$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.mft File: AAs7T4iVfN1tN9_2ExONb1SoW3k.mft (raw, json) Hash identifier: VSqy8pEiilzdMPAjL6X8+AK7CbNDUty5SKnOX/tZFi4= Subject key identifier: 0B:E4:60:BC:AB:9E:81:AD:67:0B:F6:7E:13:3A:6A:22:50:D1:40:8B Authority key identifier: 00:0B:3B:4F:88:95:7C:DD:6D:37:DF:F6:13:13:8D:6F:54:A8:5B:79 Certificate issuer: /CN=A9149F48/serialNumber=000B3B4F88957CDD6D37DFF613138D6F54A85B79 Certificate serial: 0693 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAs7T4iVfN1tN9_2ExONb1SoW3k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.mft Manifest number: 0685 Signing time: Wed 02 Apr 2025 22:18:09 +0000 Manifest this update: Wed 02 Apr 2025 22:18:08 +0000 Manifest next update: Wed 09 Apr 2025 22:18:08 +0000 Files and hashes: 1: AAs7T4iVfN1tN9_2ExONb1SoW3k.crl (hash: z94OBCK5lfNGRxL3jlvo3bObVahI7Lxb0RmBCg4ieZc=) 2: A1F2E73A19D511EF85D48428C4F9AE02.roa (hash: ZX1QzTNwDgtR4R7k4FRyRV5Z8jQyiy5Ky4ynHhk2quU=) 3: 9BCBA2EA6D6511EB80F7684BC4F9AE02.roa (hash: hdIhzh8K12opQ1D1WK4zXsMffrmcGa0gdrGINvycqaM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.crl rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAs7T4iVfN1tN9_2ExONb1SoW3k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 22:18:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1683 (0x693) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F48 Validity Not Before: Apr 2 22:18:08 2025 GMT Not After : Apr 9 22:18:08 2025 GMT Subject: CN=67edb7a0-17ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d4:86:55:b5:51:2e:ee:02:29:5c:7a:f9:00: b6:a4:04:b0:74:12:76:21:5d:7b:4d:bb:b3:32:96: 80:1e:6c:dc:52:f8:ac:f5:b9:ad:bf:d5:15:fa:1c: b0:6e:0f:a0:7a:81:5b:a1:d9:f4:03:f4:1e:82:3b: ad:f0:44:7f:6a:60:b6:e3:a6:22:98:d4:8f:f4:03: 3e:28:8c:cb:b8:5c:80:d5:25:2f:d1:2d:ad:8e:fe: 5e:6e:af:84:98:63:13:af:70:8e:7d:d5:67:f7:8f: 0b:ba:f1:94:ec:a4:53:da:c0:17:81:03:2a:89:37: 93:4e:da:cf:de:62:68:55:51:8d:a1:53:82:11:d0: 38:62:c5:af:3f:4a:b5:c4:ad:0f:0b:98:e4:ad:05: 28:52:5e:31:01:e3:a8:cc:65:09:5b:87:37:49:8f: 0b:3f:b3:c9:bc:49:c1:54:ca:9e:9a:20:13:db:54: 66:33:52:f4:5f:01:84:d4:8c:65:a3:56:b7:45:a2: 45:87:99:bd:7b:03:67:49:f8:0c:e8:a6:fd:c1:38: 08:a5:be:25:75:18:e7:4e:b3:9d:f6:f2:92:1c:9a: f0:70:c6:34:05:d5:74:77:e5:c5:e5:aa:f9:57:28: 7d:d1:c0:e0:7a:28:b0:ed:7d:ba:b6:18:4a:4f:d5: a1:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:E4:60:BC:AB:9E:81:AD:67:0B:F6:7E:13:3A:6A:22:50:D1:40:8B X509v3 Authority Key Identifier: keyid:00:0B:3B:4F:88:95:7C:DD:6D:37:DF:F6:13:13:8D:6F:54:A8:5B:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAs7T4iVfN1tN9_2ExONb1SoW3k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:1c:19:9c:4d:c6:ca:eb:a1:a9:d1:b7:cc:99:d0:b2:a8:66: 51:63:00:c5:af:c4:9b:8b:1c:fa:94:dc:2f:55:e0:38:95:b5: 7b:2e:18:66:49:7e:ac:3d:75:4b:9f:9c:02:a5:e7:a5:db:ab: 95:26:81:bf:72:ac:6e:7d:21:72:c7:2c:a5:f9:76:ed:98:80: da:ec:c0:57:89:dc:15:07:c1:42:00:d3:db:f7:f9:ea:7b:62: 10:9d:53:cc:3c:3f:ca:bd:d7:c1:1f:1f:47:53:34:3a:79:35: 89:35:0c:95:47:12:47:8e:27:b5:21:f0:f7:8f:04:e1:01:fe: 2f:38:2c:57:00:64:99:0a:5c:29:29:fb:de:ad:eb:7d:0d:8a: e6:4f:7b:67:12:99:47:2f:6e:fb:73:ca:82:d9:19:c7:70:c4: f1:ec:32:f7:67:d3:fc:fa:16:d8:c6:25:ef:83:15:02:b5:78: 70:36:f9:54:1d:cc:22:1b:31:c0:9f:a1:ab:5f:49:44:b2:aa: bf:53:91:da:32:16:62:ff:83:41:c9:f7:60:3d:6d:6b:3c:56: dd:5c:19:e6:89:43:b0:f0:69:a7:e9:14:6a:c4:59:ff:1e:d2: a5:8e:26:07:c0:77:03:6d:17:d2:b6:2f:cb:ae:bc:d3:5f:e6: c9:f8:d2:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGNDgxMTAvBgNVBAUTKDAwMEIzQjRGODg5NTdDREQ2RDM3REZGNjEzMTM4RDZG NTRBODVCNzkwHhcNMjUwNDAyMjIxODA4WhcNMjUwNDA5MjIxODA4WjAYMRYwFAYD VQQDEw02N2VkYjdhMC0xN2FiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApdSGVbVRLu4CKVx6+QC2pASwdBJ2IV17TbuzMpaAHmzcUvis9bmtv9UV+hyw bg+geoFbodn0A/Qegjut8ER/amC246YimNSP9AM+KIzLuFyA1SUv0S2tjv5ebq+E mGMTr3COfdVn948LuvGU7KRT2sAXgQMqiTeTTtrP3mJoVVGNoVOCEdA4YsWvP0q1 xK0PC5jkrQUoUl4xAeOozGUJW4c3SY8LP7PJvEnBVMqemiAT21RmM1L0XwGE1Ixl o1a3RaJFh5m9ewNnSfgM6Kb9wTgIpb4ldRjnTrOd9vKSHJrwcMY0BdV0d+XF5ar5 Vyh90cDgeiiw7X26thhKT9WhmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAvkYLyr noGtZwv2fhM6aiJQ0UCLMB8GA1UdIwQYMBaAFAALO0+IlXzdbTff9hMTjW9UqFt5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUY0OC9EOUVGOTlDMDZE NjMxMUVCOURGODE5NDlDNEY5QUUwMi9BQXM3VDRpVmZOMXROOV8yRXhPTmIxU29X M2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FBczdUNGlWZk4xdE45XzJFeE9OYjFTb1czay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUY0OC9EOUVGOTlDMDZENjMxMUVCOURGODE5NDlDNEY5QUUwMi9BQXM3VDRpVmZO MXROOV8yRXhPTmIxU29XM2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+HBmcTcbK66Gp0bfMmdCyqGZRYwDFr8Sbixz6lNwvVeA4lbV7Lhhm SX6sPXVLn5wCpeel26uVJoG/cqxufSFyxyyl+XbtmIDa7MBXidwVB8FCANPb9/nq e2IQnVPMPD/KvdfBHx9HUzQ6eTWJNQyVRxJHjie1IfD3jwThAf4vOCxXAGSZClwp Kfveret9DYrmT3tnEplHL277c8qC2RnHcMTx7DL3Z9P8+hbYxiXvgxUCtXhwNvlU HcwiGzHAn6GrX0lEsqq/U5HaMhZi/4NByfdgPW1rPFbdXBnmiUOw8Gmn6RRqxFn/ HtKljiYHwHcDbRfSti/LrrzTX+bJ+NJS -----END CERTIFICATE-----Generated at Fri Apr 4 22:14:59 2025 by rpki-client