$ rpki-client -vvf rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.mft File: aBEEkGz5PaQ7bFshNaAkFJqPwFc.mft (raw, json) Hash identifier: 4FCq64day7a1L1qnwjh2bvUbIxmg9Gx4pDiXnOxT+TM= Subject key identifier: D4:E9:3C:E2:3A:CC:77:42:38:55:06:54:2A:0A:51:7E:8E:88:B1:31 Authority key identifier: 68:11:04:90:6C:F9:3D:A4:3B:6C:5B:21:35:A0:24:14:9A:8F:C0:57 Certificate issuer: /CN=A9156751/serialNumber=681104906CF93DA43B6C5B2135A024149A8FC057 Certificate serial: 02A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBEEkGz5PaQ7bFshNaAkFJqPwFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.mft Manifest number: 029E Signing time: Fri 25 Apr 2025 01:16:29 +0000 Manifest this update: Fri 25 Apr 2025 01:16:28 +0000 Manifest next update: Fri 02 May 2025 01:16:28 +0000 Files and hashes: 1: aBEEkGz5PaQ7bFshNaAkFJqPwFc.crl (hash: 6e6qFUMnociTWE66lEji+LVG3ly+XIKZHg0loHE2hgM=) 2: 776724AAF7B711ECAE4F7935C4F9AE02.roa (hash: PKEZfZTmj/mGEPOfYVGBRNahCa+W7goVh1g1wDRTSDE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.crl rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBEEkGz5PaQ7bFshNaAkFJqPwFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:16:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 673 (0x2a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156751, serialNumber=681104906CF93DA43B6C5B2135A024149A8FC057 Validity Not Before: Apr 25 01:16:28 2025 GMT Not After : May 2 01:16:28 2025 GMT Subject: CN=680ae26d-1535 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:24:8f:e3:b6:da:10:98:bc:78:9b:3d:d3:74: a7:35:91:ad:fe:36:72:8d:a2:75:a8:4d:d6:0d:61: fe:5b:93:70:ed:1c:3d:05:06:33:1b:53:e2:97:9e: 7f:1f:19:8d:72:80:48:d9:d9:1e:ef:b7:fd:ac:6b: 26:03:4b:bf:fe:0c:0e:ac:9b:b4:d6:22:d4:21:32: 48:fd:db:15:44:77:02:8c:e7:b3:61:2c:5e:2c:83: f9:6b:db:3b:d5:35:8c:f2:c4:fa:b9:d2:2d:8b:d4: 4f:15:60:2e:b1:03:ba:02:ca:20:3e:bc:1a:b4:a5: 99:98:1b:0d:20:61:fe:62:ff:89:3e:85:77:ee:d0: 0c:6c:18:27:31:3c:a5:9d:45:2d:9d:e6:aa:90:a8: 33:c1:bc:cf:3d:97:89:6a:c1:04:fb:db:d2:82:de: b0:40:bf:82:73:09:91:d5:ed:69:5b:3c:f0:b6:29: 63:f5:65:a6:23:a3:80:67:c8:6a:8b:95:44:7c:4e: 97:d6:3e:f4:56:40:cd:40:74:62:ba:18:82:e8:3a: a6:d8:0c:c3:aa:16:58:37:48:68:fa:e6:f6:c2:a5: 06:d0:c7:f3:ad:b4:2e:2f:35:8a:76:b5:63:76:89: 36:8d:5a:b4:03:fe:ed:16:2b:7d:14:7f:55:42:ea: c3:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:E9:3C:E2:3A:CC:77:42:38:55:06:54:2A:0A:51:7E:8E:88:B1:31 X509v3 Authority Key Identifier: keyid:68:11:04:90:6C:F9:3D:A4:3B:6C:5B:21:35:A0:24:14:9A:8F:C0:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBEEkGz5PaQ7bFshNaAkFJqPwFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:1c:06:06:81:11:ba:2c:9d:0e:ff:17:52:9f:90:4c:5e:5f: bc:f2:64:07:b2:5f:fe:67:b9:9d:53:bf:f3:91:d7:9c:32:a7: c9:3f:8a:db:c8:f6:42:0e:f8:24:20:46:84:3d:e1:ec:bc:07: 11:ce:2a:16:9d:5c:13:1f:dd:da:f9:57:c4:85:df:f1:2d:19: 42:c7:2b:09:5f:b5:4a:fd:96:96:3c:1e:2f:ad:1d:48:a8:f6: 31:61:c7:3d:d5:25:aa:04:49:58:83:01:cb:04:d0:c9:b6:e5: 3c:f5:a8:c4:0a:e9:16:2b:1c:b1:7f:95:5b:a1:d1:8c:27:35: 8a:53:60:f2:1b:94:75:76:a2:76:70:6c:64:b0:67:ef:3d:1a: 37:c7:b1:3f:89:d4:cb:56:43:3f:f2:50:9d:d5:57:2f:b7:76: fe:10:72:20:a9:f2:a9:c2:e0:43:51:c4:8c:e4:89:fc:6d:53: a8:0c:64:23:ff:42:4c:e8:1f:f7:7b:67:c1:53:3e:f3:2c:91: c9:0e:15:4a:20:36:4a:a6:41:96:c9:57:3d:7c:d2:45:36:59: 90:6f:11:7c:ea:13:72:7f:7a:a6:0e:22:85:09:c2:02:5a:55: 5f:6f:70:e0:fe:48:a8:c9:4d:e3:c9:be:20:1b:3d:77:d8:b5: f2:77:37:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY3NTExMTAvBgNVBAUTKDY4MTEwNDkwNkNGOTNEQTQzQjZDNUIyMTM1QTAyNDE0 OUE4RkMwNTcwHhcNMjUwNDI1MDExNjI4WhcNMjUwNTAyMDExNjI4WjAYMRYwFAYD VQQDEw02ODBhZTI2ZC0xNTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwySP47baEJi8eJs903SnNZGt/jZyjaJ1qE3WDWH+W5Nw7Rw9BQYzG1Pil55/ HxmNcoBI2dke77f9rGsmA0u//gwOrJu01iLUITJI/dsVRHcCjOezYSxeLIP5a9s7 1TWM8sT6udIti9RPFWAusQO6AsogPrwatKWZmBsNIGH+Yv+JPoV37tAMbBgnMTyl nUUtneaqkKgzwbzPPZeJasEE+9vSgt6wQL+CcwmR1e1pWzzwtilj9WWmI6OAZ8hq i5VEfE6X1j70VkDNQHRiuhiC6Dqm2AzDqhZYN0ho+ub2wqUG0MfzrbQuLzWKdrVj dok2jVq0A/7tFit9FH9VQurDrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNTpPOI6 zHdCOFUGVCoKUX6OiLExMB8GA1UdIwQYMBaAFGgRBJBs+T2kO2xbITWgJBSaj8BX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Njc1MS8wRjg3MDJCQUY3 QjIxMUVDQjJBRTYzMkVDNEY5QUUwMi9hQkVFa0d6NVBhUTdiRnNoTmFBa0ZKcVB3 RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FCRUVrR3o1UGFRN2JGc2hOYUFrRkpxUHdGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Njc1MS8wRjg3MDJCQUY3QjIxMUVDQjJBRTYzMkVDNEY5QUUwMi9hQkVFa0d6NVBh UTdiRnNoTmFBa0ZKcVB3RmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAHAYGgRG6LJ0O/xdSn5BMXl+88mQHsl/+Z7mdU7/zkdecMqfJP4rb yPZCDvgkIEaEPeHsvAcRzioWnVwTH93a+VfEhd/xLRlCxysJX7VK/ZaWPB4vrR1I qPYxYcc91SWqBElYgwHLBNDJtuU89ajECukWKxyxf5VbodGMJzWKU2DyG5R1dqJ2 cGxksGfvPRo3x7E/idTLVkM/8lCd1Vcvt3b+EHIgqfKpwuBDUcSM5In8bVOoDGQj /0JM6B/3e2fBUz7zLJHJDhVKIDZKpkGWyVc9fNJFNlmQbxF86hNyf3qmDiKFCcIC WlVfb3Dg/kioyU3jyb4gGz132LXydzfJ -----END CERTIFICATE-----Generated at Sat Apr 26 13:41:47 2025 by rpki-client