$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft File: aXYgUV57Huisfz9tE76uumLE7ak.mft (raw, json) Hash identifier: pfz82H0eJFtBjK9J1Ch6a1cdjsYJpxdxZZaUAnPPtO0= Subject key identifier: 82:52:49:06:7B:86:3E:36:09:84:BC:7C:83:97:A3:7F:FD:33:27:C8 Authority key identifier: 69:76:20:51:5E:7B:1E:E8:AC:7F:3F:6D:13:BE:AE:BA:62:C4:ED:A9 Certificate issuer: /CN=A91DE2AE/serialNumber=697620515E7B1EE8AC7F3F6D13BEAEBA62C4EDA9 Certificate serial: 01D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft Manifest number: 01C0 Signing time: Fri 25 Apr 2025 02:29:15 +0000 Manifest this update: Fri 25 Apr 2025 02:29:15 +0000 Manifest next update: Fri 02 May 2025 02:29:15 +0000 Files and hashes: 1: aXYgUV57Huisfz9tE76uumLE7ak.crl (hash: GeZDhhjR/5q3K536wRrNrhYfWcnsnDuXTLn1CCsQxKQ=) 2: 38E45CE08C2511EDB64DB410C4F9AE02.roa (hash: nGoAAcc8EiGUc2jIX6TFO/zcGFhh7Cn96wb0ZRxZplE=) 3: F3B716768F2F11EE86964D62C4F9AE02.roa (hash: ha92JVkNr7PUBbGWqelnj/HD1On/JDH9j7luLKpb+Ec=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.crl rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:29:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 466 (0x1d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE2AE, serialNumber=697620515E7B1EE8AC7F3F6D13BEAEBA62C4EDA9 Validity Not Before: Apr 25 02:29:15 2025 GMT Not After : May 2 02:29:15 2025 GMT Subject: CN=680af37b-92a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:97:37:98:0f:3c:c8:3b:40:a1:67:83:11:91: 16:6c:ea:ad:53:70:62:30:89:4e:c2:c6:91:11:4e: df:58:31:13:8b:0f:30:d1:93:02:f4:19:1a:8a:a1: 52:5f:4a:04:8d:28:67:cb:bb:25:9f:13:84:38:ef: 79:f7:33:4f:0d:0f:18:87:37:d3:d9:28:68:29:0d: a8:86:1a:c1:4e:75:32:d2:3b:3b:84:58:81:8a:6f: f2:17:db:7a:10:cd:b2:d4:25:02:b7:4b:c7:7c:87: 2a:55:fc:b5:aa:04:21:77:6d:a8:d1:91:5e:3e:d9: f0:60:d1:c5:04:dd:35:ae:46:a7:af:4e:46:40:2f: 6b:06:bf:60:57:4c:eb:cb:2f:9c:7e:dd:d1:31:d5: 07:11:2d:d0:63:49:58:03:8d:91:9b:87:0b:1e:d9: 5f:47:24:1c:72:47:58:76:84:bc:74:a2:20:fd:6a: ea:71:19:6a:a0:c7:6d:55:f2:c8:4c:d4:7b:63:bd: 7c:e4:23:e3:fd:cb:69:c3:c5:7c:83:79:15:ee:86: be:f1:3e:bf:1a:f2:ca:f1:7c:ad:4f:ca:5e:3c:9e: 7d:63:47:17:78:75:69:f0:8a:68:a9:ff:7c:da:26: f6:ab:d3:d2:8d:63:95:48:b8:ea:6a:7f:18:51:3c: e4:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:52:49:06:7B:86:3E:36:09:84:BC:7C:83:97:A3:7F:FD:33:27:C8 X509v3 Authority Key Identifier: keyid:69:76:20:51:5E:7B:1E:E8:AC:7F:3F:6D:13:BE:AE:BA:62:C4:ED:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:8a:d1:ff:01:ba:47:4e:3f:e6:cf:99:31:09:3e:10:c1:bd: 36:d5:e1:88:2c:ba:25:95:d6:f7:70:f0:5f:f4:45:db:b1:d8: 7f:17:3a:e4:ec:17:19:b3:fb:f5:7f:a0:42:ce:bc:08:c9:84: a0:d5:7c:31:e7:8d:d1:38:82:56:21:69:86:fc:50:2c:d5:90: f3:ba:6e:01:06:2a:08:99:39:91:4a:7e:6f:6c:9a:df:45:d5: d7:7f:f4:bc:cc:ee:cb:b5:aa:9f:07:e1:6f:60:21:66:49:95: 59:95:39:04:ea:a5:c9:20:df:13:97:53:61:da:59:13:88:b5: 7a:90:18:99:5c:80:41:c8:7d:dc:27:9c:c4:e6:41:98:1b:98: 13:02:47:89:d6:e3:16:67:66:af:57:ae:36:0b:bc:50:5e:2c: 5e:0f:23:57:ad:65:ed:52:43:fd:6a:3d:33:95:51:28:c0:42: c1:49:68:d5:e8:1a:cc:8f:5a:75:b2:ef:ce:d4:c3:43:24:97: 65:ea:7e:8e:1d:e0:12:d1:1a:16:52:20:1c:31:9c:50:8a:24: 5c:10:a0:70:25:09:57:0a:0a:a7:ec:a5:b1:c7:e6:94:3d:fa: 46:90:f8:23:67:ec:d2:0f:2d:05:09:be:f4:14:1f:53:e4:1e: 3e:80:20:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REUyQUUxMTAvBgNVBAUTKDY5NzYyMDUxNUU3QjFFRThBQzdGM0Y2RDEzQkVBRUJB NjJDNEVEQTkwHhcNMjUwNDI1MDIyOTE1WhcNMjUwNTAyMDIyOTE1WjAYMRYwFAYD VQQDEw02ODBhZjM3Yi05MmE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkpc3mA88yDtAoWeDEZEWbOqtU3BiMIlOwsaREU7fWDETiw8w0ZMC9BkaiqFS X0oEjShny7slnxOEOO959zNPDQ8YhzfT2ShoKQ2ohhrBTnUy0js7hFiBim/yF9t6 EM2y1CUCt0vHfIcqVfy1qgQhd22o0ZFePtnwYNHFBN01rkanr05GQC9rBr9gV0zr yy+cft3RMdUHES3QY0lYA42Rm4cLHtlfRyQcckdYdoS8dKIg/WrqcRlqoMdtVfLI TNR7Y7185CPj/ctpw8V8g3kV7oa+8T6/GvLK8XytT8pePJ59Y0cXeHVp8Ipoqf98 2ib2q9PSjWOVSLjqan8YUTzk9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIJSSQZ7 hj42CYS8fIOXo3/9MyfIMB8GA1UdIwQYMBaAFGl2IFFeex7orH8/bRO+rrpixO2p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTJBRS9DNzBGRUEyQThD MjAxMUVEQURENUM4MDlDNEY5QUUwMi9hWFlnVVY1N0h1aXNmejl0RTc2dXVtTEU3 YWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FYWWdVVjU3SHVpc2Z6OXRFNzZ1dW1MRTdhay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTJBRS9DNzBGRUEyQThDMjAxMUVEQURENUM4MDlDNEY5QUUwMi9hWFlnVVY1N0h1 aXNmejl0RTc2dXVtTEU3YWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMitH/AbpHTj/mz5kxCT4Qwb021eGILLolldb3cPBf9EXbsdh/Fzrk 7BcZs/v1f6BCzrwIyYSg1Xwx543ROIJWIWmG/FAs1ZDzum4BBioImTmRSn5vbJrf RdXXf/S8zO7LtaqfB+FvYCFmSZVZlTkE6qXJIN8Tl1Nh2lkTiLV6kBiZXIBByH3c J5zE5kGYG5gTAkeJ1uMWZ2avV642C7xQXixeDyNXrWXtUkP9aj0zlVEowELBSWjV 6BrMj1p1su/O1MNDJJdl6n6OHeAS0RoWUiAcMZxQiiRcEKBwJQlXCgqn7KWxx+aU PfpGkPgjZ+zSDy0FCb70FB9T5B4+gCAS -----END CERTIFICATE-----Generated at Sat Apr 26 04:20:02 2025 by rpki-client