialNumber=90D8A696C72C3C5C062D8F0026105FFDCD01CF8D Validity Not Before: May 11 00:01:26 2025 GMT Not After : May 18 00:01:26 2025 GMT Subject: CN=681fe8d6-49c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5e:2f:53:5c:b7:20:bf:6b:ad:36:23:d1:55: 1c:11:23:d9:72:1e:53:00:a1:27:ff:13:3c:35:da: 52:22:8b:29:61:44:d2:8d:2b:4f:f1:d7:62:f2:8e: b8:4c:54:cb:21:17:7e:a4:f8:d6:91:1e:e1:4c:5b: d1:a5:1e:5b:65:65:e2:ba:dd:58:82:28:eb:92:23: 02:cc:47:1c:15:e7:db:93:b0:9e:84:c3:11:cf:9d: 6f:0e:06:a6:5b:ea:52:d0:50:97:5d:ee:53:9f:37: 6c:29:92:bc:e8:5d:a2:e9:d5:ec:bc:6a:aa:3b:dc: ed:db:6f:58:47:2b:f3:7b:b5:5b:ad:06:dc:6c:67: 03:91:37:db:c9:89:9b:be:08:12:6d:72:93:6f:4e: 5b:c6:33:01:de:67:75:95:b0:9f:95:f9:0f:db:5b: 87:87:5a:96:43:93:6e:62:8c:d9:d2:60:00:d6:1f: df:55:13:29:d3:f7:28:ac:f8:33:47:59:4a:ec:57: 7b:87:8d:49:a8:93:5f:a7:21:3d:e1:b3:2d:9f:f8: c6:83:c9:89:0d:da:03:00:0d:a5:6b:bc:64:f1:0e: b8:33:c3:1b:aa:d4:d1:7a:8e:e5:0e:1c:aa:64:e3: 3f:7e:46:4a:a5:15:13:27:e4:5b:f7:9f:b5:97:11: 44:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:B4:62:DF:45:2B:E6:42:A2:08:B0:BB:C6:1E:EC:72:E7:19:27:9A X509v3 Authority Key Identifier: keyid:90:D8:A6:96:C7:2C:3C:5C:06:2D:8F:00:26:10:5F:FD:CD:01:CF:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNimlscsPFwGLY8AJhBf_c0Bz40.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:d8:c0:51:65:fc:75:d6:18:bc:69:f0:9d:97:cb:8c:36:7c: 52:3b:cf:24:89:34:26:33:ab:1c:b9:1c:a7:3d:89:c2:90:04: 29:11:56:1a:d7:25:a2:f2:6e:37:9a:6d:87:eb:f5:1e:be:18: d2:ed:0e:95:64:66:cf:3d:6e:37:bc:c7:ad:94:6d:06:ce:ec: 58:8d:ab:e4:ba:2a:3d:e5:a8:a2:9a:02:60:f3:5d:66:5c:84: f2:e6:a9:a6:7d:bc:af:87:16:84:09:46:b9:73:c5:2e:05:f6: 8e:b0:eb:5f:64:48:30:8c:91:c9:a5:0a:82:75:e9:f7:ad:a1: c4:13:c4:33:fa:1e:77:c7:df:5f:24:f5:b8:fa:d3:62:c7:61: 7e:29:db:55:a6:79:ee:be:a9:cc:c5:a4:96:6c:42:ab:b9:df: 58:ee:8d:00:75:2c:c9:58:d7:e4:2e:cf:ce:0f:78:e1:3b:d8: dd:97:46:24:c2:34:ad:3a:5e:29:49:1f:fd:54:d9:a2:f5:87: d1:3f:4c:2e:c2:c0:71:68:13:35:66:8c:ef:01:c0:65:08:5e: c9:53:82:5e:ee:ac:59:fb:1a:55:1a:8a:db:7c:85:7f:21:e0: 3a:3e:d2:87:1b:91:2f:95:3a:2a:92:98:32:1d:18:c9:36:33: 88:35:1c:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJDMjgxMTAvBgNVBAUTKDkwRDhBNjk2QzcyQzNDNUMwNjJEOEYwMDI2MTA1RkZE Q0QwMUNGOEQwHhcNMjUwNTExMDAwMTI2WhcNMjUwNTE4MDAwMTI2WjAYMRYwFAYD VQQDEw02ODFmZThkNi00OWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwF4vU1y3IL9rrTYj0VUcESPZch5TAKEn/xM8NdpSIospYUTSjStP8ddi8o64 TFTLIRd+pPjWkR7hTFvRpR5bZWXiut1YgijrkiMCzEccFefbk7CehMMRz51vDgam W+pS0FCXXe5TnzdsKZK86F2i6dXsvGqqO9zt229YRyvze7VbrQbcbGcDkTfbyYmb vggSbXKTb05bxjMB3md1lbCflfkP21uHh1qWQ5NuYozZ0mAA1h/fVRMp0/corPgz R1lK7Fd7h41JqJNfpyE94bMtn/jGg8mJDdoDAA2la7xk8Q64M8MbqtTReo7lDhyq ZOM/fkZKpRUTJ+Rb95+1lxFEfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG20Yt9F K+ZCogiwu8Ye7HLnGSeaMB8GA1UdIwQYMBaAFJDYppbHLDxcBi2PACYQX/3NAc+N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkMyOC8zQTAxNjQ3NjZE NTIxMUVDQUM2MUJCMTdDNEY5QUUwMi9rTmltbHNjc1BGd0dMWThBSmhCZl9jMEJ6 NDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tOaW1sc2NzUEZ3R0xZOEFKaEJmX2MwQno0MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MkMyOC8zQTAxNjQ3NjZENTIxMUVDQUM2MUJCMTdDNEY5QUUwMi9rTmltbHNjc1BG d0dMWThBSmhCZl9jMEJ6NDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBq2MBRZfx11hi8afCdl8uMNnxSO88kiTQmM6scuRynPYnCkAQpEVYa 1yWi8m43mm2H6/UevhjS7Q6VZGbPPW43vMetlG0GzuxYjavkuio95aiimgJg811m XITy5qmmfbyvhxaECUa5c8UuBfaOsOtfZEgwjJHJpQqCden3raHEE8Qz+h53x99f JPW4+tNix2F+KdtVpnnuvqnMxaSWbEKrud9Y7o0AdSzJWNfkLs/OD3jhO9jdl0Yk wjStOl4pSR/9VNmi9YfRP0wuwsBxaBM1ZozvAcBlCF7JU4Je7qxZ+xpVGorbfIV/ IeA6PtKHG5EvlToqkpgyHRjJNjOINRxk -----END CERTIFICATE-----Generated at Mon May 12 20:50:29 2025 by rpki-client