$ rpki-client -vvf rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft File: AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft (raw, json) Hash identifier: jC8PnYpYkS0S4V6C3BJeMWQOB8kH3gtAGuSkNYGbiMQ= Subject key identifier: 59:AA:31:F8:CD:8E:76:4A:59:33:F1:00:43:ED:B8:FE:B5:6E:66:FC Authority key identifier: 00:8F:5D:06:F0:FE:FC:40:FD:83:0B:26:CD:76:60:A3:83:11:0C:91 Certificate issuer: /CN=A915E678/serialNumber=008F5D06F0FEFC40FD830B26CD7660A383110C91 Certificate serial: 0124 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI9dBvD-_ED9gwsmzXZgo4MRDJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft Manifest number: 011C Signing time: Fri 25 Apr 2025 03:56:08 +0000 Manifest this update: Fri 25 Apr 2025 03:56:08 +0000 Manifest next update: Fri 02 May 2025 03:56:08 +0000 Files and hashes: 1: AI9dBvD-_ED9gwsmzXZgo4MRDJE.crl (hash: qG0mCBLUC2WwSUNUnCUk49sJbnG7iQHwC6IykFWwV08=) 2: D39B04847C4B11EEB4EA3632C4F9AE02.roa (hash: VkMCaNU7sXjTR/CQAkH/z8BpEQbO8jbw+1o8r2q8dPA=) 3: 5694D344791B11EEA64C016BC4F9AE02.roa (hash: cg93R23INGR8fe5V8I1v0XqkWQVYbzGg1oKwaVZnx2Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.crl rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI9dBvD-_ED9gwsmzXZgo4MRDJE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:56:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 292 (0x124) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E678, serialNumber=008F5D06F0FEFC40FD830B26CD7660A383110C91 Validity Not Before: Apr 25 03:56:08 2025 GMT Not After : May 2 03:56:08 2025 GMT Subject: CN=680b07d8-18e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:65:ec:db:55:8c:9d:0a:68:fb:53:c2:fe:55: 1f:0e:03:ce:29:23:f5:fd:86:d4:d7:af:73:04:8b: 6b:3b:dd:34:2d:68:33:81:30:f4:6b:c4:9f:bb:c3: d1:22:68:e3:12:87:b6:3b:f3:81:4c:bd:bc:26:d5: 3e:53:38:dc:fc:49:f8:0c:2d:3b:68:9d:c9:cb:2a: 48:7c:50:aa:eb:a5:64:fc:a9:0a:db:fd:ff:51:59: c5:80:5d:96:33:56:90:e2:1c:8a:e9:4b:d9:92:61: e3:31:74:4d:d1:ff:c8:7d:dc:bb:ba:f3:74:4c:2c: 14:07:ef:30:de:2e:ea:b9:13:e9:cd:08:9d:47:3a: f8:89:00:9e:c0:a2:9c:c5:73:36:a1:91:7a:af:c1: e7:65:54:ed:16:c9:7c:ed:70:54:9b:1a:1e:ba:e0: 82:37:a2:b8:06:02:41:92:f8:70:7e:ef:f1:e8:41: 84:b0:6d:27:51:fb:51:a7:55:c0:fa:74:65:15:cc: 4a:38:06:3b:14:00:08:b4:47:3d:35:c3:bf:8e:60: f2:6c:17:b0:19:2c:1c:df:df:e0:87:31:5a:78:00: ff:2b:bf:4a:07:c2:06:18:59:0d:16:42:a4:92:28: 10:3c:bd:4c:31:7c:58:63:43:20:88:68:7f:60:b3: 4f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:AA:31:F8:CD:8E:76:4A:59:33:F1:00:43:ED:B8:FE:B5:6E:66:FC X509v3 Authority Key Identifier: keyid:00:8F:5D:06:F0:FE:FC:40:FD:83:0B:26:CD:76:60:A3:83:11:0C:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI9dBvD-_ED9gwsmzXZgo4MRDJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:a1:66:7e:aa:b5:4c:14:96:34:2b:13:d9:54:32:35:1f:f7: 3e:6a:ad:69:4f:42:0c:af:38:97:d6:cb:55:4e:20:2a:48:3b: 2a:66:37:b8:be:d9:14:42:30:e3:e0:41:77:bc:55:30:b9:43: 9b:bc:cd:06:a5:00:93:9f:e8:f9:78:dc:33:9c:2b:1f:9a:4f: a8:f1:ef:97:90:d8:4c:34:4e:29:b6:ed:b2:37:39:6c:5e:19: 7d:cf:39:3e:49:8a:4f:17:10:44:56:05:a8:66:d9:10:8c:d4: 9b:93:df:08:5b:2a:d6:bc:dd:56:97:f4:4e:b5:85:eb:1c:47: bf:fe:e5:43:33:8f:d4:a8:28:0d:69:dc:60:f0:ac:3e:da:2b: 28:5d:4e:ed:e5:e8:b7:0a:07:61:25:21:b0:ec:47:6e:33:2e: b2:d7:ae:66:e2:dd:1b:2c:b0:aa:7b:f7:25:3b:92:d7:d6:97: 70:e3:24:64:f6:40:80:90:5c:33:8c:8b:78:b5:be:c2:47:9d: b0:0e:20:da:2e:7f:89:62:f6:ef:eb:f1:8c:ab:63:76:af:83: 34:72:59:3e:a9:a2:30:ac:48:12:2b:f4:e0:f7:94:80:d5:c8: 34:76:c2:8d:75:21:e7:1a:72:54:63:65:1a:47:7b:f5:e4:5d: 1f:71:86:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUU2NzgxMTAvBgNVBAUTKDAwOEY1RDA2RjBGRUZDNDBGRDgzMEIyNkNENzY2MEEz ODMxMTBDOTEwHhcNMjUwNDI1MDM1NjA4WhcNMjUwNTAyMDM1NjA4WjAYMRYwFAYD VQQDEw02ODBiMDdkOC0xOGU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0GXs21WMnQpo+1PC/lUfDgPOKSP1/YbU169zBItrO900LWgzgTD0a8Sfu8PR ImjjEoe2O/OBTL28JtU+Uzjc/En4DC07aJ3JyypIfFCq66Vk/KkK2/3/UVnFgF2W M1aQ4hyK6UvZkmHjMXRN0f/Ifdy7uvN0TCwUB+8w3i7quRPpzQidRzr4iQCewKKc xXM2oZF6r8HnZVTtFsl87XBUmxoeuuCCN6K4BgJBkvhwfu/x6EGEsG0nUftRp1XA +nRlFcxKOAY7FAAItEc9NcO/jmDybBewGSwc39/ghzFaeAD/K79KB8IGGFkNFkKk kigQPL1MMXxYY0MgiGh/YLNP5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFmqMfjN jnZKWTPxAEPtuP61bmb8MB8GA1UdIwQYMBaAFACPXQbw/vxA/YMLJs12YKODEQyR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTY3OC83QUVFRDg2Mjc5 MUExMUVFQUNBMUFEMkJDNEY5QUUwMi9BSTlkQnZELV9FRDlnd3NtelhaZ280TVJE SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FJOWRCdkQtX0VEOWd3c216WFpnbzRNUkRKRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RTY3OC83QUVFRDg2Mjc5MUExMUVFQUNBMUFEMkJDNEY5QUUwMi9BSTlkQnZELV9F RDlnd3NtelhaZ280TVJESkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDCoWZ+qrVMFJY0KxPZVDI1H/c+aq1pT0IMrziX1stVTiAqSDsqZje4 vtkUQjDj4EF3vFUwuUObvM0GpQCTn+j5eNwznCsfmk+o8e+XkNhMNE4ptu2yNzls Xhl9zzk+SYpPFxBEVgWoZtkQjNSbk98IWyrWvN1Wl/ROtYXrHEe//uVDM4/UqCgN adxg8Kw+2isoXU7t5ei3CgdhJSGw7EduMy6y165m4t0bLLCqe/clO5LX1pdw4yRk 9kCAkFwzjIt4tb7CR52wDiDaLn+JYvbv6/GMq2N2r4M0clk+qaIwrEgSK/Tg95SA 1cg0dsKNdSHnGnJUY2UaR3v15F0fcYZO -----END CERTIFICATE-----Generated at Sat Apr 26 17:00:06 2025 by rpki-client