$ rpki-client -vvf rpki.apnic.net/member_repository/A91549ED/B7714B96091811EB95FA2737C4F9AE02/aIuwWV9ZW3EeAkUKzuOybBE7eS8.mft File: aIuwWV9ZW3EeAkUKzuOybBE7eS8.mft (raw, json) Hash identifier: cQVR1JJJ7t6ehgru3CeTaMZnFG9y4MS1iTvHcqNbk9I= Subject key identifier: F2:65:F6:D1:9C:DD:14:71:C7:A1:D2:0B:D7:0B:4F:E9:89:F8:C0:C8 Authority key identifier: 68:8B:B0:59:5F:59:5B:71:1E:02:45:0A:CE:E3:B2:6C:11:3B:79:2F Certificate issuer: /CN=A91549ED/serialNumber=688BB0595F595B711E02450ACEE3B26C113B792F Certificate serial: 0790 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIuwWV9ZW3EeAkUKzuOybBE7eS8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91549ED/B7714B96091811EB95FA2737C4F9AE02/aIuwWV9ZW3EeAkUKzuOybBE7eS8.mft Manifest number: 0788 Signing time: Thu 24 Apr 2025 21:12:11 +0000 Manifest this update: Thu 24 Apr 2025 21:12:11 +0000 Manifest next update: Thu 01 May 2025 21:12:11 +0000 Files and hashes: 1: aIuwWV9ZW3EeAkUKzuOybBE7eS8.crl (hash: J1JRmVfR7XoE8Hz5PstVB8ilNtbBTikp26ZLXmw9q+8=) 2: 89B3D06E0F9111EBA9B90727C4F9AE02.roa (hash: nNeDg/wlklIxGFoighizLl95GENL1V1dEvF0FUrVfns=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91549ED/B7714B96091811EB95FA2737C4F9AE02/aIuwWV9ZW3EeAkUKzuOybBE7eS8.crl rsync://rpki.apnic.net/member_repository/A91549ED/B7714B96091811EB95FA2737C4F9AE02/aIuwWV9ZW3EeAkUKzuOybBE7eS8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIuwWV9ZW3EeAkUKzuOybBE7eS8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:12:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1936 (0x790) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91549ED, serialNumber=688BB0595F595B711E02450ACEE3B26C113B792F Validity Not Before: Apr 24 21:12:11 2025 GMT Not After : May 1 21:12:11 2025 GMT Subject: CN=680aa92b-9e84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:9a:33:48:bc:49:d0:b4:f7:7f:f4:59:30:bb: f9:bc:8d:65:7f:5b:f3:19:91:d5:00:be:77:4a:13: be:fb:5a:ae:e8:57:97:b5:75:b5:22:c9:1f:59:79: 27:14:ec:88:9d:12:c0:1e:c5:1e:7f:6c:9b:69:57: 02:04:89:9c:1b:56:cc:ef:02:81:11:75:27:fa:a3: b9:e6:c4:fe:2a:40:cd:b1:86:a1:4d:7e:a2:1a:e4: f7:b8:58:31:f9:e3:1c:37:d8:93:b8:00:f6:13:14: 8c:06:d9:51:16:13:cf:ab:1f:3d:42:ce:ff:11:75: 95:24:86:58:fb:e9:2d:d1:be:64:53:d3:f0:76:34: 22:59:d9:f7:5d:fe:77:a8:f0:43:aa:db:ca:3a:84: 96:34:04:03:c8:bb:50:2d:18:f6:bd:f4:0b:4f:9b: 96:7b:f8:bd:85:3f:41:e6:e8:9b:97:72:04:e2:a1: 0c:4f:00:b6:19:55:93:73:fe:33:0e:f1:c4:e3:a7: eb:45:c9:85:c9:49:8d:cf:34:45:b3:c6:1c:53:fe: 3f:1d:33:4c:7a:7f:e8:57:61:01:0a:22:55:0e:37: 38:1e:0b:3f:fb:81:2d:b2:aa:36:16:ac:81:c9:f3: 1d:31:51:f3:7a:99:4a:27:ba:fa:14:70:e0:80:2f: a9:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:65:F6:D1:9C:DD:14:71:C7:A1:D2:0B:D7:0B:4F:E9:89:F8:C0:C8 X509v3 Authority Key Identifier: keyid:68:8B:B0:59:5F:59:5B:71:1E:02:45:0A:CE:E3:B2:6C:11:3B:79:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91549ED/B7714B96091811EB95FA2737C4F9AE02/aIuwWV9ZW3EeAkUKzuOybBE7eS8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIuwWV9ZW3EeAkUKzuOybBE7eS8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91549ED/B7714B96091811EB95FA2737C4F9AE02/aIuwWV9ZW3EeAkUKzuOybBE7eS8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:d8:fd:d9:9a:b1:c5:45:6e:87:4c:74:69:4c:f9:c4:b2:64: 32:4c:47:45:de:d3:43:26:bb:b6:1a:0d:73:9e:4d:c8:2a:da: e5:45:64:85:e1:70:0b:a9:9c:b6:e3:91:f1:15:68:fa:96:c0: 5c:da:67:2d:db:d5:e1:13:73:4d:b1:a8:b8:30:60:58:2b:e1: 7f:cd:2e:83:af:69:e4:d0:1a:2a:b0:84:fb:f6:80:a3:bf:4f: c6:fe:43:7a:6c:02:19:3d:b1:65:e3:6d:66:8d:09:97:38:96: f3:43:20:86:21:42:df:af:f0:05:fb:86:30:85:95:a5:4f:28: ee:95:78:ba:6f:07:a8:bb:76:fc:2d:51:c6:0a:d0:d8:d6:2e: ad:92:bf:c9:fe:a8:c0:87:1d:b8:97:46:7c:4d:59:b4:10:ed: 1d:07:59:ea:6f:df:3d:11:5c:a4:c9:63:de:38:50:37:ec:45: 7b:15:43:67:3b:64:6a:82:a6:b2:7e:0a:8e:db:ec:7d:6d:d6: 83:7a:04:28:ab:40:1f:85:86:76:06:6b:40:56:79:3c:4b:a2: 33:3c:df:9a:45:ec:d6:1d:02:38:dc:2c:56:e9:62:cc:f9:40: d0:35:a7:66:00:37:20:24:2d:01:91:90:fc:12:5a:ae:8e:a4: c9:16:29:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQ5RUQxMTAvBgNVBAUTKDY4OEJCMDU5NUY1OTVCNzExRTAyNDUwQUNFRTNCMjZD MTEzQjc5MkYwHhcNMjUwNDI0MjExMjExWhcNMjUwNTAxMjExMjExWjAYMRYwFAYD VQQDEw02ODBhYTkyYi05ZTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsJozSLxJ0LT3f/RZMLv5vI1lf1vzGZHVAL53ShO++1qu6FeXtXW1IskfWXkn FOyInRLAHsUef2ybaVcCBImcG1bM7wKBEXUn+qO55sT+KkDNsYahTX6iGuT3uFgx +eMcN9iTuAD2ExSMBtlRFhPPqx89Qs7/EXWVJIZY++kt0b5kU9PwdjQiWdn3Xf53 qPBDqtvKOoSWNAQDyLtQLRj2vfQLT5uWe/i9hT9B5uibl3IE4qEMTwC2GVWTc/4z DvHE46frRcmFyUmNzzRFs8YcU/4/HTNMen/oV2EBCiJVDjc4Hgs/+4Etsqo2FqyB yfMdMVHzeplKJ7r6FHDggC+pZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPJl9tGc 3RRxx6HSC9cLT+mJ+MDIMB8GA1UdIwQYMBaAFGiLsFlfWVtxHgJFCs7jsmwRO3kv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDlFRC9CNzcxNEI5NjA5 MTgxMUVCOTVGQTI3MzdDNEY5QUUwMi9hSXV3V1Y5WlczRWVBa1VLenVPeWJCRTdl UzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FJdXdXVjlaVzNFZUFrVUt6dU95YkJFN2VTOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDlFRC9CNzcxNEI5NjA5MTgxMUVCOTVGQTI3MzdDNEY5QUUwMi9hSXV3V1Y5Wlcz RWVBa1VLenVPeWJCRTdlUzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAk2P3ZmrHFRW6HTHRpTPnEsmQyTEdF3tNDJru2Gg1znk3IKtrlRWSF 4XALqZy245HxFWj6lsBc2mct29XhE3NNsai4MGBYK+F/zS6Dr2nk0BoqsIT79oCj v0/G/kN6bAIZPbFl421mjQmXOJbzQyCGIULfr/AF+4YwhZWlTyjulXi6bweou3b8 LVHGCtDY1i6tkr/J/qjAhx24l0Z8TVm0EO0dB1nqb989EVykyWPeOFA37EV7FUNn O2RqgqayfgqO2+x9bdaDegQoq0AfhYZ2BmtAVnk8S6IzPN+aRezWHQI43CxW6WLM +UDQNadmADcgJC0BkZD8ElqujqTJFikI -----END CERTIFICATE-----Generated at Sat Apr 26 13:02:18 2025 by rpki-client