$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.mft File: AKEAg_2wFsMD1OYZ7GGrZYOADSc.mft (raw, json) Hash identifier: zxDbBlSk6M+Ej26bghap6V1n55EwH5ixFvKDQHBLsfY= Subject key identifier: 4F:AF:64:9E:0E:A6:18:E2:B3:5C:84:A5:7B:7E:7A:5C:E3:41:BD:FC Authority key identifier: 00:A1:00:83:FD:B0:16:C3:03:D4:E6:19:EC:61:AB:65:83:80:0D:27 Certificate issuer: /CN=A91C5CB1/serialNumber=00A10083FDB016C303D4E619EC61AB6583800D27 Certificate serial: 0277 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKEAg_2wFsMD1OYZ7GGrZYOADSc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.mft Manifest number: 0274 Signing time: Fri 25 Apr 2025 01:26:51 +0000 Manifest this update: Fri 25 Apr 2025 01:26:51 +0000 Manifest next update: Fri 02 May 2025 01:26:51 +0000 Files and hashes: 1: AKEAg_2wFsMD1OYZ7GGrZYOADSc.crl (hash: nVxAUvxRIZNGpOMTbpK8LkwlCI6bXzIOhQgV5zlcjc0=) 2: CBD4FE1208B611EDACE57065C4F9AE02.roa (hash: WXESl+cDjvowOeUJyXhiCBItPAjmmkM/CbjCul3Q7bU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.crl rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKEAg_2wFsMD1OYZ7GGrZYOADSc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:26:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 631 (0x277) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5CB1, serialNumber=00A10083FDB016C303D4E619EC61AB6583800D27 Validity Not Before: Apr 25 01:26:51 2025 GMT Not After : May 2 01:26:51 2025 GMT Subject: CN=680ae4db-df01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9f:de:3d:b8:57:2c:06:9b:7c:b5:d0:09:30: c8:ee:d4:80:84:66:c5:1e:57:65:d5:d0:0a:db:57: 9d:ce:6f:f6:0c:33:85:5d:2d:19:fa:1c:fe:c1:71: b8:ba:c2:64:9d:84:1d:8b:6b:b9:bd:67:3f:74:c1: 62:9d:dd:bf:e4:8d:45:c6:8b:67:25:cd:0c:3a:d9: d0:91:5a:3a:78:46:28:58:b9:7e:42:cb:a8:52:f0: fe:8f:b4:c3:af:53:b5:05:f8:36:b5:16:2d:64:e6: 36:68:17:5f:d8:da:8f:2c:8b:95:30:67:f1:96:06: 76:df:58:af:5e:44:7c:e4:59:b9:eb:46:3b:9b:ca: 51:2d:5e:84:c3:bd:b6:5f:fb:d5:db:dc:9f:47:bf: 95:32:b6:61:30:29:2f:90:ee:c9:5f:04:fa:2d:f1: 25:f9:92:b5:35:60:2b:8d:ab:fe:dd:fd:c1:c5:b8: a1:0c:82:bb:00:fc:34:a0:3e:bc:42:65:41:a5:56: bf:79:74:5e:85:6d:5b:69:c1:c2:07:20:1a:38:16: 75:fb:34:55:13:94:bf:82:f8:fd:d7:39:cb:aa:29: f2:42:d8:5e:ba:cd:84:ed:ab:b2:b0:79:25:56:85: 05:4e:85:5e:33:d6:09:ea:6e:61:96:d2:a9:37:76: 4a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:AF:64:9E:0E:A6:18:E2:B3:5C:84:A5:7B:7E:7A:5C:E3:41:BD:FC X509v3 Authority Key Identifier: keyid:00:A1:00:83:FD:B0:16:C3:03:D4:E6:19:EC:61:AB:65:83:80:0D:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKEAg_2wFsMD1OYZ7GGrZYOADSc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:2a:c0:85:60:d8:eb:24:ab:82:d8:4c:05:cb:22:0b:fa:09: db:60:80:13:f6:18:6f:e3:1b:42:13:3e:3a:58:5c:54:cd:69: 2e:51:ad:21:2a:88:d0:45:66:51:0d:8c:d2:41:61:ad:3a:01: e0:9b:3d:4f:8e:f7:c2:7b:c0:6b:f9:7b:ea:cb:e8:83:51:ec: cc:ae:e0:21:d1:f4:c6:90:78:63:46:a7:f5:87:68:28:c8:c1: b7:89:f8:87:8a:ae:67:f1:ef:79:39:29:82:92:95:07:9a:6e: 9e:1c:6c:0c:ea:e7:10:d3:f9:85:74:db:a9:5f:fb:5e:13:6e: fd:3d:3d:05:16:2f:31:ff:7f:15:ec:71:f7:5e:cc:dd:9c:46: 51:52:d8:9a:b0:e1:98:75:71:c8:f3:02:61:35:a2:58:99:b5: 6f:15:4a:f8:19:d7:21:24:61:d6:21:c3:fc:5a:a7:6c:f0:e6: 28:f2:db:39:8a:6a:72:55:e3:f6:ff:66:da:85:93:50:9c:c8: af:ad:e3:0b:08:2e:36:9c:58:ad:83:9a:8d:40:64:5c:8e:4f: c8:1e:20:72:54:80:88:b2:f1:a2:41:ec:3a:df:b1:bb:1a:34: b8:f5:d1:64:22:a5:70:04:eb:3f:c6:5c:0b:3e:3c:39:bd:5a: fc:33:d8:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAncwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVDQjExMTAvBgNVBAUTKDAwQTEwMDgzRkRCMDE2QzMwM0Q0RTYxOUVDNjFBQjY1 ODM4MDBEMjcwHhcNMjUwNDI1MDEyNjUxWhcNMjUwNTAyMDEyNjUxWjAYMRYwFAYD VQQDEw02ODBhZTRkYi1kZjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxZ/ePbhXLAabfLXQCTDI7tSAhGbFHldl1dAK21edzm/2DDOFXS0Z+hz+wXG4 usJknYQdi2u5vWc/dMFind2/5I1FxotnJc0MOtnQkVo6eEYoWLl+QsuoUvD+j7TD r1O1Bfg2tRYtZOY2aBdf2NqPLIuVMGfxlgZ231ivXkR85Fm560Y7m8pRLV6Ew722 X/vV29yfR7+VMrZhMCkvkO7JXwT6LfEl+ZK1NWArjav+3f3BxbihDIK7APw0oD68 QmVBpVa/eXRehW1bacHCByAaOBZ1+zRVE5S/gvj91znLqinyQtheus2E7auysHkl VoUFToVeM9YJ6m5hltKpN3ZKQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE+vZJ4O phjis1yEpXt+elzjQb38MB8GA1UdIwQYMBaAFAChAIP9sBbDA9TmGexhq2WDgA0n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUNCMS8xMTY3MkMyMDA3 RjkxMUVEODIyN0U1NzJDNEY5QUUwMi9BS0VBZ18yd0ZzTUQxT1laN0dHclpZT0FE U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FLRUFnXzJ3RnNNRDFPWVo3R0dyWllPQURTYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NUNCMS8xMTY3MkMyMDA3RjkxMUVEODIyN0U1NzJDNEY5QUUwMi9BS0VBZ18yd0Zz TUQxT1laN0dHclpZT0FEU2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdKsCFYNjrJKuC2EwFyyIL+gnbYIAT9hhv4xtCEz46WFxUzWkuUa0h KojQRWZRDYzSQWGtOgHgmz1PjvfCe8Br+Xvqy+iDUezMruAh0fTGkHhjRqf1h2go yMG3ifiHiq5n8e95OSmCkpUHmm6eHGwM6ucQ0/mFdNupX/teE279PT0FFi8x/38V 7HH3XszdnEZRUtiasOGYdXHI8wJhNaJYmbVvFUr4GdchJGHWIcP8Wqds8OYo8ts5 impyVeP2/2bahZNQnMivreMLCC42nFitg5qNQGRcjk/IHiByVICIsvGiQew637G7 GjS49dFkIqVwBOs/xlwLPjw5vVr8M9hJ -----END CERTIFICATE-----Generated at Sat Apr 26 05:18:04 2025 by rpki-client