$ rpki-client -vvf rpki.apnic.net/member_repository/A9148D52/1D4B44EEDB6B11E992987F41C4F9AE02/aIdCVFR7NLOvid21tI0CAj9Xrhc.mft File: aIdCVFR7NLOvid21tI0CAj9Xrhc.mft (raw, json) Hash identifier: 96kDYIAi/nwOtAXYa3jvMXbquND5GtLseinN2+0tdUU= Subject key identifier: 7A:6F:60:19:63:ED:12:FC:E8:93:BD:5B:71:BD:55:14:CE:3D:77:E8 Authority key identifier: 68:87:42:54:54:7B:34:B3:AF:89:DD:B5:B4:8D:02:02:3F:57:AE:17 Certificate issuer: /CN=A9148D52/serialNumber=68874254547B34B3AF89DDB5B48D02023F57AE17 Certificate serial: 0D09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIdCVFR7NLOvid21tI0CAj9Xrhc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148D52/1D4B44EEDB6B11E992987F41C4F9AE02/aIdCVFR7NLOvid21tI0CAj9Xrhc.mft Manifest number: 0D00 Signing time: Fri 04 Apr 2025 18:11:42 +0000 Manifest this update: Fri 04 Apr 2025 18:11:41 +0000 Manifest next update: Fri 11 Apr 2025 18:11:41 +0000 Files and hashes: 1: aIdCVFR7NLOvid21tI0CAj9Xrhc.crl (hash: caewH2WloTqFX6wgk6sWiowtxWVmYaLI3NRBfwMQv2w=) 2: 0198539E94F311EA9429BF86C4F9AE02.roa (hash: 5GX92aioe88puPmyzGflssCck3bnuW06XT8lCNmGXB4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148D52/1D4B44EEDB6B11E992987F41C4F9AE02/aIdCVFR7NLOvid21tI0CAj9Xrhc.crl rsync://rpki.apnic.net/member_repository/A9148D52/1D4B44EEDB6B11E992987F41C4F9AE02/aIdCVFR7NLOvid21tI0CAj9Xrhc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIdCVFR7NLOvid21tI0CAj9Xrhc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 18:11:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3337 (0xd09) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148D52 Validity Not Before: Apr 4 18:11:41 2025 GMT Not After : Apr 11 18:11:41 2025 GMT Subject: CN=67f020dd-1d9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:04:98:22:0f:a0:38:e5:61:17:8c:36:ce:44: 94:e7:a4:cc:c2:62:6a:a0:bd:b5:68:ed:77:b4:88: 0a:fe:e5:10:54:df:c1:7e:49:ea:4b:bd:d4:71:50: 57:22:ac:5f:ea:93:58:6e:b8:4d:37:65:19:ef:5e: 4f:e9:24:e1:fb:00:c5:d4:b2:73:49:a6:a2:e6:dd: 4d:f9:1d:55:76:e7:71:6a:27:e2:9f:52:13:73:0d: 07:f7:e5:c3:cf:0a:58:6c:15:dc:70:36:71:85:47: a3:c8:dd:4d:a6:ad:23:5e:ee:0e:4e:36:65:27:6f: e8:45:fc:30:29:c4:60:be:7b:03:1c:8c:93:1c:65: 1a:f9:a7:46:03:f3:78:bc:37:98:97:e5:86:4b:3c: d8:d6:96:aa:eb:88:1d:9b:34:f6:6e:0f:20:43:da: 6c:ab:f4:1d:fb:83:5f:90:45:c5:10:b0:dd:bf:cd: b4:b1:34:25:78:57:37:15:8a:e5:fc:e6:58:1b:17: 37:69:34:17:d1:d8:36:bc:3c:93:8a:58:28:70:05: a4:21:1f:4a:ce:e5:30:87:08:ea:98:22:0f:48:61: d2:a3:8f:d0:3f:1f:2f:b8:d9:35:0d:9b:5d:7b:7b: ea:25:5a:34:9e:02:59:67:f7:20:9c:d6:2f:f8:e1: 40:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:6F:60:19:63:ED:12:FC:E8:93:BD:5B:71:BD:55:14:CE:3D:77:E8 X509v3 Authority Key Identifier: keyid:68:87:42:54:54:7B:34:B3:AF:89:DD:B5:B4:8D:02:02:3F:57:AE:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148D52/1D4B44EEDB6B11E992987F41C4F9AE02/aIdCVFR7NLOvid21tI0CAj9Xrhc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIdCVFR7NLOvid21tI0CAj9Xrhc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148D52/1D4B44EEDB6B11E992987F41C4F9AE02/aIdCVFR7NLOvid21tI0CAj9Xrhc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:d4:b1:85:81:c7:d4:64:51:9d:db:95:83:46:d4:43:90:05: 09:fa:86:0a:62:81:cd:06:25:10:41:8c:86:eb:83:3d:64:3a: 5a:0c:ba:f8:3c:78:70:cd:af:a2:e5:7f:97:cf:1a:8a:2d:60: 67:ab:1b:69:ee:c6:aa:b1:01:38:42:67:01:09:c1:b8:4a:fa: d5:e0:87:a9:26:6b:44:2d:ed:0a:bd:53:48:f6:b7:eb:ec:b7: 00:98:10:0a:47:00:48:3c:89:28:af:08:37:37:20:22:bc:5b: 68:83:79:b4:49:a4:1b:5a:22:b8:bf:c2:53:6b:0c:d6:13:ce: 92:7c:24:7f:c0:82:d0:26:a5:a6:e3:f7:23:22:56:4a:0c:07: f1:61:b3:b7:c8:3d:65:b9:e6:2d:3d:05:10:6e:db:80:09:86: c2:33:62:7a:08:44:50:19:c5:da:fc:b3:ac:d1:e5:fc:dc:25: 97:f1:fc:e5:d2:92:ab:81:7a:75:4b:d5:7e:69:b0:1e:3a:89: 69:42:13:b4:76:4d:0c:6d:7a:f4:25:6e:e2:78:93:34:9c:06: ed:76:4f:7c:99:88:94:0e:96:ec:86:d7:1f:18:30:03:45:86: e4:0b:e9:2a:39:7b:82:c1:2d:20:05:6c:92:3d:b6:9d:bf:7a: e3:f7:5e:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhENTIxMTAvBgNVBAUTKDY4ODc0MjU0NTQ3QjM0QjNBRjg5RERCNUI0OEQwMjAy M0Y1N0FFMTcwHhcNMjUwNDA0MTgxMTQxWhcNMjUwNDExMTgxMTQxWjAYMRYwFAYD VQQDEw02N2YwMjBkZC0xZDlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzwSYIg+gOOVhF4w2zkSU56TMwmJqoL21aO13tIgK/uUQVN/BfknqS73UcVBX Iqxf6pNYbrhNN2UZ715P6STh+wDF1LJzSaai5t1N+R1Vdudxaifin1ITcw0H9+XD zwpYbBXccDZxhUejyN1Npq0jXu4OTjZlJ2/oRfwwKcRgvnsDHIyTHGUa+adGA/N4 vDeYl+WGSzzY1paq64gdmzT2bg8gQ9psq/Qd+4NfkEXFELDdv820sTQleFc3FYrl /OZYGxc3aTQX0dg2vDyTilgocAWkIR9KzuUwhwjqmCIPSGHSo4/QPx8vuNk1DZtd e3vqJVo0ngJZZ/cgnNYv+OFAbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHpvYBlj 7RL86JO9W3G9VRTOPXfoMB8GA1UdIwQYMBaAFGiHQlRUezSzr4ndtbSNAgI/V64X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEQ1Mi8xRDRCNDRFRURC NkIxMUU5OTI5ODdGNDFDNEY5QUUwMi9hSWRDVkZSN05MT3ZpZDIxdEkwQ0FqOVhy aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FJZENWRlI3TkxPdmlkMjF0STBDQWo5WHJoYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEQ1Mi8xRDRCNDRFRURCNkIxMUU5OTI5ODdGNDFDNEY5QUUwMi9hSWRDVkZSN05M T3ZpZDIxdEkwQ0FqOVhyaGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAH1LGFgcfUZFGd25WDRtRDkAUJ+oYKYoHNBiUQQYyG64M9ZDpaDLr4 PHhwza+i5X+XzxqKLWBnqxtp7saqsQE4QmcBCcG4SvrV4IepJmtELe0KvVNI9rfr 7LcAmBAKRwBIPIkorwg3NyAivFtog3m0SaQbWiK4v8JTawzWE86SfCR/wILQJqWm 4/cjIlZKDAfxYbO3yD1lueYtPQUQbtuACYbCM2J6CERQGcXa/LOs0eX83CWX8fzl 0pKrgXp1S9V+abAeOolpQhO0dk0MbXr0JW7ieJM0nAbtdk98mYiUDpbshtcfGDAD RYbkC+kqOXuCwS0gBWySPbadv3rj916g -----END CERTIFICATE-----Generated at Fri Apr 4 22:17:50 2025 by rpki-client