$ rpki-client -vvf rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.mft File: kw3fQQEGkDvrmRnJm94BY4cGVa4.mft (raw, json) Hash identifier: G3XoIs3xJKqM72PStci90euCWlaGD6NYWID/s/EAUWk= Subject key identifier: D0:91:E5:F9:9D:0B:89:55:C2:96:01:66:14:6C:CE:CE:2B:14:6A:55 Authority key identifier: 93:0D:DF:41:01:06:90:3B:EB:99:19:C9:9B:DE:01:63:87:06:55:AE Certificate issuer: /CN=A9198553/serialNumber=930DDF410106903BEB9919C99BDE0163870655AE Certificate serial: 46 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kw3fQQEGkDvrmRnJm94BY4cGVa4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.mft Manifest number: 43 Signing time: Thu 15 May 2025 06:46:56 +0000 Manifest this update: Thu 15 May 2025 06:46:56 +0000 Manifest next update: Thu 22 May 2025 06:46:56 +0000 Files and hashes: 1: kw3fQQEGkDvrmRnJm94BY4cGVa4.crl (hash: VaIKDbOumVsombnxxH9y3Cwl0JYlHiCA18C455SUK1U=) 2: 5042D03ED2EF11EFBA610425C4F9AE02.roa (hash: Td45KF7s5KJjDmYTPbjMG6cwXZMtoTfhOtwsLcRRVB4=) 3: B56BC994E18A11EF94F99968C4F9AE02.roa (hash: gzNobaLbEvK3FJ3mC0CiPYdWO820L9Sv8IKQdUKftFE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.crl rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kw3fQQEGkDvrmRnJm94BY4cGVa4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 06:46:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70 (0x46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198553, serialNumber=930DDF410106903BEB9919C99BDE0163870655AE Validity Not Before: May 15 06:46:56 2025 GMT Not After : May 22 06:46:56 2025 GMT Subject: CN=68258de0-8056 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f2:0a:2c:2c:2c:da:1d:1f:a1:63:ba:e1:27: d4:8f:cc:62:4d:a2:d4:a8:5c:66:f3:45:81:52:6b: bb:56:bf:3a:a6:78:95:cc:bb:1b:60:62:be:95:de: fa:43:d0:30:26:52:ce:6a:be:19:f1:ba:05:3b:61: 35:fb:0c:fd:85:79:1a:e1:16:80:aa:90:02:75:08: 48:8f:75:4d:d5:6f:42:22:fd:ac:e7:1b:10:ce:2b: c2:b6:8e:23:55:f8:39:ec:c1:55:33:7f:6a:d1:8d: 85:88:23:e3:3c:39:10:85:68:10:d1:0b:68:da:51: 30:6d:04:97:84:a7:8f:41:b7:29:a2:f0:11:4d:67: 2a:73:4b:7e:04:0a:59:d0:29:06:4e:16:8a:12:86: ff:99:d5:17:e9:2a:9c:31:17:a9:9a:5a:b3:4a:53: 88:5f:d2:7d:10:3f:7f:2b:ff:12:0d:8f:93:ab:74: 21:7f:f5:b5:99:4a:3e:5f:86:95:4b:88:2a:26:8c: f8:a6:db:dd:17:d4:e2:81:6d:d9:20:e8:a0:ec:73: 7b:9e:2d:b7:1a:db:6c:4b:2c:c7:0e:6c:b9:81:e4: be:1b:81:0a:2d:48:ce:7f:35:06:b5:f6:8c:8d:c0: f9:27:d1:be:27:3e:88:54:ea:79:9a:0e:5d:0c:05: 52:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:91:E5:F9:9D:0B:89:55:C2:96:01:66:14:6C:CE:CE:2B:14:6A:55 X509v3 Authority Key Identifier: keyid:93:0D:DF:41:01:06:90:3B:EB:99:19:C9:9B:DE:01:63:87:06:55:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kw3fQQEGkDvrmRnJm94BY4cGVa4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:d3:87:30:2a:7e:94:38:3c:fb:3f:51:ca:07:e6:3b:74:5f: 04:77:6d:d6:65:74:51:ef:a8:d5:ba:ca:d7:c3:e0:f7:e1:0f: 9c:83:51:34:97:a9:11:28:6d:49:9b:4f:ef:0f:49:1a:aa:64: db:c4:8b:83:48:a2:2a:1d:de:87:7f:43:6b:77:57:1a:97:0c: 37:3a:30:cb:9e:21:3f:39:83:31:94:72:41:c3:d6:0f:9b:a5: 47:38:10:1f:84:88:69:1d:dd:6d:fa:91:86:8a:ce:e2:9c:89: b8:f0:8c:b8:89:c3:cb:30:32:13:a8:8a:49:33:c1:89:f7:4a: b9:e7:76:ac:ed:e1:f1:ee:f3:21:3d:0c:55:2b:49:63:b7:91: 28:55:8a:81:04:78:cc:0b:80:d2:6b:18:e5:08:22:10:ef:a8: 6f:af:fd:25:d8:17:44:c7:d0:ee:3e:08:f5:89:c6:40:d0:a8: d9:24:08:a6:99:51:41:b1:91:63:6b:4a:a7:53:3f:7c:c8:e3: b4:bd:c1:71:8f:52:3a:3b:6f:43:0f:d8:b4:6d:ab:6a:9e:af: 0e:9c:f6:1c:24:6e:4e:8c:60:6a:22:f3:d4:24:f9:d8:51:68: 59:55:fc:3d:1e:ee:cc:79:e1:df:2d:ea:64:53:b5:06:3c:34: 2d:68:67:85 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 ODU1MzExMC8GA1UEBRMoOTMwRERGNDEwMTA2OTAzQkVCOTkxOUM5OUJERTAxNjM4 NzA2NTVBRTAeFw0yNTA1MTUwNjQ2NTZaFw0yNTA1MjIwNjQ2NTZaMBgxFjAUBgNV BAMTDTY4MjU4ZGUwLTgwNTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDX8gosLCzaHR+hY7rhJ9SPzGJNotSoXGbzRYFSa7tWvzqmeJXMuxtgYr6V3vpD 0DAmUs5qvhnxugU7YTX7DP2FeRrhFoCqkAJ1CEiPdU3Vb0Ii/aznGxDOK8K2jiNV +DnswVUzf2rRjYWII+M8ORCFaBDRC2jaUTBtBJeEp49Btymi8BFNZypzS34EClnQ KQZOFooShv+Z1RfpKpwxF6maWrNKU4hf0n0QP38r/xINj5OrdCF/9bWZSj5fhpVL iComjPim290X1OKBbdkg6KDsc3ueLbca22xLLMcObLmB5L4bgQotSM5/NQa19oyN wPkn0b4nPohU6nmaDl0MBVI9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU0JHl+Z0L iVXClgFmFGzOzisUalUwHwYDVR0jBBgwFoAUkw3fQQEGkDvrmRnJm94BY4cGVa4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4NTUzL0E1OUJGRkU0RDJF RDExRUY4REVFNTEyMEM0RjlBRTAyL2t3M2ZRUUVHa0R2cm1SbkptOTRCWTRjR1Zh NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIva3czZlFRRUdrRHZybVJuSm05NEJZNGNHVmE0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4 NTUzL0E1OUJGRkU0RDJFRDExRUY4REVFNTEyMEM0RjlBRTAyL2t3M2ZRUUVHa0R2 cm1SbkptOTRCWTRjR1ZhNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH7ThzAqfpQ4PPs/UcoH5jt0XwR3bdZldFHvqNW6ytfD4PfhD5yDUTSX qREobUmbT+8PSRqqZNvEi4NIoiod3od/Q2t3VxqXDDc6MMueIT85gzGUckHD1g+b pUc4EB+EiGkd3W36kYaKzuKcibjwjLiJw8swMhOoikkzwYn3Srnndqzt4fHu8yE9 DFUrSWO3kShVioEEeMwLgNJrGOUIIhDvqG+v/SXYF0TH0O4+CPWJxkDQqNkkCKaZ UUGxkWNrSqdTP3zI47S9wXGPUjo7b0MP2LRtq2qerw6c9hwkbk6MYGoi89Qk+dhR aFlV/D0e7sx54d8t6mRTtQY8NC1oZ4U= -----END CERTIFICATE-----Generated at Fri May 16 02:44:33 2025 by rpki-client