$ rpki-client -vvf rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.mft File: ah5W1f4mxr0uywRXgX3GujwN5H0.mft (raw, json) Hash identifier: j6x2sfc1Wi6TTHMmenpvTTuN4EuEpYLf1Qf8WuPQ6HA= Subject key identifier: 01:36:C7:87:A1:84:F7:29:E6:FD:72:43:F8:0D:1B:39:7B:A0:D3:E0 Authority key identifier: 6A:1E:56:D5:FE:26:C6:BD:2E:CB:04:57:81:7D:C6:BA:3C:0D:E4:7D Certificate issuer: /CN=A9118F69/serialNumber=6A1E56D5FE26C6BD2ECB0457817DC6BA3C0DE47D Certificate serial: 0224 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5W1f4mxr0uywRXgX3GujwN5H0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.mft Manifest number: 0221 Signing time: Fri 25 Apr 2025 01:44:39 +0000 Manifest this update: Fri 25 Apr 2025 01:44:39 +0000 Manifest next update: Fri 02 May 2025 01:44:39 +0000 Files and hashes: 1: ah5W1f4mxr0uywRXgX3GujwN5H0.crl (hash: IZc2MUhEh+OqmQB2nZa8UtPRxshJdEcpKmrFGtLoQ1c=) 2: 3B0E8BD2292211ED93341915C4F9AE02.roa (hash: nIc0DzbDh/PwNmfiEtRIcpTiu7BnHHbJ2kvWsihcckg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.crl rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5W1f4mxr0uywRXgX3GujwN5H0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:44:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 548 (0x224) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118F69, serialNumber=6A1E56D5FE26C6BD2ECB0457817DC6BA3C0DE47D Validity Not Before: Apr 25 01:44:39 2025 GMT Not After : May 2 01:44:39 2025 GMT Subject: CN=680ae907-8cac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:df:72:ca:88:8f:4d:cc:66:03:b3:10:41:c2: c5:db:33:7f:41:2e:21:57:67:82:0b:6f:69:72:ec: 66:aa:1f:d7:a9:04:10:1b:c9:ba:14:a6:1f:d9:84: ba:a5:eb:1a:ce:e5:85:e1:0d:cc:b6:8b:8d:66:12: ae:9b:2f:34:95:26:83:d8:03:c8:9e:f5:31:c7:2a: 2a:8e:33:a8:51:08:d8:4d:f9:72:4b:6f:df:e4:b7: d6:4d:6c:30:7e:70:e1:4d:fe:23:55:f5:07:ec:3c: a6:1d:1d:63:d5:99:e4:95:71:07:df:86:55:ca:0d: 34:87:09:51:df:8a:78:f5:c3:e0:c8:ce:25:32:34: e7:e8:2c:d4:da:ba:b0:52:13:52:e3:c9:b8:e6:17: 10:23:61:82:30:f0:b8:65:80:f8:4b:1f:a4:ec:ee: 18:f1:1a:bf:7b:f9:be:30:5c:e9:8b:2c:6c:86:84: 52:20:92:f6:7f:06:72:5c:38:53:1c:e5:d4:a5:e2: 5c:f5:a3:42:50:3d:cd:14:01:67:65:74:49:55:26: c0:f6:91:87:26:24:e1:ef:eb:e4:ef:3d:b8:8b:b8: 7d:6b:d4:55:f6:cc:a8:5a:c8:18:f1:70:a3:7b:4f: a7:d2:b5:d4:25:21:54:14:84:7d:a0:10:22:c2:36: 79:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:36:C7:87:A1:84:F7:29:E6:FD:72:43:F8:0D:1B:39:7B:A0:D3:E0 X509v3 Authority Key Identifier: keyid:6A:1E:56:D5:FE:26:C6:BD:2E:CB:04:57:81:7D:C6:BA:3C:0D:E4:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5W1f4mxr0uywRXgX3GujwN5H0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:53:9a:86:f2:02:bb:cb:ae:c9:51:1c:f9:1e:3a:6f:dc:45: 7d:48:3c:97:bb:20:27:a2:5d:c0:c1:c4:86:9a:f1:47:ce:8b: 0a:d5:d6:e9:2a:53:12:8d:09:0d:ec:da:33:f4:74:c3:00:e6: 88:37:6b:01:da:b1:e0:c6:7d:e4:e3:f6:b0:20:f0:eb:18:57: e2:30:cc:e2:b4:6f:d7:2b:7a:a8:b3:cc:dc:02:dc:43:e7:c0: ca:a9:57:b3:40:1b:9c:28:d1:ff:26:14:2b:df:68:6c:dd:95: 0b:00:e4:30:b9:fa:77:2a:ec:0a:e1:b4:c2:8e:27:92:a6:91: 79:3c:ba:62:b4:7b:35:6f:ff:b0:59:e7:02:1d:fe:7f:0d:8a: b9:58:9c:94:36:0d:18:c2:23:80:6f:79:db:f6:ba:e3:69:f4: 57:1c:d9:72:fa:18:15:f5:6a:2a:46:b5:05:c3:18:07:74:3c: 38:a0:ff:b7:cb:d0:8f:90:31:2b:27:b1:23:6d:a3:50:97:7c: f1:1a:b5:2d:df:74:71:ea:66:28:1f:12:cd:75:6c:2b:46:9b: 17:c8:8c:33:f0:0f:c2:b9:1c:ea:de:15:73:20:0d:90:7e:0c: e3:4b:f8:a8:d0:10:65:a7:d8:b4:e1:fc:cc:91:5d:ee:90:2a: e9:f3:44:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThGNjkxMTAvBgNVBAUTKDZBMUU1NkQ1RkUyNkM2QkQyRUNCMDQ1NzgxN0RDNkJB M0MwREU0N0QwHhcNMjUwNDI1MDE0NDM5WhcNMjUwNTAyMDE0NDM5WjAYMRYwFAYD VQQDEw02ODBhZTkwNy04Y2FjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4d9yyoiPTcxmA7MQQcLF2zN/QS4hV2eCC29pcuxmqh/XqQQQG8m6FKYf2YS6 pesazuWF4Q3MtouNZhKumy80lSaD2APInvUxxyoqjjOoUQjYTflyS2/f5LfWTWww fnDhTf4jVfUH7DymHR1j1ZnklXEH34ZVyg00hwlR34p49cPgyM4lMjTn6CzU2rqw UhNS48m45hcQI2GCMPC4ZYD4Sx+k7O4Y8Rq/e/m+MFzpiyxshoRSIJL2fwZyXDhT HOXUpeJc9aNCUD3NFAFnZXRJVSbA9pGHJiTh7+vk7z24i7h9a9RV9syoWsgY8XCj e0+n0rXUJSFUFIR9oBAiwjZ5YQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAE2x4eh hPcp5v1yQ/gNGzl7oNPgMB8GA1UdIwQYMBaAFGoeVtX+Jsa9LssEV4F9xro8DeR9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOEY2OS9COTk4REQzQzI5 MDgxMUVEQkQyNjJCMjhDNEY5QUUwMi9haDVXMWY0bXhyMHV5d1JYZ1gzR3Vqd041 SDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FoNVcxZjRteHIwdXl3UlhnWDNHdWp3TjVIMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OEY2OS9COTk4REQzQzI5MDgxMUVEQkQyNjJCMjhDNEY5QUUwMi9haDVXMWY0bXhy MHV5d1JYZ1gzR3Vqd041SDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYU5qG8gK7y67JURz5Hjpv3EV9SDyXuyAnol3AwcSGmvFHzosK1dbp KlMSjQkN7Noz9HTDAOaIN2sB2rHgxn3k4/awIPDrGFfiMMzitG/XK3qos8zcAtxD 58DKqVezQBucKNH/JhQr32hs3ZULAOQwufp3KuwK4bTCjieSppF5PLpitHs1b/+w WecCHf5/DYq5WJyUNg0YwiOAb3nb9rrjafRXHNly+hgV9WoqRrUFwxgHdDw4oP+3 y9CPkDErJ7EjbaNQl3zxGrUt33Rx6mYoHxLNdWwrRpsXyIwz8A/CuRzq3hVzIA2Q fgzjS/io0BBlp9i04fzMkV3ukCrp80TH -----END CERTIFICATE-----Generated at Sat Apr 26 04:22:44 2025 by rpki-client