$ rpki-client -vvf rpki.apnic.net/member_repository/A9138271/81F9E2D01C4411EC9B2E6A5FC4F9AE02/AXJLovQFMrfgjXIPTAlmQbShyMQ.mft File: AXJLovQFMrfgjXIPTAlmQbShyMQ.mft (raw, json) Hash identifier: WfvAbe7TzL5asVUKjyek6JjzhMJ3+8Payp3w3gzNqvE= Subject key identifier: BD:A3:CA:1F:D0:3C:A5:38:B2:83:C7:CD:BE:64:8A:AF:AA:94:6E:A7 Authority key identifier: 01:72:4B:A2:F4:05:32:B7:E0:8D:72:0F:4C:09:66:41:B4:A1:C8:C4 Certificate issuer: /CN=A9138271/serialNumber=01724BA2F40532B7E08D720F4C096641B4A1C8C4 Certificate serial: 04C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXJLovQFMrfgjXIPTAlmQbShyMQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138271/81F9E2D01C4411EC9B2E6A5FC4F9AE02/AXJLovQFMrfgjXIPTAlmQbShyMQ.mft Manifest number: 04C0 Signing time: Fri 04 Apr 2025 23:56:41 +0000 Manifest this update: Fri 04 Apr 2025 23:56:41 +0000 Manifest next update: Fri 11 Apr 2025 23:56:41 +0000 Files and hashes: 1: AXJLovQFMrfgjXIPTAlmQbShyMQ.crl (hash: gT8uaJ+jb2S5VSxfqt/eSugtJXsoZQsy3BuwU6aFnpg=) 2: BD4D8A2C1C4811ECBAA21A3CC4F9AE02.roa (hash: ACAwTbWxAFnsJHmx19kYwRZ2kYaKIODFxQCzfuXITvo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138271/81F9E2D01C4411EC9B2E6A5FC4F9AE02/AXJLovQFMrfgjXIPTAlmQbShyMQ.crl rsync://rpki.apnic.net/member_repository/A9138271/81F9E2D01C4411EC9B2E6A5FC4F9AE02/AXJLovQFMrfgjXIPTAlmQbShyMQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXJLovQFMrfgjXIPTAlmQbShyMQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 23:56:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1220 (0x4c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138271 Validity Not Before: Apr 4 23:56:41 2025 GMT Not After : Apr 11 23:56:41 2025 GMT Subject: CN=67f071b9-8255 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:55:91:10:44:c1:b0:d0:50:a9:5f:d2:24:22: 9f:f9:4f:cf:b3:f0:d2:44:d4:7d:d6:cd:23:4f:9f: 7e:dd:80:a0:1f:20:3b:45:2a:6d:43:c9:53:1b:97: 17:c4:8d:61:e5:9b:42:24:31:69:46:7b:ca:08:8b: 67:ec:a0:83:37:91:61:04:4d:97:8f:17:fa:be:d3: 84:51:d3:c6:61:83:67:dc:fd:ac:ad:99:42:b7:97: 88:fb:7f:4a:53:cb:e2:ef:8a:64:30:98:d0:53:a6: 7f:44:5e:c1:c1:27:f9:85:00:50:b3:3d:d4:d4:22: bd:10:bc:97:df:5f:0f:0d:88:73:c9:7b:58:a8:f9: dc:7d:c1:42:dc:60:52:03:8a:82:41:b8:9f:0d:5a: 4c:16:33:1c:b0:3d:86:42:e4:33:1b:77:8d:e6:f6: 1e:59:56:40:b3:51:8d:46:f7:1b:76:29:e0:bb:7c: 1d:93:29:f4:46:d5:5e:ad:75:f6:6f:42:65:b8:17: 8e:aa:f9:1b:ed:49:fd:b6:2e:9c:34:c8:d3:4f:ec: 09:08:7a:20:e9:f8:e8:48:c2:82:49:e8:a1:40:42: 35:eb:45:df:9f:ce:ad:70:0d:7e:17:78:a0:f8:7e: c2:53:f5:67:58:01:71:df:94:27:48:ce:0d:c7:3a: 82:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:A3:CA:1F:D0:3C:A5:38:B2:83:C7:CD:BE:64:8A:AF:AA:94:6E:A7 X509v3 Authority Key Identifier: keyid:01:72:4B:A2:F4:05:32:B7:E0:8D:72:0F:4C:09:66:41:B4:A1:C8:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138271/81F9E2D01C4411EC9B2E6A5FC4F9AE02/AXJLovQFMrfgjXIPTAlmQbShyMQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXJLovQFMrfgjXIPTAlmQbShyMQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138271/81F9E2D01C4411EC9B2E6A5FC4F9AE02/AXJLovQFMrfgjXIPTAlmQbShyMQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d1:13:10:6a:5c:fc:60:06:58:6e:ac:0f:49:18:46:94:15:ad: cd:25:16:7f:05:1b:ac:4a:d8:16:e5:58:d5:9f:59:98:4e:c3: a3:0c:0e:89:2f:dc:dd:21:68:ca:b2:c1:9e:fc:3b:90:28:75: e0:c4:57:6c:26:f7:05:9c:71:a0:dd:ba:0c:8a:6f:ef:a6:c8: 9d:2b:99:de:b0:f8:95:2a:51:f8:60:9d:63:3d:f0:2a:d1:1b: f4:8c:76:c4:19:40:0b:d6:11:de:f7:5c:96:fe:2f:da:25:70: 4f:f0:e9:8a:09:7f:2d:6c:2e:d1:13:6e:e2:39:9b:9a:1e:43: b0:00:57:a8:d7:3d:71:97:33:29:8d:76:0d:3a:ed:24:7d:c9: 50:18:c4:1c:15:38:c4:c8:1c:00:02:01:ba:3e:74:04:7a:a5: b2:68:cb:d8:5a:3d:0f:7f:3e:1a:90:99:3f:a5:9e:54:11:01: 7e:fc:3c:af:c4:97:b3:6b:f8:d6:c3:0e:7f:2e:1b:47:1c:96: 8a:8a:53:53:71:03:60:91:4a:f8:7e:cd:ef:57:2d:dd:94:39: c2:28:ed:bc:cb:22:c2:f9:11:35:90:df:92:42:91:98:86:80: 02:d8:92:ee:5a:b5:e3:d2:17:10:bf:89:81:4d:ba:5b:be:83: de:9e:90:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgyNzExMTAvBgNVBAUTKDAxNzI0QkEyRjQwNTMyQjdFMDhENzIwRjRDMDk2NjQx QjRBMUM4QzQwHhcNMjUwNDA0MjM1NjQxWhcNMjUwNDExMjM1NjQxWjAYMRYwFAYD VQQDEw02N2YwNzFiOS04MjU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAylWREETBsNBQqV/SJCKf+U/Ps/DSRNR91s0jT59+3YCgHyA7RSptQ8lTG5cX xI1h5ZtCJDFpRnvKCItn7KCDN5FhBE2Xjxf6vtOEUdPGYYNn3P2srZlCt5eI+39K U8vi74pkMJjQU6Z/RF7BwSf5hQBQsz3U1CK9ELyX318PDYhzyXtYqPncfcFC3GBS A4qCQbifDVpMFjMcsD2GQuQzG3eN5vYeWVZAs1GNRvcbdingu3wdkyn0RtVerXX2 b0JluBeOqvkb7Un9ti6cNMjTT+wJCHog6fjoSMKCSeihQEI160Xfn86tcA1+F3ig +H7CU/VnWAFx35QnSM4NxzqCkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL2jyh/Q PKU4soPHzb5kiq+qlG6nMB8GA1UdIwQYMBaAFAFyS6L0BTK34I1yD0wJZkG0ocjE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODI3MS84MUY5RTJEMDFD NDQxMUVDOUIyRTZBNUZDNEY5QUUwMi9BWEpMb3ZRRk1yZmdqWElQVEFsbVFiU2h5 TVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FYSkxvdlFGTXJmZ2pYSVBUQWxtUWJTaHlNUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODI3MS84MUY5RTJEMDFDNDQxMUVDOUIyRTZBNUZDNEY5QUUwMi9BWEpMb3ZRRk1y ZmdqWElQVEFsbVFiU2h5TVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDRExBqXPxgBlhurA9JGEaUFa3NJRZ/BRusStgW5VjVn1mYTsOjDA6J L9zdIWjKssGe/DuQKHXgxFdsJvcFnHGg3boMim/vpsidK5nesPiVKlH4YJ1jPfAq 0Rv0jHbEGUAL1hHe91yW/i/aJXBP8OmKCX8tbC7RE27iOZuaHkOwAFeo1z1xlzMp jXYNOu0kfclQGMQcFTjEyBwAAgG6PnQEeqWyaMvYWj0Pfz4akJk/pZ5UEQF+/Dyv xJeza/jWww5/LhtHHJaKilNTcQNgkUr4fs3vVy3dlDnCKO28yyLC+RE1kN+SQpGY hoAC2JLuWrXj0hcQv4mBTbpbvoPenpBq -----END CERTIFICATE-----Generated at Sun Apr 6 21:55:59 2025 by rpki-client