$ rpki-client -vvf rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.mft File: 1mAaggCAx5DwpRpsN2X1tLDQGzc.mft (raw, json) Hash identifier: WBtclJQ0p/hB7lNyB1AeihPXIyZZkPr9vU13GAqEGWI= Subject key identifier: A1:80:AE:0C:C2:7C:E4:66:06:50:F9:72:ED:0F:7B:77:F3:A7:F9:29 Authority key identifier: D6:60:1A:82:00:80:C7:90:F0:A5:1A:6C:37:65:F5:B4:B0:D0:1B:37 Certificate issuer: /CN=A915343B/serialNumber=D6601A820080C790F0A51A6C3765F5B4B0D01B37 Certificate serial: 0AB4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1mAaggCAx5DwpRpsN2X1tLDQGzc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.mft Manifest number: 0AAD Signing time: Thu 24 Apr 2025 19:23:21 +0000 Manifest this update: Thu 24 Apr 2025 19:23:21 +0000 Manifest next update: Thu 01 May 2025 19:23:21 +0000 Files and hashes: 1: 1mAaggCAx5DwpRpsN2X1tLDQGzc.crl (hash: WsU8o9t0QAQnUbGAOUpsd2N0NcFNZ4OoaiWIMIK78/c=) 2: 5EEC619850A611EA823DE980C4F9AE02.roa (hash: q02Hd4XFE+H9p8qEMOu2AbjA5nPs5WOETsJPUT9HbXo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.crl rsync://rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1mAaggCAx5DwpRpsN2X1tLDQGzc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2740 (0xab4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915343B, serialNumber=D6601A820080C790F0A51A6C3765F5B4B0D01B37 Validity Not Before: Apr 24 19:23:21 2025 GMT Not After : May 1 19:23:21 2025 GMT Subject: CN=680a8fa9-11ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b9:18:ea:d2:36:13:4c:ab:aa:6b:13:8f:a9: 24:1e:fd:a2:a4:25:7a:e7:aa:dc:00:e1:d5:93:fd: 24:e0:ea:7e:0c:75:97:ba:32:10:f0:c4:a0:c2:2a: 0b:71:44:3d:92:1f:e6:3d:64:54:79:48:50:bc:29: 72:00:37:41:62:e9:eb:08:45:d4:e6:d8:17:09:f3: 51:d2:a9:91:4b:29:c7:2a:20:4f:6d:0b:bd:ed:3c: 16:a8:32:8d:5a:4f:e6:f0:f6:44:16:48:7c:d9:7e: 62:d1:b6:43:53:e5:54:5e:81:0f:41:6c:b9:e3:8d: 89:dc:f7:1c:39:d8:31:b2:6b:91:ed:74:13:31:3b: 9f:a9:ea:cc:5e:1d:4d:2c:67:55:1b:1a:6c:b4:ba: e1:50:4b:9c:a6:15:fc:2f:dd:14:04:a5:a9:8a:2b: a5:ef:00:40:80:70:87:f4:c3:df:ae:66:52:b2:0d: 77:af:e5:b8:64:3b:c9:24:f4:2b:77:0f:b5:4a:8c: ed:63:0a:08:e2:12:5e:d9:80:01:68:c7:bc:f9:cf: 3e:e6:aa:68:37:4d:00:98:18:55:7d:22:29:d5:86: 4b:ac:11:b8:30:bb:78:33:1e:94:8a:d4:2f:24:75: ff:b2:9c:05:ce:43:aa:bf:34:25:d4:d2:20:ec:8d: 16:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:80:AE:0C:C2:7C:E4:66:06:50:F9:72:ED:0F:7B:77:F3:A7:F9:29 X509v3 Authority Key Identifier: keyid:D6:60:1A:82:00:80:C7:90:F0:A5:1A:6C:37:65:F5:B4:B0:D0:1B:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1mAaggCAx5DwpRpsN2X1tLDQGzc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:2f:1e:d4:bd:25:62:e5:d3:5d:bc:da:b3:0a:14:59:0f:cd: a3:73:eb:cd:88:0c:51:48:d1:b0:a6:05:86:d3:7b:cf:71:1c: 47:77:a5:55:25:3f:e4:8b:ae:4d:c6:dd:cb:9a:79:13:ef:b1: cb:8e:c6:d7:61:18:75:c7:38:c3:2d:55:3b:a6:a8:db:ce:12: 16:f8:dd:51:24:6f:f0:4f:94:bc:0e:fb:ec:68:a4:45:68:5e: 79:30:4a:87:e2:1d:e0:d8:d4:af:4a:e1:f7:7d:0f:f8:ea:85: 2b:d4:0a:32:c3:29:77:4a:50:09:b0:33:5f:e5:4d:ad:56:ba: 9f:14:fd:10:e2:d0:e4:a6:5d:4a:24:c9:7d:6d:97:81:6e:04: 51:8c:cc:b7:98:74:8d:5a:67:d2:bc:91:3c:2f:80:0d:a3:6d: b8:4e:19:15:e4:85:22:19:c4:9d:a5:b7:9e:dd:45:15:2f:8e: a3:d9:1f:57:94:a7:dd:7f:ab:c5:f4:82:af:d6:e5:79:9d:d4: 66:48:c9:34:04:1b:6f:6d:5a:bc:66:5c:3a:72:b7:81:58:37: 18:3d:e5:04:32:95:38:a1:3a:5d:76:b1:b3:36:36:3a:5b:54: a3:e5:bb:40:8e:19:3b:6f:3f:7a:03:cb:c2:32:34:30:d5:9c: aa:ef:77:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCrQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM0M0IxMTAvBgNVBAUTKEQ2NjAxQTgyMDA4MEM3OTBGMEE1MUE2QzM3NjVGNUI0 QjBEMDFCMzcwHhcNMjUwNDI0MTkyMzIxWhcNMjUwNTAxMTkyMzIxWjAYMRYwFAYD VQQDEw02ODBhOGZhOS0xMWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzrkY6tI2E0yrqmsTj6kkHv2ipCV656rcAOHVk/0k4Op+DHWXujIQ8MSgwioL cUQ9kh/mPWRUeUhQvClyADdBYunrCEXU5tgXCfNR0qmRSynHKiBPbQu97TwWqDKN Wk/m8PZEFkh82X5i0bZDU+VUXoEPQWy5442J3PccOdgxsmuR7XQTMTufqerMXh1N LGdVGxpstLrhUEucphX8L90UBKWpiiul7wBAgHCH9MPfrmZSsg13r+W4ZDvJJPQr dw+1SoztYwoI4hJe2YABaMe8+c8+5qpoN00AmBhVfSIp1YZLrBG4MLt4Mx6UitQv JHX/spwFzkOqvzQl1NIg7I0WZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKGArgzC fORmBlD5cu0Pe3fzp/kpMB8GA1UdIwQYMBaAFNZgGoIAgMeQ8KUabDdl9bSw0Bs3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzQzQi82QTAzODNFNjUw QTUxMUVBOTc2Q0I3N0ZDNEY5QUUwMi8xbUFhZ2dDQXg1RHdwUnBzTjJYMXRMRFFH emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFtQWFnZ0NBeDVEd3BScHNOMlgxdExEUUd6Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzQzQi82QTAzODNFNjUwQTUxMUVBOTc2Q0I3N0ZDNEY5QUUwMi8xbUFhZ2dDQXg1 RHdwUnBzTjJYMXRMRFFHemMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFLx7UvSVi5dNdvNqzChRZD82jc+vNiAxRSNGwpgWG03vPcRxHd6VV JT/ki65Nxt3LmnkT77HLjsbXYRh1xzjDLVU7pqjbzhIW+N1RJG/wT5S8DvvsaKRF aF55MEqH4h3g2NSvSuH3fQ/46oUr1Aoywyl3SlAJsDNf5U2tVrqfFP0Q4tDkpl1K JMl9bZeBbgRRjMy3mHSNWmfSvJE8L4ANo224ThkV5IUiGcSdpbee3UUVL46j2R9X lKfdf6vF9IKv1uV5ndRmSMk0BBtvbVq8Zlw6creBWDcYPeUEMpU4oTpddrGzNjY6 W1Sj5btAjhk7bz96A8vCMjQw1Zyq73cC -----END CERTIFICATE-----Generated at Sat Apr 26 16:50:32 2025 by rpki-client