$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft File: Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft (raw, json) Hash identifier: W5SzD31Xs9hCrRp9/IGL5wJFFuWTWj3DpALA5LCr2HY= Subject key identifier: 99:65:9A:53:AA:DF:5C:3B:19:6A:06:03:A8:31:C2:13:62:D8:8A:70 Authority key identifier: 02:9F:82:12:43:0A:8D:D7:E7:95:4F:EC:31:3F:15:DA:47:CB:44:DD Certificate issuer: /CN=A91D2FC0/serialNumber=029F8212430A8DD7E7954FEC313F15DA47CB44DD Certificate serial: 0AEA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft Manifest number: 0AE1 Signing time: Thu 24 Apr 2025 19:18:47 +0000 Manifest this update: Thu 24 Apr 2025 19:18:46 +0000 Manifest next update: Thu 01 May 2025 19:18:46 +0000 Files and hashes: 1: Ap-CEkMKjdfnlU_sMT8V2kfLRN0.crl (hash: I/VD1o1TLwLTLvIkTF6whswWHXIC6u7OLbCx+Sfyru4=) 2: 81D0374C475111EA82F8B821C4F9AE02.roa (hash: H58uLnLgtQRXxjwDdpgj46LQrUNsRnsgJgSttmaA0KA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.crl rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:18:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2794 (0xaea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2FC0, serialNumber=029F8212430A8DD7E7954FEC313F15DA47CB44DD Validity Not Before: Apr 24 19:18:46 2025 GMT Not After : May 1 19:18:46 2025 GMT Subject: CN=680a8e97-512b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6b:43:c7:9a:bf:44:d4:c5:1d:b2:e6:27:00: 03:6f:27:6b:96:85:d6:c8:58:c6:97:22:d1:7e:1e: ec:d0:1f:ce:ab:36:65:14:84:98:0a:73:06:25:e0: a2:0e:7f:d6:83:9c:b1:74:c0:82:2e:c0:7c:bb:a3: 0e:57:c4:57:3c:5a:93:8c:bb:b0:0e:3d:41:cf:15: 58:99:f8:e6:07:c7:94:a9:d0:2f:58:c3:d6:c0:b8: 3d:73:22:2c:b9:26:e7:6a:4a:ab:c2:2f:b5:bb:af: 99:54:a0:b9:02:7c:77:a0:7c:73:e5:91:5a:57:d8: 04:81:7f:f0:22:80:34:5f:be:76:c6:58:07:1f:fc: 65:b1:de:f9:b7:aa:74:19:9a:3b:c1:ea:91:36:7c: 65:8a:20:57:1c:89:a5:87:66:3f:e1:63:d9:90:10: ca:24:f4:a1:ba:a4:04:67:34:2e:4f:f3:88:60:01: 0e:3b:3c:d4:3e:65:39:6f:44:d5:09:ae:55:d2:e8: d4:8d:41:5b:f0:e7:45:07:c1:6e:ec:1c:ec:4c:05: 46:b2:9b:90:90:a3:18:d3:94:32:e0:fe:13:39:65: 45:55:8e:bd:78:91:42:e4:69:94:4e:93:a1:fa:e6: 84:de:b9:80:00:5c:c7:f8:b6:e1:9e:4c:49:e6:0d: d5:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:65:9A:53:AA:DF:5C:3B:19:6A:06:03:A8:31:C2:13:62:D8:8A:70 X509v3 Authority Key Identifier: keyid:02:9F:82:12:43:0A:8D:D7:E7:95:4F:EC:31:3F:15:DA:47:CB:44:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:21:24:cd:06:98:8a:15:95:6e:25:d0:41:2b:20:4d:9a:c3: 32:3a:f4:57:24:f7:42:f3:59:9a:3b:b8:11:e7:2a:2f:e9:76: 76:03:7a:59:3f:1a:12:fc:db:45:49:5a:a2:2b:5d:69:f1:7c: 98:e5:73:ce:d9:3c:9e:a3:93:0c:85:ab:83:1e:eb:73:b3:c2: 49:4c:b2:eb:ea:7d:9e:59:87:1d:ad:c0:dc:1c:ee:8c:08:92: 9d:df:52:8e:51:d7:d7:90:14:b0:83:18:8f:fe:45:d9:03:9d: 28:97:d9:de:92:79:2e:e6:1e:cb:f0:27:9a:ac:a7:9a:d0:f4: 7a:17:25:99:8d:8f:89:bd:c6:f7:34:95:9e:d6:99:b8:eb:a4: 69:b7:2f:9a:81:7c:65:d1:7d:f6:37:7c:99:06:34:f5:6b:75: b7:26:0f:d9:44:da:cd:8f:cd:b5:5b:d6:c9:a5:26:f1:7f:ed: 0e:05:4c:5d:ee:fc:80:07:84:d8:07:da:fa:48:b0:0f:e9:3c: b4:19:60:0b:cc:ec:9e:0f:b7:cb:69:ee:64:b6:c7:c0:67:d7: cd:04:20:e2:f8:59:80:ef:eb:28:06:23:ef:83:f2:ad:68:d5: e5:21:2e:c3:ab:d4:05:f0:d6:6b:08:bc:1b:0f:0c:9a:a7:36: e6:e3:a4:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCuowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDJGQzAxMTAvBgNVBAUTKDAyOUY4MjEyNDMwQThERDdFNzk1NEZFQzMxM0YxNURB NDdDQjQ0REQwHhcNMjUwNDI0MTkxODQ2WhcNMjUwNTAxMTkxODQ2WjAYMRYwFAYD VQQDEw02ODBhOGU5Ny01MTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvWtDx5q/RNTFHbLmJwADbydrloXWyFjGlyLRfh7s0B/OqzZlFISYCnMGJeCi Dn/Wg5yxdMCCLsB8u6MOV8RXPFqTjLuwDj1BzxVYmfjmB8eUqdAvWMPWwLg9cyIs uSbnakqrwi+1u6+ZVKC5Anx3oHxz5ZFaV9gEgX/wIoA0X752xlgHH/xlsd75t6p0 GZo7weqRNnxliiBXHImlh2Y/4WPZkBDKJPShuqQEZzQuT/OIYAEOOzzUPmU5b0TV Ca5V0ujUjUFb8OdFB8Fu7BzsTAVGspuQkKMY05Qy4P4TOWVFVY69eJFC5GmUTpOh +uaE3rmAAFzH+LbhnkxJ5g3VgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJllmlOq 31w7GWoGA6gxwhNi2IpwMB8GA1UdIwQYMBaAFAKfghJDCo3X55VP7DE/FdpHy0Td MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMkZDMC8yQTgxNUEwODQ3 NTAxMUVBOENEOTc2MUZDNEY5QUUwMi9BcC1DRWtNS2pkZm5sVV9zTVQ4VjJrZkxS TjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FwLUNFa01LamRmbmxVX3NNVDhWMmtmTFJOMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MkZDMC8yQTgxNUEwODQ3NTAxMUVBOENEOTc2MUZDNEY5QUUwMi9BcC1DRWtNS2pk Zm5sVV9zTVQ4VjJrZkxSTjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGISTNBpiKFZVuJdBBKyBNmsMyOvRXJPdC81maO7gR5yov6XZ2A3pZ PxoS/NtFSVqiK11p8XyY5XPO2Tyeo5MMhauDHutzs8JJTLLr6n2eWYcdrcDcHO6M CJKd31KOUdfXkBSwgxiP/kXZA50ol9neknku5h7L8CearKea0PR6FyWZjY+Jvcb3 NJWe1pm466Rpty+agXxl0X32N3yZBjT1a3W3Jg/ZRNrNj821W9bJpSbxf+0OBUxd 7vyAB4TYB9r6SLAP6Ty0GWALzOyeD7fLae5ktsfAZ9fNBCDi+FmA7+soBiPvg/Kt aNXlIS7Dq9QF8NZrCLwbDwyapzbm46Sq -----END CERTIFICATE-----Generated at Sat Apr 26 17:45:43 2025 by rpki-client