$ rpki-client -vvf rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/0AZhDr1oKXhFffitopEQATORAZI.mft File: 0AZhDr1oKXhFffitopEQATORAZI.mft (raw, json) Hash identifier: TvghXzvQuZzCrWpOtvw0OAuvXxRFO+voTolmd1IvtQ8= Subject key identifier: 53:8F:55:49:BC:B2:A5:58:B5:77:52:BF:EE:A1:BD:4E:09:7A:95:DD Authority key identifier: D0:06:61:0E:BD:68:29:78:45:7D:F8:AD:A2:91:10:01:33:91:01:92 Certificate issuer: /CN=A9153A6E/serialNumber=D006610EBD682978457DF8ADA291100133910192 Certificate serial: 0E6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0AZhDr1oKXhFffitopEQATORAZI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/0AZhDr1oKXhFffitopEQATORAZI.mft Manifest number: 0E60 Signing time: Thu 24 Apr 2025 17:42:49 +0000 Manifest this update: Thu 24 Apr 2025 17:42:49 +0000 Manifest next update: Thu 01 May 2025 17:42:49 +0000 Files and hashes: 1: 0AZhDr1oKXhFffitopEQATORAZI.crl (hash: OR82H0HvDEDnejygboeTVVFYC64E9IdTWaJYCVjJRGI=) 2: CBD704945F5F11EFB99ABA76C4F9AE02.roa (hash: 8S2L4PIf85V9FtE2NxlTWF91adX1vQpLiZaP3LriZvM=) 3: 42431FFC8FF711EEA0FC990FC4F9AE02.roa (hash: dBVxIuxXi1IfubYTqCooyEf06bco+4CSqK6CVlwkBZQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/0AZhDr1oKXhFffitopEQATORAZI.crl rsync://rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/0AZhDr1oKXhFffitopEQATORAZI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0AZhDr1oKXhFffitopEQATORAZI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:42:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3693 (0xe6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153A6E, serialNumber=D006610EBD682978457DF8ADA291100133910192 Validity Not Before: Apr 24 17:42:49 2025 GMT Not After : May 1 17:42:49 2025 GMT Subject: CN=680a7819-25fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:3c:7c:9a:38:35:77:ad:30:8b:08:ce:7d:f5: 97:2e:7a:0c:5e:40:aa:56:06:3b:55:a3:38:37:d5: 1a:ff:15:6b:51:88:62:6b:7d:5a:c9:8c:a0:1b:2c: 0d:1d:f6:41:53:a9:be:08:00:fc:ae:de:e3:f3:b5: 21:4d:a0:ba:65:77:44:34:68:c6:d0:e5:1f:1e:e2: b2:7d:9d:52:db:c3:00:06:d1:5e:40:7e:19:45:76: e3:48:a7:6d:66:ed:66:02:ac:e1:fc:5b:f0:6a:c1: d8:8c:20:52:18:c3:b6:9a:64:50:4c:d1:dc:10:61: 01:16:c2:02:7c:85:69:4d:95:6e:6b:ee:52:c8:d3: 65:75:9f:63:49:96:79:2c:62:23:d3:ba:e9:f4:e5: ee:05:1a:93:ef:98:67:24:e6:a6:26:28:32:c5:6f: c8:25:21:af:4b:f4:e4:d0:a1:eb:ad:01:87:12:f8: cd:23:39:f1:3b:cf:19:f2:d5:24:e1:6f:a4:3b:65: c8:70:95:be:6e:1f:3e:2c:4c:f1:8d:af:ab:5a:78: 65:0f:dc:76:c8:7d:f9:9c:7f:6d:0f:fe:1d:54:48: c2:02:81:a8:a3:51:57:29:a9:0b:ee:cc:49:70:80: df:5e:0f:5f:f7:b0:5b:c5:28:20:71:10:54:05:f0: 74:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:8F:55:49:BC:B2:A5:58:B5:77:52:BF:EE:A1:BD:4E:09:7A:95:DD X509v3 Authority Key Identifier: keyid:D0:06:61:0E:BD:68:29:78:45:7D:F8:AD:A2:91:10:01:33:91:01:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/0AZhDr1oKXhFffitopEQATORAZI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0AZhDr1oKXhFffitopEQATORAZI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/0AZhDr1oKXhFffitopEQATORAZI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:e7:d2:7b:89:dc:b2:36:06:1c:ed:54:68:96:ee:47:f2:c8: 88:e3:83:f8:90:28:a3:4e:b8:03:3f:e5:94:7f:cc:1e:56:4a: 39:ac:1b:f6:3a:54:e3:02:18:35:c7:9c:23:c6:aa:b2:6d:b2: e0:df:cb:fb:a6:9a:b0:e4:89:25:d1:c4:b5:49:a6:9f:9a:88: c4:9b:cb:6d:54:1a:15:a2:f4:41:ea:97:42:58:ce:52:ff:35: c4:53:99:bb:43:89:1f:72:62:4e:ae:7d:09:e8:a2:4e:16:4b: 15:b5:19:94:5a:61:d9:21:d2:9a:f5:ea:b3:85:49:73:7a:30: 10:ba:31:12:ef:d8:de:37:7d:ba:86:7e:cd:7f:03:b1:34:91: 3b:15:25:ec:42:24:0e:11:69:16:9c:54:e5:06:f4:92:d8:e7: 68:33:fb:bf:16:3f:a8:31:9a:85:26:5d:a6:46:6c:c8:08:35: 36:27:35:bb:68:87:00:f9:e9:24:2a:49:22:df:37:7b:97:99: 2a:24:12:1f:0a:11:d7:03:8c:e5:0d:73:04:fb:fe:eb:d0:4f: 6e:bc:bb:0d:3d:0f:2f:9b:6e:c6:01:15:8f:9b:68:08:5b:97: 53:1a:8b:c0:6d:00:f6:b6:0a:38:92:49:88:72:72:e9:4a:e7: fa:70:5b:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDm0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTNBNkUxMTAvBgNVBAUTKEQwMDY2MTBFQkQ2ODI5Nzg0NTdERjhBREEyOTExMDAx MzM5MTAxOTIwHhcNMjUwNDI0MTc0MjQ5WhcNMjUwNTAxMTc0MjQ5WjAYMRYwFAYD VQQDEw02ODBhNzgxOS0yNWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxTx8mjg1d60wiwjOffWXLnoMXkCqVgY7VaM4N9Ua/xVrUYhia31ayYygGywN HfZBU6m+CAD8rt7j87UhTaC6ZXdENGjG0OUfHuKyfZ1S28MABtFeQH4ZRXbjSKdt Zu1mAqzh/FvwasHYjCBSGMO2mmRQTNHcEGEBFsICfIVpTZVua+5SyNNldZ9jSZZ5 LGIj07rp9OXuBRqT75hnJOamJigyxW/IJSGvS/Tk0KHrrQGHEvjNIznxO88Z8tUk 4W+kO2XIcJW+bh8+LEzxja+rWnhlD9x2yH35nH9tD/4dVEjCAoGoo1FXKakL7sxJ cIDfXg9f97BbxSggcRBUBfB0xwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFOPVUm8 sqVYtXdSv+6hvU4JepXdMB8GA1UdIwQYMBaAFNAGYQ69aCl4RX34raKREAEzkQGS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1M0E2RS83OUVDRTgzODk4 QkQxMUU5QUM5OUU3NEVDNEY5QUUwMi8wQVpoRHIxb0tYaEZmZml0b3BFUUFUT1JB WkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBBWmhEcjFvS1hoRmZmaXRvcEVRQVRPUkFaSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 M0E2RS83OUVDRTgzODk4QkQxMUU5QUM5OUU3NEVDNEY5QUUwMi8wQVpoRHIxb0tY aEZmZml0b3BFUUFUT1JBWkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBS59J7idyyNgYc7VRolu5H8siI44P4kCijTrgDP+WUf8weVko5rBv2 OlTjAhg1x5wjxqqybbLg38v7ppqw5Ikl0cS1SaafmojEm8ttVBoVovRB6pdCWM5S /zXEU5m7Q4kfcmJOrn0J6KJOFksVtRmUWmHZIdKa9eqzhUlzejAQujES79jeN326 hn7NfwOxNJE7FSXsQiQOEWkWnFTlBvSS2OdoM/u/Fj+oMZqFJl2mRmzICDU2JzW7 aIcA+ekkKkki3zd7l5kqJBIfChHXA4zlDXME+/7r0E9uvLsNPQ8vm27GARWPm2gI W5dTGovAbQD2tgo4kkmIcnLpSuf6cFtc -----END CERTIFICATE-----Generated at Sat Apr 26 14:05:26 2025 by rpki-client