$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/aEE9QfYAXgMW4OJXbyJsIYiqFW8.mft File: aEE9QfYAXgMW4OJXbyJsIYiqFW8.mft (raw, json) Hash identifier: B/ttPMyw9dW4R6bDNIJznSoRCAwNQfbm8q3U2iDgn+Y= Subject key identifier: 93:A6:B2:C5:AE:63:A5:6A:52:FF:11:87:19:B8:25:19:B5:23:C4:9B Authority key identifier: 68:41:3D:41:F6:00:5E:03:16:E0:E2:57:6F:22:6C:21:88:AA:15:6F Certificate issuer: /CN=A911CA82/serialNumber=68413D41F6005E0316E0E2576F226C2188AA156F Certificate serial: 41 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aEE9QfYAXgMW4OJXbyJsIYiqFW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/aEE9QfYAXgMW4OJXbyJsIYiqFW8.mft Manifest number: 3F Signing time: Sat 26 Apr 2025 22:46:17 +0000 Manifest this update: Sat 26 Apr 2025 22:46:16 +0000 Manifest next update: Sat 03 May 2025 22:46:16 +0000 Files and hashes: 1: aEE9QfYAXgMW4OJXbyJsIYiqFW8.crl (hash: kfaZD1A1c9ARwwSH0pugidfaA1stS9xJuf+k24b6RfA=) 2: AF4301D4CF8511EF94856A41C4F9AE02.roa (hash: eqsW8B/nzh24Js41J8yQQdlaY75NMXqpYi5U4uiBwdI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/aEE9QfYAXgMW4OJXbyJsIYiqFW8.crl rsync://rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/aEE9QfYAXgMW4OJXbyJsIYiqFW8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aEE9QfYAXgMW4OJXbyJsIYiqFW8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 19:11:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CA82, serialNumber=68413D41F6005E0316E0E2576F226C2188AA156F Validity Not Before: Apr 26 22:46:16 2025 GMT Not After : May 3 22:46:16 2025 GMT Subject: CN=680d6239-dbcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:46:44:f0:3d:84:5f:4f:4f:25:97:3e:4c:84: 71:5b:fb:af:68:9b:3b:67:a6:a4:6b:98:87:c6:61: ed:e8:46:ea:bc:81:c7:a9:5d:94:24:7a:1a:7f:76: c2:64:9c:07:e2:9c:2b:45:47:af:95:6e:1a:ac:48: 70:eb:cf:bd:92:fa:08:10:5a:b2:a6:da:47:59:45: 06:c3:97:1e:29:72:f4:69:27:e5:2a:3d:27:82:2e: fe:b5:7b:ed:b8:f2:c0:09:6b:d7:3c:99:ef:b9:ab: e0:53:9c:4c:d6:87:20:91:5e:1e:11:01:46:cd:c8: d4:b5:83:1a:d5:45:9a:34:6c:c7:d5:de:58:1f:48: 96:ed:ed:0d:d8:ab:e2:49:b1:ab:d3:bb:f4:f2:bd: 65:31:54:9f:8d:40:31:fc:a1:8e:ec:c3:45:a5:78: 24:e4:30:e0:dd:01:05:8e:2f:80:1b:82:d2:6c:6b: 9f:ef:ca:ad:8f:77:6c:0a:df:69:1f:49:9a:f5:d1: 8d:05:ae:8f:da:a3:3b:73:6f:3e:38:e6:e4:59:4f: 22:54:b1:09:ee:b1:5c:b4:bc:f0:4c:bd:68:32:71: a2:43:3f:9e:af:62:b3:7e:5e:a1:5e:c0:39:74:28: 45:7a:ae:b9:cb:0d:f5:c4:5d:d7:ff:e7:c2:74:e8: c4:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:A6:B2:C5:AE:63:A5:6A:52:FF:11:87:19:B8:25:19:B5:23:C4:9B X509v3 Authority Key Identifier: keyid:68:41:3D:41:F6:00:5E:03:16:E0:E2:57:6F:22:6C:21:88:AA:15:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/aEE9QfYAXgMW4OJXbyJsIYiqFW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aEE9QfYAXgMW4OJXbyJsIYiqFW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/aEE9QfYAXgMW4OJXbyJsIYiqFW8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:74:06:d7:83:8a:3c:f6:a3:d5:49:fd:40:7e:b9:94:92:62: bc:dd:c5:44:23:fb:40:8c:d5:2c:3d:d8:34:18:de:40:57:ca: 4f:ac:74:e0:4f:6a:36:9d:1f:b7:30:b9:9d:36:f7:de:31:f7: 3a:71:e2:92:5a:c2:ea:1f:3d:7a:85:dd:98:7c:d0:1b:87:ce: 2c:ce:2d:8d:d9:5c:5d:d7:ea:cc:0b:ac:9f:73:5b:49:4f:e6: 85:54:88:11:8c:73:f3:40:3c:7c:70:5b:2d:39:8e:77:a1:1f: 4c:93:e6:bf:63:3c:75:99:64:1e:f3:f2:96:ed:c4:12:f8:bd: 41:d0:8b:52:5f:03:0f:df:8f:d0:74:17:ae:05:0f:db:4a:31: 60:75:c6:84:d0:51:05:dd:9c:e2:f0:6a:40:7b:98:91:ec:73: 17:d8:f6:28:f8:90:52:95:f1:8b:b3:16:12:62:3d:f4:4e:0a: 64:60:b7:9a:18:b8:03:a8:9f:44:5a:5d:0b:42:09:8a:42:ea: 06:72:42:05:ad:a7:45:48:b4:20:2b:7a:c6:01:1a:e7:48:f8: d9:eb:de:12:a2:00:d8:99:48:90:f0:ca:77:d5:2a:39:82:05: 12:2d:56:a7:8d:3b:d9:4c:b3:07:e1:83:34:ca:b2:2a:b3:3d: 88:e7:28:9b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx Q0E4MjExMC8GA1UEBRMoNjg0MTNENDFGNjAwNUUwMzE2RTBFMjU3NkYyMjZDMjE4 OEFBMTU2RjAeFw0yNTA0MjYyMjQ2MTZaFw0yNTA1MDMyMjQ2MTZaMBgxFjAUBgNV BAMTDTY4MGQ2MjM5LWRiY2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCuRkTwPYRfT08llz5MhHFb+69omztnpqRrmIfGYe3oRuq8gcepXZQkehp/dsJk nAfinCtFR6+VbhqsSHDrz72S+ggQWrKm2kdZRQbDlx4pcvRpJ+UqPSeCLv61e+24 8sAJa9c8me+5q+BTnEzWhyCRXh4RAUbNyNS1gxrVRZo0bMfV3lgfSJbt7Q3Yq+JJ savTu/TyvWUxVJ+NQDH8oY7sw0WleCTkMODdAQWOL4AbgtJsa5/vyq2Pd2wK32kf SZr10Y0Fro/aoztzbz445uRZTyJUsQnusVy0vPBMvWgycaJDP56vYrN+XqFewDl0 KEV6rrnLDfXEXdf/58J06MTlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUk6ayxa5j pWpS/xGHGbglGbUjxJswHwYDVR0jBBgwFoAUaEE9QfYAXgMW4OJXbyJsIYiqFW8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFDQTgyL0Y2OTlFMzU0Q0Yx MjExRUY4RjFEMjA1QkM0RjlBRTAyL2FFRTlRZllBWGdNVzRPSlhieUpzSVlpcUZX OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvYUVFOVFmWUFYZ01XNE9KWGJ5SnNJWWlxRlc4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFD QTgyL0Y2OTlFMzU0Q0YxMjExRUY4RjFEMjA1QkM0RjlBRTAyL2FFRTlRZllBWGdN VzRPSlhieUpzSVlpcUZXOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACJ0BteDijz2o9VJ/UB+uZSSYrzdxUQj+0CM1Sw92DQY3kBXyk+sdOBP ajadH7cwuZ02994x9zpx4pJawuofPXqF3Zh80BuHzizOLY3ZXF3X6swLrJ9zW0lP 5oVUiBGMc/NAPHxwWy05jnehH0yT5r9jPHWZZB7z8pbtxBL4vUHQi1JfAw/fj9B0 F64FD9tKMWB1xoTQUQXdnOLwakB7mJHscxfY9ij4kFKV8YuzFhJiPfROCmRgt5oY uAOon0RaXQtCCYpC6gZyQgWtp0VItCAresYBGudI+Nnr3hKiANiZSJDwynfVKjmC BRItVqeNO9lMswfhgzTKsiqzPYjnKJs= -----END CERTIFICATE-----Generated at Sun Apr 27 04:21:43 2025 by rpki-client