$ rpki-client -vvf rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.mft File: aq89m8Pfo6ElCCll2P8zuBKPKR8.mft (raw, json) Hash identifier: 8BkulvQQILCKq6WOkn2IUEHCfQ5/OoBn6/XwYwMWH9Q= Subject key identifier: D0:0A:B2:A9:4D:C0:61:BD:B5:DE:49:F3:04:19:28:F6:B4:4C:72:8A Authority key identifier: 6A:AF:3D:9B:C3:DF:A3:A1:25:08:29:65:D8:FF:33:B8:12:8F:29:1F Certificate issuer: /CN=A91476E2/serialNumber=6AAF3D9BC3DFA3A125082965D8FF33B8128F291F Certificate serial: 45 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aq89m8Pfo6ElCCll2P8zuBKPKR8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.mft Manifest number: 40 Signing time: Fri 25 Apr 2025 06:30:14 +0000 Manifest this update: Fri 25 Apr 2025 06:30:13 +0000 Manifest next update: Fri 02 May 2025 06:30:13 +0000 Files and hashes: 1: aq89m8Pfo6ElCCll2P8zuBKPKR8.crl (hash: //RPxwd/RBnlTqWtnS+uqFLiyrpTeizU/TJ8/1icyZA=) 2: 79E40530CB5A11EFA1C64B62C4F9AE02.roa (hash: mbcELb6wZjeLG0BTxotv3DMO41EhI/vPgN4q1POwi8s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.crl rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aq89m8Pfo6ElCCll2P8zuBKPKR8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:30:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69 (0x45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91476E2, serialNumber=6AAF3D9BC3DFA3A125082965D8FF33B8128F291F Validity Not Before: Apr 25 06:30:13 2025 GMT Not After : May 2 06:30:13 2025 GMT Subject: CN=680b2bf5-030b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f1:25:fa:a2:48:73:50:58:c4:5b:5d:58:12: 51:1f:e3:94:86:53:9b:3c:7e:dc:52:09:29:c0:d0: 53:aa:17:7c:03:7b:f9:81:6b:5a:0f:24:fc:e4:bc: 2b:88:39:08:98:46:22:62:5f:51:64:d2:58:7c:6c: bc:a0:75:ed:ca:a0:14:62:69:0c:5c:28:05:6c:0d: e1:ab:70:21:2d:ae:83:b1:c7:32:60:c4:ea:94:a8: a0:f2:29:f7:3d:f6:93:16:a4:a4:6c:aa:96:c9:eb: c5:b8:3c:96:5b:6b:5f:ca:fb:32:da:ee:93:aa:d3: 64:41:be:a0:1d:84:33:3f:9c:6c:cc:1b:0c:9a:84: 24:53:2a:79:0b:60:30:65:5d:d8:8d:cf:7d:df:f0: dc:0a:20:47:b0:62:8a:d5:23:7d:3a:64:cc:5d:f4: d7:74:97:e1:03:9b:38:9e:19:48:29:3d:84:a4:57: 70:9b:6a:01:55:40:b9:1a:9b:a2:56:b1:93:0a:cb: bd:35:a6:a7:c3:42:48:32:30:92:96:38:44:81:76: a6:d7:26:7e:04:83:16:7f:c1:41:37:17:c8:33:66: 32:89:4b:0a:a0:f9:06:40:12:22:4e:be:d9:b9:3a: f8:cb:7b:13:a5:89:7e:69:78:f9:cd:fe:b6:82:4b: 96:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:0A:B2:A9:4D:C0:61:BD:B5:DE:49:F3:04:19:28:F6:B4:4C:72:8A X509v3 Authority Key Identifier: keyid:6A:AF:3D:9B:C3:DF:A3:A1:25:08:29:65:D8:FF:33:B8:12:8F:29:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aq89m8Pfo6ElCCll2P8zuBKPKR8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:b2:5a:e9:4b:2e:0f:81:49:ab:b2:06:9c:10:b3:84:b9:2c: b0:9f:a7:26:3f:ec:52:c3:23:8b:9c:af:b6:1b:d9:12:38:8d: 32:56:a1:a3:88:9d:0e:71:74:56:eb:36:89:54:e9:03:46:93: 3e:2e:ac:49:81:7e:9f:7f:d8:92:40:a4:0f:58:c1:34:f4:91: 2e:fe:12:68:45:fa:c5:24:be:cd:97:2b:2a:05:5b:12:fc:20: b9:70:43:47:bd:04:71:80:b8:ea:f7:47:52:c6:0e:9a:d4:34: 6f:22:d8:2a:c0:cc:8e:1d:e3:db:5d:4a:f8:3e:96:c3:ed:b3: 5c:6e:67:9e:5a:06:4d:1a:62:05:60:06:c5:13:8f:d1:a5:ed: 33:a2:72:b2:f0:21:aa:54:e4:33:3d:cd:89:a0:58:fa:c2:68: ec:a8:b5:04:9c:de:af:88:bd:50:36:6e:40:99:28:c9:5c:42: 43:d1:9f:c7:42:d0:f7:2c:fa:2b:0d:d0:7f:1c:d5:70:ee:dd: 5f:8e:7c:e6:fd:c2:74:9c:14:ea:6c:ef:c3:04:83:c0:2d:04: c4:a2:47:33:2b:18:10:20:a4:88:57:c8:c9:78:8b:42:92:73: 14:3c:98:82:5f:d2:45:f6:cc:b9:9e:20:88:00:3f:e2:4f:b2: 5b:89:fb:79 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NzZFMjExMC8GA1UEBRMoNkFBRjNEOUJDM0RGQTNBMTI1MDgyOTY1RDhGRjMzQjgx MjhGMjkxRjAeFw0yNTA0MjUwNjMwMTNaFw0yNTA1MDIwNjMwMTNaMBgxFjAUBgNV BAMTDTY4MGIyYmY1LTAzMGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC98SX6okhzUFjEW11YElEf45SGU5s8ftxSCSnA0FOqF3wDe/mBa1oPJPzkvCuI OQiYRiJiX1Fk0lh8bLygde3KoBRiaQxcKAVsDeGrcCEtroOxxzJgxOqUqKDyKfc9 9pMWpKRsqpbJ68W4PJZba1/K+zLa7pOq02RBvqAdhDM/nGzMGwyahCRTKnkLYDBl XdiNz33f8NwKIEewYorVI306ZMxd9Nd0l+EDmzieGUgpPYSkV3CbagFVQLkam6JW sZMKy701pqfDQkgyMJKWOESBdqbXJn4EgxZ/wUE3F8gzZjKJSwqg+QZAEiJOvtm5 OvjLexOliX5pePnN/raCS5a/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU0AqyqU3A Yb213knzBBko9rRMcoowHwYDVR0jBBgwFoAUaq89m8Pfo6ElCCll2P8zuBKPKR8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3NkUyLzNCNTQxRjIwQ0Iz RDExRUY4NzAzRjc1QUM0RjlBRTAyL2FxODltOFBmbzZFbENDbGwyUDh6dUJLUEtS OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvYXE4OW04UGZvNkVsQ0NsbDJQOHp1QktQS1I4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3 NkUyLzNCNTQxRjIwQ0IzRDExRUY4NzAzRjc1QUM0RjlBRTAyL2FxODltOFBmbzZF bENDbGwyUDh6dUJLUEtSOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABGyWulLLg+BSauyBpwQs4S5LLCfpyY/7FLDI4ucr7Yb2RI4jTJWoaOI nQ5xdFbrNolU6QNGkz4urEmBfp9/2JJApA9YwTT0kS7+EmhF+sUkvs2XKyoFWxL8 ILlwQ0e9BHGAuOr3R1LGDprUNG8i2CrAzI4d49tdSvg+lsPts1xuZ55aBk0aYgVg BsUTj9Gl7TOicrLwIapU5DM9zYmgWPrCaOyotQSc3q+IvVA2bkCZKMlcQkPRn8dC 0Pcs+isN0H8c1XDu3V+OfOb9wnScFOps78MEg8AtBMSiRzMrGBAgpIhXyMl4i0KS cxQ8mIJf0kX2zLmeIIgAP+JPsluJ+3k= -----END CERTIFICATE-----Generated at Sat Apr 26 14:18:31 2025 by rpki-client