$ rpki-client -vvf rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft File: aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft (raw, json) Hash identifier: EyObHi9PTMRkQ3KY4Fnmn+tYvmzbi93MFzJvUmI5sOk= Subject key identifier: F7:32:EC:7C:63:54:04:D1:15:C9:A0:45:03:9F:F2:CE:05:1D:F7:C7 Authority key identifier: 69:2E:BD:3D:03:F2:58:74:6E:68:43:B6:12:8D:D2:09:C5:12:22:E6 Certificate issuer: /CN=A917BED0/serialNumber=692EBD3D03F258746E6843B6128DD209C51222E6 Certificate serial: 01C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aS69PQPyWHRuaEO2Eo3SCcUSIuY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft Manifest number: 01B9 Signing time: Fri 25 Apr 2025 02:17:24 +0000 Manifest this update: Fri 25 Apr 2025 02:17:23 +0000 Manifest next update: Fri 02 May 2025 02:17:23 +0000 Files and hashes: 1: aS69PQPyWHRuaEO2Eo3SCcUSIuY.crl (hash: 7HKTypD0DpxtpXYM5v/+WSAf2VP7xoOEWSR3CG1Ctm8=) 2: 24AC43889DE011EDA182F455C4F9AE02.roa (hash: VEixjX/Xe+G6aJHNRJCpYadqa0JmMvyZd3MR6Kj/fCY=) 3: 236FAC269DE011EDA182F455C4F9AE02.roa (hash: DvFHTfUMj5djbvwopTj+xsfhSJgyhsfDlJJptgV29ak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.crl rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aS69PQPyWHRuaEO2Eo3SCcUSIuY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:17:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 448 (0x1c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BED0, serialNumber=692EBD3D03F258746E6843B6128DD209C51222E6 Validity Not Before: Apr 25 02:17:23 2025 GMT Not After : May 2 02:17:23 2025 GMT Subject: CN=680af0b3-dd0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:8a:65:4c:34:73:10:3d:f9:82:04:cc:ab:6b: 7b:fb:7a:ee:0a:a2:00:8e:2d:56:b7:60:f1:d5:1c: 06:26:eb:3a:d0:1d:77:4d:7a:07:5d:43:a5:e9:b1: d8:22:32:be:d8:7f:9e:12:68:13:5a:ed:90:65:07: 42:05:70:d3:33:b5:15:f4:af:5b:61:d3:96:33:73: f3:3f:30:05:8b:7d:a4:48:81:cc:fe:47:03:78:48: bb:ca:6d:70:cd:9d:3f:a3:b6:3a:a6:50:85:63:12: 0d:d5:ab:f5:97:69:9b:60:4a:6f:37:42:2f:ee:3d: 23:2f:c7:a6:f2:7c:7e:1d:f3:28:90:ae:dc:c2:85: 2e:76:33:63:11:70:2e:89:27:f2:3f:ab:76:72:48: 37:16:84:a2:f9:ab:c4:ef:5b:81:77:43:fd:6b:18: 19:4a:ad:cd:d1:f0:50:6b:76:18:ec:a6:a2:56:55: 3c:ed:6a:dc:d4:26:3d:52:12:cb:f6:a0:ed:fd:f1: e7:7c:e6:b9:ec:81:fb:9b:b2:98:09:a1:33:ea:8e: ed:bb:3b:a3:b9:d3:f1:9b:b7:d4:ae:fc:ea:e8:04: 3a:11:ee:8d:d0:50:86:cf:07:65:a8:1a:ed:4f:6c: bf:bb:da:8d:85:1c:bf:3d:35:4e:ad:a4:3b:74:a2: f1:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:32:EC:7C:63:54:04:D1:15:C9:A0:45:03:9F:F2:CE:05:1D:F7:C7 X509v3 Authority Key Identifier: keyid:69:2E:BD:3D:03:F2:58:74:6E:68:43:B6:12:8D:D2:09:C5:12:22:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aS69PQPyWHRuaEO2Eo3SCcUSIuY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dd:f5:ad:7f:c0:d4:7e:1a:d8:c7:71:87:76:2f:24:49:df:db: 4c:78:fc:63:e5:5e:80:5c:06:76:6f:97:3d:df:5a:ad:06:65: b2:fc:d3:40:30:3f:8a:0e:d1:30:d8:cf:58:43:bc:97:ed:27: e7:09:26:62:b0:87:59:29:05:29:8f:40:4e:ae:39:a1:ac:79: 67:91:25:bb:2b:5c:cf:54:b5:51:b2:2e:6b:f1:8b:35:2b:bd: a4:e4:d3:6e:00:65:04:a3:9d:6a:34:2c:af:25:bc:30:4d:e6: e5:74:42:d5:4a:a8:2d:47:b3:19:08:dc:d7:09:9d:80:c1:2d: 5d:ac:a4:3f:9a:18:10:f6:be:fd:65:af:8a:10:8d:7b:f8:3e: 95:8a:8c:af:02:de:50:ed:51:8e:67:fd:3f:c6:02:0c:6a:4f: 42:50:59:4d:55:94:1c:7d:73:7d:51:66:cc:dc:e0:32:33:28: 64:06:c3:b0:f7:02:3c:d0:81:17:f0:f5:63:28:86:6d:d0:2d: 28:71:0c:d3:b9:f1:fa:bc:25:44:71:58:a7:f6:ac:84:d9:6e: c8:38:79:30:7a:84:5f:91:13:1e:d6:a3:d0:83:07:23:da:82: 5e:86:9b:04:d1:02:e0:ec:76:17:4e:d7:38:0c:6e:8d:24:0b: 3f:cc:58:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JFRDAxMTAvBgNVBAUTKDY5MkVCRDNEMDNGMjU4NzQ2RTY4NDNCNjEyOEREMjA5 QzUxMjIyRTYwHhcNMjUwNDI1MDIxNzIzWhcNMjUwNTAyMDIxNzIzWjAYMRYwFAYD VQQDEw02ODBhZjBiMy1kZDBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApoplTDRzED35ggTMq2t7+3ruCqIAji1Wt2Dx1RwGJus60B13TXoHXUOl6bHY IjK+2H+eEmgTWu2QZQdCBXDTM7UV9K9bYdOWM3PzPzAFi32kSIHM/kcDeEi7ym1w zZ0/o7Y6plCFYxIN1av1l2mbYEpvN0Iv7j0jL8em8nx+HfMokK7cwoUudjNjEXAu iSfyP6t2ckg3FoSi+avE71uBd0P9axgZSq3N0fBQa3YY7KaiVlU87Wrc1CY9UhLL 9qDt/fHnfOa57IH7m7KYCaEz6o7tuzujudPxm7fUrvzq6AQ6Ee6N0FCGzwdlqBrt T2y/u9qNhRy/PTVOraQ7dKLxKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPcy7Hxj VATRFcmgRQOf8s4FHffHMB8GA1UdIwQYMBaAFGkuvT0D8lh0bmhDthKN0gnFEiLm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkVEMC9EREI1ODlBMDgw MTkxMUVEQkJCRTMwNkVDNEY5QUUwMi9hUzY5UFFQeVdIUnVhRU8yRW8zU0NjVVNJ dVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FTNjlQUVB5V0hSdWFFTzJFbzNTQ2NVU0l1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkVEMC9EREI1ODlBMDgwMTkxMUVEQkJCRTMwNkVDNEY5QUUwMi9hUzY5UFFQeVdI UnVhRU8yRW8zU0NjVVNJdVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDd9a1/wNR+GtjHcYd2LyRJ39tMePxj5V6AXAZ2b5c931qtBmWy/NNA MD+KDtEw2M9YQ7yX7SfnCSZisIdZKQUpj0BOrjmhrHlnkSW7K1zPVLVRsi5r8Ys1 K72k5NNuAGUEo51qNCyvJbwwTebldELVSqgtR7MZCNzXCZ2AwS1drKQ/mhgQ9r79 Za+KEI17+D6VioyvAt5Q7VGOZ/0/xgIMak9CUFlNVZQcfXN9UWbM3OAyMyhkBsOw 9wI80IEX8PVjKIZt0C0ocQzTufH6vCVEcVin9qyE2W7IOHkweoRfkRMe1qPQgwcj 2oJehpsE0QLg7HYXTtc4DG6NJAs/zFhu -----END CERTIFICATE-----Generated at Sat Apr 26 04:18:59 2025 by rpki-client