$ rpki-client -vvf rpki.apnic.net/member_repository/A918196D/6202AA3E411011EC9939C00FC4F9AE02/aFEZgfy52vrY49MDBLtBqW-5p28.mft File: aFEZgfy52vrY49MDBLtBqW-5p28.mft (raw, json) Hash identifier: Ct6XcikxTk+6qNfZNJ3iIyJKfzarg6nikJ7wm9jhO/s= Subject key identifier: E3:0D:95:E3:12:17:2A:1F:9D:71:BD:A6:14:62:E4:F4:9D:9E:B8:44 Authority key identifier: 68:51:19:81:FC:B9:DA:FA:D8:E3:D3:03:04:BB:41:A9:6F:B9:A7:6F Certificate issuer: /CN=A918196D/serialNumber=68511981FCB9DAFAD8E3D30304BB41A96FB9A76F Certificate serial: 0485 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFEZgfy52vrY49MDBLtBqW-5p28.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918196D/6202AA3E411011EC9939C00FC4F9AE02/aFEZgfy52vrY49MDBLtBqW-5p28.mft Manifest number: 0478 Signing time: Thu 24 Apr 2025 23:52:22 +0000 Manifest this update: Thu 24 Apr 2025 23:52:22 +0000 Manifest next update: Thu 01 May 2025 23:52:22 +0000 Files and hashes: 1: aFEZgfy52vrY49MDBLtBqW-5p28.crl (hash: QFRQKYYW2RlD7Rfc1gY2iyFQ/MWJMK1ltQtKe1IDj3c=) 2: 3E60217E42D211EC956C7F65C4F9AE02.roa (hash: Hw9cMJ5qnwE3ro35aioTBxjmKMgII3wJZDwK2UawEFY=) 3: 2E971452411311EC88F4A813C4F9AE02.roa (hash: IHzWbo+P0xMAUj8Y7qcnkYwJZ7MRPNKo7bVzwYfeGIo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918196D/6202AA3E411011EC9939C00FC4F9AE02/aFEZgfy52vrY49MDBLtBqW-5p28.crl rsync://rpki.apnic.net/member_repository/A918196D/6202AA3E411011EC9939C00FC4F9AE02/aFEZgfy52vrY49MDBLtBqW-5p28.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFEZgfy52vrY49MDBLtBqW-5p28.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:52:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1157 (0x485) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918196D, serialNumber=68511981FCB9DAFAD8E3D30304BB41A96FB9A76F Validity Not Before: Apr 24 23:52:22 2025 GMT Not After : May 1 23:52:22 2025 GMT Subject: CN=680aceb6-b423 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:58:ab:4e:a2:e7:88:bd:a0:d4:26:46:07:c5: 5e:57:3a:28:fe:89:5d:bd:82:ca:68:8a:b0:1f:0c: 2b:4a:e9:0c:ca:86:2b:4a:78:81:eb:34:e0:40:69: f6:78:da:31:f3:04:8e:3d:16:cc:6f:a6:fa:59:fc: fc:27:f4:69:86:b1:98:9e:72:5c:d6:04:4c:ad:39: 80:81:22:0a:71:64:8d:00:b0:85:ee:58:59:e7:93: 3a:d8:05:86:ca:d5:b5:6f:e8:2e:38:6a:99:63:36: 31:77:cc:2e:9a:11:02:f7:e5:e8:f8:a6:f9:76:fe: b6:d8:6b:c3:24:54:9a:be:8d:36:c0:b0:62:9b:39: e3:be:58:9e:67:44:0d:50:80:42:16:26:bd:a1:f6: 1b:f3:62:ca:0c:4b:fa:d6:f5:f5:f0:3f:c6:48:f4: 41:c8:46:0c:ec:fd:60:7e:fb:71:67:6d:f4:47:1d: 9f:8c:6c:01:e3:98:11:d0:92:05:fa:cf:9d:07:91: 74:03:95:f2:bc:54:13:02:90:73:6d:4b:4d:ca:47: fd:22:f7:24:96:e5:2c:fa:60:28:c0:3a:75:89:fc: cc:8e:cf:06:65:91:74:13:51:16:37:55:0a:56:94: 58:02:1d:3b:cc:2b:dd:dd:3e:47:94:79:e0:c9:3d: 58:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:0D:95:E3:12:17:2A:1F:9D:71:BD:A6:14:62:E4:F4:9D:9E:B8:44 X509v3 Authority Key Identifier: keyid:68:51:19:81:FC:B9:DA:FA:D8:E3:D3:03:04:BB:41:A9:6F:B9:A7:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918196D/6202AA3E411011EC9939C00FC4F9AE02/aFEZgfy52vrY49MDBLtBqW-5p28.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFEZgfy52vrY49MDBLtBqW-5p28.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918196D/6202AA3E411011EC9939C00FC4F9AE02/aFEZgfy52vrY49MDBLtBqW-5p28.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:f7:d6:b0:f4:52:ff:29:cd:4d:e7:c6:96:db:3d:15:fc:8a: db:d7:cd:27:21:1e:cb:40:53:04:a2:41:91:f9:56:58:c0:18: fd:00:50:ac:02:5a:66:bf:12:b7:c7:c0:b8:6e:d3:0b:1a:e8: b2:3c:21:43:a8:7b:4a:6f:3c:e3:51:8e:aa:de:75:7a:2b:ee: 4c:3d:d0:77:a0:06:1b:a4:5a:ef:87:75:53:92:84:38:77:f4: bc:82:0a:78:00:55:cb:19:79:4d:22:d7:10:7e:1e:11:3c:cb: f7:f9:31:f2:46:d7:ee:ce:f7:6c:7e:02:e7:18:ca:4d:fc:fe: 13:ef:24:c7:ec:81:ac:5c:96:1c:fd:fe:7a:43:a3:bc:38:56: d0:cb:81:24:70:42:86:7f:64:79:69:1b:dc:f7:65:f4:d3:da: 8c:24:a7:26:af:7c:31:66:55:80:d4:01:32:aa:d0:7d:a6:d9: ca:06:25:71:0e:94:ed:48:a1:b8:4d:db:76:42:97:cf:28:3a: 4d:8f:bf:8b:8d:d2:6c:11:6a:e7:34:eb:78:c8:6f:73:75:36: 5b:20:ad:ce:29:ec:04:c5:3f:a3:e9:7d:3a:17:6c:f5:76:cd: c3:95:cb:03:71:d5:e5:dd:c7:80:13:74:57:c6:31:51:30:05: 3b:97:37:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODE5NkQxMTAvBgNVBAUTKDY4NTExOTgxRkNCOURBRkFEOEUzRDMwMzA0QkI0MUE5 NkZCOUE3NkYwHhcNMjUwNDI0MjM1MjIyWhcNMjUwNTAxMjM1MjIyWjAYMRYwFAYD VQQDEw02ODBhY2ViNi1iNDIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9VirTqLniL2g1CZGB8VeVzoo/oldvYLKaIqwHwwrSukMyoYrSniB6zTgQGn2 eNox8wSOPRbMb6b6Wfz8J/RphrGYnnJc1gRMrTmAgSIKcWSNALCF7lhZ55M62AWG ytW1b+guOGqZYzYxd8wumhEC9+Xo+Kb5dv622GvDJFSavo02wLBimznjvlieZ0QN UIBCFia9ofYb82LKDEv61vX18D/GSPRByEYM7P1gfvtxZ230Rx2fjGwB45gR0JIF +s+dB5F0A5XyvFQTApBzbUtNykf9IvckluUs+mAowDp1ifzMjs8GZZF0E1EWN1UK VpRYAh07zCvd3T5HlHngyT1YwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOMNleMS FyofnXG9phRi5PSdnrhEMB8GA1UdIwQYMBaAFGhRGYH8udr62OPTAwS7Qalvuadv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTk2RC82MjAyQUEzRTQx MTAxMUVDOTkzOUMwMEZDNEY5QUUwMi9hRkVaZ2Z5NTJ2clk0OU1EQkx0QnFXLTVw MjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FGRVpnZnk1MnZyWTQ5TURCTHRCcVctNXAyOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTk2RC82MjAyQUEzRTQxMTAxMUVDOTkzOUMwMEZDNEY5QUUwMi9hRkVaZ2Z5NTJ2 clk0OU1EQkx0QnFXLTVwMjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+99aw9FL/Kc1N58aW2z0V/Irb180nIR7LQFMEokGR+VZYwBj9AFCs AlpmvxK3x8C4btMLGuiyPCFDqHtKbzzjUY6q3nV6K+5MPdB3oAYbpFrvh3VTkoQ4 d/S8ggp4AFXLGXlNItcQfh4RPMv3+THyRtfuzvdsfgLnGMpN/P4T7yTH7IGsXJYc /f56Q6O8OFbQy4EkcEKGf2R5aRvc92X009qMJKcmr3wxZlWA1AEyqtB9ptnKBiVx DpTtSKG4Tdt2QpfPKDpNj7+LjdJsEWrnNOt4yG9zdTZbIK3OKewExT+j6X06F2z1 ds3DlcsDcdXl3ceAE3RXxjFRMAU7lzfA -----END CERTIFICATE-----Generated at Sat Apr 26 04:35:12 2025 by rpki-client