$ rpki-client -vvf rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.mft File: aQVBhnn0PKiIyyO_K8sr5pnAw2Y.mft (raw, json) Hash identifier: ENMfQZ35+paTEir1FkPnsjjLcCR1nSNL2KoGFdUqKaY= Subject key identifier: 39:32:12:E6:20:E2:D5:C1:B5:6D:EF:1B:64:A1:CC:66:F8:6A:71:9C Authority key identifier: 69:05:41:86:79:F4:3C:A8:88:CB:23:BF:2B:CB:2B:E6:99:C0:C3:66 Certificate issuer: /CN=A9183010/serialNumber=6905418679F43CA888CB23BF2BCB2BE699C0C366 Certificate serial: 3479 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.mft Manifest number: 3471 Signing time: Thu 24 Apr 2025 15:08:15 +0000 Manifest this update: Thu 24 Apr 2025 15:08:15 +0000 Manifest next update: Thu 01 May 2025 15:08:15 +0000 Files and hashes: 1: aQVBhnn0PKiIyyO_K8sr5pnAw2Y.crl (hash: 97W6L/7qYWWnhibBdwwXA4vsD7cdcrnjo2wcwioLkZ0=) 2: 99144F3C03DB11F09FBAF32DC4F9AE02.roa (hash: 2QPhy8okP7a5b727IcPA6kh/C7CWYx/FM2MEQeDTjxM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.crl rsync://rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:08:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13433 (0x3479) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183010, serialNumber=6905418679F43CA888CB23BF2BCB2BE699C0C366 Validity Not Before: Apr 24 15:08:15 2025 GMT Not After : May 1 15:08:15 2025 GMT Subject: CN=680a53df-4d23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ee:3e:3c:9b:b8:83:1c:c4:f0:cc:25:0b:07: 0d:ae:80:3c:c2:73:b5:10:95:0e:e0:2e:6d:37:f9: 2d:44:94:74:ac:ea:8e:c0:9c:f1:5e:cf:c3:8c:e5: c5:83:72:6f:c2:06:1e:97:86:7f:6a:1a:ca:ea:f5: f9:3f:6f:a2:fb:87:5f:72:2b:21:1f:55:bc:f1:ea: bc:8e:c5:32:74:ac:f2:36:c4:59:39:1e:df:01:22: 81:aa:c7:f8:42:3a:60:bb:3b:3a:e6:1d:8d:28:95: 43:65:5c:06:d5:af:27:6c:ef:46:4e:71:51:ba:3f: 9e:30:96:a7:b6:70:14:15:0a:d9:03:dc:f9:74:5d: 2d:93:50:41:e3:2e:92:10:25:a8:7b:b2:80:87:7a: de:33:95:c3:8c:e6:24:7a:e8:bf:9d:cd:7d:23:54: 09:55:aa:6c:bb:1d:5b:03:fb:db:b1:58:eb:10:5c: 4f:bb:27:f3:ef:a8:f3:54:a5:d3:15:1d:d2:7a:b7: 66:74:d8:02:ec:b9:27:1c:ed:bf:f8:34:28:2f:f6: 68:46:3d:f2:f9:43:01:e1:73:14:d2:32:95:7d:3e: e0:c3:de:eb:32:1b:ce:c4:80:da:5b:86:0d:62:85: 04:cd:3e:ad:73:62:2b:a1:b8:2b:14:0e:67:2f:99: 3b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:32:12:E6:20:E2:D5:C1:B5:6D:EF:1B:64:A1:CC:66:F8:6A:71:9C X509v3 Authority Key Identifier: keyid:69:05:41:86:79:F4:3C:A8:88:CB:23:BF:2B:CB:2B:E6:99:C0:C3:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:cf:56:a2:99:3a:40:1d:71:0c:38:14:b5:c4:95:7d:11:6f: e8:e6:34:62:06:17:15:68:b0:ca:04:8e:24:d5:df:a2:cc:3f: 9a:04:36:b8:ba:be:30:71:d0:2d:69:1d:fb:46:cd:08:9f:af: 2c:bf:e3:8a:58:c1:1d:5e:4f:d2:7a:32:48:a7:d7:b1:7d:8b: 23:1b:b5:b0:62:cf:b1:01:67:2e:e7:10:70:23:59:94:a1:37: 79:3c:6b:5d:1e:fc:0d:ff:48:78:96:f8:ad:55:01:fd:32:8b: 79:c9:ab:b9:0b:9b:66:92:88:a9:b1:d6:ce:29:54:f3:4a:bf: aa:08:58:a0:f4:7f:45:9f:e4:bf:46:c7:96:4f:97:cb:86:ac: 01:64:ee:8b:0b:ec:fa:28:b9:02:ee:dd:15:39:bd:43:50:97: d0:68:ec:e8:d3:6f:13:e5:2c:26:8b:06:f5:95:56:42:c5:ec: 36:41:51:cf:06:2a:93:85:5e:75:7a:19:4c:2d:dc:94:ca:57: bf:35:57:98:75:d5:24:ef:50:b0:21:19:44:8e:31:75:12:1c: f5:63:2e:0e:ab:c9:be:67:d2:1e:be:f5:df:d2:31:2e:3c:26: ec:98:c7:1c:68:90:69:03:fb:61:e0:6a:d9:8c:67:a4:ec:61: 04:6d:6d:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODMwMTAxMTAvBgNVBAUTKDY5MDU0MTg2NzlGNDNDQTg4OENCMjNCRjJCQ0IyQkU2 OTlDMEMzNjYwHhcNMjUwNDI0MTUwODE1WhcNMjUwNTAxMTUwODE1WjAYMRYwFAYD VQQDEw02ODBhNTNkZi00ZDIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1u4+PJu4gxzE8MwlCwcNroA8wnO1EJUO4C5tN/ktRJR0rOqOwJzxXs/DjOXF g3JvwgYel4Z/ahrK6vX5P2+i+4dfcishH1W88eq8jsUydKzyNsRZOR7fASKBqsf4 Qjpguzs65h2NKJVDZVwG1a8nbO9GTnFRuj+eMJantnAUFQrZA9z5dF0tk1BB4y6S ECWoe7KAh3reM5XDjOYkeui/nc19I1QJVapsux1bA/vbsVjrEFxPuyfz76jzVKXT FR3SerdmdNgC7LknHO2/+DQoL/ZoRj3y+UMB4XMU0jKVfT7gw97rMhvOxIDaW4YN YoUEzT6tc2IrobgrFA5nL5k7EwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDkyEuYg 4tXBtW3vG2ShzGb4anGcMB8GA1UdIwQYMBaAFGkFQYZ59DyoiMsjvyvLK+aZwMNm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzAxMC81RjFEREIxMjFE QTMxMUUyOTNCMTlFOTgwOEIwMkNEMi9hUVZCaG5uMFBLaUl5eU9fSzhzcjVwbkF3 MlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FRVkJobm4wUEtpSXl5T19LOHNyNXBuQXcyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzAxMC81RjFEREIxMjFEQTMxMUUyOTNCMTlFOTgwOEIwMkNEMi9hUVZCaG5uMFBL aUl5eU9fSzhzcjVwbkF3MlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrz1aimTpAHXEMOBS1xJV9EW/o5jRiBhcVaLDKBI4k1d+izD+aBDa4 ur4wcdAtaR37Rs0In68sv+OKWMEdXk/SejJIp9exfYsjG7WwYs+xAWcu5xBwI1mU oTd5PGtdHvwN/0h4lvitVQH9Mot5yau5C5tmkoipsdbOKVTzSr+qCFig9H9Fn+S/ RseWT5fLhqwBZO6LC+z6KLkC7t0VOb1DUJfQaOzo028T5Swmiwb1lVZCxew2QVHP BiqThV51ehlMLdyUyle/NVeYddUk71CwIRlEjjF1Ehz1Yy4Oq8m+Z9IevvXf0jEu PCbsmMccaJBpA/th4GrZjGek7GEEbW0o -----END CERTIFICATE-----Generated at Sat Apr 26 04:31:42 2025 by rpki-client