$ rpki-client -vvf rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft File: ao09a_bbD13jJOQgxXOwqRhDx5Q.mft (raw, json) Hash identifier: zs5k4AAreDcqrPUuSvbf01lP2M3yfem+TxSMosaDu1Y= Subject key identifier: A8:ED:26:68:91:AF:3D:C2:B2:36:7C:E8:3F:0D:FE:71:EB:FB:FC:7E Authority key identifier: 6A:8D:3D:6B:F6:DB:0F:5D:E3:24:E4:20:C5:73:B0:A9:18:43:C7:94 Certificate issuer: /CN=A911A108/serialNumber=6A8D3D6BF6DB0F5DE324E420C573B0A91843C794 Certificate serial: 0122 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ao09a_bbD13jJOQgxXOwqRhDx5Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft Manifest number: 011F Signing time: Mon 21 Apr 2025 03:39:02 +0000 Manifest this update: Mon 21 Apr 2025 03:39:01 +0000 Manifest next update: Mon 28 Apr 2025 03:39:01 +0000 Files and hashes: 1: ao09a_bbD13jJOQgxXOwqRhDx5Q.crl (hash: SSr/pfFWiptWepy283yIS4DrbctmmPU1Dl1zvrmmMoY=) 2: 2152B7B06C0411EEBC1AA814C4F9AE02.roa (hash: uM3aIpNluGtsYzZphAI84X+sXAAc8YbQ0FM++FIKSB0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.crl rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ao09a_bbD13jJOQgxXOwqRhDx5Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 03:39:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 290 (0x122) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A108, serialNumber=6A8D3D6BF6DB0F5DE324E420C573B0A91843C794 Validity Not Before: Apr 21 03:39:01 2025 GMT Not After : Apr 28 03:39:01 2025 GMT Subject: CN=6805bdd6-8c89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ae:5e:e7:65:75:69:5e:b1:59:82:27:75:79: f6:4a:ce:59:29:24:98:db:48:c0:ba:e9:3d:54:5f: c8:fb:84:dd:f3:2a:73:99:3d:56:1f:04:17:6a:84: 9b:e9:f7:6c:93:e8:08:69:71:b3:f9:18:e3:ba:b8: 83:1e:b9:5c:4a:56:b1:27:f6:b0:f8:13:44:01:75: b9:61:f0:4c:75:90:70:f6:95:c7:63:74:ff:06:9f: fd:66:93:c8:f5:15:54:54:2b:23:7c:58:98:f5:86: 0d:5c:27:aa:a1:0a:7f:50:37:b3:df:69:b8:fd:57: 60:5e:16:66:95:cf:55:59:b7:d9:ce:e0:02:dc:25: d6:b4:4e:48:92:cc:b4:1f:a1:36:9f:32:04:f4:a6: 8b:39:00:ed:59:38:f4:57:9f:48:43:37:a3:ba:5a: 17:00:62:27:a6:08:02:95:9c:49:32:3f:3a:e3:ee: bf:23:71:d0:4b:75:2d:e5:11:23:c6:be:2f:9a:d8: 5f:04:13:42:75:77:54:d8:7f:c7:df:c3:d2:c1:c7: 74:68:4a:c7:13:92:1e:94:79:a9:86:ea:8b:6e:54: 45:ec:47:72:2e:80:33:a9:92:43:73:0a:de:fb:50: bf:be:5e:c6:1e:15:55:9a:42:f5:c6:be:61:6f:44: 09:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:ED:26:68:91:AF:3D:C2:B2:36:7C:E8:3F:0D:FE:71:EB:FB:FC:7E X509v3 Authority Key Identifier: keyid:6A:8D:3D:6B:F6:DB:0F:5D:E3:24:E4:20:C5:73:B0:A9:18:43:C7:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ao09a_bbD13jJOQgxXOwqRhDx5Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:19:31:64:e3:b8:48:1f:db:e0:5a:0c:91:5b:5a:2b:f7:7e: 47:21:32:8c:ff:a2:21:56:5b:00:c2:88:62:60:5b:da:3c:b7: 39:60:95:17:c2:92:8f:07:f9:6b:a8:22:48:15:0c:4c:4d:b5: f7:cc:ee:f5:d2:46:c9:6c:63:c4:c1:4a:e3:dd:ff:0c:4a:a9: 91:58:aa:0e:9d:43:f1:34:30:9b:8d:20:19:27:9c:fa:bc:81: 44:36:9f:89:c7:03:59:15:08:f8:d3:a5:de:3e:90:bd:e3:64: c0:a8:5d:36:b0:fa:b3:21:db:d6:d9:f0:ad:fc:76:04:88:ad: 0a:a3:b2:73:05:ce:55:f5:79:43:c9:08:69:ba:03:1a:d4:f3: ac:f5:e8:9f:e4:21:1f:34:bc:b1:f9:ca:33:b8:b0:0a:8d:dc: 31:8a:67:e7:17:f0:e8:ba:b2:11:07:08:db:17:56:47:55:e9: 0f:d8:78:8f:dc:67:92:e4:60:33:69:a0:d2:05:d1:c3:8c:e7: a7:3b:6e:00:a2:aa:b6:b6:96:dc:94:da:27:1c:ce:50:f3:50: 61:00:3c:4a:7d:5b:99:31:4e:b3:3a:cf:36:7e:1a:bd:43:d5: a5:92:52:37:a7:1c:aa:fd:65:ca:9f:82:e2:ef:63:1d:36:3f: e8:f6:b1:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUExMDgxMTAvBgNVBAUTKDZBOEQzRDZCRjZEQjBGNURFMzI0RTQyMEM1NzNCMEE5 MTg0M0M3OTQwHhcNMjUwNDIxMDMzOTAxWhcNMjUwNDI4MDMzOTAxWjAYMRYwFAYD VQQDEw02ODA1YmRkNi04Yzg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1K5e52V1aV6xWYIndXn2Ss5ZKSSY20jAuuk9VF/I+4Td8ypzmT1WHwQXaoSb 6fdsk+gIaXGz+RjjuriDHrlcSlaxJ/aw+BNEAXW5YfBMdZBw9pXHY3T/Bp/9ZpPI 9RVUVCsjfFiY9YYNXCeqoQp/UDez32m4/VdgXhZmlc9VWbfZzuAC3CXWtE5Iksy0 H6E2nzIE9KaLOQDtWTj0V59IQzejuloXAGInpggClZxJMj864+6/I3HQS3Ut5REj xr4vmthfBBNCdXdU2H/H38PSwcd0aErHE5IelHmphuqLblRF7EdyLoAzqZJDcwre +1C/vl7GHhVVmkL1xr5hb0QJgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKjtJmiR rz3CsjZ86D8N/nHr+/x+MB8GA1UdIwQYMBaAFGqNPWv22w9d4yTkIMVzsKkYQ8eU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTEwOC9GOTU4RkM0QTZD MDAxMUVFQjk4QjQzMEVDNEY5QUUwMi9hbzA5YV9iYkQxM2pKT1FneFhPd3FSaER4 NVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FvMDlhX2JiRDEzakpPUWd4WE93cVJoRHg1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTEwOC9GOTU4RkM0QTZDMDAxMUVFQjk4QjQzMEVDNEY5QUUwMi9hbzA5YV9iYkQx M2pKT1FneFhPd3FSaER4NVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADGTFk47hIH9vgWgyRW1or935HITKM/6IhVlsAwohiYFvaPLc5YJUX wpKPB/lrqCJIFQxMTbX3zO710kbJbGPEwUrj3f8MSqmRWKoOnUPxNDCbjSAZJ5z6 vIFENp+JxwNZFQj406XePpC942TAqF02sPqzIdvW2fCt/HYEiK0Ko7JzBc5V9XlD yQhpugMa1POs9eif5CEfNLyx+cozuLAKjdwximfnF/DourIRBwjbF1ZHVekP2HiP 3GeS5GAzaaDSBdHDjOenO24Aoqq2tpbclNonHM5Q81BhADxKfVuZMU6zOs82fhq9 Q9WlklI3pxyq/WXKn4Li72MdNj/o9rHf -----END CERTIFICATE-----Generated at Mon Apr 21 16:49:22 2025 by rpki-client