$ rpki-client -vvf rpki.apnic.net/member_repository/A912216A/FC51C9E8310B11E9BB82FE72C4F9AE02/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.mft File: AJYbj2Ot6dGfOs9CgzrF2cnHJ48.mft (raw, json) Hash identifier: eh6h4DPZXpjfe085cDjx81r+Bh6o+eyPxAVcMlMgPPA= Subject key identifier: 02:4B:C3:93:5A:FD:F8:C8:F9:BC:F9:62:F7:1B:8A:59:DE:42:F4:18 Authority key identifier: 00:96:1B:8F:63:AD:E9:D1:9F:3A:CF:42:83:3A:C5:D9:C9:C7:27:8F Certificate issuer: /CN=A912216A/serialNumber=00961B8F63ADE9D19F3ACF42833AC5D9C9C7278F Certificate serial: 1070 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912216A/FC51C9E8310B11E9BB82FE72C4F9AE02/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.mft Manifest number: 1068 Signing time: Thu 24 Apr 2025 17:21:30 +0000 Manifest this update: Thu 24 Apr 2025 17:21:29 +0000 Manifest next update: Thu 01 May 2025 17:21:29 +0000 Files and hashes: 1: AJYbj2Ot6dGfOs9CgzrF2cnHJ48.crl (hash: KbHf+oIBZWdxqIry00wJKlaZeyVeFDsUWmrXKs0hPvo=) 2: 2A44CEFE311111E98C69B181C4F9AE02.roa (hash: 0SVk2cOfikrAvRDDJgb5TANBAXNNynzVUWZgXY+3hcc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912216A/FC51C9E8310B11E9BB82FE72C4F9AE02/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.crl rsync://rpki.apnic.net/member_repository/A912216A/FC51C9E8310B11E9BB82FE72C4F9AE02/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4208 (0x1070) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912216A, serialNumber=00961B8F63ADE9D19F3ACF42833AC5D9C9C7278F Validity Not Before: Apr 24 17:21:29 2025 GMT Not After : May 1 17:21:29 2025 GMT Subject: CN=680a7319-e1d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:bd:5f:d6:d5:15:f6:fc:6f:b8:99:cf:30:4f: 6f:5c:54:f6:7e:48:f8:15:ad:7c:86:f1:69:0d:67: c1:8e:f2:06:cf:35:a7:a0:eb:bf:5f:da:f5:67:15: 0b:8e:48:5b:02:eb:02:c6:26:8a:38:b2:04:88:fb: 90:4c:51:bf:c1:fb:ac:11:f8:e6:4d:88:6b:b3:e0: 42:fe:90:c0:0f:b7:d1:5b:b0:ff:62:be:20:c1:2e: fc:17:a9:17:e2:2f:8f:a0:06:82:d8:43:68:70:a8: 14:0d:d2:f8:01:6f:8a:ba:0f:0c:68:26:39:c9:e2: 1b:0d:eb:4c:ac:1c:41:3e:af:a8:51:b0:05:f2:9f: b4:99:27:22:f2:6f:26:92:3d:aa:98:af:30:f0:13: d0:3a:1e:3a:09:b3:61:dd:d1:24:65:30:58:b1:6a: 5a:d6:8a:ea:f6:15:83:a3:f2:be:ea:c0:86:4f:0f: 5b:b9:bb:ef:81:a4:ec:03:72:f3:27:c5:9b:ac:1f: f9:5b:4e:f0:e7:a3:26:ea:46:aa:05:f9:0c:64:02: fa:73:63:5d:61:51:aa:54:c1:f4:56:86:c4:5e:5d: 04:45:9b:fe:b2:89:7c:2d:23:ec:59:14:dc:a8:6b: 8a:ec:84:c4:63:20:66:7e:6c:fd:84:ae:32:c9:d5: 71:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:4B:C3:93:5A:FD:F8:C8:F9:BC:F9:62:F7:1B:8A:59:DE:42:F4:18 X509v3 Authority Key Identifier: keyid:00:96:1B:8F:63:AD:E9:D1:9F:3A:CF:42:83:3A:C5:D9:C9:C7:27:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912216A/FC51C9E8310B11E9BB82FE72C4F9AE02/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912216A/FC51C9E8310B11E9BB82FE72C4F9AE02/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:65:f8:fe:ae:b7:5c:40:bf:39:0e:a7:83:2a:ab:68:ee:66: 4a:30:a5:64:59:87:76:f6:64:d9:8d:27:c2:8e:7e:9f:f5:3f: b6:a1:ae:1a:05:14:7e:13:68:9a:2e:c9:8f:22:70:eb:38:36: ba:19:d8:1a:e7:ff:02:65:8b:b4:6d:55:4e:57:da:31:75:29: 86:cb:e6:ab:53:f5:15:ad:3d:d4:06:2a:a8:a6:ff:07:65:87: 3f:6c:53:92:2f:d3:83:1c:a0:3a:69:b1:b8:d9:dc:ab:44:45: 81:ae:23:77:4e:dd:f6:2d:66:32:ec:c1:36:5c:cc:b0:89:9c: 8c:35:b3:b5:f7:17:c3:38:ac:d3:bc:77:03:3f:9d:53:29:54: df:6c:71:46:20:65:21:95:fc:96:c9:c6:ac:2b:ae:3f:bd:a0: e5:df:3f:ef:a0:2c:f0:23:16:f0:c1:ae:d7:a2:ed:01:82:c4: 9f:e8:d5:b9:ba:5a:2f:2f:28:0f:d9:30:81:05:9c:51:f5:19: 9c:48:76:09:ac:fe:10:c0:b0:00:c2:50:da:f1:a0:ef:53:72: f8:98:3e:af:b6:ef:39:b2:76:46:c7:40:85:1e:3f:a6:55:5c: 75:4f:bd:2c:b5:22:a8:8e:a5:ee:dc:2f:8c:1a:e3:a8:4e:20: e5:b8:1b:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEHAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIxNkExMTAvBgNVBAUTKDAwOTYxQjhGNjNBREU5RDE5RjNBQ0Y0MjgzM0FDNUQ5 QzlDNzI3OEYwHhcNMjUwNDI0MTcyMTI5WhcNMjUwNTAxMTcyMTI5WjAYMRYwFAYD VQQDEw02ODBhNzMxOS1lMWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyr1f1tUV9vxvuJnPME9vXFT2fkj4Fa18hvFpDWfBjvIGzzWnoOu/X9r1ZxUL jkhbAusCxiaKOLIEiPuQTFG/wfusEfjmTYhrs+BC/pDAD7fRW7D/Yr4gwS78F6kX 4i+PoAaC2ENocKgUDdL4AW+Kug8MaCY5yeIbDetMrBxBPq+oUbAF8p+0mSci8m8m kj2qmK8w8BPQOh46CbNh3dEkZTBYsWpa1orq9hWDo/K+6sCGTw9bubvvgaTsA3Lz J8WbrB/5W07w56Mm6kaqBfkMZAL6c2NdYVGqVMH0VobEXl0ERZv+sol8LSPsWRTc qGuK7ITEYyBmfmz9hK4yydVxVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAJLw5Na /fjI+bz5YvcbilneQvQYMB8GA1UdIwQYMBaAFACWG49jrenRnzrPQoM6xdnJxyeP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjE2QS9GQzUxQzlFODMx MEIxMUU5QkI4MkZFNzJDNEY5QUUwMi9BSlliajJPdDZkR2ZPczlDZ3pyRjJjbkhK NDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FKWWJqMk90NmRHZk9zOUNnenJGMmNuSEo0OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjE2QS9GQzUxQzlFODMxMEIxMUU5QkI4MkZFNzJDNEY5QUUwMi9BSlliajJPdDZk R2ZPczlDZ3pyRjJjbkhKNDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPZfj+rrdcQL85DqeDKqto7mZKMKVkWYd29mTZjSfCjn6f9T+2oa4a BRR+E2iaLsmPInDrODa6Gdga5/8CZYu0bVVOV9oxdSmGy+arU/UVrT3UBiqopv8H ZYc/bFOSL9ODHKA6abG42dyrREWBriN3Tt32LWYy7ME2XMywiZyMNbO19xfDOKzT vHcDP51TKVTfbHFGIGUhlfyWycasK64/vaDl3z/voCzwIxbwwa7Xou0BgsSf6NW5 ulovLygP2TCBBZxR9RmcSHYJrP4QwLAAwlDa8aDvU3L4mD6vtu85snZGx0CFHj+m VVx1T70stSKojqXu3C+MGuOoTiDluBs5 -----END CERTIFICATE-----Generated at Sat Apr 26 05:15:56 2025 by rpki-client