$ rpki-client -vvf rpki.apnic.net/member_repository/A9122CB9/56AA311414EA11EBBE37EB1AC4F9AE02/akunmdqw8ib6Y2bG8ceOIqwMBz0.mft File: akunmdqw8ib6Y2bG8ceOIqwMBz0.mft (raw, json) Hash identifier: fr6HSpTj5bVmYq7P/AJMk/cvHQLlqKRL94vKYcUkT5E= Subject key identifier: FA:D1:7C:82:42:B6:D1:49:0A:A2:C1:B7:C1:05:75:4F:09:B7:D7:FF Authority key identifier: 6A:4B:A7:99:DA:B0:F2:26:FA:63:66:C6:F1:C7:8E:22:AC:0C:07:3D Certificate issuer: /CN=A9122CB9/serialNumber=6A4BA799DAB0F226FA6366C6F1C78E22AC0C073D Certificate serial: 0769 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akunmdqw8ib6Y2bG8ceOIqwMBz0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122CB9/56AA311414EA11EBBE37EB1AC4F9AE02/akunmdqw8ib6Y2bG8ceOIqwMBz0.mft Manifest number: 0764 Signing time: Thu 24 Apr 2025 21:20:48 +0000 Manifest this update: Thu 24 Apr 2025 21:20:48 +0000 Manifest next update: Thu 01 May 2025 21:20:48 +0000 Files and hashes: 1: akunmdqw8ib6Y2bG8ceOIqwMBz0.crl (hash: N9xXJK4PW98/NsbYKl30f40967PeQIdmMXuF9LzOaVM=) 2: FA77145A14EB11EBA13B881DC4F9AE02.roa (hash: s6zjucspba621IzJupXb2nvzbQOkfylngCtE1Ksgs8s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122CB9/56AA311414EA11EBBE37EB1AC4F9AE02/akunmdqw8ib6Y2bG8ceOIqwMBz0.crl rsync://rpki.apnic.net/member_repository/A9122CB9/56AA311414EA11EBBE37EB1AC4F9AE02/akunmdqw8ib6Y2bG8ceOIqwMBz0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akunmdqw8ib6Y2bG8ceOIqwMBz0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:20:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1897 (0x769) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122CB9, serialNumber=6A4BA799DAB0F226FA6366C6F1C78E22AC0C073D Validity Not Before: Apr 24 21:20:48 2025 GMT Not After : May 1 21:20:48 2025 GMT Subject: CN=680aab30-06b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2a:99:50:d9:26:19:c6:32:96:81:1b:e5:66: 2d:85:52:c5:46:f0:88:eb:ef:0a:2b:6d:67:64:1b: cd:63:f3:84:82:ce:54:8c:ec:c0:a2:f2:ef:02:c5: 5c:0e:cb:5a:71:81:2c:60:14:8c:76:69:04:af:92: 12:1d:55:9f:c4:c2:2f:4f:e8:af:ef:03:5b:43:32: d3:3a:20:ac:35:97:26:03:a1:3c:07:9d:b5:80:66: e3:56:f1:36:28:f0:b1:78:58:88:8a:11:1a:29:ea: c0:86:3e:ca:44:82:f0:dc:9d:a8:41:91:77:f6:43: 6f:8b:2f:3b:50:ed:e9:9f:22:94:94:77:9d:52:88: a1:02:02:84:75:dd:e9:5c:9c:15:32:ad:f8:84:c7: 7e:b1:68:f8:37:1f:10:05:27:1b:ef:85:b9:90:bc: 4e:9b:91:b8:6b:c1:18:31:fa:9e:63:72:6d:fa:31: c1:31:98:db:a3:79:3b:92:cd:5c:cd:1e:43:15:03: 83:54:6e:4d:9e:c0:fd:69:d0:e0:82:50:28:dc:0b: d1:50:07:ee:2e:81:2d:83:52:52:0d:4e:1f:0b:f0: 4b:86:73:30:6c:27:ef:a9:42:06:50:eb:67:e0:be: 5d:02:bb:69:f4:68:31:5d:4e:a1:9c:96:38:5a:ed: b1:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:D1:7C:82:42:B6:D1:49:0A:A2:C1:B7:C1:05:75:4F:09:B7:D7:FF X509v3 Authority Key Identifier: keyid:6A:4B:A7:99:DA:B0:F2:26:FA:63:66:C6:F1:C7:8E:22:AC:0C:07:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122CB9/56AA311414EA11EBBE37EB1AC4F9AE02/akunmdqw8ib6Y2bG8ceOIqwMBz0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akunmdqw8ib6Y2bG8ceOIqwMBz0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122CB9/56AA311414EA11EBBE37EB1AC4F9AE02/akunmdqw8ib6Y2bG8ceOIqwMBz0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:6a:44:fe:ed:40:9e:18:6c:cb:a4:59:1a:59:83:eb:dd:da: bd:a1:84:1a:0e:02:df:45:6a:8e:84:48:b0:5a:cc:ab:ec:8f: 98:07:4d:bc:85:96:c6:60:31:81:aa:81:c8:4c:46:45:e6:80: c3:09:0d:d5:8d:91:5c:c6:0d:d0:c2:f9:35:d8:02:4a:73:88: ad:80:42:18:d3:5f:73:e3:6f:3d:a4:86:e0:d9:e2:f8:01:b8: a9:2e:8c:90:9f:c3:0a:cf:00:2c:d1:5c:01:e2:56:9d:a3:4b: 11:21:94:ee:69:6e:2a:20:91:b9:7c:d4:06:14:82:94:b5:80: ab:fb:79:11:fb:d7:af:50:d0:8b:67:87:29:93:2e:e9:b3:fd: 2f:1d:dc:0b:59:41:f9:51:90:91:c8:99:8a:b6:4e:7b:b9:18: 8d:52:dd:6d:31:bf:49:f0:6a:45:ac:63:70:61:e1:df:31:95: 47:ce:e9:16:2b:89:00:90:f1:0b:10:00:47:ec:b3:64:fa:67: 5d:f9:89:83:50:05:2e:42:27:67:7c:6c:49:7d:57:c8:0b:46: a3:af:0a:cf:16:dc:6a:a1:32:cc:36:01:49:74:bb:a1:35:a8: cb:76:5e:fc:84:c1:24:ef:f4:57:24:55:d7:e7:07:bc:a3:91: 0f:f5:ae:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJDQjkxMTAvBgNVBAUTKDZBNEJBNzk5REFCMEYyMjZGQTYzNjZDNkYxQzc4RTIy QUMwQzA3M0QwHhcNMjUwNDI0MjEyMDQ4WhcNMjUwNTAxMjEyMDQ4WjAYMRYwFAYD VQQDEw02ODBhYWIzMC0wNmIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxSqZUNkmGcYyloEb5WYthVLFRvCI6+8KK21nZBvNY/OEgs5UjOzAovLvAsVc DstacYEsYBSMdmkEr5ISHVWfxMIvT+iv7wNbQzLTOiCsNZcmA6E8B521gGbjVvE2 KPCxeFiIihEaKerAhj7KRILw3J2oQZF39kNviy87UO3pnyKUlHedUoihAgKEdd3p XJwVMq34hMd+sWj4Nx8QBScb74W5kLxOm5G4a8EYMfqeY3Jt+jHBMZjbo3k7ks1c zR5DFQODVG5NnsD9adDgglAo3AvRUAfuLoEtg1JSDU4fC/BLhnMwbCfvqUIGUOtn 4L5dArtp9GgxXU6hnJY4Wu2x7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPrRfIJC ttFJCqLBt8EFdU8Jt9f/MB8GA1UdIwQYMBaAFGpLp5nasPIm+mNmxvHHjiKsDAc9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkNCOS81NkFBMzExNDE0 RUExMUVCQkUzN0VCMUFDNEY5QUUwMi9ha3VubWRxdzhpYjZZMmJHOGNlT0lxd01C ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FrdW5tZHF3OGliNlkyYkc4Y2VPSXF3TUJ6MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkNCOS81NkFBMzExNDE0RUExMUVCQkUzN0VCMUFDNEY5QUUwMi9ha3VubWRxdzhp YjZZMmJHOGNlT0lxd01CejAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfakT+7UCeGGzLpFkaWYPr3dq9oYQaDgLfRWqOhEiwWsyr7I+YB028 hZbGYDGBqoHITEZF5oDDCQ3VjZFcxg3Qwvk12AJKc4itgEIY019z4289pIbg2eL4 AbipLoyQn8MKzwAs0VwB4lado0sRIZTuaW4qIJG5fNQGFIKUtYCr+3kR+9evUNCL Z4cpky7ps/0vHdwLWUH5UZCRyJmKtk57uRiNUt1tMb9J8GpFrGNwYeHfMZVHzukW K4kAkPELEABH7LNk+mdd+YmDUAUuQidnfGxJfVfIC0ajrwrPFtxqoTLMNgFJdLuh NajLdl78hMEk7/RXJFXX5we8o5EP9a6Y -----END CERTIFICATE-----Generated at Sat Apr 26 19:11:03 2025 by rpki-client