$ rpki-client -vvf rpki.apnic.net/member_repository/A9153457/4C1A034C1D7B11E2BE3DA6C808B02CD2/aw5C2IWeCxzeVBV6y412BK0_8bM.mft File: aw5C2IWeCxzeVBV6y412BK0_8bM.mft (raw, json) Hash identifier: By/kf3fNCZ299UMGPqoY7hBk1/o4oqB19BGx/zShEiQ= Subject key identifier: 96:EF:64:5D:9E:F3:13:C8:EA:80:DD:2B:48:CF:F9:3F:64:4F:3E:BB Authority key identifier: 6B:0E:42:D8:85:9E:0B:1C:DE:54:15:7A:CB:8D:76:04:AD:3F:F1:B3 Certificate issuer: /CN=A9153457/serialNumber=6B0E42D8859E0B1CDE54157ACB8D7604AD3FF1B3 Certificate serial: 3568 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aw5C2IWeCxzeVBV6y412BK0_8bM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153457/4C1A034C1D7B11E2BE3DA6C808B02CD2/aw5C2IWeCxzeVBV6y412BK0_8bM.mft Manifest number: 3503 Signing time: Thu 24 Apr 2025 14:21:17 +0000 Manifest this update: Thu 24 Apr 2025 14:21:16 +0000 Manifest next update: Thu 01 May 2025 14:21:16 +0000 Files and hashes: 1: aw5C2IWeCxzeVBV6y412BK0_8bM.crl (hash: WKv2jLaA1kk8YKevHaUUi8bFCWvnmJHV4XioR++WmLY=) 2: 4265BD864D5811EF98470D6DC4F9AE02.roa (hash: DI0whxBE0VRYz5yAE2OsMixzXg5yBtVwc2go7LOY180=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153457/4C1A034C1D7B11E2BE3DA6C808B02CD2/aw5C2IWeCxzeVBV6y412BK0_8bM.crl rsync://rpki.apnic.net/member_repository/A9153457/4C1A034C1D7B11E2BE3DA6C808B02CD2/aw5C2IWeCxzeVBV6y412BK0_8bM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aw5C2IWeCxzeVBV6y412BK0_8bM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 14:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13672 (0x3568) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153457, serialNumber=6B0E42D8859E0B1CDE54157ACB8D7604AD3FF1B3 Validity Not Before: Apr 24 14:21:16 2025 GMT Not After : May 1 14:21:16 2025 GMT Subject: CN=680a48dd-40b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d1:c3:1d:34:b8:84:ee:5b:32:26:a8:7c:b9: 2f:92:6b:18:3e:f6:c9:93:c5:65:52:c9:34:6f:0f: 4f:4c:86:ff:7b:4e:62:c6:88:41:3d:e5:77:bf:d2: 78:12:e6:17:fc:c5:5b:27:85:27:46:cf:93:09:38: 59:16:56:11:10:77:6f:4d:3c:13:3d:cf:62:d5:6b: c9:98:46:8b:6f:2b:10:60:02:51:b1:5a:c2:9c:36: 05:77:45:2f:38:76:ee:e0:73:43:a9:48:29:9f:41: d8:b8:c3:f0:49:45:59:d3:19:e0:69:ca:97:e6:8e: aa:50:9f:b6:49:6e:9b:4b:41:5d:96:0b:24:0e:df: 78:e0:d1:73:4f:7e:f5:31:ff:be:a9:11:9d:fe:73: 25:56:e9:dd:a8:6a:12:48:f6:22:b6:29:b9:52:3f: 27:1f:f7:c9:e2:56:c4:51:34:5b:60:0f:ce:b3:dc: ce:09:09:24:9b:73:3c:9b:89:21:7e:54:64:5a:b5: 58:9e:aa:12:f7:dc:9c:28:fb:b2:fc:a1:41:58:46: 40:3d:27:d1:b2:e9:53:aa:b2:ca:e3:51:32:79:c3: cb:dd:c5:c0:85:c4:38:ec:c3:08:9c:db:81:57:34: a4:fd:27:42:59:22:89:8c:9d:12:10:f0:3a:10:ab: 40:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:EF:64:5D:9E:F3:13:C8:EA:80:DD:2B:48:CF:F9:3F:64:4F:3E:BB X509v3 Authority Key Identifier: keyid:6B:0E:42:D8:85:9E:0B:1C:DE:54:15:7A:CB:8D:76:04:AD:3F:F1:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153457/4C1A034C1D7B11E2BE3DA6C808B02CD2/aw5C2IWeCxzeVBV6y412BK0_8bM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aw5C2IWeCxzeVBV6y412BK0_8bM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153457/4C1A034C1D7B11E2BE3DA6C808B02CD2/aw5C2IWeCxzeVBV6y412BK0_8bM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:7b:1a:75:74:e9:ef:f8:93:22:7f:45:a0:a6:b5:e2:f8:be: 44:39:85:c5:2e:d9:37:bc:af:1c:a9:ed:ef:68:f7:3f:04:dc: 70:61:a2:cb:be:32:75:61:60:58:dc:a8:59:0e:00:4a:32:e6: 75:1f:b3:ff:4f:9c:8f:46:c9:e2:c1:c9:3d:c9:96:ae:ab:48: d8:d5:53:5d:ce:f3:a8:86:2f:ea:8b:04:5a:0e:e9:22:98:a2: f6:ce:78:dc:09:46:e3:63:a8:24:bb:ab:45:84:0e:f1:ba:af: b2:87:5a:20:20:12:ae:0d:4b:03:eb:c2:2f:c1:eb:2e:2b:e8: 43:0a:f1:85:79:ed:65:32:f3:ab:bc:02:0e:3c:b5:65:a9:cd: 04:b1:7a:c1:4c:d3:b9:a4:4c:ae:43:d0:36:31:d1:ab:7a:72: 2e:b6:b5:9f:7e:6d:20:20:76:c0:24:f3:f0:6c:e4:1d:62:a4: 6d:42:54:e7:23:72:c9:64:0f:54:f4:16:41:63:26:97:a7:cf: c0:7c:74:12:00:be:35:45:8c:51:c3:76:d0:77:03:7e:26:4a: 58:f8:07:28:fb:62:d6:e9:c1:bd:a1:f1:f7:d4:7f:6a:16:da: 3e:50:94:28:4b:d0:b8:c2:24:0e:bb:ae:b8:c8:f3:f5:21:a0: bb:1c:66:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM0NTcxMTAvBgNVBAUTKDZCMEU0MkQ4ODU5RTBCMUNERTU0MTU3QUNCOEQ3NjA0 QUQzRkYxQjMwHhcNMjUwNDI0MTQyMTE2WhcNMjUwNTAxMTQyMTE2WjAYMRYwFAYD VQQDEw02ODBhNDhkZC00MGIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArtHDHTS4hO5bMiaofLkvkmsYPvbJk8VlUsk0bw9PTIb/e05ixohBPeV3v9J4 EuYX/MVbJ4UnRs+TCThZFlYREHdvTTwTPc9i1WvJmEaLbysQYAJRsVrCnDYFd0Uv OHbu4HNDqUgpn0HYuMPwSUVZ0xngacqX5o6qUJ+2SW6bS0FdlgskDt944NFzT371 Mf++qRGd/nMlVundqGoSSPYitim5Uj8nH/fJ4lbEUTRbYA/Os9zOCQkkm3M8m4kh flRkWrVYnqoS99ycKPuy/KFBWEZAPSfRsulTqrLK41EyecPL3cXAhcQ47MMInNuB VzSk/SdCWSKJjJ0SEPA6EKtAHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJbvZF2e 8xPI6oDdK0jP+T9kTz67MB8GA1UdIwQYMBaAFGsOQtiFngsc3lQVesuNdgStP/Gz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzQ1Ny80QzFBMDM0QzFE N0IxMUUyQkUzREE2QzgwOEIwMkNEMi9hdzVDMklXZUN4emVWQlY2eTQxMkJLMF84 Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2F3NUMySVdlQ3h6ZVZCVjZ5NDEyQkswXzhiTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzQ1Ny80QzFBMDM0QzFEN0IxMUUyQkUzREE2QzgwOEIwMkNEMi9hdzVDMklXZUN4 emVWQlY2eTQxMkJLMF84Yk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNexp1dOnv+JMif0WgprXi+L5EOYXFLtk3vK8cqe3vaPc/BNxwYaLL vjJ1YWBY3KhZDgBKMuZ1H7P/T5yPRsniwck9yZauq0jY1VNdzvOohi/qiwRaDuki mKL2znjcCUbjY6gku6tFhA7xuq+yh1ogIBKuDUsD68IvwesuK+hDCvGFee1lMvOr vAIOPLVlqc0EsXrBTNO5pEyuQ9A2MdGrenIutrWffm0gIHbAJPPwbOQdYqRtQlTn I3LJZA9U9BZBYyaXp8/AfHQSAL41RYxRw3bQdwN+JkpY+Aco+2LW6cG9ofH31H9q Fto+UJQoS9C4wiQOu664yPP1IaC7HGYK -----END CERTIFICATE-----Generated at Sat Apr 26 05:22:20 2025 by rpki-client