$ rpki-client -vvf rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.mft File: AQtAe3X24zjzr7WajWJxXDwC7PQ.mft (raw, json) Hash identifier: 1eJBegTKec8nU75u12GXj4Olct6F8SLhUa6d4N7yRCA= Subject key identifier: 91:AF:B4:BE:B7:C5:8C:01:70:38:A8:5A:2E:F4:B1:2C:0B:52:D4:F5 Authority key identifier: 01:0B:40:7B:75:F6:E3:38:F3:AF:B5:9A:8D:62:71:5C:3C:02:EC:F4 Certificate issuer: /CN=A9132EC7/serialNumber=010B407B75F6E338F3AFB59A8D62715C3C02ECF4 Certificate serial: 16B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQtAe3X24zjzr7WajWJxXDwC7PQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.mft Manifest number: 16A4 Signing time: Fri 04 Apr 2025 16:45:53 +0000 Manifest this update: Fri 04 Apr 2025 16:45:53 +0000 Manifest next update: Fri 11 Apr 2025 16:45:53 +0000 Files and hashes: 1: AQtAe3X24zjzr7WajWJxXDwC7PQ.crl (hash: ls1yt3vEpsLEDo8NfCo/RM2ofeCVtZVKXXmYgsACZeM=) 2: 0D4F5906FA7911E7B85F4E7EC4F9AE02.roa (hash: 822Cv07i81nzITiBp8oPidqObRAFnQ5Dsa+D8sFZUvo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.crl rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQtAe3X24zjzr7WajWJxXDwC7PQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 16:45:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5815 (0x16b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132EC7 Validity Not Before: Apr 4 16:45:53 2025 GMT Not After : Apr 11 16:45:53 2025 GMT Subject: CN=67f00cc1-07cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9e:db:4d:91:d9:4d:6c:11:83:04:3d:a6:1d: e9:e0:0e:a4:4b:e0:34:0f:62:17:75:f8:5e:c9:b9: 2b:ae:60:8b:4b:7f:23:65:9f:5e:c5:5f:6f:67:df: de:06:d0:cd:27:00:1d:64:c1:e4:26:8c:d3:22:d2: b0:55:b4:0a:81:4e:6a:e3:21:4c:78:7d:b9:fa:d3: e0:16:14:4f:bf:a6:50:82:93:66:bd:f9:44:fb:08: 38:95:dc:7b:da:06:78:76:74:da:6c:c0:5c:9a:7c: bc:26:00:57:b0:78:e5:00:20:85:1d:f2:58:19:99: e7:80:88:9f:2c:79:2d:65:44:88:4e:33:6f:41:71: e7:f9:ae:8d:87:9b:2d:a9:0b:c6:c3:71:88:93:9d: 1b:f8:f4:06:5e:d9:0b:c7:19:b7:1c:b7:7d:03:9b: c9:58:4d:8e:35:5f:69:67:95:7b:70:63:b0:4f:5f: f7:96:4b:c9:6d:5d:17:d1:44:a8:aa:2b:2a:d4:c2: e0:77:e5:fc:d2:33:c7:c6:e8:de:50:c8:2f:99:b3: 83:0d:ab:a1:ce:15:1c:8f:de:a9:0e:1a:c2:6d:db: 05:84:a7:6f:6d:fc:07:e9:bc:6e:05:6f:d8:e5:f7: 83:6d:e2:ea:94:1e:56:14:87:ef:7f:cf:da:e9:cf: db:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:AF:B4:BE:B7:C5:8C:01:70:38:A8:5A:2E:F4:B1:2C:0B:52:D4:F5 X509v3 Authority Key Identifier: keyid:01:0B:40:7B:75:F6:E3:38:F3:AF:B5:9A:8D:62:71:5C:3C:02:EC:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQtAe3X24zjzr7WajWJxXDwC7PQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:1a:30:80:c7:ff:31:b6:50:d3:31:bb:e4:f5:40:ed:e1:05: 11:e1:54:54:42:14:36:51:43:8f:3e:a8:b8:cd:91:c1:86:64: 3c:56:ff:c0:d7:e6:b5:a6:42:60:28:d7:d1:e0:9c:43:e9:10: 76:cd:fe:7f:af:5f:4c:2d:07:67:d0:18:dc:12:7b:0c:90:84: 5c:00:68:b5:30:d2:9d:54:06:15:e8:9f:0a:f1:1d:ae:86:e8: e8:b6:b8:52:29:6c:dc:ad:17:30:a4:b1:a7:12:84:e7:7b:26: 23:03:d3:b8:eb:e1:50:70:23:95:bc:2c:63:1c:e9:a4:a7:91: 78:fc:de:63:d0:d9:68:ff:d8:d4:a6:ec:5e:02:f5:d4:e5:37: 41:2d:f7:22:4a:9a:fd:53:c9:69:c7:77:de:41:ff:c7:97:01: fe:30:be:79:18:7c:75:2e:8c:84:32:a2:83:7e:dd:98:9d:7c: a7:f7:56:f1:33:0b:a8:b0:45:32:63:f5:a4:52:d4:20:28:e6: 8f:b5:1f:2e:bd:93:9f:7a:2e:2f:1b:fe:d6:73:27:6c:5b:d0: 3f:0b:8b:a6:56:30:d4:f5:08:57:05:fa:78:95:62:2d:ba:8f: 26:8d:65:ac:67:31:2f:56:f1:3e:f1:ef:f1:c7:1a:41:c1:28: 5a:54:2d:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFrcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJFQzcxMTAvBgNVBAUTKDAxMEI0MDdCNzVGNkUzMzhGM0FGQjU5QThENjI3MTVD M0MwMkVDRjQwHhcNMjUwNDA0MTY0NTUzWhcNMjUwNDExMTY0NTUzWjAYMRYwFAYD VQQDEw02N2YwMGNjMS0wN2NkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu57bTZHZTWwRgwQ9ph3p4A6kS+A0D2IXdfheybkrrmCLS38jZZ9exV9vZ9/e BtDNJwAdZMHkJozTItKwVbQKgU5q4yFMeH25+tPgFhRPv6ZQgpNmvflE+wg4ldx7 2gZ4dnTabMBcmny8JgBXsHjlACCFHfJYGZnngIifLHktZUSITjNvQXHn+a6Nh5st qQvGw3GIk50b+PQGXtkLxxm3HLd9A5vJWE2ONV9pZ5V7cGOwT1/3lkvJbV0X0USo qisq1MLgd+X80jPHxujeUMgvmbODDauhzhUcj96pDhrCbdsFhKdvbfwH6bxuBW/Y 5feDbeLqlB5WFIfvf8/a6c/bywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJGvtL63 xYwBcDioWi70sSwLUtT1MB8GA1UdIwQYMBaAFAELQHt19uM486+1mo1icVw8Auz0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkVDNy8yOTM0NzI2QUZB NzgxMUU3OUNCNjA4N0RDNEY5QUUwMi9BUXRBZTNYMjR6anpyN1dhaldKeFhEd0M3 UFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FRdEFlM1gyNHpqenI3V2FqV0p4WER3QzdQUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkVDNy8yOTM0NzI2QUZBNzgxMUU3OUNCNjA4N0RDNEY5QUUwMi9BUXRBZTNYMjR6 anpyN1dhaldKeFhEd0M3UFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCGjCAx/8xtlDTMbvk9UDt4QUR4VRUQhQ2UUOPPqi4zZHBhmQ8Vv/A 1+a1pkJgKNfR4JxD6RB2zf5/r19MLQdn0BjcEnsMkIRcAGi1MNKdVAYV6J8K8R2u hujotrhSKWzcrRcwpLGnEoTneyYjA9O46+FQcCOVvCxjHOmkp5F4/N5j0Nlo/9jU puxeAvXU5TdBLfciSpr9U8lpx3feQf/HlwH+ML55GHx1LoyEMqKDft2YnXyn91bx MwuosEUyY/WkUtQgKOaPtR8uvZOfei4vG/7WcydsW9A/C4umVjDU9QhXBfp4lWIt uo8mjWWsZzEvVvE+8e/xxxpBwShaVC0k -----END CERTIFICATE-----Generated at Fri Apr 4 22:10:34 2025 by rpki-client