$ rpki-client -vvf rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.mft File: A2exVIJlFyUqY-y0w4aTXLe9NA4.mft (raw, json) Hash identifier: j+LWA2CGLVPAaMj9k1ShhbRYsRAc9zuldNRUqzabpcg= Subject key identifier: 5F:E4:5B:C8:CE:C9:AD:EF:00:26:4E:14:5D:9F:93:C7:65:36:42:EA Authority key identifier: 03:67:B1:54:82:65:17:25:2A:63:EC:B4:C3:86:93:5C:B7:BD:34:0E Certificate issuer: /CN=A913CA90/serialNumber=0367B154826517252A63ECB4C386935CB7BD340E Certificate serial: 0447 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2exVIJlFyUqY-y0w4aTXLe9NA4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.mft Manifest number: 0443 Signing time: Fri 25 Apr 2025 00:01:29 +0000 Manifest this update: Fri 25 Apr 2025 00:01:28 +0000 Manifest next update: Fri 02 May 2025 00:01:28 +0000 Files and hashes: 1: A2exVIJlFyUqY-y0w4aTXLe9NA4.crl (hash: ugddkTvkMkjUQzgFxeC6+jprgCIsJcsrCS3J/vlLNK8=) 2: 683A9D3A52EF11EC83A5744EC4F9AE02.roa (hash: keS/qF291Tz7YIPilf3yxYGs5lMrsj9UecsgrxwbjY0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.crl rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2exVIJlFyUqY-y0w4aTXLe9NA4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1095 (0x447) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913CA90, serialNumber=0367B154826517252A63ECB4C386935CB7BD340E Validity Not Before: Apr 25 00:01:28 2025 GMT Not After : May 2 00:01:28 2025 GMT Subject: CN=680ad0d8-b4c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:9f:8f:29:0c:93:27:45:4e:ff:86:71:42:58: 45:c3:49:f4:d4:6e:b1:0c:8c:a6:fa:61:66:a3:89: 90:75:97:77:8e:ba:04:cc:c9:51:1e:e9:0c:a4:28: 2e:95:c9:5f:e5:f9:57:0b:af:41:69:97:c6:02:2b: f8:b8:13:2f:7a:82:0e:e9:ed:ac:d9:47:3f:99:06: ec:e4:d1:ec:72:00:68:7f:20:28:7d:9d:6b:eb:3b: f4:b8:54:e5:0c:78:e0:6e:b2:53:1e:f0:d6:bb:17: 58:5d:ca:38:d7:ec:ec:bc:90:12:89:ea:07:62:f5: c6:20:15:ab:ff:cb:a8:20:d8:ab:f9:26:49:c5:e4: e7:10:42:70:5f:7c:85:e0:21:cd:4c:1a:27:dd:99: 19:6b:d3:51:6f:ff:29:ee:b8:8c:cd:0d:69:24:10: 97:8d:18:c5:fe:3e:45:37:cf:b8:d3:47:8c:f0:94: 8a:66:9b:e8:8c:12:99:15:a0:29:fd:81:e7:bb:2c: 09:87:b0:7e:a6:00:8e:2a:af:0b:eb:bf:f1:84:fb: 7b:49:5d:bc:2b:2e:8f:f3:34:f6:b9:30:ae:bf:cb: b3:c9:8b:a5:21:eb:a3:cf:a0:d1:29:e4:77:82:8f: 68:63:f3:76:50:c6:ef:32:4b:2e:13:bd:ea:54:e2: 9b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:E4:5B:C8:CE:C9:AD:EF:00:26:4E:14:5D:9F:93:C7:65:36:42:EA X509v3 Authority Key Identifier: keyid:03:67:B1:54:82:65:17:25:2A:63:EC:B4:C3:86:93:5C:B7:BD:34:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2exVIJlFyUqY-y0w4aTXLe9NA4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:83:05:d2:a4:44:61:14:01:41:6d:76:44:b9:aa:7d:29:55: 41:b6:81:02:7f:ce:e0:15:0a:53:0f:98:9e:98:f2:88:ce:ae: 52:93:dc:21:37:eb:b4:8a:92:cf:4f:5b:55:28:5e:8a:96:44: 87:5a:43:b4:06:00:74:92:cb:39:30:49:ef:0b:ed:e5:41:a2: db:59:70:0c:33:e9:8b:a0:be:3d:ef:3f:f4:d8:d6:bc:2f:de: 46:06:5d:17:22:0a:19:ec:51:75:00:1d:14:06:71:5e:d8:b6: cd:0a:d7:dc:e3:68:86:8c:10:11:eb:10:db:fe:f5:05:f3:d5: d4:50:8f:0d:85:b1:a2:d7:07:09:84:01:05:8f:0c:c1:3a:93: 20:48:5e:f0:80:b6:cb:51:55:b5:b2:63:80:2d:05:18:ca:12: 63:a8:c3:2f:e7:dc:21:0f:7e:bd:89:90:da:1d:28:3c:c3:61: 9c:04:fb:a0:5b:f8:f0:92:3f:52:ac:96:16:ad:97:72:af:b0: 1a:42:77:80:c7:69:39:59:ef:b5:07:f9:e6:e4:25:82:45:ed: a9:ca:c4:02:f1:3b:a1:24:00:5e:83:57:44:6f:0b:07:43:99: 81:9c:97:73:c1:9a:f4:54:57:b7:e6:4d:b4:2b:40:d3:c9:69: 61:3d:a0:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0NBOTAxMTAvBgNVBAUTKDAzNjdCMTU0ODI2NTE3MjUyQTYzRUNCNEMzODY5MzVD QjdCRDM0MEUwHhcNMjUwNDI1MDAwMTI4WhcNMjUwNTAyMDAwMTI4WjAYMRYwFAYD VQQDEw02ODBhZDBkOC1iNGM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnZ+PKQyTJ0VO/4ZxQlhFw0n01G6xDIym+mFmo4mQdZd3jroEzMlRHukMpCgu lclf5flXC69BaZfGAiv4uBMveoIO6e2s2Uc/mQbs5NHscgBofyAofZ1r6zv0uFTl DHjgbrJTHvDWuxdYXco41+zsvJASieoHYvXGIBWr/8uoINir+SZJxeTnEEJwX3yF 4CHNTBon3ZkZa9NRb/8p7riMzQ1pJBCXjRjF/j5FN8+400eM8JSKZpvojBKZFaAp /YHnuywJh7B+pgCOKq8L67/xhPt7SV28Ky6P8zT2uTCuv8uzyYulIeujz6DRKeR3 go9oY/N2UMbvMksuE73qVOKbnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF/kW8jO ya3vACZOFF2fk8dlNkLqMB8GA1UdIwQYMBaAFANnsVSCZRclKmPstMOGk1y3vTQO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0E5MC8yNUUzQkJCNDUy RUIxMUVDODk2OUU3NDRDNEY5QUUwMi9BMmV4VklKbEZ5VXFZLXkwdzRhVFhMZTlO QTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0EyZXhWSUpsRnlVcVkteTB3NGFUWExlOU5BNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Q0E5MC8yNUUzQkJCNDUyRUIxMUVDODk2OUU3NDRDNEY5QUUwMi9BMmV4VklKbEZ5 VXFZLXkwdzRhVFhMZTlOQTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKgwXSpERhFAFBbXZEuap9KVVBtoECf87gFQpTD5iemPKIzq5Sk9wh N+u0ipLPT1tVKF6KlkSHWkO0BgB0kss5MEnvC+3lQaLbWXAMM+mLoL497z/02Na8 L95GBl0XIgoZ7FF1AB0UBnFe2LbNCtfc42iGjBAR6xDb/vUF89XUUI8NhbGi1wcJ hAEFjwzBOpMgSF7wgLbLUVW1smOALQUYyhJjqMMv59whD369iZDaHSg8w2GcBPug W/jwkj9SrJYWrZdyr7AaQneAx2k5We+1B/nm5CWCRe2pysQC8TuhJABeg1dEbwsH Q5mBnJdzwZr0VFe35k20K0DTyWlhPaC+ -----END CERTIFICATE-----Generated at Sat Apr 26 04:33:27 2025 by rpki-client