$ rpki-client -vvf rpki.apnic.net/member_repository/A9120AAA/0CA77C825C4711EEAA9FE966C4F9AE02/a1cJMpDRH2XPuR8SEsKM9zP5wrU.mft File: a1cJMpDRH2XPuR8SEsKM9zP5wrU.mft (raw, json) Hash identifier: Dk5sJBtJKbUCdXbGu8oyytzCLrfEi2Z890KqBR67xxg= Subject key identifier: 20:92:69:25:C3:65:65:81:83:49:F8:53:E3:67:C2:5C:27:0F:A3:DE Authority key identifier: 6B:57:09:32:90:D1:1F:65:CF:B9:1F:12:12:C2:8C:F7:33:F9:C2:B5 Certificate issuer: /CN=A9120AAA/serialNumber=6B57093290D11F65CFB91F1212C28CF733F9C2B5 Certificate serial: 011C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1cJMpDRH2XPuR8SEsKM9zP5wrU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120AAA/0CA77C825C4711EEAA9FE966C4F9AE02/a1cJMpDRH2XPuR8SEsKM9zP5wrU.mft Manifest number: 011A Signing time: Sat 29 Mar 2025 04:11:49 +0000 Manifest this update: Sat 29 Mar 2025 04:11:49 +0000 Manifest next update: Sat 05 Apr 2025 04:11:49 +0000 Files and hashes: 1: a1cJMpDRH2XPuR8SEsKM9zP5wrU.crl (hash: e2lgN4IvH61LTBOU8D3c21PdprPandCpW27G+2rlQHI=) 2: 8A389AC25C4811EEBE1CF06BC4F9AE02.roa (hash: 9QttLF7HMnJDx+HbQAXC0YtWXOJ+pz+cgouITeRm1GU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120AAA/0CA77C825C4711EEAA9FE966C4F9AE02/a1cJMpDRH2XPuR8SEsKM9zP5wrU.crl rsync://rpki.apnic.net/member_repository/A9120AAA/0CA77C825C4711EEAA9FE966C4F9AE02/a1cJMpDRH2XPuR8SEsKM9zP5wrU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1cJMpDRH2XPuR8SEsKM9zP5wrU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 04:11:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 284 (0x11c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120AAA Validity Not Before: Mar 29 04:11:49 2025 GMT Not After : Apr 5 04:11:49 2025 GMT Subject: CN=67e77305-c236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:20:51:7a:a2:54:45:71:71:28:1e:11:6e:95: 9c:d6:a6:ad:e3:b1:a3:30:e8:fc:bf:a7:85:7b:91: 60:b7:72:3e:88:8e:7d:8e:22:3f:2f:1a:59:e4:ae: 48:fe:7b:7d:24:55:6a:df:f8:d3:84:04:99:cc:8c: 8c:ad:ce:73:eb:ee:d1:4e:fd:95:f9:b3:a5:d1:57: c6:3c:85:ed:3b:f1:41:0e:b7:30:ae:6d:a1:b8:9a: 4a:c0:e0:80:18:19:ac:44:fd:d1:28:a5:37:63:83: a1:46:e7:00:a8:a0:51:53:0f:1f:e6:22:7a:4e:8b: 59:55:ff:97:e6:55:31:f3:7e:77:07:ae:b1:a7:99: 8d:ce:ff:b0:fd:d9:ea:4d:b1:7b:ed:bf:5e:81:b7: 7f:da:8d:bb:1b:62:de:46:84:b3:92:49:43:e1:3a: 80:82:a8:6d:75:68:c6:cf:92:f9:2a:e2:53:36:87: 8e:c9:79:c9:e9:14:be:26:5d:51:01:cf:c6:b2:4e: 90:c2:38:9a:f9:98:38:ad:bf:02:68:4b:2b:b9:1e: 25:03:83:c4:4c:51:4b:72:81:5b:6d:28:78:23:4e: 02:b9:b6:b6:07:71:e6:a8:07:b1:00:b6:37:28:40: 2f:d2:59:af:eb:4c:79:a9:b4:17:b7:95:33:3d:57: 92:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:92:69:25:C3:65:65:81:83:49:F8:53:E3:67:C2:5C:27:0F:A3:DE X509v3 Authority Key Identifier: keyid:6B:57:09:32:90:D1:1F:65:CF:B9:1F:12:12:C2:8C:F7:33:F9:C2:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120AAA/0CA77C825C4711EEAA9FE966C4F9AE02/a1cJMpDRH2XPuR8SEsKM9zP5wrU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1cJMpDRH2XPuR8SEsKM9zP5wrU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120AAA/0CA77C825C4711EEAA9FE966C4F9AE02/a1cJMpDRH2XPuR8SEsKM9zP5wrU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:e8:09:e3:09:32:9b:3d:3e:ee:52:e6:21:e1:8c:3c:b7:9a: 1b:56:29:d0:a7:53:48:4e:08:6a:91:76:39:71:10:9b:1a:27: 74:94:f9:bf:37:df:d9:be:bf:2f:df:73:f1:36:19:c3:55:a1: 04:ae:37:dc:aa:a8:05:6a:ad:5b:d7:90:b9:fc:af:22:c2:bc: 25:84:d2:32:cd:7a:d8:77:41:a5:a1:c2:5c:39:d5:01:90:25: 38:7b:79:b7:a4:29:34:8e:ed:d9:a2:93:f0:ac:4b:78:24:0c: c1:f3:9b:4d:3b:4f:99:dd:7d:a2:99:7f:d1:e6:4d:a1:62:53: 63:49:cd:5f:d3:a8:71:86:26:28:e2:06:a6:3f:df:d7:c5:b4: 6f:80:82:7a:b3:a9:3a:95:e7:98:4e:b9:0c:a6:29:39:85:94: 51:bb:9c:17:84:ec:b9:9e:c9:2d:06:3e:ab:91:26:5c:ec:e7: 59:06:e8:f4:29:46:fc:93:db:96:cb:d7:ca:b2:ad:5f:ef:71: 15:b3:06:5c:da:89:d9:4f:d1:df:e7:7e:ed:ed:94:06:f5:02: 25:0c:d3:fb:7f:fd:5c:30:b8:b0:64:f8:ad:41:10:74:c5:de: 69:6d:93:8f:08:c6:f3:ec:19:12:aa:7c:e8:7e:fe:1e:32:06: c6:eb:1c:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBBQUExMTAvBgNVBAUTKDZCNTcwOTMyOTBEMTFGNjVDRkI5MUYxMjEyQzI4Q0Y3 MzNGOUMyQjUwHhcNMjUwMzI5MDQxMTQ5WhcNMjUwNDA1MDQxMTQ5WjAYMRYwFAYD VQQDEw02N2U3NzMwNS1jMjM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4iBReqJURXFxKB4RbpWc1qat47GjMOj8v6eFe5Fgt3I+iI59jiI/LxpZ5K5I /nt9JFVq3/jThASZzIyMrc5z6+7RTv2V+bOl0VfGPIXtO/FBDrcwrm2huJpKwOCA GBmsRP3RKKU3Y4OhRucAqKBRUw8f5iJ6TotZVf+X5lUx8353B66xp5mNzv+w/dnq TbF77b9egbd/2o27G2LeRoSzkklD4TqAgqhtdWjGz5L5KuJTNoeOyXnJ6RS+Jl1R Ac/Gsk6Qwjia+Zg4rb8CaEsruR4lA4PETFFLcoFbbSh4I04Cuba2B3HmqAexALY3 KEAv0lmv60x5qbQXt5UzPVeSnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCCSaSXD ZWWBg0n4U+NnwlwnD6PeMB8GA1UdIwQYMBaAFGtXCTKQ0R9lz7kfEhLCjPcz+cK1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEFBQS8wQ0E3N0M4MjVD NDcxMUVFQUE5RkU5NjZDNEY5QUUwMi9hMWNKTXBEUkgyWFB1UjhTRXNLTTl6UDV3 clUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ExY0pNcERSSDJYUHVSOFNFc0tNOXpQNXdyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MEFBQS8wQ0E3N0M4MjVDNDcxMUVFQUE5RkU5NjZDNEY5QUUwMi9hMWNKTXBEUkgy WFB1UjhTRXNLTTl6UDV3clUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCX6AnjCTKbPT7uUuYh4Yw8t5obVinQp1NITghqkXY5cRCbGid0lPm/ N9/Zvr8v33PxNhnDVaEErjfcqqgFaq1b15C5/K8iwrwlhNIyzXrYd0GlocJcOdUB kCU4e3m3pCk0ju3ZopPwrEt4JAzB85tNO0+Z3X2imX/R5k2hYlNjSc1f06hxhiYo 4gamP9/XxbRvgIJ6s6k6leeYTrkMpik5hZRRu5wXhOy5nsktBj6rkSZc7OdZBuj0 KUb8k9uWy9fKsq1f73EVswZc2onZT9Hf537t7ZQG9QIlDNP7f/1cMLiwZPitQRB0 xd5pbZOPCMbz7BkSqnzofv4eMgbG6xxd -----END CERTIFICATE-----Generated at Fri Apr 4 18:24:31 2025 by rpki-client