$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.mft File: kN_cE0DUTo_iVh19jeSe71QGEII.mft (raw, json) Hash identifier: dD8sbI7Fhljx6QIF7ESNIN0bzwcBBD9QBcZCjSRr3s4= Subject key identifier: 78:55:7F:F4:C4:FC:B1:1D:67:7D:10:20:8C:26:32:13:35:30:78:05 Authority key identifier: 90:DF:DC:13:40:D4:4E:8F:E2:56:1D:7D:8D:E4:9E:EF:54:06:10:82 Certificate issuer: /CN=A91C9C05/serialNumber=90DFDC1340D44E8FE2561D7D8DE49EEF54061082 Certificate serial: 3479 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kN_cE0DUTo_iVh19jeSe71QGEII.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.mft Manifest number: 3477 Signing time: Thu 08 May 2025 15:18:48 +0000 Manifest this update: Thu 08 May 2025 15:18:47 +0000 Manifest next update: Thu 15 May 2025 15:18:47 +0000 Files and hashes: 1: kN_cE0DUTo_iVh19jeSe71QGEII.crl (hash: ImkJENV1EvxpFd4fn19zDb+6pMk6GWDmZGK1ENArmXs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.crl rsync://rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kN_cE0DUTo_iVh19jeSe71QGEII.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 15:18:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13433 (0x3479) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9C05, serialNumber=90DFDC1340D44E8FE2561D7D8DE49EEF54061082 Validity Not Before: May 8 15:18:47 2025 GMT Not After : May 15 15:18:47 2025 GMT Subject: CN=681ccb57-ee5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:88:13:62:98:fc:db:6c:22:0e:e8:31:12:7b: 63:43:bf:ba:d2:12:db:7d:0d:07:a8:fe:1f:60:5f: d0:c1:f2:a6:ac:08:6f:bb:03:d4:86:8a:66:b0:f4: 09:04:91:00:3d:1c:84:8d:f2:ac:8c:c1:5c:43:7c: f1:62:0f:8f:79:03:d1:95:a2:24:86:61:b2:fd:f6: 8d:52:dd:62:50:b6:28:d2:c6:ca:3b:ae:35:2e:6d: f6:15:fc:14:49:50:31:ea:34:3c:99:ea:c2:a5:c3: e9:89:e6:d0:ba:d6:9a:77:c9:49:81:c3:cb:cd:ad: a0:f9:17:a8:23:f1:32:9d:3a:82:dd:4d:40:5e:91: 31:4a:d2:08:24:ff:b4:61:62:fc:c1:30:25:45:49: 85:be:ed:ab:04:f2:fa:a1:d8:1a:ba:34:cb:7d:21: a8:3c:5f:80:41:ca:21:2a:7f:bd:eb:6d:68:a6:33: d9:2d:03:f1:0a:35:f4:af:cc:af:e4:46:a9:37:73: e6:42:f8:df:72:a9:9f:2d:64:d8:47:7b:84:65:6c: 0a:ee:a5:29:21:8f:4c:66:52:84:2e:5c:8c:8e:aa: ef:7d:e5:df:4d:6e:ff:52:0a:b2:3d:8f:73:79:a9: a9:e2:49:3e:75:aa:6e:b0:22:e9:8d:aa:f8:5a:81: 84:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:55:7F:F4:C4:FC:B1:1D:67:7D:10:20:8C:26:32:13:35:30:78:05 X509v3 Authority Key Identifier: keyid:90:DF:DC:13:40:D4:4E:8F:E2:56:1D:7D:8D:E4:9E:EF:54:06:10:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kN_cE0DUTo_iVh19jeSe71QGEII.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:cb:14:81:d8:76:22:ba:0e:7e:10:bc:d1:b7:d9:38:47:16: e5:2d:b5:82:24:82:53:6e:7c:7d:bf:ed:24:ec:5d:3e:26:21: d7:d3:ac:ca:26:bf:0c:39:d7:22:53:fc:3b:c0:c3:2e:65:ed: bf:5f:ec:6d:72:09:b7:ed:19:16:9c:1e:90:d3:5b:f3:bd:d3: 22:68:f7:a9:2e:7b:7a:68:3c:29:cd:a2:01:c3:bd:c3:73:a5: 98:14:0d:08:89:c9:3f:d8:b8:0b:cf:3d:42:29:04:9d:03:35: 23:21:14:ac:dd:f9:4d:59:26:d4:af:f2:c2:f1:71:8d:8b:f3: 77:fb:d2:99:d6:31:30:0b:bd:ca:d9:65:7c:a1:af:b8:6d:08: 0b:9d:95:0d:be:2c:ca:d0:c5:d1:74:33:31:f3:2c:82:a0:b5: 0d:5e:85:dc:d1:d3:6e:25:c1:bd:bc:da:16:5c:21:ef:47:61: a3:39:cc:5c:dc:01:c5:13:83:ba:28:88:9a:32:1e:7a:76:17: e2:cc:7d:57:8f:75:51:71:4a:43:ff:0a:b2:ff:d4:c4:37:3c: d9:8d:1f:04:1f:86:83:0c:90:b9:20:de:74:ea:2d:c9:8d:f5: fa:a9:ef:6e:f6:33:4c:3b:9e:cd:b3:58:b9:f1:c6:20:df:75: 18:5f:d7:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlDMDUxMTAvBgNVBAUTKDkwREZEQzEzNDBENDRFOEZFMjU2MUQ3RDhERTQ5RUVG NTQwNjEwODIwHhcNMjUwNTA4MTUxODQ3WhcNMjUwNTE1MTUxODQ3WjAYMRYwFAYD VQQDEw02ODFjY2I1Ny1lZTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzogTYpj822wiDugxEntjQ7+60hLbfQ0HqP4fYF/QwfKmrAhvuwPUhopmsPQJ BJEAPRyEjfKsjMFcQ3zxYg+PeQPRlaIkhmGy/faNUt1iULYo0sbKO641Lm32FfwU SVAx6jQ8merCpcPpiebQutaad8lJgcPLza2g+ReoI/EynTqC3U1AXpExStIIJP+0 YWL8wTAlRUmFvu2rBPL6odgaujTLfSGoPF+AQcohKn+9621opjPZLQPxCjX0r8yv 5EapN3PmQvjfcqmfLWTYR3uEZWwK7qUpIY9MZlKELlyMjqrvfeXfTW7/UgqyPY9z eamp4kk+dapusCLpjar4WoGEqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHhVf/TE /LEdZ30QIIwmMhM1MHgFMB8GA1UdIwQYMBaAFJDf3BNA1E6P4lYdfY3knu9UBhCC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUMwNS9FOUQ5QTAyMjFE QUExMUUyOEM5OERCQTYwOEIwMkNEMi9rTl9jRTBEVVRvX2lWaDE5amVTZTcxUUdF SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tOX2NFMERVVG9faVZoMTlqZVNlNzFRR0VJSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OUMwNS9FOUQ5QTAyMjFEQUExMUUyOEM5OERCQTYwOEIwMkNEMi9rTl9jRTBEVVRv X2lWaDE5amVTZTcxUUdFSUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwyxSB2HYiug5+ELzRt9k4RxblLbWCJIJTbnx9v+0k7F0+JiHX06zK Jr8MOdciU/w7wMMuZe2/X+xtcgm37RkWnB6Q01vzvdMiaPepLnt6aDwpzaIBw73D c6WYFA0Iick/2LgLzz1CKQSdAzUjIRSs3flNWSbUr/LC8XGNi/N3+9KZ1jEwC73K 2WV8oa+4bQgLnZUNvizK0MXRdDMx8yyCoLUNXoXc0dNuJcG9vNoWXCHvR2GjOcxc 3AHFE4O6KIiaMh56dhfizH1Xj3VRcUpD/wqy/9TENzzZjR8EH4aDDJC5IN506i3J jfX6qe9u9jNMO57Ns1i58cYg33UYX9em -----END CERTIFICATE-----Generated at Sat May 10 13:57:27 2025 by rpki-client