$ rpki-client -vvf rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft File: AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft (raw, json) Hash identifier: gh96tVjc68jtfjWUt+iny8VcIO9hOxgJipEkUvvSxfo= Subject key identifier: CB:14:A9:AD:C9:E7:D0:5A:6D:B9:7C:F8:9F:59:66:F8:7D:7C:C1:AE Authority key identifier: 02:15:50:2A:A8:FF:DC:72:1D:7F:84:F7:4C:D0:70:B7:56:39:00:16 Certificate issuer: /CN=A91147EF/serialNumber=0215502AA8FFDC721D7F84F74CD070B756390016 Certificate serial: 094B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft Manifest number: 093C Signing time: Thu 24 Apr 2025 20:08:04 +0000 Manifest this update: Thu 24 Apr 2025 20:08:03 +0000 Manifest next update: Thu 01 May 2025 20:08:03 +0000 Files and hashes: 1: AhVQKqj_3HIdf4T3TNBwt1Y5ABY.crl (hash: hzIfT4gOx8Y30L1flnKG6jyJcfs4GLiPrgPN+iwUG28=) 2: 84D32F2AE32411EA800C6724C4F9AE02.roa (hash: DaSUtI7cCFZVDFGMxaMRlNVdC4PaCp9TfzAzL8z3Ug0=) 3: 38EC4D321F2711EB93A71042C4F9AE02.roa (hash: bvQWUn/Y7cckd5n8bfNYd/nHmrLV3J+fhc4s5WO5wQQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.crl rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:08:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2379 (0x94b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91147EF, serialNumber=0215502AA8FFDC721D7F84F74CD070B756390016 Validity Not Before: Apr 24 20:08:03 2025 GMT Not After : May 1 20:08:03 2025 GMT Subject: CN=680a9a24-0c1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:16:8b:85:30:d8:a2:a5:3b:cc:f4:db:15:4b: 4a:db:1e:c8:7b:5c:e2:74:59:cc:d9:8d:36:46:98: 80:1d:9c:42:be:66:02:4e:fa:2b:85:14:81:d2:ce: 1c:5f:d0:df:d7:2c:b0:43:32:ed:c8:78:59:a5:e1: e7:8e:91:90:52:d7:b5:74:94:07:ce:b7:c6:00:23: a8:87:42:00:d6:91:3e:b4:0a:5f:16:31:ed:7e:0b: e0:5f:d2:5e:1f:dd:43:2e:f1:71:36:0a:a5:81:ef: 56:9d:b9:8e:19:a1:57:85:f7:6e:1e:ae:0f:ec:94: 7f:1a:b3:4e:80:04:b2:32:1f:54:ab:8d:0a:f1:f4: 84:ba:1d:d0:e0:05:37:74:6b:b4:fe:e0:33:6c:c0: ba:dc:b8:5a:bd:de:c9:16:e1:9a:f2:c3:7f:24:96: 3f:fa:03:64:9c:03:47:25:12:fe:b5:5f:8e:6a:3f: 20:42:79:ca:b1:1f:a1:0e:15:97:e3:41:2e:89:3c: db:06:0c:35:6e:9f:d0:36:8d:66:c0:cb:c8:d8:c5: f6:14:7a:ee:e6:42:bd:4e:28:88:f3:ab:be:63:a0: a1:8b:c7:65:95:e1:a1:79:ee:8d:bc:88:e8:a7:a4: ff:f6:a3:97:39:3c:c1:df:47:4c:17:d1:50:6b:44: d0:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:14:A9:AD:C9:E7:D0:5A:6D:B9:7C:F8:9F:59:66:F8:7D:7C:C1:AE X509v3 Authority Key Identifier: keyid:02:15:50:2A:A8:FF:DC:72:1D:7F:84:F7:4C:D0:70:B7:56:39:00:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:a3:92:f3:ec:b8:43:9c:2c:a4:e2:38:12:84:ea:b2:6d:69: 28:b7:a7:e8:db:8a:40:98:76:79:e1:c1:c3:e2:1a:36:d8:b4: 8c:1c:fb:3d:d1:0d:c7:ea:b5:10:2e:4b:79:50:d7:19:39:dc: 17:e5:24:8e:f8:1e:9d:79:4e:99:c7:af:ba:19:77:56:04:35: e4:40:2b:b0:55:61:c5:4b:bd:c3:fd:1f:8f:40:4a:d2:74:ea: f4:d7:ae:60:cd:f7:02:15:de:e4:0f:49:7f:df:15:27:c8:b1: fd:8d:67:83:22:ec:fd:53:38:59:d5:58:20:49:91:a9:0e:c1: e3:59:7d:43:75:d8:0a:f6:eb:59:50:75:61:ed:49:0e:3b:45: 11:f4:f3:d1:f1:15:d4:eb:69:d6:e3:0c:c1:88:62:7e:14:45: 84:c9:4d:6d:0b:ac:30:20:0e:99:37:b2:df:c4:2a:f3:b6:36: 28:42:4e:c0:55:dc:f9:76:d0:e5:76:c0:db:98:04:ec:87:47: cb:b5:fe:f0:44:e2:8a:26:69:cd:3d:ad:75:9a:f4:d4:57:24: e3:a1:6e:5e:a3:c0:25:51:e7:e9:8d:aa:65:fb:98:a6:8c:70: ea:2e:fd:86:a3:cf:2f:a6:5c:38:d7:8b:74:e6:12:2d:51:e4: 8c:38:28:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ3RUYxMTAvBgNVBAUTKDAyMTU1MDJBQThGRkRDNzIxRDdGODRGNzRDRDA3MEI3 NTYzOTAwMTYwHhcNMjUwNDI0MjAwODAzWhcNMjUwNTAxMjAwODAzWjAYMRYwFAYD VQQDEw02ODBhOWEyNC0wYzFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1RaLhTDYoqU7zPTbFUtK2x7Ie1zidFnM2Y02RpiAHZxCvmYCTvorhRSB0s4c X9Df1yywQzLtyHhZpeHnjpGQUte1dJQHzrfGACOoh0IA1pE+tApfFjHtfgvgX9Je H91DLvFxNgqlge9WnbmOGaFXhfduHq4P7JR/GrNOgASyMh9Uq40K8fSEuh3Q4AU3 dGu0/uAzbMC63Lhavd7JFuGa8sN/JJY/+gNknANHJRL+tV+Oaj8gQnnKsR+hDhWX 40EuiTzbBgw1bp/QNo1mwMvI2MX2FHru5kK9TiiI86u+Y6Chi8dlleGhee6NvIjo p6T/9qOXOTzB30dMF9FQa0TQZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMsUqa3J 59Babbl8+J9ZZvh9fMGuMB8GA1UdIwQYMBaAFAIVUCqo/9xyHX+E90zQcLdWOQAW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDdFRi84QTI5MTA0Njk5 MTYxMUVBOTk1NUQ1MEJDNEY5QUUwMi9BaFZRS3FqXzNISWRmNFQzVE5Cd3QxWTVB QlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FoVlFLcWpfM0hJZGY0VDNUTkJ3dDFZNUFCWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDdFRi84QTI5MTA0Njk5MTYxMUVBOTk1NUQ1MEJDNEY5QUUwMi9BaFZRS3FqXzNI SWRmNFQzVE5Cd3QxWTVBQlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZo5Lz7LhDnCyk4jgShOqybWkot6fo24pAmHZ54cHD4ho22LSMHPs9 0Q3H6rUQLkt5UNcZOdwX5SSO+B6deU6Zx6+6GXdWBDXkQCuwVWHFS73D/R+PQErS dOr0165gzfcCFd7kD0l/3xUnyLH9jWeDIuz9UzhZ1VggSZGpDsHjWX1DddgK9utZ UHVh7UkOO0UR9PPR8RXU62nW4wzBiGJ+FEWEyU1tC6wwIA6ZN7LfxCrztjYoQk7A Vdz5dtDldsDbmATsh0fLtf7wROKKJmnNPa11mvTUVyTjoW5eo8AlUefpjapl+5im jHDqLv2Go88vplw414t05hItUeSMOChl -----END CERTIFICATE-----Generated at Sat Apr 26 04:33:23 2025 by rpki-client