$ rpki-client -vvf rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/Aonh4IK22hq6VVKEDAyrAsKjt04.mft File: Aonh4IK22hq6VVKEDAyrAsKjt04.mft (raw, json) Hash identifier: JDjE3DTx9id0yxhnqucdhx5wgZR+i8tLEsadjMHTf3k= Subject key identifier: B8:F0:7C:6D:89:10:F5:89:08:BD:79:10:39:78:F2:98:FC:18:96:15 Authority key identifier: 02:89:E1:E0:82:B6:DA:1A:BA:55:52:84:0C:0C:AB:02:C2:A3:B7:4E Certificate issuer: /CN=A9144C70/serialNumber=0289E1E082B6DA1ABA5552840C0CAB02C2A3B74E Certificate serial: 4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aonh4IK22hq6VVKEDAyrAsKjt04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/Aonh4IK22hq6VVKEDAyrAsKjt04.mft Manifest number: 03A6 Signing time: Sat 29 Mar 2025 01:15:44 +0000 Manifest this update: Sat 29 Mar 2025 01:15:43 +0000 Manifest next update: Sat 05 Apr 2025 01:15:43 +0000 Files and hashes: 1: Aonh4IK22hq6VVKEDAyrAsKjt04.crl (hash: AcHAaAHJEyyELx/1K2uizmsdGbvYTi0mRhm+d51kMtY=) 2: F23B6474DCCB11EFA04C156DC4F9AE02.roa (hash: 8CP+soQ8V1MqPicKDXfIlfLOoa+kVRyCORkx4Rr2qj4=) 3: B250F522DCCB11EFB54CD16CC4F9AE02.roa (hash: rwa7KCX9itOMHcH4U2EV1YtaU4sGAP6iXjp2VE332xU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/Aonh4IK22hq6VVKEDAyrAsKjt04.crl rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/Aonh4IK22hq6VVKEDAyrAsKjt04.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aonh4IK22hq6VVKEDAyrAsKjt04.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 01:15:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78 (0x4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144C70 Validity Not Before: Mar 29 01:15:43 2025 GMT Not After : Apr 5 01:15:43 2025 GMT Subject: CN=67e749bf-e196 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:45:da:ac:bc:91:9f:02:75:c8:da:1f:34:5a: 93:6a:d5:09:19:69:1a:31:f0:5a:54:23:c8:0a:86: 88:5c:dd:18:fd:7b:4d:75:78:86:36:a3:23:1a:d9: ec:5f:86:29:94:58:d1:39:90:03:37:c9:32:76:13: 7e:52:60:60:30:ed:67:4e:7d:1e:8d:26:61:a9:4a: b4:b4:8b:12:6c:1b:3c:bf:02:91:f3:ef:0d:54:f8: 06:3f:c0:f1:31:f4:f3:a4:b4:e7:1c:fc:08:9f:5a: cb:b0:6f:cf:ef:ae:dd:d1:68:b5:6a:e9:3e:ce:7a: af:66:0b:3d:2c:f1:cc:c5:1c:cf:df:35:0d:64:f6: 9d:46:bb:f4:f9:19:05:f1:07:e3:6d:31:4b:bb:9a: d7:6b:5a:d2:9a:bf:e7:03:1f:9d:1f:0d:d8:67:05: f4:df:b8:84:25:06:00:44:cb:f8:77:8a:01:f6:56: c2:39:b6:ff:d7:7d:fa:08:bf:49:e4:a6:c0:9d:60: 6d:53:c5:0d:ea:c5:8e:11:10:96:38:d2:e6:c3:89: ba:d8:a5:0e:ff:8d:47:93:77:0e:3d:0f:fa:9c:f6: 97:94:3c:6e:9b:47:1c:5e:89:43:d7:da:dc:5b:09: bf:23:35:74:4a:23:63:11:9e:91:49:3b:1f:1e:8a: a5:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:F0:7C:6D:89:10:F5:89:08:BD:79:10:39:78:F2:98:FC:18:96:15 X509v3 Authority Key Identifier: keyid:02:89:E1:E0:82:B6:DA:1A:BA:55:52:84:0C:0C:AB:02:C2:A3:B7:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/Aonh4IK22hq6VVKEDAyrAsKjt04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aonh4IK22hq6VVKEDAyrAsKjt04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/Aonh4IK22hq6VVKEDAyrAsKjt04.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:90:e9:cf:3e:af:89:62:d7:73:3b:4b:60:4b:df:db:ef:df: 5a:62:4c:27:64:b4:b5:84:13:88:0f:7e:f5:5e:77:49:09:d3: 46:ee:f8:04:f3:24:78:bb:24:30:f2:7b:69:e2:8d:0f:42:bf: 9b:f0:8c:14:a3:54:7f:9d:f3:a5:45:e7:01:cb:c6:9e:dc:4a: 54:f9:e6:4f:17:a1:24:f6:5e:87:04:93:52:93:b9:1d:76:ce: 63:5b:b9:62:9e:2c:ff:a7:17:c0:89:69:74:52:c0:08:ac:c5: fb:a9:80:1f:a8:24:e0:19:0d:00:64:ee:9b:25:7b:d5:d7:02: 98:f9:38:be:87:66:b9:ea:70:72:e9:e5:23:48:b8:bc:fe:0d: f4:1e:72:98:e5:7c:2c:ce:64:57:4d:87:a5:67:69:86:ff:01: dd:1c:d4:a9:cf:8b:88:90:67:3b:b4:e5:39:1a:e3:1a:23:15: 70:33:22:7a:0c:74:8c:2a:0c:d9:0b:75:a7:d1:d0:e6:7f:63: 1d:86:18:97:63:ed:7f:08:63:d1:ea:1a:93:c2:8a:ec:7c:50: 6e:e6:cf:66:59:30:03:a3:1f:69:ef:7a:73:86:cd:26:28:8d: 06:67:1c:92:3d:6e:71:cc:37:c7:e3:7b:19:78:d8:4d:66:21: ff:e4:5a:2f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NEM3MDExMC8GA1UEBRMoMDI4OUUxRTA4MkI2REExQUJBNTU1Mjg0MEMwQ0FCMDJD MkEzQjc0RTAeFw0yNTAzMjkwMTE1NDNaFw0yNTA0MDUwMTE1NDNaMBgxFjAUBgNV BAMTDTY3ZTc0OWJmLWUxOTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFRdqsvJGfAnXI2h80WpNq1QkZaRox8FpUI8gKhohc3Rj9e011eIY2oyMa2exf himUWNE5kAM3yTJ2E35SYGAw7WdOfR6NJmGpSrS0ixJsGzy/ApHz7w1U+AY/wPEx 9POktOcc/AifWsuwb8/vrt3RaLVq6T7Oeq9mCz0s8czFHM/fNQ1k9p1Gu/T5GQXx B+NtMUu7mtdrWtKav+cDH50fDdhnBfTfuIQlBgBEy/h3igH2VsI5tv/XffoIv0nk psCdYG1TxQ3qxY4REJY40ubDibrYpQ7/jUeTdw49D/qc9peUPG6bRxxeiUPX2txb Cb8jNXRKI2MRnpFJOx8eiqVtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUuPB8bYkQ 9YkIvXkQOXjymPwYlhUwHwYDVR0jBBgwFoAUAonh4IK22hq6VVKEDAyrAsKjt04w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0QzcwLzgyQkM4NEVFQUM2 NzExRUNCNzVDREEyNEM0RjlBRTAyL0Fvbmg0SUsyMmhxNlZWS0VEQXlyQXNLanQw NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQW9uaDRJSzIyaHE2VlZLRURBeXJBc0tqdDA0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0 QzcwLzgyQkM4NEVFQUM2NzExRUNCNzVDREEyNEM0RjlBRTAyL0Fvbmg0SUsyMmhx NlZWS0VEQXlyQXNLanQwNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFmQ6c8+r4li13M7S2BL39vv31piTCdktLWEE4gPfvVed0kJ00bu+ATz JHi7JDDye2nijQ9Cv5vwjBSjVH+d86VF5wHLxp7cSlT55k8XoST2XocEk1KTuR12 zmNbuWKeLP+nF8CJaXRSwAisxfupgB+oJOAZDQBk7psle9XXApj5OL6HZrnqcHLp 5SNIuLz+DfQecpjlfCzOZFdNh6VnaYb/Ad0c1KnPi4iQZzu05Tka4xojFXAzInoM dIwqDNkLdafR0OZ/Yx2GGJdj7X8IY9HqGpPCiux8UG7mz2ZZMAOjH2nvenOGzSYo jQZnHJI9bnHMN8fjexl42E1mIf/kWi8= -----END CERTIFICATE-----Generated at Fri Apr 4 22:09:13 2025 by rpki-client