$ rpki-client -vvf rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.mft File: aHvrJ3oFne_qK-3WevsbgjiOXrE.mft (raw, json) Hash identifier: jA5K5MucShAUJcYvd4DTlwETCLQlAieAcKrN/BVHhQY= Subject key identifier: 46:7C:FD:AB:D5:97:45:F6:FE:E2:32:B7:0A:EC:A0:A4:28:5F:A5:94 Authority key identifier: 68:7B:EB:27:7A:05:9D:EF:EA:2B:ED:D6:7A:FB:1B:82:38:8E:5E:B1 Certificate issuer: /CN=A9165FAD/serialNumber=687BEB277A059DEFEA2BEDD67AFB1B82388E5EB1 Certificate serial: 07BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHvrJ3oFne_qK-3WevsbgjiOXrE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.mft Manifest number: 07A4 Signing time: Thu 24 Apr 2025 21:11:40 +0000 Manifest this update: Thu 24 Apr 2025 21:11:40 +0000 Manifest next update: Thu 01 May 2025 21:11:40 +0000 Files and hashes: 1: aHvrJ3oFne_qK-3WevsbgjiOXrE.crl (hash: 4mjOOt0Of7CTMwZn83NYgmuoZet2bxXhRKIS2TEXuJ4=) 2: D19E7784AAF811EE8D8CCD25C4F9AE02.roa (hash: +XIvNmYB/5EgcsxvZK5ch01j/uNHHViQProaEC6+kLA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.crl rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHvrJ3oFne_qK-3WevsbgjiOXrE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:11:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1979 (0x7bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165FAD, serialNumber=687BEB277A059DEFEA2BEDD67AFB1B82388E5EB1 Validity Not Before: Apr 24 21:11:40 2025 GMT Not After : May 1 21:11:40 2025 GMT Subject: CN=680aa90c-fa12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:99:96:44:b5:48:4b:94:f9:e7:30:0f:9e:e2: e1:e9:ab:b8:de:43:79:e7:4e:fb:58:d1:b5:7d:0f: 01:37:57:a9:15:68:fe:da:e6:9b:15:e7:e9:4d:83: 49:b7:70:ad:b9:fa:31:02:53:fd:e0:6b:ac:21:a9: 52:34:5a:ab:1f:de:d4:d6:fc:3a:df:1d:db:66:97: 6d:79:26:fb:71:5c:b4:f8:08:14:f1:1f:9d:f5:e3: 34:f8:68:4e:85:1a:c0:be:96:ca:33:8f:50:b0:1b: fd:8b:a5:3f:4a:0e:ec:cb:56:cb:d0:2a:d5:3c:7d: d0:ad:c7:0f:6e:d1:8a:3b:f2:52:7b:39:7f:f9:c8: b6:0e:b9:98:9b:e5:09:51:cd:ac:3c:fa:cc:cc:60: 8f:05:0f:0b:cb:39:94:1e:01:83:4a:d2:76:6e:75: da:fc:66:7b:ac:f5:f0:28:8f:98:b1:49:e7:ba:13: fc:0c:48:83:ca:f6:5d:e4:33:db:0c:49:85:5a:3b: 89:a4:a2:07:99:d0:88:65:2c:09:e6:2d:bc:8e:41: 2d:5a:70:b7:ae:7f:42:d5:3c:fc:fd:86:c4:67:f7: 96:98:74:90:cf:32:79:f3:97:b9:21:30:dd:b5:41: 28:f2:63:de:03:c6:5b:8f:4d:76:1a:18:3a:60:1a: 7a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:7C:FD:AB:D5:97:45:F6:FE:E2:32:B7:0A:EC:A0:A4:28:5F:A5:94 X509v3 Authority Key Identifier: keyid:68:7B:EB:27:7A:05:9D:EF:EA:2B:ED:D6:7A:FB:1B:82:38:8E:5E:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHvrJ3oFne_qK-3WevsbgjiOXrE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:78:fb:26:64:7a:ab:e4:ef:c2:39:16:70:0b:96:2a:c9:2f: 15:01:37:3d:ee:84:5d:6f:f1:dd:a3:5e:8b:93:26:f3:c6:df: 5f:c8:fc:78:1f:56:9a:35:cd:0c:79:7e:36:c3:50:cc:19:40: b0:96:4e:35:cc:15:92:f5:61:33:e2:de:d7:a1:ef:e6:c5:de: 22:a4:0f:6a:07:7c:1b:ff:30:6b:67:f7:91:61:d0:66:23:8b: 7f:0c:37:b7:f9:f9:77:a1:7f:26:7d:ae:c9:4f:51:da:c8:aa: 75:0a:64:f7:62:59:e6:a4:3b:5f:ed:b9:c3:bc:eb:45:8b:d6: fd:a7:b9:e8:4b:c8:d3:85:ad:23:f3:f5:53:84:23:f1:f8:0c: 78:1e:de:4b:15:97:84:e6:53:56:8f:bd:1c:c3:3f:54:df:0a: de:e7:6f:2c:ab:c4:7e:bd:1b:1a:a7:5b:9b:ac:fc:03:4d:b1: e9:67:1c:34:34:23:6f:96:9d:3a:ac:74:21:8f:c1:23:52:2b: 45:0f:b4:66:06:99:25:5e:69:d0:4c:36:f1:d1:57:5a:42:8a: 59:27:1c:c8:76:6e:7a:00:ff:d9:be:3d:1f:99:2f:d3:b2:35: 58:9a:18:5e:c8:d5:4b:cf:1f:f3:2d:19:da:07:58:1d:c2:64: 3f:55:f7:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVGQUQxMTAvBgNVBAUTKDY4N0JFQjI3N0EwNTlERUZFQTJCRURENjdBRkIxQjgy Mzg4RTVFQjEwHhcNMjUwNDI0MjExMTQwWhcNMjUwNTAxMjExMTQwWjAYMRYwFAYD VQQDEw02ODBhYTkwYy1mYTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvZmWRLVIS5T55zAPnuLh6au43kN55077WNG1fQ8BN1epFWj+2uabFefpTYNJ t3CtufoxAlP94GusIalSNFqrH97U1vw63x3bZpdteSb7cVy0+AgU8R+d9eM0+GhO hRrAvpbKM49QsBv9i6U/Sg7sy1bL0CrVPH3QrccPbtGKO/JSezl/+ci2DrmYm+UJ Uc2sPPrMzGCPBQ8LyzmUHgGDStJ2bnXa/GZ7rPXwKI+YsUnnuhP8DEiDyvZd5DPb DEmFWjuJpKIHmdCIZSwJ5i28jkEtWnC3rn9C1Tz8/YbEZ/eWmHSQzzJ585e5ITDd tUEo8mPeA8Zbj012Ghg6YBp6FwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEZ8/avV l0X2/uIytwrsoKQoX6WUMB8GA1UdIwQYMBaAFGh76yd6BZ3v6ivt1nr7G4I4jl6x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUZBRC9BNEQ3ODk5RTA4 NjYxMUVCOEEyRDE1MzVDNEY5QUUwMi9hSHZySjNvRm5lX3FLLTNXZXZzYmdqaU9Y ckUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FIdnJKM29GbmVfcUstM1dldnNiZ2ppT1hyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NUZBRC9BNEQ3ODk5RTA4NjYxMUVCOEEyRDE1MzVDNEY5QUUwMi9hSHZySjNvRm5l X3FLLTNXZXZzYmdqaU9YckUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5ePsmZHqr5O/CORZwC5YqyS8VATc97oRdb/Hdo16Lkybzxt9fyPx4 H1aaNc0MeX42w1DMGUCwlk41zBWS9WEz4t7Xoe/mxd4ipA9qB3wb/zBrZ/eRYdBm I4t/DDe3+fl3oX8mfa7JT1HayKp1CmT3YlnmpDtf7bnDvOtFi9b9p7noS8jTha0j 8/VThCPx+Ax4Ht5LFZeE5lNWj70cwz9U3wre528sq8R+vRsap1ubrPwDTbHpZxw0 NCNvlp06rHQhj8EjUitFD7RmBpklXmnQTDbx0VdaQopZJxzIdm56AP/Zvj0fmS/T sjVYmhheyNVLzx/zLRnaB1gdwmQ/Vfeb -----END CERTIFICATE-----Generated at Sat Apr 26 12:56:38 2025 by rpki-client