$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.mft File: Aqo6dsRZSXsbRfJukESsxvLoBE8.mft (raw, json) Hash identifier: SHobX3CEzj+ZBhsdDrK5uAlyb9oYqZqDqfgNR/uw0KQ= Subject key identifier: B8:79:9B:28:F8:76:ED:AD:E6:FF:03:90:55:5E:21:20:0B:D9:DD:93 Authority key identifier: 02:AA:3A:76:C4:59:49:7B:1B:45:F2:6E:90:44:AC:C6:F2:E8:04:4F Certificate issuer: /CN=A91BA5BA/serialNumber=02AA3A76C459497B1B45F26E9044ACC6F2E8044F Certificate serial: 0360 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aqo6dsRZSXsbRfJukESsxvLoBE8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.mft Manifest number: 034F Signing time: Fri 25 Apr 2025 00:48:50 +0000 Manifest this update: Fri 25 Apr 2025 00:48:50 +0000 Manifest next update: Fri 02 May 2025 00:48:50 +0000 Files and hashes: 1: Aqo6dsRZSXsbRfJukESsxvLoBE8.crl (hash: rgEzn3oMUegwNkwGGxH9ZYmxUEjgoJ4kCor3WLdC5Vs=) 2: 87F2D334F2D811EC8F663D52C4F9AE02.roa (hash: /NuTqSUBTeFJ9CyVzXuBIUWT5gpveEGDRyxNvLNEQIM=) 3: 5FFA5548B5A311EEA95C5732C4F9AE02.roa (hash: GQNcpw13U6rTwcbD2+x10d2Oo9BkdgjUG3Bpk2yiXDc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.crl rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aqo6dsRZSXsbRfJukESsxvLoBE8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:48:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 864 (0x360) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA5BA, serialNumber=02AA3A76C459497B1B45F26E9044ACC6F2E8044F Validity Not Before: Apr 25 00:48:50 2025 GMT Not After : May 2 00:48:50 2025 GMT Subject: CN=680adbf2-ac32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:08:33:f7:02:e7:46:04:b3:e4:ac:9f:65:0e: 68:5f:68:c9:cf:0b:9a:ad:8a:de:55:fa:9d:ea:3d: d7:8d:5a:df:a2:20:5d:04:12:a2:48:d5:2e:02:2f: 19:c8:c4:0f:bf:3a:77:0a:29:37:93:92:fc:57:eb: 6b:30:f4:65:56:ff:d0:27:20:71:f9:92:a5:7f:94: 9e:d5:1e:50:fc:e8:a3:f0:4b:78:50:41:3d:cd:be: 4f:ba:86:6e:82:e7:c9:81:d6:11:25:15:32:8f:a4: 3e:13:55:ac:8c:2b:97:3b:f2:b6:e8:f3:ab:26:1c: cc:e2:c5:1d:fe:3f:9c:66:74:ef:92:5e:c6:73:05: 82:6d:2b:10:f9:1b:2a:a2:b6:06:79:5d:c1:90:4f: e5:b2:29:e8:23:ea:9a:60:0f:e0:2e:9d:77:c0:41: e9:5e:c1:58:85:22:bb:a1:aa:a3:ee:ee:07:81:61: 53:0c:c7:ec:3a:1a:3a:c5:ee:4f:ac:6c:b1:ab:81: c6:b7:87:89:39:9d:c9:95:f9:36:2e:ab:ef:74:1b: 52:7b:3b:78:77:08:b4:b8:24:cd:75:bf:81:4d:63: d6:2f:e7:de:89:ea:43:32:99:c8:95:9c:0e:88:ce: 21:4c:ef:61:e0:d4:47:55:b4:52:f8:d5:cc:50:4b: 8b:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:79:9B:28:F8:76:ED:AD:E6:FF:03:90:55:5E:21:20:0B:D9:DD:93 X509v3 Authority Key Identifier: keyid:02:AA:3A:76:C4:59:49:7B:1B:45:F2:6E:90:44:AC:C6:F2:E8:04:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aqo6dsRZSXsbRfJukESsxvLoBE8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:f2:a3:ba:86:22:71:00:63:6b:2f:76:d3:00:ce:de:73:78: f3:3d:74:2c:36:e9:9e:95:01:b5:c5:0c:33:12:0c:6e:52:fc: de:f7:42:6b:d2:59:b1:6e:56:47:61:9e:f3:f1:ea:31:8b:a7: 03:0d:35:e2:73:74:a4:24:c3:1c:74:33:8b:34:ad:66:e9:e4: fe:84:ca:9d:21:ce:e7:13:d9:de:3d:94:68:95:fd:4b:96:f1: 09:f2:8c:67:b2:9f:a3:3f:9e:84:d0:f4:13:2d:06:3d:8e:b7: 6a:24:e1:e7:93:68:86:32:97:af:89:5f:06:a3:bf:05:35:0e: 9e:7d:f2:a9:9c:34:53:c5:ce:7b:a1:90:36:ff:d9:5f:65:7c: 83:34:49:bb:e2:48:02:84:1a:db:83:91:8d:19:5e:88:90:0f: ab:02:6f:e7:ef:60:0b:19:9f:64:98:01:0a:a9:9e:3a:37:73: 1a:36:94:cc:37:d5:c2:2c:2a:68:f8:16:eb:c0:0f:bf:0e:45: 6f:ff:11:80:4e:99:12:3b:68:92:43:c3:40:c2:44:72:96:03: 30:2c:5f:67:3d:4a:b1:d2:fe:ae:72:33:96:d5:09:38:a5:fb: aa:a4:90:08:a3:f3:aa:49:11:ba:54:3a:60:8a:79:82:10:e9: c1:41:b3:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkE1QkExMTAvBgNVBAUTKDAyQUEzQTc2QzQ1OTQ5N0IxQjQ1RjI2RTkwNDRBQ0M2 RjJFODA0NEYwHhcNMjUwNDI1MDA0ODUwWhcNMjUwNTAyMDA0ODUwWjAYMRYwFAYD VQQDEw02ODBhZGJmMi1hYzMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvggz9wLnRgSz5KyfZQ5oX2jJzwuarYreVfqd6j3XjVrfoiBdBBKiSNUuAi8Z yMQPvzp3Cik3k5L8V+trMPRlVv/QJyBx+ZKlf5Se1R5Q/Oij8Et4UEE9zb5PuoZu gufJgdYRJRUyj6Q+E1WsjCuXO/K26POrJhzM4sUd/j+cZnTvkl7GcwWCbSsQ+Rsq orYGeV3BkE/lsinoI+qaYA/gLp13wEHpXsFYhSK7oaqj7u4HgWFTDMfsOho6xe5P rGyxq4HGt4eJOZ3Jlfk2LqvvdBtSezt4dwi0uCTNdb+BTWPWL+feiepDMpnIlZwO iM4hTO9h4NRHVbRS+NXMUEuLvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLh5myj4 du2t5v8DkFVeISAL2d2TMB8GA1UdIwQYMBaAFAKqOnbEWUl7G0XybpBErMby6ARP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTVCQS80MzI2Q0JDMEI3 Q0QxMUVDQUY2ODEzMzVDNEY5QUUwMi9BcW82ZHNSWlNYc2JSZkp1a0VTc3h2TG9C RTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FxbzZkc1JaU1hzYlJmSnVrRVNzeHZMb0JFOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTVCQS80MzI2Q0JDMEI3Q0QxMUVDQUY2ODEzMzVDNEY5QUUwMi9BcW82ZHNSWlNY c2JSZkp1a0VTc3h2TG9CRTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB08qO6hiJxAGNrL3bTAM7ec3jzPXQsNumelQG1xQwzEgxuUvze90Jr 0lmxblZHYZ7z8eoxi6cDDTXic3SkJMMcdDOLNK1m6eT+hMqdIc7nE9nePZRolf1L lvEJ8oxnsp+jP56E0PQTLQY9jrdqJOHnk2iGMpeviV8Go78FNQ6effKpnDRTxc57 oZA2/9lfZXyDNEm74kgChBrbg5GNGV6IkA+rAm/n72ALGZ9kmAEKqZ46N3MaNpTM N9XCLCpo+BbrwA+/DkVv/xGATpkSO2iSQ8NAwkRylgMwLF9nPUqx0v6ucjOW1Qk4 pfuqpJAIo/OqSRG6VDpginmCEOnBQbMa -----END CERTIFICATE-----Generated at Sat Apr 26 04:28:56 2025 by rpki-client