$ rpki-client -vvf rpki.apnic.net/member_repository/A911A828/DDF9005AA8FE11ED9D50105DC4F9AE02/ImA9ajPwbgqdEPux7Z4dN0kkcAE.mft File: ImA9ajPwbgqdEPux7Z4dN0kkcAE.mft (raw, json) Hash identifier: zuOAimqBfOZHwzVkNXrcrTcJjTzqwspKZc4ZpkYl1hc= Subject key identifier: 52:6E:F4:56:FD:65:CA:D5:C6:12:3C:64:8C:1C:1D:92:48:C9:93:00 Authority key identifier: 22:60:3D:6A:33:F0:6E:0A:9D:10:FB:B1:ED:9E:1D:37:49:24:70:01 Certificate issuer: /CN=A911A828/serialNumber=22603D6A33F06E0A9D10FBB1ED9E1D3749247001 Certificate serial: 0195 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ImA9ajPwbgqdEPux7Z4dN0kkcAE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A828/DDF9005AA8FE11ED9D50105DC4F9AE02/ImA9ajPwbgqdEPux7Z4dN0kkcAE.mft Manifest number: 0192 Signing time: Thu 03 Apr 2025 02:46:49 +0000 Manifest this update: Thu 03 Apr 2025 02:46:48 +0000 Manifest next update: Thu 10 Apr 2025 02:46:48 +0000 Files and hashes: 1: ImA9ajPwbgqdEPux7Z4dN0kkcAE.crl (hash: DXzGitTgUhZ7dReFnjFBVabqs8KyDfZ9+NL+xo1r8g0=) 2: E816DFFAA90111ED867DA161C4F9AE02.roa (hash: J+hbcg1f000uZywitLiVEmVwojqXye5u/Ee0tXQliec=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A828/DDF9005AA8FE11ED9D50105DC4F9AE02/ImA9ajPwbgqdEPux7Z4dN0kkcAE.crl rsync://rpki.apnic.net/member_repository/A911A828/DDF9005AA8FE11ED9D50105DC4F9AE02/ImA9ajPwbgqdEPux7Z4dN0kkcAE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ImA9ajPwbgqdEPux7Z4dN0kkcAE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 02:46:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 405 (0x195) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A828 Validity Not Before: Apr 3 02:46:48 2025 GMT Not After : Apr 10 02:46:48 2025 GMT Subject: CN=67edf699-457a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:4e:62:d5:31:27:2f:cf:96:00:66:ca:2f:c5: a1:7c:30:cd:83:15:7c:d5:b2:92:97:e8:7a:dc:d4: f6:3c:a2:f6:e0:28:b7:5d:6e:13:fa:e6:7b:12:2c: 9b:8b:13:4c:07:0c:00:66:af:2a:b6:32:ec:43:cf: 9e:c7:f9:8c:1d:34:d5:6c:e1:03:84:41:20:e9:7f: 1f:7c:bb:4b:2f:02:11:6a:b9:e3:83:4a:c4:24:71: 48:b6:9b:9a:3f:6d:f9:ac:87:03:44:56:14:24:47: 65:78:79:2c:48:de:b4:2d:98:dd:3c:3b:4a:94:f9: f6:58:e1:03:7e:0b:ba:d1:86:34:6f:3b:65:6a:ae: 19:6e:fb:01:8d:45:08:68:02:bf:df:88:f4:5a:2b: b0:6c:c0:75:64:cf:25:d6:b5:6a:94:82:20:1e:a1: f1:f0:17:18:d7:f6:63:22:52:92:39:90:90:14:f8: 93:93:9b:96:62:5b:66:fe:93:8e:72:f4:2b:9a:86: 37:b5:a1:5c:28:aa:74:74:e3:a9:4b:7e:28:d8:b7: d7:ef:c7:9a:d6:98:79:01:e3:f2:4e:36:af:a3:b0: 01:28:97:b6:31:51:32:71:6a:18:61:6d:b0:28:2e: 32:24:39:75:dc:7a:37:1e:03:e7:73:73:70:09:3b: 83:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:6E:F4:56:FD:65:CA:D5:C6:12:3C:64:8C:1C:1D:92:48:C9:93:00 X509v3 Authority Key Identifier: keyid:22:60:3D:6A:33:F0:6E:0A:9D:10:FB:B1:ED:9E:1D:37:49:24:70:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A828/DDF9005AA8FE11ED9D50105DC4F9AE02/ImA9ajPwbgqdEPux7Z4dN0kkcAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ImA9ajPwbgqdEPux7Z4dN0kkcAE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A828/DDF9005AA8FE11ED9D50105DC4F9AE02/ImA9ajPwbgqdEPux7Z4dN0kkcAE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:5e:96:e4:95:d1:53:6b:c9:d7:dd:25:70:9f:f5:ca:94:01: ba:08:0d:b0:04:c0:25:7f:19:b2:a2:88:95:34:72:2c:fe:d4: 7e:1b:be:d5:3b:e7:de:b7:a3:b2:1c:9c:25:a2:b2:ed:73:00: bd:78:a9:48:87:e2:07:f5:a7:a5:7b:d8:c9:e6:01:4b:38:21: 97:47:70:a1:cd:a0:3e:df:b2:89:f4:b5:ab:36:eb:fe:0f:fe: a6:4e:41:02:50:2e:ce:9d:98:a2:04:e8:aa:f7:bc:64:d5:28: 12:6c:51:26:90:62:ca:5b:58:bb:fd:b0:50:fd:0e:c8:8e:d2: 81:2f:25:f3:b6:84:07:58:be:1d:5e:30:bb:87:a9:fb:0b:83: 30:68:c4:0d:e9:97:59:aa:65:84:c8:b0:60:1e:4f:c6:06:80: ee:61:f6:c3:49:ea:d6:5b:d1:f0:27:ed:8e:e9:dd:dd:11:0a: d1:4a:06:2d:d8:dd:ae:57:f1:0f:49:ff:b7:1a:94:6d:91:49: 64:cb:39:97:40:5b:28:13:58:05:9d:72:b3:8a:ff:e0:c3:14: 67:6d:5a:1a:00:f7:4d:8a:12:ce:cc:73:be:02:dd:6d:c1:a3: 1b:40:a5:f4:23:99:be:2d:0c:c9:f7:cc:57:2d:71:64:24:65: 88:70:49:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUE4MjgxMTAvBgNVBAUTKDIyNjAzRDZBMzNGMDZFMEE5RDEwRkJCMUVEOUUxRDM3 NDkyNDcwMDEwHhcNMjUwNDAzMDI0NjQ4WhcNMjUwNDEwMDI0NjQ4WjAYMRYwFAYD VQQDEw02N2VkZjY5OS00NTdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3k5i1TEnL8+WAGbKL8WhfDDNgxV81bKSl+h63NT2PKL24Ci3XW4T+uZ7Eiyb ixNMBwwAZq8qtjLsQ8+ex/mMHTTVbOEDhEEg6X8ffLtLLwIRarnjg0rEJHFItpua P235rIcDRFYUJEdleHksSN60LZjdPDtKlPn2WOEDfgu60YY0bztlaq4ZbvsBjUUI aAK/34j0WiuwbMB1ZM8l1rVqlIIgHqHx8BcY1/ZjIlKSOZCQFPiTk5uWYltm/pOO cvQrmoY3taFcKKp0dOOpS34o2LfX78ea1ph5AePyTjavo7ABKJe2MVEycWoYYW2w KC4yJDl13Ho3HgPnc3NwCTuDsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFJu9Fb9 ZcrVxhI8ZIwcHZJIyZMAMB8GA1UdIwQYMBaAFCJgPWoz8G4KnRD7se2eHTdJJHAB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTgyOC9EREY5MDA1QUE4 RkUxMUVEOUQ1MDEwNURDNEY5QUUwMi9JbUE5YWpQd2JncWRFUHV4N1o0ZE4wa2tj QUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ltQTlhalB3YmdxZEVQdXg3WjRkTjBra2NBRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTgyOC9EREY5MDA1QUE4RkUxMUVEOUQ1MDEwNURDNEY5QUUwMi9JbUE5YWpQd2Jn cWRFUHV4N1o0ZE4wa2tjQUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpXpbkldFTa8nX3SVwn/XKlAG6CA2wBMAlfxmyooiVNHIs/tR+G77V O+fet6OyHJwlorLtcwC9eKlIh+IH9aele9jJ5gFLOCGXR3ChzaA+37KJ9LWrNuv+ D/6mTkECUC7OnZiiBOiq97xk1SgSbFEmkGLKW1i7/bBQ/Q7IjtKBLyXztoQHWL4d XjC7h6n7C4MwaMQN6ZdZqmWEyLBgHk/GBoDuYfbDSerWW9HwJ+2O6d3dEQrRSgYt 2N2uV/EPSf+3GpRtkUlkyzmXQFsoE1gFnXKziv/gwxRnbVoaAPdNihLOzHO+At1t waMbQKX0I5m+LQzJ98xXLXFkJGWIcEkJ -----END CERTIFICATE-----Generated at Fri Apr 4 21:54:04 2025 by rpki-client