$ rpki-client -vvf rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/Aonh4IK22hq6VVKEDAyrAsKjt04.mft File: Aonh4IK22hq6VVKEDAyrAsKjt04.mft (raw, json) Hash identifier: qoB8Gf2XykXTZa0GC/N+x7vOHz+s4EQmpXMc8Ghpjr0= Subject key identifier: 95:65:43:28:03:44:F9:F7:38:DB:8D:A7:D4:0E:12:26:6C:93:50:69 Authority key identifier: 02:89:E1:E0:82:B6:DA:1A:BA:55:52:84:0C:0C:AB:02:C2:A3:B7:4E Certificate issuer: /CN=A9144C70/serialNumber=0289E1E082B6DA1ABA5552840C0CAB02C2A3B74E Certificate serial: 5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aonh4IK22hq6VVKEDAyrAsKjt04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/Aonh4IK22hq6VVKEDAyrAsKjt04.mft Manifest number: 03C2 Signing time: Fri 25 Apr 2025 00:44:19 +0000 Manifest this update: Fri 25 Apr 2025 00:44:18 +0000 Manifest next update: Fri 02 May 2025 00:44:18 +0000 Files and hashes: 1: Aonh4IK22hq6VVKEDAyrAsKjt04.crl (hash: Kmw7kEuxdO9LsKQ9QzOrD50i8IZ6SoMjw5OKRGu6txA=) 2: F23B6474DCCB11EFA04C156DC4F9AE02.roa (hash: 8CP+soQ8V1MqPicKDXfIlfLOoa+kVRyCORkx4Rr2qj4=) 3: B250F522DCCB11EFB54CD16CC4F9AE02.roa (hash: rwa7KCX9itOMHcH4U2EV1YtaU4sGAP6iXjp2VE332xU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/Aonh4IK22hq6VVKEDAyrAsKjt04.crl rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/Aonh4IK22hq6VVKEDAyrAsKjt04.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aonh4IK22hq6VVKEDAyrAsKjt04.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:44:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 92 (0x5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144C70, serialNumber=0289E1E082B6DA1ABA5552840C0CAB02C2A3B74E Validity Not Before: Apr 25 00:44:18 2025 GMT Not After : May 2 00:44:18 2025 GMT Subject: CN=680adae2-7657 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:1d:51:39:f0:70:0f:a8:7b:16:f7:40:5a:40: e7:50:49:2b:1d:9f:b6:9a:b4:d7:69:bf:e1:fb:2a: 8f:30:86:09:ce:07:86:9b:84:53:77:64:69:e3:ff: fb:01:58:b7:a2:0f:c4:5a:8d:39:a1:9e:21:a9:e2: bc:e2:39:9b:bd:63:10:bb:0d:2f:d6:f2:96:3c:69: 81:3d:d6:58:fa:f3:41:f5:f5:ba:49:5a:a3:a1:04: d2:a0:55:7b:22:69:5d:b2:fd:62:73:34:e5:e5:19: ae:a6:b7:55:95:a4:8b:a2:b4:92:aa:24:d8:46:0a: 77:ed:5b:21:75:e5:b0:a4:42:c5:9a:bd:47:f8:26: 7b:0c:20:9a:cb:95:5c:fa:44:c7:70:6d:34:fe:82: 14:30:0c:5f:0a:9d:e5:17:d2:13:57:4a:15:29:a7: 32:bd:12:d8:3c:e2:87:f2:9e:21:ef:9d:97:c8:de: 94:a7:ff:62:f4:ab:13:a9:bb:9b:9b:f7:e8:fd:1c: 6f:37:77:f3:e4:6c:d1:8f:54:2e:91:c8:4a:a1:d9: 63:17:42:0b:1f:3a:91:90:77:e9:55:c8:67:40:46: c1:f2:3e:53:69:d9:de:7a:86:26:49:a8:26:0b:b6: dd:5a:1b:6d:d0:50:0f:3a:0d:2d:33:df:70:b4:78: d1:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:65:43:28:03:44:F9:F7:38:DB:8D:A7:D4:0E:12:26:6C:93:50:69 X509v3 Authority Key Identifier: keyid:02:89:E1:E0:82:B6:DA:1A:BA:55:52:84:0C:0C:AB:02:C2:A3:B7:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/Aonh4IK22hq6VVKEDAyrAsKjt04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aonh4IK22hq6VVKEDAyrAsKjt04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/Aonh4IK22hq6VVKEDAyrAsKjt04.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:c6:80:11:8c:f0:ea:69:81:cb:f3:4b:5c:b0:a6:32:d2:26: ae:7d:1f:48:cc:c7:01:c4:65:83:0e:18:6b:a2:2b:cb:82:ad: bb:58:15:5d:d8:2b:31:aa:56:2b:8a:af:9c:da:75:ad:03:82: 25:98:ca:23:fb:fd:0a:88:a7:84:4d:cd:c2:19:b3:bf:ac:9a: c8:cd:58:8f:9f:17:a4:7e:71:d4:1b:a7:31:49:12:a6:a0:92: 9e:92:28:50:17:1c:7f:fc:bc:cd:bb:25:41:2c:27:ed:1d:e0: 63:94:44:c7:0d:fc:a5:78:47:9e:88:de:b5:c9:c2:47:79:62: 0c:28:e7:0f:6e:3a:9e:0b:fd:64:de:91:e9:f9:c9:0f:45:e8: fb:1b:e3:82:00:75:34:dd:b6:9a:11:8f:8b:b9:fd:9f:d6:47: 96:68:4c:f7:49:64:8e:ec:f9:94:b7:cf:bd:8a:a5:53:db:32: e7:80:64:02:cc:76:4e:90:88:d8:2e:66:25:e7:3e:9f:8b:5e: 16:f8:c2:ac:2d:dd:50:f4:59:b4:d5:8e:5a:d2:5d:93:ac:51: 00:32:49:be:12:dd:35:98:d6:59:fa:49:de:a4:74:33:d5:1b: 90:3a:9a:47:17:f1:13:4d:67:06:82:4c:c6:6c:f4:48:14:d4: b5:7e:97:77 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NEM3MDExMC8GA1UEBRMoMDI4OUUxRTA4MkI2REExQUJBNTU1Mjg0MEMwQ0FCMDJD MkEzQjc0RTAeFw0yNTA0MjUwMDQ0MThaFw0yNTA1MDIwMDQ0MThaMBgxFjAUBgNV BAMTDTY4MGFkYWUyLTc2NTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDdHVE58HAPqHsW90BaQOdQSSsdn7aatNdpv+H7Ko8whgnOB4abhFN3ZGnj//sB WLeiD8RajTmhniGp4rziOZu9YxC7DS/W8pY8aYE91lj680H19bpJWqOhBNKgVXsi aV2y/WJzNOXlGa6mt1WVpIuitJKqJNhGCnftWyF15bCkQsWavUf4JnsMIJrLlVz6 RMdwbTT+ghQwDF8KneUX0hNXShUppzK9Etg84ofyniHvnZfI3pSn/2L0qxOpu5ub 9+j9HG83d/PkbNGPVC6RyEqh2WMXQgsfOpGQd+lVyGdARsHyPlNp2d56hiZJqCYL tt1aG23QUA86DS0z33C0eNHdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUlWVDKANE +fc4242n1A4SJmyTUGkwHwYDVR0jBBgwFoAUAonh4IK22hq6VVKEDAyrAsKjt04w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0QzcwLzgyQkM4NEVFQUM2 NzExRUNCNzVDREEyNEM0RjlBRTAyL0Fvbmg0SUsyMmhxNlZWS0VEQXlyQXNLanQw NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQW9uaDRJSzIyaHE2VlZLRURBeXJBc0tqdDA0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0 QzcwLzgyQkM4NEVFQUM2NzExRUNCNzVDREEyNEM0RjlBRTAyL0Fvbmg0SUsyMmhx NlZWS0VEQXlyQXNLanQwNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEjGgBGM8OppgcvzS1ywpjLSJq59H0jMxwHEZYMOGGuiK8uCrbtYFV3Y KzGqViuKr5zada0DgiWYyiP7/QqIp4RNzcIZs7+smsjNWI+fF6R+cdQbpzFJEqag kp6SKFAXHH/8vM27JUEsJ+0d4GOURMcN/KV4R56I3rXJwkd5Ygwo5w9uOp4L/WTe ken5yQ9F6Psb44IAdTTdtpoRj4u5/Z/WR5ZoTPdJZI7s+ZS3z72KpVPbMueAZALM dk6QiNguZiXnPp+LXhb4wqwt3VD0WbTVjlrSXZOsUQAySb4S3TWY1ln6Sd6kdDPV G5A6mkcX8RNNZwaCTMZs9EgU1LV+l3c= -----END CERTIFICATE-----Generated at Sat Apr 26 08:08:31 2025 by rpki-client