$ rpki-client -vvf rpki.apnic.net/member_repository/A9144BAD/D5D74346047811EBA7BD3A48C4F9AE02/AyrCJB0Yz7vBwzyt9ej2VUEtSos.mft File: AyrCJB0Yz7vBwzyt9ej2VUEtSos.mft (raw, json) Hash identifier: +dM9CzHzqJX8v1h1zhS/CM1EuR5PMvshCDFY1eyvoRk= Subject key identifier: AD:B9:B2:0A:17:A1:88:2B:17:FF:EA:72:62:04:C8:31:AC:07:C0:04 Authority key identifier: 03:2A:C2:24:1D:18:CF:BB:C1:C3:3C:AD:F5:E8:F6:55:41:2D:4A:8B Certificate issuer: /CN=A9144BAD/serialNumber=032AC2241D18CFBBC1C33CADF5E8F655412D4A8B Certificate serial: 0798 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AyrCJB0Yz7vBwzyt9ej2VUEtSos.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144BAD/D5D74346047811EBA7BD3A48C4F9AE02/AyrCJB0Yz7vBwzyt9ej2VUEtSos.mft Manifest number: 0793 Signing time: Thu 24 Apr 2025 21:08:29 +0000 Manifest this update: Thu 24 Apr 2025 21:08:28 +0000 Manifest next update: Thu 01 May 2025 21:08:28 +0000 Files and hashes: 1: AyrCJB0Yz7vBwzyt9ej2VUEtSos.crl (hash: vLxowN+8+VItLHqvo1D0BEhG/0soSNsy+YYsHVJqteQ=) 2: D3D1C19E0F2111EBBC6E5028C4F9AE02.roa (hash: MXW87fZ4qznNog7Mqv1dybumPTtWHlhfVDxRXuxWlk8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144BAD/D5D74346047811EBA7BD3A48C4F9AE02/AyrCJB0Yz7vBwzyt9ej2VUEtSos.crl rsync://rpki.apnic.net/member_repository/A9144BAD/D5D74346047811EBA7BD3A48C4F9AE02/AyrCJB0Yz7vBwzyt9ej2VUEtSos.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AyrCJB0Yz7vBwzyt9ej2VUEtSos.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:08:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1944 (0x798) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144BAD, serialNumber=032AC2241D18CFBBC1C33CADF5E8F655412D4A8B Validity Not Before: Apr 24 21:08:28 2025 GMT Not After : May 1 21:08:28 2025 GMT Subject: CN=680aa84c-86a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:1c:95:63:1c:05:43:2e:eb:00:b9:63:60:7f: 93:03:41:12:6e:c0:72:cc:2f:c7:be:ff:fe:69:ad: f4:4d:87:5c:97:41:7d:54:c7:d6:a8:95:a2:7d:2a: 55:f9:ca:98:28:db:90:c7:80:91:e6:f7:62:a3:f6: 21:10:84:8b:80:37:4f:49:d5:97:d0:95:47:2d:6d: 2d:0d:a9:bc:9d:39:d5:51:20:25:5f:8c:b0:b8:61: 72:69:c4:28:f1:96:b0:ea:22:0e:79:c4:30:eb:cd: a7:8b:57:11:df:f4:76:dc:b1:63:ca:e6:91:c1:78: d3:e0:10:03:d0:bf:b1:22:ab:3b:e8:a1:4f:6a:1d: 8b:aa:59:75:85:ba:d4:cb:de:e4:25:cc:83:be:ee: fa:00:d0:ac:8f:fa:a0:3a:78:88:55:16:f7:61:34: e1:1a:19:a9:70:61:8e:8f:c2:3f:60:3f:b3:da:91: 51:fb:78:15:1e:f4:b6:75:23:61:e7:8a:fd:6f:39: 90:dd:5a:1f:0d:5a:0f:fa:cd:66:8a:67:b0:89:a4: 8f:88:12:73:39:d7:ec:d5:dd:1f:a0:ec:d4:44:3f: f4:56:08:1c:54:42:cc:c6:ec:b3:89:f8:d4:66:6d: 2d:a6:79:b1:33:4d:a6:01:b9:2a:2e:53:cb:5d:42: 76:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:B9:B2:0A:17:A1:88:2B:17:FF:EA:72:62:04:C8:31:AC:07:C0:04 X509v3 Authority Key Identifier: keyid:03:2A:C2:24:1D:18:CF:BB:C1:C3:3C:AD:F5:E8:F6:55:41:2D:4A:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144BAD/D5D74346047811EBA7BD3A48C4F9AE02/AyrCJB0Yz7vBwzyt9ej2VUEtSos.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AyrCJB0Yz7vBwzyt9ej2VUEtSos.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144BAD/D5D74346047811EBA7BD3A48C4F9AE02/AyrCJB0Yz7vBwzyt9ej2VUEtSos.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:0b:84:1b:31:c7:56:d6:7b:b7:07:7d:b5:cb:0c:3d:49:35: 75:1c:ec:2d:5c:94:cb:44:02:1b:f7:4e:d7:d0:c3:85:bb:6f: 4c:f4:51:c0:9d:cc:46:44:bc:88:ee:60:a1:6d:7a:ec:a9:a5: 9d:56:7e:df:24:e8:75:05:9f:1f:1a:29:53:0e:95:60:ba:ac: f5:d3:bb:4e:9c:22:fb:bb:21:69:00:94:eb:a5:27:3c:17:3f: ca:16:07:27:0f:18:a2:6c:cf:3a:d8:b5:53:69:ab:8c:cd:f2: 16:af:34:8f:02:2d:c3:aa:4a:2f:11:6d:6f:6f:eb:ae:49:db: 9b:4b:50:cd:04:0a:72:7f:7c:1f:33:2b:32:f0:36:46:77:8f: 89:17:83:20:09:ad:20:3e:88:32:70:79:b3:19:16:81:e2:09: 86:97:a4:7a:2c:80:64:52:fd:f1:2a:85:96:09:4f:52:aa:d9: 51:26:ae:16:d0:72:a6:c0:40:9d:94:1a:e5:e7:66:27:7e:9c: 29:9e:39:0f:d3:51:3a:4b:41:43:d8:be:75:2f:4a:9a:2e:3f: 3f:d9:54:34:04:56:73:ad:fc:fc:84:a6:55:f4:97:dd:56:f9: 14:8b:ae:fd:14:e3:40:10:55:b7:f0:34:ea:38:cc:a1:44:7a: 85:af:e4:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRCQUQxMTAvBgNVBAUTKDAzMkFDMjI0MUQxOENGQkJDMUMzM0NBREY1RThGNjU1 NDEyRDRBOEIwHhcNMjUwNDI0MjEwODI4WhcNMjUwNTAxMjEwODI4WjAYMRYwFAYD VQQDEw02ODBhYTg0Yy04NmE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAphyVYxwFQy7rALljYH+TA0ESbsByzC/Hvv/+aa30TYdcl0F9VMfWqJWifSpV +cqYKNuQx4CR5vdio/YhEISLgDdPSdWX0JVHLW0tDam8nTnVUSAlX4ywuGFyacQo 8Zaw6iIOecQw682ni1cR3/R23LFjyuaRwXjT4BAD0L+xIqs76KFPah2Lqll1hbrU y97kJcyDvu76ANCsj/qgOniIVRb3YTThGhmpcGGOj8I/YD+z2pFR+3gVHvS2dSNh 54r9bzmQ3VofDVoP+s1mimewiaSPiBJzOdfs1d0foOzURD/0VggcVELMxuyzifjU Zm0tpnmxM02mAbkqLlPLXUJ2UwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK25sgoX oYgrF//qcmIEyDGsB8AEMB8GA1UdIwQYMBaAFAMqwiQdGM+7wcM8rfXo9lVBLUqL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEJBRC9ENUQ3NDM0NjA0 NzgxMUVCQTdCRDNBNDhDNEY5QUUwMi9BeXJDSkIwWXo3dkJ3enl0OWVqMlZVRXRT b3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0F5ckNKQjBZejd2Qnd6eXQ5ZWoyVlVFdFNvcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NEJBRC9ENUQ3NDM0NjA0NzgxMUVCQTdCRDNBNDhDNEY5QUUwMi9BeXJDSkIwWXo3 dkJ3enl0OWVqMlZVRXRTb3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+C4QbMcdW1nu3B321yww9STV1HOwtXJTLRAIb907X0MOFu29M9FHA ncxGRLyI7mChbXrsqaWdVn7fJOh1BZ8fGilTDpVguqz107tOnCL7uyFpAJTrpSc8 Fz/KFgcnDxiibM862LVTaauMzfIWrzSPAi3DqkovEW1vb+uuSdubS1DNBApyf3wf Mysy8DZGd4+JF4MgCa0gPogycHmzGRaB4gmGl6R6LIBkUv3xKoWWCU9SqtlRJq4W 0HKmwECdlBrl52YnfpwpnjkP01E6S0FD2L51L0qaLj8/2VQ0BFZzrfz8hKZV9Jfd VvkUi679FONAEFW38DTqOMyhRHqFr+SQ -----END CERTIFICATE-----Generated at Sat Apr 26 15:17:52 2025 by rpki-client