$ rpki-client -vvf rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.mft File: aAYK77v8wH1z211yeLyPJJxX9RU.mft (raw, json) Hash identifier: KIPZviOIc3eQfryWuSRvsdiyoD1gsrfkrfN7CKqhmz4= Subject key identifier: E1:0A:B1:BC:3C:D6:89:C1:A9:42:DE:6E:45:C0:F9:45:30:CB:5E:81 Authority key identifier: 68:06:0A:EF:BB:FC:C0:7D:73:DB:5D:72:78:BC:8F:24:9C:57:F5:15 Certificate issuer: /CN=A912859A/serialNumber=68060AEFBBFCC07D73DB5D7278BC8F249C57F515 Certificate serial: 0391 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aAYK77v8wH1z211yeLyPJJxX9RU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.mft Manifest number: 0386 Signing time: Fri 25 Apr 2025 00:36:31 +0000 Manifest this update: Fri 25 Apr 2025 00:36:30 +0000 Manifest next update: Fri 02 May 2025 00:36:30 +0000 Files and hashes: 1: aAYK77v8wH1z211yeLyPJJxX9RU.crl (hash: x86yOrdyyvDtDBnFurilwcTh+bUHpS6bdaY6tLOd+WA=) 2: 5B639C667CEB11EDA3D10364C4F9AE02.roa (hash: /k7UGLxYpMRjSXOkhilDp1PbyHK35jDBnjLpEab1SqY=) 3: ADBB651E043411ED9F02B325C4F9AE02.roa (hash: nXP2TkV2xaQf8NtZFSYlzBkdLiCf/hTO1Pti6MrwpUU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.crl rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aAYK77v8wH1z211yeLyPJJxX9RU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:36:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 913 (0x391) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912859A, serialNumber=68060AEFBBFCC07D73DB5D7278BC8F249C57F515 Validity Not Before: Apr 25 00:36:30 2025 GMT Not After : May 2 00:36:30 2025 GMT Subject: CN=680ad90f-b2d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:3c:d9:2d:2f:91:71:45:00:09:cc:8e:29:11: 2c:64:4b:63:ec:8c:5e:97:d4:59:d9:59:90:ca:5e: 17:4f:67:e8:b5:9c:7d:21:b4:28:45:af:4c:16:dc: c6:bc:b4:04:aa:ab:d5:e6:15:3d:7d:c6:71:b6:92: 7a:26:79:22:0b:74:23:1c:d7:a9:f6:d7:1d:83:ea: 47:35:50:b0:2a:4c:1e:15:75:41:64:f9:bd:a0:52: 21:c5:22:ec:95:ed:c8:66:b1:5a:bb:79:a6:95:d9: 24:e9:b1:8b:32:ba:9b:8e:72:98:c6:c5:db:31:a6: 1b:c6:d5:dc:18:7f:1b:84:79:18:8f:c1:d0:e4:9e: 94:ec:e2:30:1f:11:1c:7b:45:3c:82:76:b8:df:ee: d7:de:11:a9:29:55:a9:38:7c:1d:08:db:17:2e:dc: 97:ba:9c:a8:95:7d:4a:e5:9b:01:3b:b6:09:4b:73: 0f:4b:c6:e6:4c:23:3b:19:fe:97:fa:bf:fc:48:29: 1c:28:67:05:a6:07:ba:51:3d:0b:3a:2b:f0:71:bb: 84:74:86:7d:8b:b4:43:d0:b7:b3:5c:3d:85:b8:6c: 86:a4:1e:d8:f8:1f:4d:40:32:fb:bc:e1:ed:05:e5: 9d:a2:c0:8d:49:7e:71:c7:b8:99:23:2e:e1:e5:93: 46:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:0A:B1:BC:3C:D6:89:C1:A9:42:DE:6E:45:C0:F9:45:30:CB:5E:81 X509v3 Authority Key Identifier: keyid:68:06:0A:EF:BB:FC:C0:7D:73:DB:5D:72:78:BC:8F:24:9C:57:F5:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aAYK77v8wH1z211yeLyPJJxX9RU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:5c:61:fc:08:bc:ed:67:a0:17:39:cf:7e:05:69:ba:6b:c8: 17:a5:e3:41:46:9d:6c:5f:a9:96:5e:01:5c:04:17:a4:60:f9: a4:6b:22:b9:a2:ca:59:1d:2a:f8:b3:83:57:41:1f:3e:fb:0c: ef:24:d4:e1:8d:61:e0:ff:07:6b:6a:35:aa:48:40:68:73:15: 3e:4c:7d:b9:d6:7e:de:32:e1:f9:94:75:46:87:d7:29:55:47: b0:38:a9:59:38:87:b3:67:0f:70:14:29:26:0d:ac:f0:43:38: c7:71:b3:d8:6e:29:bd:8e:1a:b6:bf:25:a5:70:19:9a:3d:44: db:a2:88:1d:d8:3d:f4:e6:1a:fe:62:5c:16:0d:22:ed:5a:9f: ff:a9:54:8c:21:28:72:da:5f:48:a9:d0:b5:29:12:ea:fc:d4: 9b:9f:1a:f5:17:a5:14:2d:16:aa:2e:57:3c:cb:93:8a:1a:41: 14:d0:bf:9c:5b:a2:c8:61:3a:69:11:fa:54:2d:6e:f0:08:f9: 81:50:5f:25:e6:21:1f:dc:63:2b:d1:af:af:12:46:00:ad:09: 95:cc:7e:27:04:2a:34:75:6d:92:5a:17:d5:66:ad:d0:f9:00: 82:13:a8:4a:56:79:aa:cc:9f:49:2e:f3:05:c2:1b:be:e4:7b: 7d:92:81:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg1OUExMTAvBgNVBAUTKDY4MDYwQUVGQkJGQ0MwN0Q3M0RCNUQ3Mjc4QkM4RjI0 OUM1N0Y1MTUwHhcNMjUwNDI1MDAzNjMwWhcNMjUwNTAyMDAzNjMwWjAYMRYwFAYD VQQDEw02ODBhZDkwZi1iMmQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqTzZLS+RcUUACcyOKREsZEtj7Ixel9RZ2VmQyl4XT2fotZx9IbQoRa9MFtzG vLQEqqvV5hU9fcZxtpJ6JnkiC3QjHNep9tcdg+pHNVCwKkweFXVBZPm9oFIhxSLs le3IZrFau3mmldkk6bGLMrqbjnKYxsXbMaYbxtXcGH8bhHkYj8HQ5J6U7OIwHxEc e0U8gna43+7X3hGpKVWpOHwdCNsXLtyXupyolX1K5ZsBO7YJS3MPS8bmTCM7Gf6X +r/8SCkcKGcFpge6UT0LOivwcbuEdIZ9i7RD0LezXD2FuGyGpB7Y+B9NQDL7vOHt BeWdosCNSX5xx7iZIy7h5ZNGvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOEKsbw8 1onBqULebkXA+UUwy16BMB8GA1UdIwQYMBaAFGgGCu+7/MB9c9tdcni8jyScV/UV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODU5QS9CQUNBQjdFQzlE RkUxMUVDQjg3RjUxNDdDNEY5QUUwMi9hQVlLNzd2OHdIMXoyMTF5ZUx5UEpKeFg5 UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FBWUs3N3Y4d0gxejIxMXllTHlQSkp4WDlSVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODU5QS9CQUNBQjdFQzlERkUxMUVDQjg3RjUxNDdDNEY5QUUwMi9hQVlLNzd2OHdI MXoyMTF5ZUx5UEpKeFg5UlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOXGH8CLztZ6AXOc9+BWm6a8gXpeNBRp1sX6mWXgFcBBekYPmkayK5 ospZHSr4s4NXQR8++wzvJNThjWHg/wdrajWqSEBocxU+TH251n7eMuH5lHVGh9cp VUewOKlZOIezZw9wFCkmDazwQzjHcbPYbim9jhq2vyWlcBmaPUTboogd2D305hr+ YlwWDSLtWp//qVSMIShy2l9IqdC1KRLq/NSbnxr1F6UULRaqLlc8y5OKGkEU0L+c W6LIYTppEfpULW7wCPmBUF8l5iEf3GMr0a+vEkYArQmVzH4nBCo0dW2SWhfVZq3Q +QCCE6hKVnmqzJ9JLvMFwhu+5Ht9koFQ -----END CERTIFICATE-----Generated at Sat Apr 26 15:10:35 2025 by rpki-client