$ rpki-client -vvf rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/AWZvx92HXf-g4ZvHPLrajs-aWCc.mft File: AWZvx92HXf-g4ZvHPLrajs-aWCc.mft (raw, json) Hash identifier: aDME7/FTsqP+kPnfkcx0vP7dTX0I1Rno+N5XcmoOwV0= Subject key identifier: F2:22:4A:6F:38:7A:AB:3E:C6:74:23:A8:C9:6C:B0:CF:41:2C:A6:80 Authority key identifier: 01:66:6F:C7:DD:87:5D:FF:A0:E1:9B:C7:3C:BA:DA:8E:CF:9A:58:27 Certificate issuer: /CN=A9129969/serialNumber=01666FC7DD875DFFA0E19BC73CBADA8ECF9A5827 Certificate serial: 017B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWZvx92HXf-g4ZvHPLrajs-aWCc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/AWZvx92HXf-g4ZvHPLrajs-aWCc.mft Manifest number: 0166 Signing time: Fri 25 Apr 2025 03:15:35 +0000 Manifest this update: Fri 25 Apr 2025 03:15:34 +0000 Manifest next update: Fri 02 May 2025 03:15:34 +0000 Files and hashes: 1: AWZvx92HXf-g4ZvHPLrajs-aWCc.crl (hash: Gyx0oIh31+GmHaiB1Fl0yAA6hGIc0687v8P23Rlsp2Y=) 2: 36E93942D6C511EEB512CC7FC4F9AE02.roa (hash: J/FdYg39XgCJ8nqyyiXOfjFTbprUGYfmqvQJ8jAj03A=) 3: 4EC7F2781C6D11EE954FFE11C4F9AE02.roa (hash: w+qinkSXPqfFkGrKujVKRg/K+7W2RknrpOWUP2rWWW8=) 4: 37649AB0D6C511EEB512CC7FC4F9AE02.roa (hash: Yf3syhODw0cAx33YmQD7J4oKJN2R4/9xKFbcxAFrzEc=) 5: A5D7263C1ECB11EE8FEFEE18C4F9AE02.roa (hash: 74FWcR6NsAP5MheQNo+BzCj2nDvP1pHJsxUSbK2vmAE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/AWZvx92HXf-g4ZvHPLrajs-aWCc.crl rsync://rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/AWZvx92HXf-g4ZvHPLrajs-aWCc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWZvx92HXf-g4ZvHPLrajs-aWCc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:15:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 379 (0x17b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129969, serialNumber=01666FC7DD875DFFA0E19BC73CBADA8ECF9A5827 Validity Not Before: Apr 25 03:15:34 2025 GMT Not After : May 2 03:15:34 2025 GMT Subject: CN=680afe56-8aed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:24:71:2f:77:90:6a:10:fb:ce:c2:c5:0f:59: 4d:5f:86:d8:1c:9d:13:ad:c5:3e:43:cb:8d:30:80: 6b:93:3a:5c:a8:ee:89:66:d7:f0:75:c8:4b:88:ba: 6b:6e:24:11:fa:ed:19:73:3f:0f:de:da:9c:8c:7d: 19:8e:38:7e:67:4a:24:e0:81:99:d4:f7:25:63:a4: 2a:f8:8a:a6:dc:cc:07:be:b6:c7:d8:2f:16:b1:ea: 19:fb:17:7c:49:3c:a4:1b:ab:ce:5e:01:89:2f:2c: 91:54:da:43:3f:ec:b0:f9:13:73:2f:19:19:0b:28: 9c:f1:9e:e3:9a:70:26:73:ab:0e:9a:6b:80:e8:39: a3:32:c8:ae:94:e2:e5:e8:b9:ac:56:aa:8e:65:c3: 87:5b:95:13:8f:71:d8:67:67:e5:03:38:75:7b:9d: d1:4b:3e:4d:ce:b5:3d:25:a2:39:c9:36:8c:4c:98: c3:16:36:65:bc:72:0f:b3:9a:f0:ca:59:b2:73:0c: f6:f7:3f:14:b3:92:a3:c0:41:58:0d:33:af:10:c1: 1d:dc:2e:69:18:a4:f6:19:6d:2f:22:8f:b1:2f:22: ce:ab:9f:fe:5f:47:cd:59:1f:33:cb:3d:b6:57:da: 1f:53:63:e0:e7:63:55:60:97:dd:b4:14:31:b5:71: 8c:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:22:4A:6F:38:7A:AB:3E:C6:74:23:A8:C9:6C:B0:CF:41:2C:A6:80 X509v3 Authority Key Identifier: keyid:01:66:6F:C7:DD:87:5D:FF:A0:E1:9B:C7:3C:BA:DA:8E:CF:9A:58:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/AWZvx92HXf-g4ZvHPLrajs-aWCc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWZvx92HXf-g4ZvHPLrajs-aWCc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/AWZvx92HXf-g4ZvHPLrajs-aWCc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:e0:6c:04:5b:96:dc:5c:dc:b1:3a:13:e9:7e:17:cf:42:6b: 41:02:91:1d:0e:e5:f2:bb:54:9b:1c:79:d1:43:57:bd:5e:cd: b7:d4:d4:c3:ce:8c:10:2f:f3:f1:3b:a7:15:fe:4e:f1:57:ed: 80:1e:b0:7c:b0:d8:2a:99:7c:e9:55:41:c3:6d:5b:19:dd:ec: d9:2f:4f:fd:d7:7e:4c:11:ff:fd:72:16:76:10:00:25:e3:b6: 20:ad:9f:59:eb:44:9d:53:1c:13:68:d0:2d:1e:c1:fc:c7:6c: af:a9:e4:a0:86:87:95:2e:0a:0e:2f:95:f7:38:7f:ed:9f:b5: 76:c9:b3:4a:e5:2d:b6:f7:4b:ff:d9:c5:f3:80:a5:02:6f:2f: 02:b7:4e:1e:88:26:07:37:18:60:7e:17:e1:8a:ed:f8:a4:ce: a3:45:c9:e2:57:5d:24:65:b7:a2:a6:d2:6c:2f:cd:f1:ec:18: 75:b8:ca:55:52:da:c3:8b:ec:69:87:e2:42:d3:26:93:10:3d: 1c:70:1f:66:69:c8:22:2c:be:5e:c7:ae:3c:03:1b:96:07:af: ca:b0:dc:09:cb:51:7f:3f:fc:4d:88:34:65:e8:f6:c3:ca:2d: 58:ae:14:a2:5b:8f:5b:93:8e:ec:c0:65:d5:42:79:12:ef:e7: f3:9f:c6:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk5NjkxMTAvBgNVBAUTKDAxNjY2RkM3REQ4NzVERkZBMEUxOUJDNzNDQkFEQThF Q0Y5QTU4MjcwHhcNMjUwNDI1MDMxNTM0WhcNMjUwNTAyMDMxNTM0WjAYMRYwFAYD VQQDEw02ODBhZmU1Ni04YWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArCRxL3eQahD7zsLFD1lNX4bYHJ0TrcU+Q8uNMIBrkzpcqO6JZtfwdchLiLpr biQR+u0Zcz8P3tqcjH0Zjjh+Z0ok4IGZ1PclY6Qq+Iqm3MwHvrbH2C8WseoZ+xd8 STykG6vOXgGJLyyRVNpDP+yw+RNzLxkZCyic8Z7jmnAmc6sOmmuA6DmjMsiulOLl 6LmsVqqOZcOHW5UTj3HYZ2flAzh1e53RSz5NzrU9JaI5yTaMTJjDFjZlvHIPs5rw ylmycwz29z8Us5KjwEFYDTOvEMEd3C5pGKT2GW0vIo+xLyLOq5/+X0fNWR8zyz22 V9ofU2Pg52NVYJfdtBQxtXGMJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPIiSm84 eqs+xnQjqMlssM9BLKaAMB8GA1UdIwQYMBaAFAFmb8fdh13/oOGbxzy62o7Pmlgn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTk2OS9DRjM5NUMzODFD NkExMUVFQkY2MkFDMERDNEY5QUUwMi9BV1p2eDkySFhmLWc0WnZIUExyYWpzLWFX Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FXWnZ4OTJIWGYtZzRadkhQTHJhanMtYVdDYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTk2OS9DRjM5NUMzODFDNkExMUVFQkY2MkFDMERDNEY5QUUwMi9BV1p2eDkySFhm LWc0WnZIUExyYWpzLWFXQ2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAt4GwEW5bcXNyxOhPpfhfPQmtBApEdDuXyu1SbHHnRQ1e9Xs231NTD zowQL/PxO6cV/k7xV+2AHrB8sNgqmXzpVUHDbVsZ3ezZL0/9135MEf/9chZ2EAAl 47YgrZ9Z60SdUxwTaNAtHsH8x2yvqeSghoeVLgoOL5X3OH/tn7V2ybNK5S2290v/ 2cXzgKUCby8Ct04eiCYHNxhgfhfhiu34pM6jRcniV10kZbeiptJsL83x7Bh1uMpV UtrDi+xph+JC0yaTED0ccB9macgiLL5ex648AxuWB6/KsNwJy1F/P/xNiDRl6PbD yi1YrhSiW49bk47swGXVQnkS7+fzn8bs -----END CERTIFICATE-----Generated at Sat Apr 26 16:02:51 2025 by rpki-client