$ rpki-client -vvf rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.mft File: asqbm3MwkHBq_T-FI8wMwYzWjjE.mft (raw, json) Hash identifier: Fso0maxUQS7NUeFkjaUWcWUPMRv8FGRfKAyclecP40Y= Subject key identifier: F8:55:5F:FA:C2:8F:98:7F:66:5C:D0:43:27:98:9D:37:44:C7:B9:88 Authority key identifier: 6A:CA:9B:9B:73:30:90:70:6A:FD:3F:85:23:CC:0C:C1:8C:D6:8E:31 Certificate issuer: /CN=A9130EA4/serialNumber=6ACA9B9B733090706AFD3F8523CC0CC18CD68E31 Certificate serial: 0BB1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asqbm3MwkHBq_T-FI8wMwYzWjjE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.mft Manifest number: 0BA6 Signing time: Thu 24 Apr 2025 18:53:46 +0000 Manifest this update: Thu 24 Apr 2025 18:53:46 +0000 Manifest next update: Thu 01 May 2025 18:53:46 +0000 Files and hashes: 1: asqbm3MwkHBq_T-FI8wMwYzWjjE.crl (hash: +N8my4Laun9Ysw0GbEep4J+tzoZADOhc7LPvEwzKzUE=) 2: 08754752218611EAA5DF883CC4F9AE02.roa (hash: gxdwZieFTn54JsEYN33sdU/rLYZSttG97jPAuU0togE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.crl rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asqbm3MwkHBq_T-FI8wMwYzWjjE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:53:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2993 (0xbb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130EA4, serialNumber=6ACA9B9B733090706AFD3F8523CC0CC18CD68E31 Validity Not Before: Apr 24 18:53:46 2025 GMT Not After : May 1 18:53:46 2025 GMT Subject: CN=680a88ba-bd4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:51:5a:61:50:53:18:2e:2a:a2:3b:ab:e4:77: 0a:cd:62:ed:c8:4e:fc:3c:49:0a:80:f3:d0:86:26: 87:7e:2d:01:a2:65:53:b1:a6:d0:2e:a4:cf:75:f3: 66:23:8b:08:24:59:85:eb:43:5c:be:67:40:a4:2e: f0:a6:6b:1e:d3:d9:7d:d9:d9:55:b1:3d:2b:b0:ef: 11:b3:24:dc:90:0f:93:82:fc:47:f2:01:6f:28:d3: 6e:cf:fa:02:99:ce:11:1e:21:67:03:5d:6b:bd:97: 12:91:78:a5:cd:92:93:b4:19:9e:8e:e5:7e:5b:2b: 8e:0c:6c:e3:c5:48:a8:e7:ea:ca:04:e9:59:d6:3b: b4:49:ad:b8:63:17:94:72:24:a5:7f:c6:03:e8:ab: 66:b4:63:fc:c4:c9:40:88:f7:cd:72:c0:8a:27:11: 92:13:61:ca:3c:89:f4:d9:90:d2:7c:70:c9:04:59: 00:0b:3e:5b:c5:0a:fc:44:51:1f:cf:ef:8a:8c:9d: 12:eb:d3:ff:66:48:95:01:6d:1a:bc:a6:bc:72:8d: f2:99:33:d0:db:db:33:5b:f0:25:e4:c4:aa:85:d9: 08:3c:cb:b8:a5:6f:42:f5:0b:6b:8c:82:ce:1e:5c: 15:ef:5b:4d:a0:e1:8c:65:69:c3:11:a2:33:c4:3e: 44:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:55:5F:FA:C2:8F:98:7F:66:5C:D0:43:27:98:9D:37:44:C7:B9:88 X509v3 Authority Key Identifier: keyid:6A:CA:9B:9B:73:30:90:70:6A:FD:3F:85:23:CC:0C:C1:8C:D6:8E:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asqbm3MwkHBq_T-FI8wMwYzWjjE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:ef:e4:b7:49:e2:3d:60:a5:3e:35:c1:f8:bd:43:2f:1e:d9: 43:11:a7:14:46:16:ef:8d:29:77:be:db:48:88:67:3a:b8:f5: a0:16:c2:ce:1f:f3:40:35:e1:8c:90:91:36:d6:42:5d:b5:87: 63:42:25:a5:75:47:39:97:ea:0f:75:2c:a8:29:fc:a0:27:3e: 83:4d:62:12:86:10:19:f6:2a:f5:12:50:ae:ae:e5:62:18:a1: e6:18:e4:df:a6:9b:60:4e:3f:71:7b:9f:8f:2f:b5:6f:fb:7c: 48:74:f4:61:1a:6a:8c:55:38:52:9c:4a:5d:8c:6f:90:33:de: d7:2a:85:53:46:14:7f:da:18:a8:4e:3f:54:b9:17:5b:aa:3f: 0b:66:db:68:f1:cf:ee:57:97:a4:0f:04:f2:13:49:70:0d:98: ea:a2:5d:e3:6c:48:0b:4a:cf:8d:52:27:1e:c9:49:da:35:dc: b0:19:74:ba:a0:22:f9:af:db:e5:c9:78:d5:29:f1:61:9c:be: ef:4f:86:20:0e:aa:43:d8:aa:ec:28:bb:45:58:a6:ed:82:e6: b7:ee:6b:91:81:ef:7c:cb:6d:1e:a4:7d:c9:df:8d:4b:9b:45: fc:2e:0f:9d:91:9b:ab:e3:75:5f:e7:b8:3b:f1:7a:f2:51:6f: 7a:22:f4:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC7EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzBFQTQxMTAvBgNVBAUTKDZBQ0E5QjlCNzMzMDkwNzA2QUZEM0Y4NTIzQ0MwQ0Mx OENENjhFMzEwHhcNMjUwNDI0MTg1MzQ2WhcNMjUwNTAxMTg1MzQ2WjAYMRYwFAYD VQQDEw02ODBhODhiYS1iZDRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy1FaYVBTGC4qojur5HcKzWLtyE78PEkKgPPQhiaHfi0BomVTsabQLqTPdfNm I4sIJFmF60NcvmdApC7wpmse09l92dlVsT0rsO8RsyTckA+TgvxH8gFvKNNuz/oC mc4RHiFnA11rvZcSkXilzZKTtBmejuV+WyuODGzjxUio5+rKBOlZ1ju0Sa24YxeU ciSlf8YD6KtmtGP8xMlAiPfNcsCKJxGSE2HKPIn02ZDSfHDJBFkACz5bxQr8RFEf z++KjJ0S69P/ZkiVAW0avKa8co3ymTPQ29szW/Al5MSqhdkIPMu4pW9C9QtrjILO HlwV71tNoOGMZWnDEaIzxD5EqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPhVX/rC j5h/ZlzQQyeYnTdEx7mIMB8GA1UdIwQYMBaAFGrKm5tzMJBwav0/hSPMDMGM1o4x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEVBNC9CNjJDQ0U4MDIx ODQxMUVBQTJEMDQxM0FDNEY5QUUwMi9hc3FibTNNd2tIQnFfVC1GSTh3TXdZeldq akUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FzcWJtM013a0hCcV9ULUZJOHdNd1l6V2pqRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MEVBNC9CNjJDQ0U4MDIxODQxMUVBQTJEMDQxM0FDNEY5QUUwMi9hc3FibTNNd2tI QnFfVC1GSTh3TXdZeldqakUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAG7+S3SeI9YKU+NcH4vUMvHtlDEacURhbvjSl3vttIiGc6uPWgFsLO H/NANeGMkJE21kJdtYdjQiWldUc5l+oPdSyoKfygJz6DTWIShhAZ9ir1ElCuruVi GKHmGOTfpptgTj9xe5+PL7Vv+3xIdPRhGmqMVThSnEpdjG+QM97XKoVTRhR/2hio Tj9UuRdbqj8LZtto8c/uV5ekDwTyE0lwDZjqol3jbEgLSs+NUiceyUnaNdywGXS6 oCL5r9vlyXjVKfFhnL7vT4YgDqpD2KrsKLtFWKbtgua37muRge98y20epH3J341L m0X8Lg+dkZur43Vf57g78XryUW96IvRZ -----END CERTIFICATE-----Generated at Sat Apr 26 17:11:38 2025 by rpki-client