$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.mft File: aVxF2kJFO04LBivxfb9Eclx4g4c.mft (raw, json) Hash identifier: qyi3dWv6OfYKXxatv/WlPPw15XN8/jn3XxlBDSy5HmE= Subject key identifier: 7A:FE:FB:73:ED:18:E7:2B:56:A0:FA:01:16:12:B4:F0:40:C7:FE:E1 Authority key identifier: 69:5C:45:DA:42:45:3B:4E:0B:06:2B:F1:7D:BF:44:72:5C:78:83:87 Certificate issuer: /CN=A91DF26F/serialNumber=695C45DA42453B4E0B062BF17DBF44725C788387 Certificate serial: 2270 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aVxF2kJFO04LBivxfb9Eclx4g4c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.mft Manifest number: 2270 Signing time: Sat 26 Apr 2025 14:39:20 +0000 Manifest this update: Sat 26 Apr 2025 14:39:20 +0000 Manifest next update: Sat 03 May 2025 14:39:20 +0000 Files and hashes: 1: aVxF2kJFO04LBivxfb9Eclx4g4c.crl (hash: /duTn/UdQQGxP04dmoB9zS3UXGqeA/N+c6wbDDgTwvA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.crl rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aVxF2kJFO04LBivxfb9Eclx4g4c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 14:39:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8816 (0x2270) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF26F, serialNumber=695C45DA42453B4E0B062BF17DBF44725C788387 Validity Not Before: Apr 26 14:39:20 2025 GMT Not After : May 3 14:39:20 2025 GMT Subject: CN=680cf018-d6c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a8:ad:c9:f0:ca:50:6b:20:57:1b:da:c5:86: 1f:d7:ee:11:f9:ad:03:31:cc:75:8e:1e:1b:e2:5a: 07:d9:f9:96:bb:ab:92:40:4b:22:7d:94:a6:f8:a5: f1:ad:73:1a:55:b7:f1:58:ac:c2:d1:f1:51:0f:63: a8:10:a4:ca:1f:2e:c9:dd:b6:5c:f2:cd:ef:6b:ff: 60:f4:79:91:31:65:71:f7:46:82:e5:19:7c:b8:41: 3f:7e:d7:1b:b1:a2:56:91:f1:e0:72:b0:df:2c:43: ef:d9:84:36:e7:fc:d3:6e:82:52:70:a0:c3:37:6f: b5:71:27:cc:90:d5:67:5f:96:17:a9:8b:78:7b:ca: d1:90:c1:8b:f0:49:36:ce:56:e0:d3:f1:ae:32:f3: f4:d8:be:f1:81:71:05:7f:94:10:97:46:48:ff:9e: 9d:48:d8:dd:6d:41:20:9b:54:58:67:0b:ec:22:f7: c3:70:3b:a7:1b:79:a9:29:cf:7b:8f:dd:8b:42:8d: 8d:99:36:4d:4f:d1:07:2d:2e:7b:9f:b3:d5:0f:20: 0e:aa:a5:ec:bb:cd:3c:1a:88:9d:0d:cb:7d:65:51: d6:52:91:0f:96:56:e5:d9:e3:11:53:d7:6a:44:9e: e5:04:ec:14:cc:96:4d:d9:81:fa:1d:10:58:96:13: c7:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:FE:FB:73:ED:18:E7:2B:56:A0:FA:01:16:12:B4:F0:40:C7:FE:E1 X509v3 Authority Key Identifier: keyid:69:5C:45:DA:42:45:3B:4E:0B:06:2B:F1:7D:BF:44:72:5C:78:83:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aVxF2kJFO04LBivxfb9Eclx4g4c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:4a:54:60:19:f5:49:89:ec:01:ce:8e:4d:db:b9:ef:3f:ac: 06:8d:e3:f3:33:46:a0:da:1e:5a:5e:b8:c7:8f:28:82:5d:64: 8e:60:9c:fc:57:3d:fb:85:f7:c6:6c:09:72:d5:6d:da:ea:35: c9:46:ff:87:df:ac:99:e0:cf:0e:1f:d3:93:59:69:17:ee:5f: 7a:70:b0:17:dc:90:93:6e:49:0a:a8:29:ec:2d:5b:42:57:1d: e5:c1:18:b1:d0:4c:20:53:d5:e7:80:48:cb:ee:c9:b3:53:08: d7:54:1d:c9:f6:e6:ca:49:08:b9:f0:c3:c4:dd:3a:74:ea:37: f8:3d:45:cd:e2:df:b4:6d:eb:b0:eb:4e:b4:d3:0b:25:a9:62: f2:5c:38:b1:0a:c7:d1:a1:ec:b3:d2:6c:06:67:0f:87:a3:69: dd:bc:d2:5f:b0:25:cd:b9:f7:6e:46:da:83:60:ea:60:77:91: 09:5a:c2:91:ea:ca:a8:ab:66:d3:00:78:ec:33:23:7c:b3:b2: 70:c6:94:c8:3b:51:5b:e7:75:fc:32:82:57:d7:d5:46:5e:1e: 30:57:74:5d:1d:bd:ce:d7:04:75:d6:64:51:d7:b1:bd:c4:08: 8a:e1:7b:bf:c3:78:41:d6:e4:6a:b1:7c:33:c2:79:9b:50:b1: 6c:64:ff:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICInAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REYyNkYxMTAvBgNVBAUTKDY5NUM0NURBNDI0NTNCNEUwQjA2MkJGMTdEQkY0NDcy NUM3ODgzODcwHhcNMjUwNDI2MTQzOTIwWhcNMjUwNTAzMTQzOTIwWjAYMRYwFAYD VQQDEw02ODBjZjAxOC1kNmMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzaityfDKUGsgVxvaxYYf1+4R+a0DMcx1jh4b4loH2fmWu6uSQEsifZSm+KXx rXMaVbfxWKzC0fFRD2OoEKTKHy7J3bZc8s3va/9g9HmRMWVx90aC5Rl8uEE/ftcb saJWkfHgcrDfLEPv2YQ25/zTboJScKDDN2+1cSfMkNVnX5YXqYt4e8rRkMGL8Ek2 zlbg0/GuMvP02L7xgXEFf5QQl0ZI/56dSNjdbUEgm1RYZwvsIvfDcDunG3mpKc97 j92LQo2NmTZNT9EHLS57n7PVDyAOqqXsu808GoidDct9ZVHWUpEPllbl2eMRU9dq RJ7lBOwUzJZN2YH6HRBYlhPHjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHr++3Pt GOcrVqD6ARYStPBAx/7hMB8GA1UdIwQYMBaAFGlcRdpCRTtOCwYr8X2/RHJceIOH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjI2Ri84NDZFQzYyRUE3 OEUxMUU1ODAyNDFCNjJDNEY5QUUwMi9hVnhGMmtKRk8wNExCaXZ4ZmI5RWNseDRn NGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2FWeEYya0pGTzA0TEJpdnhmYjlFY2x4NGc0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjI2Ri84NDZFQzYyRUE3OEUxMUU1ODAyNDFCNjJDNEY5QUUwMi9hVnhGMmtKRk8w NExCaXZ4ZmI5RWNseDRnNGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFSlRgGfVJiewBzo5N27nvP6wGjePzM0ag2h5aXrjHjyiCXWSOYJz8 Vz37hffGbAly1W3a6jXJRv+H36yZ4M8OH9OTWWkX7l96cLAX3JCTbkkKqCnsLVtC Vx3lwRix0EwgU9XngEjL7smzUwjXVB3J9ubKSQi58MPE3Tp06jf4PUXN4t+0beuw 60600wslqWLyXDixCsfRoeyz0mwGZw+Ho2ndvNJfsCXNufduRtqDYOpgd5EJWsKR 6sqoq2bTAHjsMyN8s7JwxpTIO1Fb53X8MoJX19VGXh4wV3RdHb3O1wR11mRR17G9 xAiK4Xu/w3hB1uRqsXwzwnmbULFsZP82 -----END CERTIFICATE-----Generated at Sat Apr 26 17:06:33 2025 by rpki-client