$ rpki-client -vvf rpki.apnic.net/member_repository/A913D125/FE778EC8CC1011EF87396A6EC4F9AE02/Ae2EH7lRqvolkYDvkpnk02_ffD0.mft File: Ae2EH7lRqvolkYDvkpnk02_ffD0.mft (raw, json) Hash identifier: VAIPTD9M5Ivlz/2rU0gAIEHXS8Dj7vDLyEQ/CgG28oY= Subject key identifier: D5:AF:81:B6:9A:97:4B:AD:5D:7B:29:BC:EE:D0:34:F5:08:0A:5A:DB Authority key identifier: 01:ED:84:1F:B9:51:AA:FA:25:91:80:EF:92:99:E4:D3:6F:DF:7C:3D Certificate issuer: /CN=A913D125/serialNumber=01ED841FB951AAFA259180EF9299E4D36FDF7C3D Certificate serial: 3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae2EH7lRqvolkYDvkpnk02_ffD0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D125/FE778EC8CC1011EF87396A6EC4F9AE02/Ae2EH7lRqvolkYDvkpnk02_ffD0.mft Manifest number: 3A Signing time: Fri 25 Apr 2025 06:31:26 +0000 Manifest this update: Fri 25 Apr 2025 06:31:26 +0000 Manifest next update: Fri 02 May 2025 06:31:26 +0000 Files and hashes: 1: Ae2EH7lRqvolkYDvkpnk02_ffD0.crl (hash: 6qrQSQcgLrf/XBSdhqT+D9EqG2VfA7v5dMpVtwjGQ2Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D125/FE778EC8CC1011EF87396A6EC4F9AE02/Ae2EH7lRqvolkYDvkpnk02_ffD0.crl rsync://rpki.apnic.net/member_repository/A913D125/FE778EC8CC1011EF87396A6EC4F9AE02/Ae2EH7lRqvolkYDvkpnk02_ffD0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae2EH7lRqvolkYDvkpnk02_ffD0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:31:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58 (0x3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D125, serialNumber=01ED841FB951AAFA259180EF9299E4D36FDF7C3D Validity Not Before: Apr 25 06:31:26 2025 GMT Not After : May 2 06:31:26 2025 GMT Subject: CN=680b2c3e-e0ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ad:27:78:2d:c0:1e:83:1c:a1:1b:f9:53:29: 3e:70:a9:ee:64:2b:9a:b6:f7:c4:df:5c:f5:3a:93: a3:bf:10:2d:6f:44:ed:d4:e8:41:5c:33:2b:2e:ab: 80:c3:fa:b3:e8:f6:a0:6e:d3:b4:67:e5:db:1c:a3: 07:51:b4:d2:dc:4c:0f:9f:d1:db:9a:bd:7f:a2:88: 82:9e:25:16:e0:75:64:40:78:e4:88:9d:86:c1:83: 5f:b8:16:d5:65:b4:78:ee:de:90:cc:22:4b:6f:6d: 17:0a:0e:b1:c9:fd:62:5f:33:52:e8:78:26:cd:24: 76:f8:e6:6a:64:b0:b6:f9:e4:c5:e2:79:37:6d:96: 59:21:9a:54:20:65:6f:bd:96:95:d3:89:87:09:cc: 9b:b8:31:d4:35:e8:7e:77:2d:aa:5e:e5:6e:8b:37: 2a:65:6a:37:7d:27:22:2a:59:0c:d5:56:8e:36:65: 54:04:b6:dd:27:23:b3:0f:ed:23:0d:1e:1c:98:68: 20:ee:eb:8c:ac:fc:89:ad:12:0f:f7:e9:fc:0d:93: 42:b6:fc:2c:8a:da:86:78:69:6b:b3:21:32:99:75: b4:b3:a5:54:22:01:18:a5:84:05:8c:0a:5e:1c:da: 90:07:e0:3e:ac:27:1e:32:ae:03:68:0c:5e:47:0e: 9b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:AF:81:B6:9A:97:4B:AD:5D:7B:29:BC:EE:D0:34:F5:08:0A:5A:DB X509v3 Authority Key Identifier: keyid:01:ED:84:1F:B9:51:AA:FA:25:91:80:EF:92:99:E4:D3:6F:DF:7C:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D125/FE778EC8CC1011EF87396A6EC4F9AE02/Ae2EH7lRqvolkYDvkpnk02_ffD0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae2EH7lRqvolkYDvkpnk02_ffD0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D125/FE778EC8CC1011EF87396A6EC4F9AE02/Ae2EH7lRqvolkYDvkpnk02_ffD0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:82:8f:fa:21:7d:88:a6:3e:9e:f5:3e:24:8d:1f:94:dc:9c: bd:36:62:d6:51:8e:f6:d1:62:1c:a5:cf:0a:29:5b:3b:78:20: 3b:cf:e7:9f:fa:b6:f6:4a:f1:ce:ef:40:97:c8:10:90:16:67: ef:f5:42:7e:3d:6a:ae:67:b3:2f:54:df:9f:0a:b2:08:ad:cb: 10:23:ec:ff:87:6a:6d:12:5a:a6:83:f3:77:8d:ff:33:78:d3: a9:ab:2c:b6:02:59:bf:e2:8d:af:c9:aa:e6:2f:1f:ff:23:4f: 4a:a9:f1:58:d8:71:d5:79:63:af:50:c4:58:4b:a5:90:2e:cd: f6:05:b4:ee:3c:5c:a8:2e:18:17:6f:c8:a7:13:86:31:2d:13: 2f:6a:f7:d9:69:3a:a2:4c:f7:db:ec:5e:b7:52:e6:32:6e:40: ae:b6:66:a0:50:64:64:96:e2:43:5c:df:6d:f4:a6:82:89:5d: 91:8c:b7:fc:26:be:88:42:ef:3f:25:c1:c8:3a:a2:34:36:c4: 04:c3:bd:21:7c:67:57:6e:c1:d1:94:9e:60:3a:89:e5:3b:05: 3f:c6:b8:59:22:3d:1f:6a:4e:c4:64:bc:d8:de:4f:3e:9d:19: 63:96:72:02:a2:b6:3e:e7:85:0b:94:26:ca:9d:04:8d:f4:32: 7d:7c:01:92 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RDEyNTExMC8GA1UEBRMoMDFFRDg0MUZCOTUxQUFGQTI1OTE4MEVGOTI5OUU0RDM2 RkRGN0MzRDAeFw0yNTA0MjUwNjMxMjZaFw0yNTA1MDIwNjMxMjZaMBgxFjAUBgNV BAMTDTY4MGIyYzNlLWUwY2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDarSd4LcAegxyhG/lTKT5wqe5kK5q298TfXPU6k6O/EC1vRO3U6EFcMysuq4DD +rPo9qBu07Rn5dscowdRtNLcTA+f0duavX+iiIKeJRbgdWRAeOSInYbBg1+4FtVl tHju3pDMIktvbRcKDrHJ/WJfM1LoeCbNJHb45mpksLb55MXieTdtllkhmlQgZW+9 lpXTiYcJzJu4MdQ16H53Lape5W6LNyplajd9JyIqWQzVVo42ZVQEtt0nI7MP7SMN HhyYaCDu64ys/ImtEg/36fwNk0K2/CyK2oZ4aWuzITKZdbSzpVQiARilhAWMCl4c 2pAH4D6sJx4yrgNoDF5HDpupAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1a+BtpqX S61deym87tA09QgKWtswHwYDVR0jBBgwFoAUAe2EH7lRqvolkYDvkpnk02/ffD0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNEMTI1L0ZFNzc4RUM4Q0Mx MDExRUY4NzM5NkE2RUM0RjlBRTAyL0FlMkVIN2xScXZvbGtZRHZrcG5rMDJfZmZE MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQWUyRUg3bFJxdm9sa1lEdmtwbmswMl9mZkQwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNE MTI1L0ZFNzc4RUM4Q0MxMDExRUY4NzM5NkE2RUM0RjlBRTAyL0FlMkVIN2xScXZv bGtZRHZrcG5rMDJfZmZEMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKCCj/ohfYimPp71PiSNH5TcnL02YtZRjvbRYhylzwopWzt4IDvP55/6 tvZK8c7vQJfIEJAWZ+/1Qn49aq5nsy9U358KsgityxAj7P+Ham0SWqaD83eN/zN4 06mrLLYCWb/ija/JquYvH/8jT0qp8VjYcdV5Y69QxFhLpZAuzfYFtO48XKguGBdv yKcThjEtEy9q99lpOqJM99vsXrdS5jJuQK62ZqBQZGSW4kNc3230poKJXZGMt/wm vohC7z8lwcg6ojQ2xATDvSF8Z1duwdGUnmA6ieU7BT/GuFkiPR9qTsRkvNjeTz6d GWOWcgKitj7nhQuUJsqdBI30Mn18AZI= -----END CERTIFICATE-----Generated at Sat Apr 26 15:20:00 2025 by rpki-client