$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft File: AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft (raw, json) Hash identifier: vE0ajUsh0G5wYL48PusVMb6W3+91efF7klmzo+f2BQI= Subject key identifier: C1:28:75:92:BF:D6:E1:71:39:FA:82:7D:2E:8B:0F:0F:51:08:08:FE Authority key identifier: 03:3B:31:1D:75:8F:04:34:0A:23:FB:08:16:75:95:1C:25:0E:80:78 Certificate issuer: /CN=A91E6EFE/serialNumber=033B311D758F04340A23FB081675951C250E8078 Certificate serial: 01C8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AzsxHXWPBDQKI_sIFnWVHCUOgHg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft Manifest number: 01C5 Signing time: Fri 25 Apr 2025 02:08:24 +0000 Manifest this update: Fri 25 Apr 2025 02:08:23 +0000 Manifest next update: Fri 02 May 2025 02:08:23 +0000 Files and hashes: 1: AzsxHXWPBDQKI_sIFnWVHCUOgHg.crl (hash: lXurBi6QVazicRJQbYCWaymJOs9prFnVavJQ8bv471M=) 2: 250320C4761511EDA05B8A63C4F9AE02.roa (hash: oOi07nx+dcH2HXRplm35uVqX6ArK1VrfAwaOgSa1yfI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.crl rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AzsxHXWPBDQKI_sIFnWVHCUOgHg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 456 (0x1c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6EFE, serialNumber=033B311D758F04340A23FB081675951C250E8078 Validity Not Before: Apr 25 02:08:23 2025 GMT Not After : May 2 02:08:23 2025 GMT Subject: CN=680aee97-c383 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:92:ed:d6:5c:68:08:ef:15:0f:fa:a5:ae:56: 00:0a:f9:42:ea:cf:6f:69:23:09:d9:f1:3e:63:bc: 58:9a:26:18:42:ea:27:6c:00:42:e2:58:1c:22:e6: 3b:a3:04:a2:23:38:77:2d:85:c4:b9:96:ad:a3:91: 82:8d:d8:95:16:87:f4:b5:79:a8:ff:7d:c8:68:7d: b2:b8:09:21:cb:fa:01:09:f9:69:31:d9:6d:1f:74: c2:f7:df:39:9c:9c:e3:dd:e1:02:97:25:a9:31:6a: ed:e5:ab:0c:94:cc:b3:d9:13:23:a0:06:6e:0c:3e: c8:0f:93:ae:e8:3d:64:1d:cc:a7:b3:01:63:11:b2: 55:09:9c:62:f3:7a:3e:0e:a7:39:1a:74:6f:df:b2: b3:f3:04:cb:55:71:1f:c0:0b:24:74:aa:9c:2a:d5: 65:b3:be:a4:3b:1d:2e:5f:e9:2c:c5:9a:b1:59:74: f6:b8:7a:14:ed:6a:f3:32:56:78:18:42:9a:27:b7: 40:68:04:2d:d2:75:cd:37:30:e1:7b:2d:fd:44:cf: eb:89:25:f2:7b:db:89:0b:17:4c:90:8b:9b:f9:6c: 6a:69:3b:f2:7a:60:2f:65:fd:7a:44:a0:0e:db:80: e7:f4:7e:bd:31:d8:b0:74:71:e0:94:c5:3b:93:62: 5e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:28:75:92:BF:D6:E1:71:39:FA:82:7D:2E:8B:0F:0F:51:08:08:FE X509v3 Authority Key Identifier: keyid:03:3B:31:1D:75:8F:04:34:0A:23:FB:08:16:75:95:1C:25:0E:80:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AzsxHXWPBDQKI_sIFnWVHCUOgHg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:6f:cf:94:04:ee:6a:2e:0c:e0:83:f1:ac:bb:1d:de:f0:25: 2f:1f:b1:8f:50:0f:e2:50:82:97:ad:9a:b4:d4:5b:69:f6:f4: d7:a2:07:d7:12:58:82:b0:75:a7:3b:47:08:bf:61:91:1f:02: ab:c0:9a:a6:6b:30:79:9d:89:99:01:46:64:11:16:5c:a7:a1: 05:09:5e:91:49:ed:2a:89:f5:91:ef:a2:84:58:d9:69:78:a9: 3d:d8:cd:29:b3:ca:bd:c6:4a:8b:f1:0a:8a:db:08:81:da:c8: 73:e9:eb:df:e7:d3:05:2f:58:bc:c1:30:8b:da:e9:a4:42:be: 49:da:08:66:ef:6f:fc:e9:0a:b7:b2:13:a1:bc:cf:7e:22:3b: 66:1d:81:07:ec:92:55:f7:3a:9d:f0:54:20:1c:42:a3:96:df: 5d:71:93:fd:2b:91:4a:4b:97:ab:ef:ff:d2:25:6f:8a:8b:e9: fa:f3:31:a6:96:05:14:be:32:2c:6f:74:bc:e5:7c:1f:1c:71: fe:74:cb:d9:8f:72:52:6a:96:85:80:0a:6f:80:e7:e0:bf:a5: 71:a8:f4:1b:9a:eb:db:27:42:6e:35:21:5b:cb:0e:c2:e3:40: 8a:ad:eb:98:83:30:34:9b:98:97:dd:ca:e2:8e:e7:dc:ce:28: 45:a1:69:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZFRkUxMTAvBgNVBAUTKDAzM0IzMTFENzU4RjA0MzQwQTIzRkIwODE2NzU5NTFD MjUwRTgwNzgwHhcNMjUwNDI1MDIwODIzWhcNMjUwNTAyMDIwODIzWjAYMRYwFAYD VQQDEw02ODBhZWU5Ny1jMzgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy5Lt1lxoCO8VD/qlrlYACvlC6s9vaSMJ2fE+Y7xYmiYYQuonbABC4lgcIuY7 owSiIzh3LYXEuZato5GCjdiVFof0tXmo/33IaH2yuAkhy/oBCflpMdltH3TC9985 nJzj3eEClyWpMWrt5asMlMyz2RMjoAZuDD7ID5Ou6D1kHcynswFjEbJVCZxi83o+ Dqc5GnRv37Kz8wTLVXEfwAskdKqcKtVls76kOx0uX+ksxZqxWXT2uHoU7WrzMlZ4 GEKaJ7dAaAQt0nXNNzDhey39RM/riSXye9uJCxdMkIub+WxqaTvyemAvZf16RKAO 24Dn9H69MdiwdHHglMU7k2JebQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMEodZK/ 1uFxOfqCfS6LDw9RCAj+MB8GA1UdIwQYMBaAFAM7MR11jwQ0CiP7CBZ1lRwlDoB4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkVGRS9EQTRBNDNDMjZD QTExMUVEQjQ0RTc2NUJDNEY5QUUwMi9BenN4SFhXUEJEUUtJX3NJRm5XVkhDVU9n SGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0F6c3hIWFdQQkRRS0lfc0lGbldWSENVT2dIZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkVGRS9EQTRBNDNDMjZDQTExMUVEQjQ0RTc2NUJDNEY5QUUwMi9BenN4SFhXUEJE UUtJX3NJRm5XVkhDVU9nSGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMb8+UBO5qLgzgg/Gsux3e8CUvH7GPUA/iUIKXrZq01Ftp9vTXogfX EliCsHWnO0cIv2GRHwKrwJqmazB5nYmZAUZkERZcp6EFCV6RSe0qifWR76KEWNlp eKk92M0ps8q9xkqL8QqK2wiB2shz6evf59MFL1i8wTCL2umkQr5J2ghm72/86Qq3 shOhvM9+IjtmHYEH7JJV9zqd8FQgHEKjlt9dcZP9K5FKS5er7//SJW+Ki+n68zGm lgUUvjIsb3S85XwfHHH+dMvZj3JSapaFgApvgOfgv6VxqPQbmuvbJ0JuNSFbyw7C 40CKreuYgzA0m5iX3crijufczihFoWl2 -----END CERTIFICATE-----Generated at Sat Apr 26 16:16:52 2025 by rpki-client