$ rpki-client -vvf rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.mft File: aMW6vfwSOWbQX4DD-kI3lELEIgw.mft (raw, json) Hash identifier: 0G0+dHGX/QrSFEQvxKdtHks4nyN8suevDbhhXc+7bWc= Subject key identifier: 81:C2:83:AD:27:E5:54:38:95:6D:82:08:9F:8A:76:26:9A:43:07:66 Authority key identifier: 68:C5:BA:BD:FC:12:39:66:D0:5F:80:C3:FA:42:37:94:42:C4:22:0C Certificate issuer: /CN=A917201D/serialNumber=68C5BABDFC123966D05F80C3FA42379442C4220C Certificate serial: 34A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMW6vfwSOWbQX4DD-kI3lELEIgw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.mft Manifest number: 3485 Signing time: Thu 24 Apr 2025 14:44:06 +0000 Manifest this update: Thu 24 Apr 2025 14:44:05 +0000 Manifest next update: Thu 01 May 2025 14:44:05 +0000 Files and hashes: 1: aMW6vfwSOWbQX4DD-kI3lELEIgw.crl (hash: V53GjgBo6iSrxS2GAG6JRf4xoOIrfr0ji1x3M/bS6UE=) 2: E05FE99AB0D511E5B4F68B09C4F9AE02.roa (hash: /edqiqL2miGSNr0uoaTjo4btCNWXItXesGyoq/gND/E=) 3: 73438FF06DED11E9A21D1341C4F9AE02.roa (hash: C4bWHi41cN0y8JVNPFitYHiPYUVvz8I3upa7uMSFTP0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.crl rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMW6vfwSOWbQX4DD-kI3lELEIgw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 14:44:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13473 (0x34a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917201D, serialNumber=68C5BABDFC123966D05F80C3FA42379442C4220C Validity Not Before: Apr 24 14:44:05 2025 GMT Not After : May 1 14:44:05 2025 GMT Subject: CN=680a4e36-b903 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:3b:43:43:b0:55:ac:74:0b:c2:4f:84:d1:a4: 60:ae:81:a0:9b:02:c8:9f:27:25:ae:77:ca:d7:86: 69:56:01:6d:9d:38:f0:72:9d:6c:7d:41:2e:0b:a7: 06:a4:2b:a4:a3:3e:5e:3f:b5:00:f4:aa:4e:a2:0b: 93:d9:95:29:38:81:9e:67:48:60:85:0a:d4:d5:95: b5:eb:b6:50:8f:b1:a4:08:e5:4e:cf:98:7f:3d:83: 26:96:34:32:6d:dd:e1:0d:98:7c:02:34:c3:ec:97: 73:c3:bb:49:9f:e1:95:08:e2:95:5f:1c:d3:34:0d: 1a:24:f4:3c:f3:b6:a3:38:1f:b0:24:c2:c6:32:b6: 89:f2:99:c5:f0:a6:03:ba:e8:02:7e:ab:a0:bd:2c: b1:b4:e4:98:a1:b5:8e:78:b7:68:00:75:1c:44:91: d2:7e:10:95:73:f2:ff:77:5c:dc:11:9a:f3:68:bd: 60:34:0d:de:39:ea:71:94:ec:51:c5:dc:7b:c9:b4: 3c:ad:d3:37:43:f4:ef:27:9b:65:ae:5b:25:34:1b: 43:21:81:62:52:2b:c1:da:57:6c:49:cf:5b:f2:96: 17:fe:7a:6f:a4:4f:c9:61:44:86:7c:76:a2:61:fd: 05:24:79:da:c0:dc:f1:1d:47:55:1a:48:e7:70:a9: bb:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:C2:83:AD:27:E5:54:38:95:6D:82:08:9F:8A:76:26:9A:43:07:66 X509v3 Authority Key Identifier: keyid:68:C5:BA:BD:FC:12:39:66:D0:5F:80:C3:FA:42:37:94:42:C4:22:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMW6vfwSOWbQX4DD-kI3lELEIgw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:c5:6b:57:1a:c9:9c:c2:2f:a6:b5:fd:4b:76:c7:8a:0a:bd: 7e:82:45:3b:8c:9a:5a:62:2c:b2:f7:84:d9:c7:68:d2:b5:32: 80:a7:f2:14:4a:9b:df:1a:11:ab:db:c6:89:7d:1e:f4:27:0d: 09:a0:2d:df:d2:51:98:68:c7:22:bf:16:fd:e2:1f:b2:c2:3a: 74:9f:86:f8:07:3c:aa:d5:1e:18:ed:7e:34:0c:07:a7:b5:34: 99:a2:67:0f:7b:8f:0f:83:fb:73:fe:bd:d4:7c:02:e1:cb:ae: 69:cd:fd:d5:22:84:c0:50:a6:33:57:5c:74:bf:f4:2b:23:97: 6c:24:d4:ef:5b:84:6d:99:fc:1b:74:16:e1:a0:66:2a:0a:40: 5f:91:53:f6:be:73:28:01:3d:f8:11:44:bd:3e:57:ab:5f:c2: d1:16:46:7b:ff:56:85:e3:65:e2:19:ae:b6:66:3c:9b:00:5e: 62:a2:4e:5c:43:47:01:53:05:d3:12:11:13:03:c2:3f:19:f4: 4a:01:96:80:fa:e7:6e:59:db:8e:70:8a:44:02:c0:76:12:a7: 98:de:8b:66:a0:01:e3:fc:50:7a:db:d8:ac:70:c6:12:6f:4b: 24:72:62:09:fc:80:a2:c4:23:62:18:25:c3:52:1c:3b:4c:15: 8e:58:c1:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzIwMUQxMTAvBgNVBAUTKDY4QzVCQUJERkMxMjM5NjZEMDVGODBDM0ZBNDIzNzk0 NDJDNDIyMEMwHhcNMjUwNDI0MTQ0NDA1WhcNMjUwNTAxMTQ0NDA1WjAYMRYwFAYD VQQDEw02ODBhNGUzNi1iOTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0jtDQ7BVrHQLwk+E0aRgroGgmwLInyclrnfK14ZpVgFtnTjwcp1sfUEuC6cG pCukoz5eP7UA9KpOoguT2ZUpOIGeZ0hghQrU1ZW167ZQj7GkCOVOz5h/PYMmljQy bd3hDZh8AjTD7Jdzw7tJn+GVCOKVXxzTNA0aJPQ887ajOB+wJMLGMraJ8pnF8KYD uugCfqugvSyxtOSYobWOeLdoAHUcRJHSfhCVc/L/d1zcEZrzaL1gNA3eOepxlOxR xdx7ybQ8rdM3Q/TvJ5tlrlslNBtDIYFiUivB2ldsSc9b8pYX/npvpE/JYUSGfHai Yf0FJHnawNzxHUdVGkjncKm7SwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIHCg60n 5VQ4lW2CCJ+KdiaaQwdmMB8GA1UdIwQYMBaAFGjFur38Ejlm0F+Aw/pCN5RCxCIM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MjAxRC9DRDFFMjk0ODFE OTIxMUUyQTNCMUY0RjUwOEIwMkNEMi9hTVc2dmZ3U09XYlFYNERELWtJM2xFTEVJ Z3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FNVzZ2ZndTT1diUVg0REQta0kzbEVMRUlndy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MjAxRC9DRDFFMjk0ODFEOTIxMUUyQTNCMUY0RjUwOEIwMkNEMi9hTVc2dmZ3U09X YlFYNERELWtJM2xFTEVJZ3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsxWtXGsmcwi+mtf1LdseKCr1+gkU7jJpaYiyy94TZx2jStTKAp/IU SpvfGhGr28aJfR70Jw0JoC3f0lGYaMcivxb94h+ywjp0n4b4Bzyq1R4Y7X40DAen tTSZomcPe48Pg/tz/r3UfALhy65pzf3VIoTAUKYzV1x0v/QrI5dsJNTvW4Rtmfwb dBbhoGYqCkBfkVP2vnMoAT34EUS9PlerX8LRFkZ7/1aF42XiGa62ZjybAF5iok5c Q0cBUwXTEhETA8I/GfRKAZaA+uduWduOcIpEAsB2EqeY3otmoAHj/FB629iscMYS b0skcmIJ/ICixCNiGCXDUhw7TBWOWMGO -----END CERTIFICATE-----Generated at Sat Apr 26 13:03:19 2025 by rpki-client