$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4713/FE1BD97C892A11EEB614826AC4F9AE02/aaSG-_IUhPFBL7ioCieKJIzvvrI.mft File: aaSG-_IUhPFBL7ioCieKJIzvvrI.mft (raw, json) Hash identifier: Kaepb1wTCQD0BSxEeORrVF7schlc4IbmoX9VAJv6KTQ= Subject key identifier: 94:75:8C:32:96:B0:B7:FB:A9:4E:FE:BB:13:C2:B1:E3:09:C7:9F:4B Authority key identifier: 69:A4:86:FB:F2:14:84:F1:41:2F:B8:A8:0A:27:8A:24:8C:EF:BE:B2 Certificate issuer: /CN=A91B4713/serialNumber=69A486FBF21484F1412FB8A80A278A248CEFBEB2 Certificate serial: 0115 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaSG-_IUhPFBL7ioCieKJIzvvrI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4713/FE1BD97C892A11EEB614826AC4F9AE02/aaSG-_IUhPFBL7ioCieKJIzvvrI.mft Manifest number: 0110 Signing time: Fri 25 Apr 2025 04:02:24 +0000 Manifest this update: Fri 25 Apr 2025 04:02:23 +0000 Manifest next update: Fri 02 May 2025 04:02:23 +0000 Files and hashes: 1: aaSG-_IUhPFBL7ioCieKJIzvvrI.crl (hash: Eus5tbeqDTbmB2JWWsPuMIP/dUV/rsHD4IONIodcV1Q=) 2: A5656D2E892B11EE94747D6BC4F9AE02.roa (hash: 01zpHNpEXp5bla5wzGX7psaD7zJbZ+wyzWYL5eybWGY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4713/FE1BD97C892A11EEB614826AC4F9AE02/aaSG-_IUhPFBL7ioCieKJIzvvrI.crl rsync://rpki.apnic.net/member_repository/A91B4713/FE1BD97C892A11EEB614826AC4F9AE02/aaSG-_IUhPFBL7ioCieKJIzvvrI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaSG-_IUhPFBL7ioCieKJIzvvrI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:02:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 277 (0x115) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4713, serialNumber=69A486FBF21484F1412FB8A80A278A248CEFBEB2 Validity Not Before: Apr 25 04:02:23 2025 GMT Not After : May 2 04:02:23 2025 GMT Subject: CN=680b0950-5a72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d9:94:8a:6b:da:e0:42:c7:e5:ae:5d:19:c5: c0:17:71:76:24:5b:c9:bb:27:9e:8d:6d:99:8a:16: 79:32:4c:7e:3f:e3:32:33:b2:34:f1:47:79:18:35: 6c:71:b4:96:ea:f0:16:6c:c1:e5:a2:97:f1:f8:a7: c5:49:d9:42:19:b0:d0:8f:61:c6:41:ce:4a:c9:61: df:96:44:6b:40:09:ef:19:46:3a:06:5a:9e:8f:1a: e7:16:cc:bc:97:77:46:a6:31:89:22:ed:da:fb:15: 16:cf:82:0b:d7:27:f6:4d:bb:11:20:23:f3:36:dc: 2e:0f:75:8b:96:1f:12:a3:2e:99:62:06:35:5e:2b: 2c:69:7c:cf:8d:fa:3c:ba:ae:8c:20:48:38:b2:e6: 10:f1:5f:c1:c9:39:00:a6:e7:e6:96:09:5e:c2:23: 09:28:34:e1:77:02:12:7f:55:05:82:d8:6d:55:ca: 55:fd:03:c1:ea:45:3e:36:a7:0d:49:b3:a1:9e:8d: a7:ff:93:79:dd:01:0e:9d:d3:18:ed:e5:a2:d4:c8: a4:4f:9f:4e:24:2a:1e:b8:06:c7:71:30:f3:c0:c6: 36:12:93:af:21:42:77:a1:ae:56:86:04:9b:1e:f0: 2c:a6:6a:2b:2c:73:86:30:1a:e5:68:13:10:f8:b5: ff:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:75:8C:32:96:B0:B7:FB:A9:4E:FE:BB:13:C2:B1:E3:09:C7:9F:4B X509v3 Authority Key Identifier: keyid:69:A4:86:FB:F2:14:84:F1:41:2F:B8:A8:0A:27:8A:24:8C:EF:BE:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4713/FE1BD97C892A11EEB614826AC4F9AE02/aaSG-_IUhPFBL7ioCieKJIzvvrI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaSG-_IUhPFBL7ioCieKJIzvvrI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4713/FE1BD97C892A11EEB614826AC4F9AE02/aaSG-_IUhPFBL7ioCieKJIzvvrI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:a9:42:bd:10:f5:c9:50:61:72:67:51:61:19:49:32:70:2e: e7:30:bf:34:d1:7a:46:8b:ff:ef:01:25:21:6a:c4:87:4a:8d: eb:85:28:ab:c7:6c:a3:14:eb:29:cf:37:0a:90:d8:f2:98:50: 88:3c:19:f4:f5:5b:15:19:15:3d:8a:58:57:92:d7:41:a0:52: 37:63:9b:30:71:67:1a:86:95:46:ed:27:9d:2f:db:9d:fd:be: 5d:c7:d6:1e:5c:63:ca:a6:29:cc:a1:9c:a6:2e:a6:95:6d:8f: ab:c4:c1:2f:60:06:11:6f:40:24:04:7b:8b:aa:71:52:d9:e8: 94:98:94:8a:0c:11:e9:ea:6d:2c:a6:b8:28:82:2d:11:5f:50: 75:a0:67:ea:c3:85:cb:b2:06:e3:36:b6:4c:fa:42:6e:86:4b: 38:78:94:a1:a1:b3:2f:94:0a:40:9b:82:5d:06:57:8f:94:5b: 83:87:b5:67:d7:e3:5a:18:da:4b:a9:d3:d0:1c:1e:91:4c:2d: a0:33:ba:24:20:79:9a:fe:68:df:98:4b:c2:1b:b9:88:9b:4f: 93:5e:d7:5c:4f:b4:e8:65:e3:90:86:25:1c:50:a8:c2:64:8b: bd:04:a0:8c:65:70:5a:c2:59:1c:2a:37:1f:3f:a5:bb:27:57: 7e:45:2e:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQ3MTMxMTAvBgNVBAUTKDY5QTQ4NkZCRjIxNDg0RjE0MTJGQjhBODBBMjc4QTI0 OENFRkJFQjIwHhcNMjUwNDI1MDQwMjIzWhcNMjUwNTAyMDQwMjIzWjAYMRYwFAYD VQQDEw02ODBiMDk1MC01YTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApNmUimva4ELH5a5dGcXAF3F2JFvJuyeejW2ZihZ5Mkx+P+MyM7I08Ud5GDVs cbSW6vAWbMHlopfx+KfFSdlCGbDQj2HGQc5KyWHflkRrQAnvGUY6BlqejxrnFsy8 l3dGpjGJIu3a+xUWz4IL1yf2TbsRICPzNtwuD3WLlh8Soy6ZYgY1XissaXzPjfo8 uq6MIEg4suYQ8V/ByTkApufmlglewiMJKDThdwISf1UFgthtVcpV/QPB6kU+NqcN SbOhno2n/5N53QEOndMY7eWi1MikT59OJCoeuAbHcTDzwMY2EpOvIUJ3oa5WhgSb HvAspmorLHOGMBrlaBMQ+LX/rwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJR1jDKW sLf7qU7+uxPCseMJx59LMB8GA1UdIwQYMBaAFGmkhvvyFITxQS+4qAoniiSM776y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDcxMy9GRTFCRDk3Qzg5 MkExMUVFQjYxNDgyNkFDNEY5QUUwMi9hYVNHLV9JVWhQRkJMN2lvQ2llS0pJenZ2 ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FhU0ctX0lVaFBGQkw3aW9DaWVLSkl6dnZySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDcxMy9GRTFCRDk3Qzg5MkExMUVFQjYxNDgyNkFDNEY5QUUwMi9hYVNHLV9JVWhQ RkJMN2lvQ2llS0pJenZ2ckkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfqUK9EPXJUGFyZ1FhGUkycC7nML800XpGi//vASUhasSHSo3rhSir x2yjFOspzzcKkNjymFCIPBn09VsVGRU9ilhXktdBoFI3Y5swcWcahpVG7SedL9ud /b5dx9YeXGPKpinMoZymLqaVbY+rxMEvYAYRb0AkBHuLqnFS2eiUmJSKDBHp6m0s prgogi0RX1B1oGfqw4XLsgbjNrZM+kJuhks4eJShobMvlApAm4JdBlePlFuDh7Vn 1+NaGNpLqdPQHB6RTC2gM7okIHma/mjfmEvCG7mIm0+TXtdcT7ToZeOQhiUcUKjC ZIu9BKCMZXBawlkcKjcfP6W7J1d+RS6B -----END CERTIFICATE-----Generated at Sat Apr 26 04:35:04 2025 by rpki-client