$ rpki-client -vvf rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.mft File: aCDlNpQmEvNLA3PdH3ftI0_981w.mft (raw, json) Hash identifier: cmJ16u6OFIWJ2xcz0jFUWXBYaz66zmWghKgqoWAEs+c= Subject key identifier: 6D:62:73:C5:5D:8B:8B:EE:60:99:C8:91:5B:EE:A6:B5:E2:5C:4E:07 Authority key identifier: 68:20:E5:36:94:26:12:F3:4B:03:73:DD:1F:77:ED:23:4F:FD:F3:5C Certificate issuer: /CN=A911F8C9/serialNumber=6820E536942612F34B0373DD1F77ED234FFDF35C Certificate serial: 0432 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aCDlNpQmEvNLA3PdH3ftI0_981w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.mft Manifest number: 042D Signing time: Wed 30 Apr 2025 23:54:11 +0000 Manifest this update: Wed 30 Apr 2025 23:54:10 +0000 Manifest next update: Wed 07 May 2025 23:54:10 +0000 Files and hashes: 1: aCDlNpQmEvNLA3PdH3ftI0_981w.crl (hash: SOq2UG4lGSlX9tU/ASkGbx6m+MJHXZs7q7NLX0mOm9c=) 2: 0DC4BC0C5CDE11ECB486850FC4F9AE02.roa (hash: FClvPvzoTDmX/ZzIigyjz+g4sikyQbqSLF5/K9p2wok=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.crl rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aCDlNpQmEvNLA3PdH3ftI0_981w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 23:54:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1074 (0x432) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F8C9, serialNumber=6820E536942612F34B0373DD1F77ED234FFDF35C Validity Not Before: Apr 30 23:54:10 2025 GMT Not After : May 7 23:54:10 2025 GMT Subject: CN=6812b822-7dd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:79:c9:3a:e7:ca:d6:ab:0d:26:96:eb:00:07: 06:ac:9f:24:d3:45:b4:8a:61:a8:21:01:97:90:52: fa:5e:cc:bc:4c:20:37:84:5d:62:69:69:8a:77:f4: b7:1b:fe:90:82:8e:00:8e:68:8d:08:36:21:53:59: ee:c6:44:96:77:98:34:b4:8f:04:0e:69:48:ca:c3: f5:5e:dc:46:4b:c9:e0:18:a4:ac:29:08:43:4c:da: c6:37:80:c7:88:37:ba:04:2e:0e:76:d5:1d:29:1a: 6d:2f:07:89:15:32:b4:80:d1:41:d3:d0:79:d2:45: 3f:a0:bc:da:9a:98:b6:39:02:b7:85:d1:07:b0:da: dd:e4:4e:0f:c1:b1:5e:a1:4b:dc:36:9b:62:8d:61: 0d:cf:78:f0:4d:af:86:96:e5:29:e5:34:f8:20:c4: d6:4c:22:a6:da:92:18:28:31:f6:ca:50:ed:01:d6: 5d:45:88:07:5a:5f:06:68:13:07:c7:7a:8a:a7:2e: 9d:3c:c6:5f:fa:7d:df:eb:c0:b0:18:d2:6d:27:58: 28:86:74:f2:02:a8:10:ea:af:92:7d:f1:ad:2d:bb: d0:28:3c:39:15:79:1d:47:73:70:7f:53:12:6b:5a: ed:47:a1:24:0a:00:9a:98:7c:69:4d:50:9d:fb:32: 41:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:62:73:C5:5D:8B:8B:EE:60:99:C8:91:5B:EE:A6:B5:E2:5C:4E:07 X509v3 Authority Key Identifier: keyid:68:20:E5:36:94:26:12:F3:4B:03:73:DD:1F:77:ED:23:4F:FD:F3:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aCDlNpQmEvNLA3PdH3ftI0_981w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:dc:f0:c8:da:69:97:ae:3b:b8:e5:4e:a5:8b:ec:da:67:17: 99:b6:17:e2:9e:8d:67:38:c5:10:6b:38:a1:dd:f0:4a:ec:69: fd:a1:81:81:90:f5:1b:e4:6a:74:da:ac:55:ba:4e:30:c7:8c: bb:81:6a:88:b2:70:c0:5d:9d:3f:cf:a5:45:ca:0a:48:91:7f: e5:6a:b9:3e:d3:82:33:d3:ac:82:6c:d2:0e:17:21:46:77:82: 72:05:dc:66:3a:83:f5:27:89:91:1a:40:97:94:41:b3:da:a9: e8:12:aa:9e:28:19:cc:38:f4:22:03:38:c8:45:b1:8d:76:26: 1c:8f:4d:0a:a6:9a:54:5f:e5:c0:50:dc:64:12:2c:a4:c9:0b: e0:aa:86:2d:64:53:e2:1c:cd:78:cb:f8:93:1c:6b:25:0b:43: 11:46:40:30:7b:15:7f:24:32:76:9a:c5:5c:29:53:34:ff:46: b4:ca:b8:a8:ad:b1:43:9b:e4:a8:a7:39:ca:eb:52:52:2c:f5: 65:c4:49:90:f6:f7:34:fe:10:76:b0:89:87:da:04:8c:d8:f1: ba:7e:a5:aa:f1:f0:4c:86:a7:4f:7e:b7:6a:19:c7:e1:91:81: 7c:b8:54:78:57:91:a1:de:4e:12:c3:19:aa:ba:f0:89:1b:4d: 3a:8a:78:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY4QzkxMTAvBgNVBAUTKDY4MjBFNTM2OTQyNjEyRjM0QjAzNzNERDFGNzdFRDIz NEZGREYzNUMwHhcNMjUwNDMwMjM1NDEwWhcNMjUwNTA3MjM1NDEwWjAYMRYwFAYD VQQDEw02ODEyYjgyMi03ZGQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAznnJOufK1qsNJpbrAAcGrJ8k00W0imGoIQGXkFL6Xsy8TCA3hF1iaWmKd/S3 G/6Qgo4AjmiNCDYhU1nuxkSWd5g0tI8EDmlIysP1XtxGS8ngGKSsKQhDTNrGN4DH iDe6BC4OdtUdKRptLweJFTK0gNFB09B50kU/oLzampi2OQK3hdEHsNrd5E4PwbFe oUvcNptijWENz3jwTa+GluUp5TT4IMTWTCKm2pIYKDH2ylDtAdZdRYgHWl8GaBMH x3qKpy6dPMZf+n3f68CwGNJtJ1gohnTyAqgQ6q+SffGtLbvQKDw5FXkdR3Nwf1MS a1rtR6EkCgCamHxpTVCd+zJBcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG1ic8Vd i4vuYJnIkVvuprXiXE4HMB8GA1UdIwQYMBaAFGgg5TaUJhLzSwNz3R937SNP/fNc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjhDOS80QjRENzEyQTVD REIxMUVDQkQ1NEY3MENDNEY5QUUwMi9hQ0RsTnBRbUV2TkxBM1BkSDNmdEkwXzk4 MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FDRGxOcFFtRXZOTEEzUGRIM2Z0STBfOTgxdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjhDOS80QjRENzEyQTVDREIxMUVDQkQ1NEY3MENDNEY5QUUwMi9hQ0RsTnBRbUV2 TkxBM1BkSDNmdEkwXzk4MXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCj3PDI2mmXrju45U6li+zaZxeZthfino1nOMUQazih3fBK7Gn9oYGB kPUb5Gp02qxVuk4wx4y7gWqIsnDAXZ0/z6VFygpIkX/lark+04Iz06yCbNIOFyFG d4JyBdxmOoP1J4mRGkCXlEGz2qnoEqqeKBnMOPQiAzjIRbGNdiYcj00KpppUX+XA UNxkEiykyQvgqoYtZFPiHM14y/iTHGslC0MRRkAwexV/JDJ2msVcKVM0/0a0yrio rbFDm+SopznK61JSLPVlxEmQ9vc0/hB2sImH2gSM2PG6fqWq8fBMhqdPfrdqGcfh kYF8uFR4V5Gh3k4SwxmquvCJG006injh -----END CERTIFICATE-----Generated at Fri May 2 08:47:56 2025 by rpki-client