$ rpki-client -vvf rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/ahIZcm0jnIL1pEYBEn0a-HJc4O0.mft File: ahIZcm0jnIL1pEYBEn0a-HJc4O0.mft (raw, json) Hash identifier: JbkKb1+li72CgURmJIUmPS/TIiLrzAf3rhEm4JyXAzE= Subject key identifier: 89:BF:E7:61:0E:91:D1:8F:0C:8B:DA:A6:F7:54:B7:C3:D6:F7:0E:1B Authority key identifier: 6A:12:19:72:6D:23:9C:82:F5:A4:46:01:12:7D:1A:F8:72:5C:E0:ED Certificate issuer: /CN=A91944AB/serialNumber=6A1219726D239C82F5A44601127D1AF8725CE0ED Certificate serial: 05B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahIZcm0jnIL1pEYBEn0a-HJc4O0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/ahIZcm0jnIL1pEYBEn0a-HJc4O0.mft Manifest number: 05B2 Signing time: Thu 24 Apr 2025 22:56:41 +0000 Manifest this update: Thu 24 Apr 2025 22:56:41 +0000 Manifest next update: Thu 01 May 2025 22:56:41 +0000 Files and hashes: 1: ahIZcm0jnIL1pEYBEn0a-HJc4O0.crl (hash: 7qnlB/cELBsxUqKpzSrdLpnnRCJZcor7PICP1thHT6o=) 2: BB01CFB0723811EEA39E0042C4F9AE02.roa (hash: Wmsh7cLIzhswuDyOVOYJZDVZYFQtMqV8cI7HOX5SCRU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/ahIZcm0jnIL1pEYBEn0a-HJc4O0.crl rsync://rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/ahIZcm0jnIL1pEYBEn0a-HJc4O0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahIZcm0jnIL1pEYBEn0a-HJc4O0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:56:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1464 (0x5b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91944AB, serialNumber=6A1219726D239C82F5A44601127D1AF8725CE0ED Validity Not Before: Apr 24 22:56:41 2025 GMT Not After : May 1 22:56:41 2025 GMT Subject: CN=680ac1a9-9778 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:21:04:96:47:e6:1d:33:a3:5f:7d:40:e1:bb: d1:b1:9f:86:2e:0d:07:eb:8f:0f:91:42:d6:4a:66: 1c:8c:c7:78:b3:62:8b:a5:de:2f:8f:92:e7:7a:b8: 66:93:c7:a1:8d:b0:a3:f8:6a:97:e8:e6:a3:4e:87: 33:d2:ab:f4:0f:38:76:67:70:f0:0f:60:e0:cf:a1: 3b:e6:ba:e7:32:d0:1e:57:3d:f1:4e:81:77:a4:41: a3:12:85:2f:84:5d:4f:9e:73:6c:a4:c2:21:a0:ca: 12:ea:5d:fd:fa:95:28:c8:af:e4:c4:2a:23:89:02: ba:9f:33:b7:84:21:7d:fd:94:ac:72:07:85:26:f1: f3:58:5d:0a:f0:ea:5a:93:bb:80:8e:96:fd:ab:1e: 4c:a9:79:91:af:2e:47:38:43:e6:8b:0d:1d:d4:87: f1:04:32:51:bd:a3:c5:44:9b:b3:c5:3e:c8:31:2c: ea:de:56:f3:f3:09:b0:9d:43:51:d7:7b:54:e9:42: a6:cf:46:b9:8e:f3:e6:dd:11:e2:1e:10:84:83:ea: 23:e1:14:7f:71:cc:85:7a:b7:92:c9:12:8a:ee:c3: f5:61:37:ef:24:b0:9d:4d:01:af:9c:45:ec:a4:c2: 61:3c:fb:88:ef:66:3c:23:75:1d:d2:24:0e:a7:fe: 6f:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:BF:E7:61:0E:91:D1:8F:0C:8B:DA:A6:F7:54:B7:C3:D6:F7:0E:1B X509v3 Authority Key Identifier: keyid:6A:12:19:72:6D:23:9C:82:F5:A4:46:01:12:7D:1A:F8:72:5C:E0:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/ahIZcm0jnIL1pEYBEn0a-HJc4O0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahIZcm0jnIL1pEYBEn0a-HJc4O0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/ahIZcm0jnIL1pEYBEn0a-HJc4O0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:a0:83:d1:11:9f:f3:48:18:41:c5:a4:3b:25:ce:6f:87:91: 96:f8:80:d2:eb:46:e7:db:ac:73:dd:19:08:50:32:22:d9:59: 2f:4f:77:a7:1b:9a:b5:83:bb:04:a4:18:78:b3:e5:fb:38:85: 4c:cd:14:25:76:5d:88:bd:18:96:df:8a:94:28:ff:4a:54:a8: c9:1b:8c:f1:bf:5a:e5:93:99:bd:9f:6e:6c:f8:49:d7:e1:99: 91:85:62:71:cd:0d:ff:b1:ee:4a:b3:c8:e7:25:91:93:82:ac: 37:dd:4f:dd:e4:13:ab:16:c7:55:98:d7:bf:e5:3e:8b:ae:2e: 33:a3:2e:7e:76:c7:99:8f:fc:d1:57:00:18:ac:a9:e8:c9:5a: ef:fc:a9:17:48:20:d9:1f:5d:28:d1:36:bc:3c:0c:55:ae:16: f3:ed:5b:6a:d9:f1:73:f7:95:3b:4e:6a:d3:2d:8e:65:92:f3: b8:45:18:1e:13:82:4e:48:da:64:1b:f2:dd:80:39:ff:01:c2: 0a:95:4a:24:dc:1c:8b:85:50:75:7e:74:58:23:99:f7:a0:62: 1b:f1:fe:a6:03:dd:8a:15:78:e3:f3:f2:d1:57:ca:4b:03:fa: c2:24:ee:e2:05:8f:af:ee:ab:75:96:47:0d:ca:d7:85:e1:48: dd:f6:35:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ0QUIxMTAvBgNVBAUTKDZBMTIxOTcyNkQyMzlDODJGNUE0NDYwMTEyN0QxQUY4 NzI1Q0UwRUQwHhcNMjUwNDI0MjI1NjQxWhcNMjUwNTAxMjI1NjQxWjAYMRYwFAYD VQQDEw02ODBhYzFhOS05Nzc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoiEElkfmHTOjX31A4bvRsZ+GLg0H648PkULWSmYcjMd4s2KLpd4vj5Lnerhm k8ehjbCj+GqX6OajTocz0qv0Dzh2Z3DwD2Dgz6E75rrnMtAeVz3xToF3pEGjEoUv hF1PnnNspMIhoMoS6l39+pUoyK/kxCojiQK6nzO3hCF9/ZSscgeFJvHzWF0K8Opa k7uAjpb9qx5MqXmRry5HOEPmiw0d1IfxBDJRvaPFRJuzxT7IMSzq3lbz8wmwnUNR 13tU6UKmz0a5jvPm3RHiHhCEg+oj4RR/ccyFereSyRKK7sP1YTfvJLCdTQGvnEXs pMJhPPuI72Y8I3Ud0iQOp/5vLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIm/52EO kdGPDIvapvdUt8PW9w4bMB8GA1UdIwQYMBaAFGoSGXJtI5yC9aRGARJ9GvhyXODt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDRBQi82RkUzMDZBNkMy QzgxMUVCOThEOURBNzlDNEY5QUUwMi9haElaY20wam5JTDFwRVlCRW4wYS1ISmM0 TzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FoSVpjbTBqbklMMXBFWUJFbjBhLUhKYzRPMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDRBQi82RkUzMDZBNkMyQzgxMUVCOThEOURBNzlDNEY5QUUwMi9haElaY20wam5J TDFwRVlCRW4wYS1ISmM0TzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApoIPREZ/zSBhBxaQ7Jc5vh5GW+IDS60bn26xz3RkIUDIi2VkvT3en G5q1g7sEpBh4s+X7OIVMzRQldl2IvRiW34qUKP9KVKjJG4zxv1rlk5m9n25s+EnX 4ZmRhWJxzQ3/se5Ks8jnJZGTgqw33U/d5BOrFsdVmNe/5T6Lri4zoy5+dseZj/zR VwAYrKnoyVrv/KkXSCDZH10o0Ta8PAxVrhbz7Vtq2fFz95U7TmrTLY5lkvO4RRge E4JOSNpkG/LdgDn/AcIKlUok3ByLhVB1fnRYI5n3oGIb8f6mA92KFXjj8/LRV8pL A/rCJO7iBY+v7qt1lkcNyteF4Ujd9jWF -----END CERTIFICATE-----Generated at Sat Apr 26 15:07:26 2025 by rpki-client