$ rpki-client -vvf rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/ajK9E9_Nd-8bXAUr427YmtIScNs.mft File: ajK9E9_Nd-8bXAUr427YmtIScNs.mft (raw, json) Hash identifier: vUu6PAfxCTu5PJ2hnUIiB2InkWNhIqXy264hFvZzpK0= Subject key identifier: 48:C4:30:69:51:60:2C:E3:33:91:39:63:3C:82:69:A0:B1:C2:71:8A Authority key identifier: 6A:32:BD:13:DF:CD:77:EF:1B:5C:05:2B:E3:6E:D8:9A:D2:12:70:DB Certificate issuer: /CN=A911C812/serialNumber=6A32BD13DFCD77EF1B5C052BE36ED89AD21270DB Certificate serial: 07E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ajK9E9_Nd-8bXAUr427YmtIScNs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/ajK9E9_Nd-8bXAUr427YmtIScNs.mft Manifest number: 07DD Signing time: Thu 24 Apr 2025 20:51:57 +0000 Manifest this update: Thu 24 Apr 2025 20:51:57 +0000 Manifest next update: Thu 01 May 2025 20:51:57 +0000 Files and hashes: 1: ajK9E9_Nd-8bXAUr427YmtIScNs.crl (hash: 4REg3vyWzJo5hAHWO3lBINyZGvFXV9Zj/Fcy/NidAdE=) 2: 477192ACF3FA11EAB9D11D26C4F9AE02.roa (hash: yiF95qxdVC02mMlRMuSXuOtx8PRvp7gaxII4qCM32AQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/ajK9E9_Nd-8bXAUr427YmtIScNs.crl rsync://rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/ajK9E9_Nd-8bXAUr427YmtIScNs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ajK9E9_Nd-8bXAUr427YmtIScNs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:51:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2019 (0x7e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C812, serialNumber=6A32BD13DFCD77EF1B5C052BE36ED89AD21270DB Validity Not Before: Apr 24 20:51:57 2025 GMT Not After : May 1 20:51:57 2025 GMT Subject: CN=680aa46d-fbbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8e:ba:d8:3c:8c:17:5c:62:a2:f6:b6:5f:1a: cc:8d:5d:20:04:e3:62:1b:41:cb:df:60:c5:21:2f: 48:59:4e:63:2d:e5:29:6c:56:13:4c:29:dd:9b:9e: 2f:f4:8c:f1:42:05:45:99:1c:3f:83:f6:71:af:30: 65:4f:3d:e6:94:59:13:88:88:a1:2f:f1:8a:45:40: 3a:64:2b:88:66:02:c6:d3:93:73:2e:f1:d0:60:b7: d8:af:86:d8:33:d2:9b:ac:97:a3:9a:f8:d9:86:73: cc:e6:12:2b:75:47:18:2b:ee:af:b4:d3:94:6a:9a: 57:bb:14:0a:a7:b4:11:11:cb:fb:56:0a:8c:eb:93: 28:bc:67:6c:c3:98:f0:31:ac:e2:4b:86:81:b1:3e: b8:d0:aa:06:08:00:ff:34:a2:4c:67:4c:df:88:54: e8:aa:b7:f2:89:29:b4:d2:fb:c7:f0:41:81:b7:47: 87:bc:d2:40:4e:43:96:9d:a8:10:5f:d0:de:e9:31: 32:b4:7e:bd:2d:37:ed:0d:a1:40:73:56:b7:ae:61: c7:21:3e:d9:93:07:35:6d:b7:06:53:ed:59:67:5a: 25:ed:97:d4:8f:b0:31:0a:6c:13:c8:fb:c7:2e:57: 7a:c3:5a:68:44:84:cb:43:df:13:fc:b7:28:87:bb: 54:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:C4:30:69:51:60:2C:E3:33:91:39:63:3C:82:69:A0:B1:C2:71:8A X509v3 Authority Key Identifier: keyid:6A:32:BD:13:DF:CD:77:EF:1B:5C:05:2B:E3:6E:D8:9A:D2:12:70:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/ajK9E9_Nd-8bXAUr427YmtIScNs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ajK9E9_Nd-8bXAUr427YmtIScNs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/ajK9E9_Nd-8bXAUr427YmtIScNs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:cc:ff:41:1a:eb:d6:f2:41:ab:ed:2c:71:0e:03:9c:e0:41: ce:b0:c3:9f:2d:14:42:aa:fb:74:7a:4b:3f:3b:c1:f4:14:60: 04:42:01:21:2c:f7:ca:ab:80:b1:e6:50:0c:c1:22:fe:ce:33: 7e:9d:e1:45:00:4e:97:bf:c2:56:e8:90:eb:73:b4:de:40:0b: 78:2b:b2:a2:b5:df:53:61:c5:29:76:9b:b2:c6:90:4e:39:dd: 1e:55:38:aa:0b:d3:7c:e7:3c:86:08:69:c1:ce:3c:3d:fd:84: 7b:cc:94:6e:83:71:01:3f:95:ef:12:50:2f:7c:4a:16:01:67: d6:8b:da:b1:d1:dd:fd:78:c4:66:9e:dd:61:dc:92:dd:c5:a2: b4:8e:e0:d7:cd:9c:de:9d:f5:77:59:67:7d:37:1f:a7:9d:37: de:16:ec:cd:1f:22:12:0e:52:13:3c:75:b3:0a:4b:a0:0f:c4: 7d:9a:67:d3:17:3f:73:29:0b:48:da:84:d8:a1:df:96:ba:45: 02:50:3b:96:c7:ca:5e:c5:b7:54:71:4c:48:a5:2d:a6:1e:0d: fc:7b:89:c8:19:a3:89:89:f3:ce:2b:c4:51:55:5c:59:80:fe: ef:a2:a3:32:4a:a4:23:5e:7f:01:97:c7:3e:0d:6a:70:84:09: 99:af:87:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM4MTIxMTAvBgNVBAUTKDZBMzJCRDEzREZDRDc3RUYxQjVDMDUyQkUzNkVEODlB RDIxMjcwREIwHhcNMjUwNDI0MjA1MTU3WhcNMjUwNTAxMjA1MTU3WjAYMRYwFAYD VQQDEw02ODBhYTQ2ZC1mYmJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs4662DyMF1xiova2XxrMjV0gBONiG0HL32DFIS9IWU5jLeUpbFYTTCndm54v 9IzxQgVFmRw/g/ZxrzBlTz3mlFkTiIihL/GKRUA6ZCuIZgLG05NzLvHQYLfYr4bY M9KbrJejmvjZhnPM5hIrdUcYK+6vtNOUappXuxQKp7QREcv7VgqM65MovGdsw5jw MaziS4aBsT640KoGCAD/NKJMZ0zfiFToqrfyiSm00vvH8EGBt0eHvNJATkOWnagQ X9De6TEytH69LTftDaFAc1a3rmHHIT7Zkwc1bbcGU+1ZZ1ol7ZfUj7AxCmwTyPvH Lld6w1poRITLQ98T/Lcoh7tUwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEjEMGlR YCzjM5E5YzyCaaCxwnGKMB8GA1UdIwQYMBaAFGoyvRPfzXfvG1wFK+Nu2JrSEnDb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzgxMi9CMjVFRjk5MEU5 MTYxMUVBQTcwNUQ4NEZDNEY5QUUwMi9haks5RTlfTmQtOGJYQVVyNDI3WW10SVNj TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FqSzlFOV9OZC04YlhBVXI0MjdZbXRJU2NOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzgxMi9CMjVFRjk5MEU5MTYxMUVBQTcwNUQ4NEZDNEY5QUUwMi9haks5RTlfTmQt OGJYQVVyNDI3WW10SVNjTnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhzP9BGuvW8kGr7SxxDgOc4EHOsMOfLRRCqvt0eks/O8H0FGAEQgEh LPfKq4Cx5lAMwSL+zjN+neFFAE6Xv8JW6JDrc7TeQAt4K7Kitd9TYcUpdpuyxpBO Od0eVTiqC9N85zyGCGnBzjw9/YR7zJRug3EBP5XvElAvfEoWAWfWi9qx0d39eMRm nt1h3JLdxaK0juDXzZzenfV3WWd9Nx+nnTfeFuzNHyISDlITPHWzCkugD8R9mmfT Fz9zKQtI2oTYod+WukUCUDuWx8pexbdUcUxIpS2mHg38e4nIGaOJifPOK8RRVVxZ gP7voqMySqQjXn8Bl8c+DWpwhAmZr4fn -----END CERTIFICATE-----Generated at Sat Apr 26 12:28:30 2025 by rpki-client