$ rpki-client -vvf rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.mft File: A2exVIJlFyUqY-y0w4aTXLe9NA4.mft (raw, json) Hash identifier: sAT1U4aSeeHj2t52SmQxZhaQlxwfrkgyqqYuS0A5u58= Subject key identifier: 94:61:7F:A0:3F:6B:17:56:32:00:BE:88:26:4F:39:59:48:A9:14:98 Authority key identifier: 03:67:B1:54:82:65:17:25:2A:63:EC:B4:C3:86:93:5C:B7:BD:34:0E Certificate issuer: /CN=A913CA90/serialNumber=0367B154826517252A63ECB4C386935CB7BD340E Certificate serial: 0439 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2exVIJlFyUqY-y0w4aTXLe9NA4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.mft Manifest number: 0435 Signing time: Sat 29 Mar 2025 00:33:20 +0000 Manifest this update: Sat 29 Mar 2025 00:33:20 +0000 Manifest next update: Sat 05 Apr 2025 00:33:20 +0000 Files and hashes: 1: A2exVIJlFyUqY-y0w4aTXLe9NA4.crl (hash: DXqEepYnZLJp8Ap9MPhCsvFd/eKoiLmmcINJHh5S3uY=) 2: 683A9D3A52EF11EC83A5744EC4F9AE02.roa (hash: keS/qF291Tz7YIPilf3yxYGs5lMrsj9UecsgrxwbjY0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.crl rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2exVIJlFyUqY-y0w4aTXLe9NA4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 00:33:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1081 (0x439) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913CA90 Validity Not Before: Mar 29 00:33:20 2025 GMT Not After : Apr 5 00:33:20 2025 GMT Subject: CN=67e73fd0-1062 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:64:3f:29:26:51:e0:f3:6f:ed:f0:54:d9:70: f3:2d:92:96:fe:cc:ac:23:0d:ad:84:0b:ad:5a:35: 84:34:ed:79:5c:a9:cb:0f:6c:ea:af:0d:d8:6f:6b: fe:c7:99:87:e6:99:10:bf:75:7e:ee:11:59:6b:7f: 07:fd:1f:5e:3c:ba:0c:29:7a:82:12:a6:6c:f1:6a: 85:49:14:89:f2:4d:6e:85:1f:53:88:1b:f6:f4:05: f3:70:33:c4:b0:c4:50:aa:15:70:85:ad:45:7a:20: 3b:d5:a4:23:c3:3e:bf:65:6d:ed:24:a0:e2:79:53: 83:df:1e:4e:4b:2a:37:96:59:58:01:17:f3:13:e2: 82:f9:bb:3a:43:a1:80:9b:fe:9c:32:97:e3:ae:92: a5:a1:26:1d:2a:64:5b:31:a0:77:6c:88:8e:66:57: 46:c2:a9:32:dd:58:c0:1a:55:48:c1:21:e7:38:94: 93:29:70:89:c3:0c:51:02:d5:d0:86:24:95:16:d2: 44:e6:17:62:96:47:be:94:87:88:90:25:7b:2d:7d: 70:4e:d1:66:36:47:50:5f:a3:e7:92:7c:91:97:1e: e8:19:fc:83:18:70:dc:c6:83:2a:9f:1d:1c:39:90: f3:ee:63:6e:d5:71:24:4b:cf:3a:e4:4b:52:56:d2: 43:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:61:7F:A0:3F:6B:17:56:32:00:BE:88:26:4F:39:59:48:A9:14:98 X509v3 Authority Key Identifier: keyid:03:67:B1:54:82:65:17:25:2A:63:EC:B4:C3:86:93:5C:B7:BD:34:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2exVIJlFyUqY-y0w4aTXLe9NA4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:d9:ce:62:4c:d6:de:65:77:08:8a:8e:b7:74:e4:c3:7a:85: 5f:99:ba:0a:cd:0e:d2:c7:22:c5:c0:c2:f5:88:6a:56:db:62: 18:94:a3:45:1e:08:ad:ac:92:d8:62:d8:4f:75:db:86:af:36: 4a:65:ed:9d:04:de:8b:d4:06:22:94:27:e7:fb:31:56:d9:16: 59:e5:94:1f:fc:e6:db:63:9d:c1:ff:f1:fb:2f:82:f2:e9:52: e7:7b:eb:0f:dd:ef:4b:c5:0f:78:fd:c6:b9:5b:7b:05:08:db: d0:38:4e:9a:aa:90:5f:2a:00:d9:ed:7e:a4:a1:b9:9b:40:b6: fe:59:e3:e4:52:4d:38:fa:d1:0e:05:e8:e2:53:23:b4:6a:47: e3:33:ae:5b:a1:9c:6b:a3:a4:5f:99:9a:db:3f:35:b1:4b:d0: a0:bc:2a:f1:ee:eb:70:95:81:d8:3a:9a:e4:be:71:80:75:21: 0e:cb:4d:fc:e7:6d:a8:d3:c3:a1:f2:9b:63:56:ce:55:b8:48: d4:f8:6b:63:10:8d:35:0c:68:f4:19:70:7a:5c:65:8c:d9:b4: 63:af:88:8a:64:b1:d9:4b:19:87:ab:f0:4f:a4:b5:db:53:59: 4e:c8:3a:49:00:63:4d:49:df:e7:72:3e:32:80:58:5b:30:78: aa:a4:04:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0NBOTAxMTAvBgNVBAUTKDAzNjdCMTU0ODI2NTE3MjUyQTYzRUNCNEMzODY5MzVD QjdCRDM0MEUwHhcNMjUwMzI5MDAzMzIwWhcNMjUwNDA1MDAzMzIwWjAYMRYwFAYD VQQDEw02N2U3M2ZkMC0xMDYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsGQ/KSZR4PNv7fBU2XDzLZKW/sysIw2thAutWjWENO15XKnLD2zqrw3Yb2v+ x5mH5pkQv3V+7hFZa38H/R9ePLoMKXqCEqZs8WqFSRSJ8k1uhR9TiBv29AXzcDPE sMRQqhVwha1FeiA71aQjwz6/ZW3tJKDieVOD3x5OSyo3lllYARfzE+KC+bs6Q6GA m/6cMpfjrpKloSYdKmRbMaB3bIiOZldGwqky3VjAGlVIwSHnOJSTKXCJwwxRAtXQ hiSVFtJE5hdilke+lIeIkCV7LX1wTtFmNkdQX6PnknyRlx7oGfyDGHDcxoMqnx0c OZDz7mNu1XEkS8865EtSVtJD4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJRhf6A/ axdWMgC+iCZPOVlIqRSYMB8GA1UdIwQYMBaAFANnsVSCZRclKmPstMOGk1y3vTQO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0E5MC8yNUUzQkJCNDUy RUIxMUVDODk2OUU3NDRDNEY5QUUwMi9BMmV4VklKbEZ5VXFZLXkwdzRhVFhMZTlO QTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0EyZXhWSUpsRnlVcVkteTB3NGFUWExlOU5BNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Q0E5MC8yNUUzQkJCNDUyRUIxMUVDODk2OUU3NDRDNEY5QUUwMi9BMmV4VklKbEZ5 VXFZLXkwdzRhVFhMZTlOQTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBS2c5iTNbeZXcIio63dOTDeoVfmboKzQ7SxyLFwML1iGpW22IYlKNF HgitrJLYYthPdduGrzZKZe2dBN6L1AYilCfn+zFW2RZZ5ZQf/ObbY53B//H7L4Ly 6VLne+sP3e9LxQ94/ca5W3sFCNvQOE6aqpBfKgDZ7X6kobmbQLb+WePkUk04+tEO BejiUyO0akfjM65boZxro6RfmZrbPzWxS9CgvCrx7utwlYHYOprkvnGAdSEOy038 522o08Oh8ptjVs5VuEjU+GtjEI01DGj0GXB6XGWM2bRjr4iKZLHZSxmHq/BPpLXb U1lOyDpJAGNNSd/ncj4ygFhbMHiqpASk -----END CERTIFICATE-----Generated at Fri Apr 4 22:19:56 2025 by rpki-client