$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/aEE9QfYAXgMW4OJXbyJsIYiqFW8.mft File: aEE9QfYAXgMW4OJXbyJsIYiqFW8.mft (raw, json) Hash identifier: idN1fqwUOk8sEjJDPzDqKoxyyf0SC1Ektg/53TXmBRU= Subject key identifier: CC:30:AE:62:27:45:B3:CC:3E:4A:FD:A9:09:1B:8E:92:E9:8F:FA:26 Authority key identifier: 68:41:3D:41:F6:00:5E:03:16:E0:E2:57:6F:22:6C:21:88:AA:15:6F Certificate issuer: /CN=A911CA82/serialNumber=68413D41F6005E0316E0E2576F226C2188AA156F Certificate serial: 38 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aEE9QfYAXgMW4OJXbyJsIYiqFW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/aEE9QfYAXgMW4OJXbyJsIYiqFW8.mft Manifest number: 37 Signing time: Fri 18 Apr 2025 23:07:44 +0000 Manifest this update: Fri 18 Apr 2025 23:07:44 +0000 Manifest next update: Fri 25 Apr 2025 23:07:44 +0000 Files and hashes: 1: aEE9QfYAXgMW4OJXbyJsIYiqFW8.crl (hash: LUeiQZYlmjCJ7Ywt1lE5qA1hmi1Ad99moDsXmffJRhA=) 2: AF4301D4CF8511EF94856A41C4F9AE02.roa (hash: Tyg27Srmq+wBuXC9F9mURa1viQP5KB2HJeFABkYn42g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/aEE9QfYAXgMW4OJXbyJsIYiqFW8.crl rsync://rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/aEE9QfYAXgMW4OJXbyJsIYiqFW8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aEE9QfYAXgMW4OJXbyJsIYiqFW8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Apr 2025 18:24:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56 (0x38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CA82, serialNumber=68413D41F6005E0316E0E2576F226C2188AA156F Validity Not Before: Apr 18 23:07:44 2025 GMT Not After : Apr 25 23:07:44 2025 GMT Subject: CN=6802db40-ee6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:44:54:67:f6:bf:76:22:57:95:bc:ac:e0:b4: b3:f3:f0:43:74:1f:ae:de:79:d3:9f:66:33:64:58: 12:16:2e:42:45:7a:84:ce:9e:01:c0:f2:eb:11:98: 0c:9c:14:2e:61:2f:23:cb:96:d2:ce:78:37:ce:07: e3:e7:c7:4d:17:39:d6:09:35:be:ec:30:81:55:da: 43:98:51:28:50:b4:5c:a7:4f:7f:91:b9:04:9f:af: da:08:d5:b1:e9:4d:1c:1a:fb:a2:98:16:dd:5c:1c: 54:af:cd:cc:31:36:ce:40:36:33:f1:2f:52:44:27: b1:3c:0e:6a:b3:5a:37:1a:99:0b:84:67:d1:f1:36: ce:65:4e:8a:b0:ad:bc:26:db:c7:2c:00:73:4c:cf: 2c:31:7c:13:90:70:3a:2f:a0:c4:ae:df:e2:b5:16: 65:09:1f:ec:a6:41:36:65:9b:6a:43:52:43:b2:a4: ea:32:8f:b4:fb:a0:8a:ce:1d:b0:b5:76:9e:66:25: 2d:7e:9c:0e:ea:14:3a:0b:65:67:51:53:c7:fe:1d: 8f:3e:4b:38:d5:2a:5b:08:d4:6f:90:80:ba:fc:f9: b7:a9:2c:19:bf:fd:d2:31:31:e1:b7:9f:65:02:fc: 5f:ae:16:bb:07:f7:df:79:69:d1:36:b8:ab:7b:8c: f2:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:30:AE:62:27:45:B3:CC:3E:4A:FD:A9:09:1B:8E:92:E9:8F:FA:26 X509v3 Authority Key Identifier: keyid:68:41:3D:41:F6:00:5E:03:16:E0:E2:57:6F:22:6C:21:88:AA:15:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/aEE9QfYAXgMW4OJXbyJsIYiqFW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aEE9QfYAXgMW4OJXbyJsIYiqFW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/aEE9QfYAXgMW4OJXbyJsIYiqFW8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:8b:4c:df:30:cc:6f:3b:4a:b5:65:77:03:82:5e:65:78:4a: 32:5e:69:86:ca:6f:82:96:37:8a:e6:64:14:ce:d9:32:56:2a: b2:6a:d7:4d:fa:fa:56:8d:78:64:82:4c:41:4c:a9:c9:7b:f1: 4a:41:13:b2:dc:10:a0:4b:ae:df:0f:b8:d8:f5:1b:c4:74:63: ab:b6:f7:6a:16:fe:c6:84:f9:77:46:51:8b:08:f6:0f:2e:5e: b7:9d:c8:d0:64:a4:42:c2:ad:00:12:5f:52:3f:4d:04:00:83: e0:b7:ca:8c:ed:54:c6:7d:26:cf:c3:22:45:d2:a6:e7:59:e4: 82:51:94:18:06:40:8f:51:b2:df:f6:77:bd:28:8e:cf:e8:2a: b9:c3:ba:c7:df:aa:4d:37:0f:67:78:03:5e:00:01:a2:ab:36: db:7e:92:f7:26:97:32:35:2e:2d:b0:fe:7a:78:80:35:77:92: 5e:28:8b:a2:b6:7a:cf:29:ea:08:1a:ea:c8:6b:a0:6a:5a:59: 7e:f7:f2:66:07:fc:2d:1f:05:12:be:ae:90:8f:94:31:84:db: 40:d3:7e:f5:fb:8b:75:69:4c:5a:6f:8e:8a:d4:ff:8e:97:eb: bc:74:c2:6e:09:32:5a:2e:c6:2b:f7:67:3c:a0:d3:b8:59:e2: 2b:4d:5d:71 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBODANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx Q0E4MjExMC8GA1UEBRMoNjg0MTNENDFGNjAwNUUwMzE2RTBFMjU3NkYyMjZDMjE4 OEFBMTU2RjAeFw0yNTA0MTgyMzA3NDRaFw0yNTA0MjUyMzA3NDRaMBgxFjAUBgNV BAMTDTY4MDJkYjQwLWVlNmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8RFRn9r92IleVvKzgtLPz8EN0H67eedOfZjNkWBIWLkJFeoTOngHA8usRmAyc FC5hLyPLltLOeDfOB+Pnx00XOdYJNb7sMIFV2kOYUShQtFynT3+RuQSfr9oI1bHp TRwa+6KYFt1cHFSvzcwxNs5ANjPxL1JEJ7E8DmqzWjcamQuEZ9HxNs5lToqwrbwm 28csAHNMzywxfBOQcDovoMSu3+K1FmUJH+ymQTZlm2pDUkOypOoyj7T7oIrOHbC1 dp5mJS1+nA7qFDoLZWdRU8f+HY8+SzjVKlsI1G+QgLr8+bepLBm//dIxMeG3n2UC /F+uFrsH9995adE2uKt7jPKNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzDCuYidF s8w+Sv2pCRuOkumP+iYwHwYDVR0jBBgwFoAUaEE9QfYAXgMW4OJXbyJsIYiqFW8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFDQTgyL0Y2OTlFMzU0Q0Yx MjExRUY4RjFEMjA1QkM0RjlBRTAyL2FFRTlRZllBWGdNVzRPSlhieUpzSVlpcUZX OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvYUVFOVFmWUFYZ01XNE9KWGJ5SnNJWWlxRlc4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFD QTgyL0Y2OTlFMzU0Q0YxMjExRUY4RjFEMjA1QkM0RjlBRTAyL2FFRTlRZllBWGdN VzRPSlhieUpzSVlpcUZXOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABqLTN8wzG87SrVldwOCXmV4SjJeaYbKb4KWN4rmZBTO2TJWKrJq1036 +laNeGSCTEFMqcl78UpBE7LcEKBLrt8PuNj1G8R0Y6u292oW/saE+XdGUYsI9g8u XredyNBkpELCrQASX1I/TQQAg+C3yoztVMZ9Js/DIkXSpudZ5IJRlBgGQI9Rst/2 d70ojs/oKrnDusffqk03D2d4A14AAaKrNtt+kvcmlzI1Li2w/np4gDV3kl4oi6K2 es8p6gga6shroGpaWX738mYH/C0fBRK+rpCPlDGE20DTfvX7i3VpTFpvjorU/46X 67x0wm4JMlouxiv3Zzyg07hZ4itNXXE= -----END CERTIFICATE-----Generated at Sat Apr 19 02:09:03 2025 by rpki-client