$ rpki-client -vvf rpki.apnic.net/member_repository/A9138271/81F9E2D01C4411EC9B2E6A5FC4F9AE02/AXJLovQFMrfgjXIPTAlmQbShyMQ.mft File: AXJLovQFMrfgjXIPTAlmQbShyMQ.mft (raw, json) Hash identifier: 3gqXjudiO+wKYMLGOoZ8h7aJL7euOItdICTrVIIol6M= Subject key identifier: CA:CE:AD:CE:C6:4D:71:41:06:54:BB:54:8D:DC:4C:AA:CC:1A:1F:65 Authority key identifier: 01:72:4B:A2:F4:05:32:B7:E0:8D:72:0F:4C:09:66:41:B4:A1:C8:C4 Certificate issuer: /CN=A9138271/serialNumber=01724BA2F40532B7E08D720F4C096641B4A1C8C4 Certificate serial: 04CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXJLovQFMrfgjXIPTAlmQbShyMQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138271/81F9E2D01C4411EC9B2E6A5FC4F9AE02/AXJLovQFMrfgjXIPTAlmQbShyMQ.mft Manifest number: 04CA Signing time: Thu 24 Apr 2025 23:35:51 +0000 Manifest this update: Thu 24 Apr 2025 23:35:50 +0000 Manifest next update: Thu 01 May 2025 23:35:50 +0000 Files and hashes: 1: AXJLovQFMrfgjXIPTAlmQbShyMQ.crl (hash: hcEQAp67Wj7kRVlOQvHK3TD0GVeWpCOmZ99GaymRZfY=) 2: BD4D8A2C1C4811ECBAA21A3CC4F9AE02.roa (hash: ACAwTbWxAFnsJHmx19kYwRZ2kYaKIODFxQCzfuXITvo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138271/81F9E2D01C4411EC9B2E6A5FC4F9AE02/AXJLovQFMrfgjXIPTAlmQbShyMQ.crl rsync://rpki.apnic.net/member_repository/A9138271/81F9E2D01C4411EC9B2E6A5FC4F9AE02/AXJLovQFMrfgjXIPTAlmQbShyMQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXJLovQFMrfgjXIPTAlmQbShyMQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:35:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1230 (0x4ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138271, serialNumber=01724BA2F40532B7E08D720F4C096641B4A1C8C4 Validity Not Before: Apr 24 23:35:50 2025 GMT Not After : May 1 23:35:50 2025 GMT Subject: CN=680acad7-bd82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a4:bb:bc:e5:1b:42:0a:b6:50:97:9e:ce:53: 6d:55:2b:23:4a:8c:4a:3c:ff:72:88:b2:86:63:89: c6:0b:6d:e8:c9:6e:e5:b3:a8:c5:dd:70:85:e5:c5: 2c:19:66:b9:32:79:de:6b:9a:73:cd:15:76:da:1c: f2:d4:33:01:cd:51:9b:e1:17:5a:cf:80:6a:ac:35: d6:fc:0b:c2:e1:11:f1:af:fb:dc:fc:dd:8b:76:bb: 45:20:4e:d3:94:19:8f:0b:ea:18:ba:c1:e7:e3:64: 8b:16:38:e0:1d:52:8b:1e:d4:f1:f7:5d:39:86:4c: d7:dc:12:ef:ee:41:db:6e:d4:7b:77:5c:ad:84:83: 27:06:49:f4:46:50:f9:ee:a7:fd:e4:9a:c3:a5:f3: 68:a4:68:c4:96:cb:d0:8b:88:e1:cb:6f:3d:c1:70: 5a:4f:8e:03:03:7d:5c:b2:51:de:8b:56:ac:80:67: c2:66:9f:30:ea:8e:21:45:78:a5:ec:9d:b1:f0:b9: a8:47:56:a3:ae:30:04:ed:d7:57:4b:03:00:30:ad: f5:0a:cc:63:a6:be:25:b6:3a:b8:ed:ed:ff:6d:e3: b5:99:b1:10:44:8d:51:25:7d:eb:b8:d0:ec:d8:36: bb:97:a6:22:3b:0e:a0:b2:94:b1:2e:5a:fa:57:c0: cd:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:CE:AD:CE:C6:4D:71:41:06:54:BB:54:8D:DC:4C:AA:CC:1A:1F:65 X509v3 Authority Key Identifier: keyid:01:72:4B:A2:F4:05:32:B7:E0:8D:72:0F:4C:09:66:41:B4:A1:C8:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138271/81F9E2D01C4411EC9B2E6A5FC4F9AE02/AXJLovQFMrfgjXIPTAlmQbShyMQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXJLovQFMrfgjXIPTAlmQbShyMQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138271/81F9E2D01C4411EC9B2E6A5FC4F9AE02/AXJLovQFMrfgjXIPTAlmQbShyMQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:a0:0a:44:36:a7:c2:7a:bb:b5:61:9c:14:6f:05:24:19:1c: 91:bd:78:55:fc:96:66:f9:00:92:ed:30:27:a3:32:3e:50:f7: 98:37:66:b0:06:ef:ac:6f:0f:5f:0b:eb:8a:e1:b8:d2:66:ff: 56:8d:85:ca:fa:19:01:5b:63:4a:85:68:a6:98:a8:29:9e:8a: 3e:71:7a:53:3b:87:29:ef:03:5b:40:a1:23:39:df:91:d4:a3: 60:75:77:18:66:ff:83:11:14:17:91:12:35:1e:03:8d:68:f0: 52:92:b7:a8:78:b6:c2:d4:72:79:48:4d:5d:af:d1:8c:36:04: 22:94:09:3b:19:da:5c:82:66:59:e0:02:a6:21:96:53:48:01: 72:53:dd:0a:ea:64:74:35:16:7e:24:2b:4e:c6:94:d3:0a:87: da:53:8b:fa:5b:40:c4:15:84:0b:eb:65:8e:78:d7:e8:2d:91: 89:d5:b9:cd:ed:a2:6e:2f:d8:24:65:43:58:6a:3c:cb:32:0a: 27:b9:58:78:e4:43:73:17:7e:37:8d:61:58:b6:a3:9a:6e:4b: c6:6e:82:27:96:99:7f:d8:0e:78:71:2b:a9:7d:03:98:46:d8: b5:79:14:f2:3b:c5:2b:79:78:42:c9:38:9d:89:11:d2:da:04: 7a:f2:d2:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgyNzExMTAvBgNVBAUTKDAxNzI0QkEyRjQwNTMyQjdFMDhENzIwRjRDMDk2NjQx QjRBMUM4QzQwHhcNMjUwNDI0MjMzNTUwWhcNMjUwNTAxMjMzNTUwWjAYMRYwFAYD VQQDEw02ODBhY2FkNy1iZDgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwKS7vOUbQgq2UJeezlNtVSsjSoxKPP9yiLKGY4nGC23oyW7ls6jF3XCF5cUs GWa5Mnnea5pzzRV22hzy1DMBzVGb4Rdaz4BqrDXW/AvC4RHxr/vc/N2LdrtFIE7T lBmPC+oYusHn42SLFjjgHVKLHtTx9105hkzX3BLv7kHbbtR7d1ythIMnBkn0RlD5 7qf95JrDpfNopGjElsvQi4jhy289wXBaT44DA31cslHei1asgGfCZp8w6o4hRXil 7J2x8LmoR1ajrjAE7ddXSwMAMK31Csxjpr4ltjq47e3/beO1mbEQRI1RJX3ruNDs 2Da7l6YiOw6gspSxLlr6V8DNxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMrOrc7G TXFBBlS7VI3cTKrMGh9lMB8GA1UdIwQYMBaAFAFyS6L0BTK34I1yD0wJZkG0ocjE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODI3MS84MUY5RTJEMDFD NDQxMUVDOUIyRTZBNUZDNEY5QUUwMi9BWEpMb3ZRRk1yZmdqWElQVEFsbVFiU2h5 TVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FYSkxvdlFGTXJmZ2pYSVBUQWxtUWJTaHlNUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODI3MS84MUY5RTJEMDFDNDQxMUVDOUIyRTZBNUZDNEY5QUUwMi9BWEpMb3ZRRk1y ZmdqWElQVEFsbVFiU2h5TVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmoApENqfCeru1YZwUbwUkGRyRvXhV/JZm+QCS7TAnozI+UPeYN2aw Bu+sbw9fC+uK4bjSZv9WjYXK+hkBW2NKhWimmKgpnoo+cXpTO4cp7wNbQKEjOd+R 1KNgdXcYZv+DERQXkRI1HgONaPBSkreoeLbC1HJ5SE1dr9GMNgQilAk7GdpcgmZZ 4AKmIZZTSAFyU90K6mR0NRZ+JCtOxpTTCofaU4v6W0DEFYQL62WOeNfoLZGJ1bnN 7aJuL9gkZUNYajzLMgonuVh45ENzF343jWFYtqOabkvGboInlpl/2A54cSupfQOY Rti1eRTyO8UreXhCyTidiRHS2gR68tIy -----END CERTIFICATE-----Generated at Sat Apr 26 16:54:52 2025 by rpki-client