$ rpki-client -vvf rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft File: Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft (raw, json) Hash identifier: ZzMLU0SQrr1bXbX+mGgcmwMpKj1UFBsdpqqxX/VEH3o= Subject key identifier: CB:51:C8:65:13:9A:6D:F2:76:BF:30:8B:36:FA:90:56:B6:CA:26:9F Authority key identifier: 02:AE:84:F6:11:B7:E8:2F:D7:D6:FF:8F:45:2D:87:25:EF:48:90:88 Certificate issuer: /CN=A91642A0/serialNumber=02AE84F611B7E82FD7D6FF8F452D8725EF489088 Certificate serial: 0CBD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aq6E9hG36C_X1v-PRS2HJe9IkIg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft Manifest number: 0C98 Signing time: Thu 24 Apr 2025 18:12:02 +0000 Manifest this update: Thu 24 Apr 2025 18:12:01 +0000 Manifest next update: Thu 01 May 2025 18:12:01 +0000 Files and hashes: 1: Aq6E9hG36C_X1v-PRS2HJe9IkIg.crl (hash: WGCgxW9suP+F5LogCNuLrb7yTb67oRUqWSSFauBOIso=) 2: B0B70006B19211EC9EAAD44EC4F9AE02.roa (hash: i853W0E/Chff6sq6i5MGm8h4afp0uwHZH5nrhPAd2hQ=) 3: AFB0FFCCB19211EC9EAAD44EC4F9AE02.roa (hash: LopWOlrdi+KR3zv5rk9gA4cot01KZERzAUu2r2vV8is=) 4: 0EF0E842839E11EEA1892A12C4F9AE02.roa (hash: /52qTFp6aiRpt+ltl9ngfv+TFAUotZNWt2Dzg7OlohE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.crl rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aq6E9hG36C_X1v-PRS2HJe9IkIg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:12:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3261 (0xcbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91642A0, serialNumber=02AE84F611B7E82FD7D6FF8F452D8725EF489088 Validity Not Before: Apr 24 18:12:01 2025 GMT Not After : May 1 18:12:01 2025 GMT Subject: CN=680a7ef2-dc32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:eb:9a:ba:74:35:a3:32:eb:89:3a:07:33:66: 2d:54:c3:a4:dc:bc:2c:b3:8a:63:1f:ae:be:21:f7: 14:36:ae:e7:80:c6:7f:c5:d4:16:cf:b7:27:70:cc: 0c:25:74:fc:cb:20:e7:15:70:8b:84:9a:0f:1f:bf: c7:2a:69:0a:43:93:1b:f6:c9:3b:38:5b:2f:91:88: d2:12:aa:18:e2:cc:2b:ab:57:a9:3d:ca:d1:41:b4: ff:f9:7e:67:da:dd:11:41:3f:34:84:40:53:d9:d5: 25:17:ef:cb:b8:6d:8d:1c:b9:30:1d:fd:d5:85:36: 63:df:33:49:4e:d9:33:85:cb:c7:3a:f8:ab:be:8a: 35:10:63:0c:28:f0:3c:d0:b5:a1:21:00:85:79:ee: c1:ec:78:13:54:90:ae:9b:43:16:9a:12:f5:26:8b: 6e:be:66:c8:9b:70:05:22:96:29:5b:7c:83:2e:db: 78:f6:bc:f8:57:16:8f:0e:3d:79:22:76:06:23:d0: 52:44:5a:7f:e9:8a:ae:59:8f:93:9a:76:77:2c:48: 52:c8:4b:ef:19:76:94:ce:2e:11:f7:c0:be:2a:4e: 04:07:ed:2a:92:e3:0e:dc:54:7f:c6:68:1e:9d:bf: 27:59:81:67:0a:f0:bb:90:8a:3b:c0:75:8f:0f:74: f0:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:51:C8:65:13:9A:6D:F2:76:BF:30:8B:36:FA:90:56:B6:CA:26:9F X509v3 Authority Key Identifier: keyid:02:AE:84:F6:11:B7:E8:2F:D7:D6:FF:8F:45:2D:87:25:EF:48:90:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aq6E9hG36C_X1v-PRS2HJe9IkIg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:14:3f:75:5e:37:a8:ff:e1:dc:95:e6:0c:52:5d:e5:8e:4e: 46:ee:a1:01:20:64:0d:c6:8e:8f:63:79:2e:51:a9:1f:8e:e7: 8a:ef:74:ee:7f:b3:fa:5c:1c:db:41:29:44:10:22:38:80:dd: 18:80:97:26:2a:45:7a:03:ac:61:67:22:08:f9:fb:a4:00:7e: 67:0a:a7:33:dd:f6:d9:ab:18:f5:7c:c7:68:35:c6:00:ea:33: c0:93:fe:b0:07:9a:a1:02:a2:b1:3d:2c:65:0f:ec:05:23:ae: dc:8a:72:ed:bd:9e:d7:3b:3b:fa:71:7d:25:34:0a:9d:07:7d: b4:03:29:d3:2f:77:c9:33:27:b7:1d:fe:52:51:65:1e:bd:91: b9:6b:4a:16:ad:56:73:ef:29:93:27:97:1b:d1:6a:72:7b:6e: 64:15:4a:aa:28:f8:b3:55:4b:34:e7:a2:05:10:d6:dd:c1:a7: a2:79:bb:dc:bd:4a:43:6b:42:af:ea:3d:7c:de:e4:80:d8:02: 1a:2e:c1:91:29:ad:b7:d3:1a:a4:e6:5b:ad:dd:bb:2d:6c:57: d3:e0:42:9b:1d:61:ff:a9:e3:c6:72:c9:62:ed:97:5a:c6:47: bb:1d:9a:6a:e5:77:05:17:c1:56:09:da:06:0c:78:e1:9c:78: 6a:ff:42:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQyQTAxMTAvBgNVBAUTKDAyQUU4NEY2MTFCN0U4MkZEN0Q2RkY4RjQ1MkQ4NzI1 RUY0ODkwODgwHhcNMjUwNDI0MTgxMjAxWhcNMjUwNTAxMTgxMjAxWjAYMRYwFAYD VQQDEw02ODBhN2VmMi1kYzMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq+uaunQ1ozLriToHM2YtVMOk3Lwss4pjH66+IfcUNq7ngMZ/xdQWz7cncMwM JXT8yyDnFXCLhJoPH7/HKmkKQ5Mb9sk7OFsvkYjSEqoY4swrq1epPcrRQbT/+X5n 2t0RQT80hEBT2dUlF+/LuG2NHLkwHf3VhTZj3zNJTtkzhcvHOvirvoo1EGMMKPA8 0LWhIQCFee7B7HgTVJCum0MWmhL1JotuvmbIm3AFIpYpW3yDLtt49rz4VxaPDj15 InYGI9BSRFp/6YquWY+TmnZ3LEhSyEvvGXaUzi4R98C+Kk4EB+0qkuMO3FR/xmge nb8nWYFnCvC7kIo7wHWPD3TwLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMtRyGUT mm3ydr8wizb6kFa2yiafMB8GA1UdIwQYMBaAFAKuhPYRt+gv19b/j0UthyXvSJCI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDJBMC9DQTdEMTE2MkY2 NzYxMUU5OTBCQUEyMjJDNEY5QUUwMi9BcTZFOWhHMzZDX1gxdi1QUlMySEplOUlr SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FxNkU5aEczNkNfWDF2LVBSUzJISmU5SWtJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDJBMC9DQTdEMTE2MkY2NzYxMUU5OTBCQUEyMjJDNEY5QUUwMi9BcTZFOWhHMzZD X1gxdi1QUlMySEplOUlrSWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmFD91Xjeo/+HcleYMUl3ljk5G7qEBIGQNxo6PY3kuUakfjueK73Tu f7P6XBzbQSlEECI4gN0YgJcmKkV6A6xhZyII+fukAH5nCqcz3fbZqxj1fMdoNcYA 6jPAk/6wB5qhAqKxPSxlD+wFI67cinLtvZ7XOzv6cX0lNAqdB320AynTL3fJMye3 Hf5SUWUevZG5a0oWrVZz7ymTJ5cb0Wpye25kFUqqKPizVUs056IFENbdwaeiebvc vUpDa0Kv6j183uSA2AIaLsGRKa230xqk5lut3bstbFfT4EKbHWH/qePGcsli7Zda xke7HZpq5XcFF8FWCdoGDHjhnHhq/0J2 -----END CERTIFICATE-----Generated at Sat Apr 26 03:43:56 2025 by rpki-client