$ rpki-client -vvf rpki.apnic.net/member_repository/A914B0D8/07AABCDAFB1111EE9123391BC4F9AE02/AIsjUb6f1m04sRBQZ5c09E-l2X0.mft File: AIsjUb6f1m04sRBQZ5c09E-l2X0.mft (raw, json) Hash identifier: 6yiuuEMScA6j4Og9kr26D9iIUOSeMDosLlPgxhh3bKs= Subject key identifier: 83:81:8C:9D:E5:12:A4:53:61:B6:67:1E:59:BA:40:21:41:9F:10:FE Authority key identifier: 00:8B:23:51:BE:9F:D6:6D:38:B1:10:50:67:97:34:F4:4F:A5:D9:7D Certificate issuer: /CN=A914B0D8/serialNumber=008B2351BE9FD66D38B11050679734F44FA5D97D Certificate serial: B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AIsjUb6f1m04sRBQZ5c09E-l2X0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B0D8/07AABCDAFB1111EE9123391BC4F9AE02/AIsjUb6f1m04sRBQZ5c09E-l2X0.mft Manifest number: B7 Signing time: Mon 07 Apr 2025 04:49:44 +0000 Manifest this update: Mon 07 Apr 2025 04:49:43 +0000 Manifest next update: Mon 14 Apr 2025 04:49:43 +0000 Files and hashes: 1: AIsjUb6f1m04sRBQZ5c09E-l2X0.crl (hash: jNeCIZqaO2t5LDoPo+/BU7O4YLhiWlfVMxMTv3pxRvY=) 2: 66E93DA2FB1111EE81D7643BC4F9AE02.roa (hash: I6DRhaPjg94iaLUIAJP5juEv1Um/2EjAWiSx5qBJKPs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B0D8/07AABCDAFB1111EE9123391BC4F9AE02/AIsjUb6f1m04sRBQZ5c09E-l2X0.crl rsync://rpki.apnic.net/member_repository/A914B0D8/07AABCDAFB1111EE9123391BC4F9AE02/AIsjUb6f1m04sRBQZ5c09E-l2X0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AIsjUb6f1m04sRBQZ5c09E-l2X0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Apr 2025 04:49:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 185 (0xb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B0D8 Validity Not Before: Apr 7 04:49:43 2025 GMT Not After : Apr 14 04:49:43 2025 GMT Subject: CN=67f35968-e897 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:33:0d:7b:36:d8:36:63:86:78:b6:93:06:2f: 92:4e:6f:76:8a:1f:e2:2b:2e:d8:7d:da:5c:aa:ef: da:f8:3f:a9:33:58:a8:e4:e8:ff:86:99:46:a9:37: 37:6f:3e:65:2b:ed:bc:94:4c:df:25:6b:7e:fc:f0: a0:4a:c3:4f:e0:a8:6f:96:90:54:f5:69:a8:4b:9a: fd:e8:51:3a:12:3e:df:f0:47:85:bd:4e:11:28:2c: df:14:b5:8e:a9:67:de:c1:aa:2d:85:19:df:97:fe: 4a:b0:be:35:a7:0e:61:ce:bb:f5:68:c9:80:7d:c9: 01:94:3f:70:5c:60:91:b7:c5:40:cf:98:76:b9:ea: 0c:67:7f:71:56:32:71:75:b2:3a:39:bd:2b:9e:64: ca:93:49:04:a4:16:23:23:21:32:b9:f8:42:2e:5b: 02:dd:11:6b:cf:8b:55:6b:41:96:c2:dc:5f:9d:de: dd:1d:e2:a0:a2:3b:a0:69:16:5d:35:8c:aa:5b:54: 02:7f:92:2c:7f:84:1a:7f:7f:2f:e5:9e:c6:8a:ef: 21:ae:72:30:08:f8:c1:35:12:b0:70:af:56:83:29: 09:81:55:64:58:13:30:fe:df:99:90:6a:6a:06:31: 4b:83:be:d0:94:64:16:15:ba:0e:bc:26:aa:75:28: 05:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:81:8C:9D:E5:12:A4:53:61:B6:67:1E:59:BA:40:21:41:9F:10:FE X509v3 Authority Key Identifier: keyid:00:8B:23:51:BE:9F:D6:6D:38:B1:10:50:67:97:34:F4:4F:A5:D9:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B0D8/07AABCDAFB1111EE9123391BC4F9AE02/AIsjUb6f1m04sRBQZ5c09E-l2X0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AIsjUb6f1m04sRBQZ5c09E-l2X0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B0D8/07AABCDAFB1111EE9123391BC4F9AE02/AIsjUb6f1m04sRBQZ5c09E-l2X0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:1c:f4:25:a0:e6:bb:c1:0f:35:ab:53:17:3d:c2:e2:79:80: f7:0d:e5:2a:cb:9f:c7:a0:37:9a:c7:30:ec:9c:94:72:ca:59: 38:33:47:34:42:c2:0a:12:04:5f:18:0a:62:27:7d:22:9c:cd: c5:66:61:ec:79:35:f2:c4:4c:b5:54:39:ff:de:79:9f:f9:a5: 64:02:9e:a2:2a:22:c1:ad:8f:cb:6a:7b:d7:67:70:60:92:24: 9d:ad:28:de:41:fc:e4:16:80:7e:64:a9:de:7d:b3:03:d4:7c: 54:50:6d:57:12:e0:0b:ec:af:22:8c:e1:29:4a:63:d1:94:5c: 84:28:fb:32:99:f4:b8:25:aa:76:d1:e9:db:03:f0:80:eb:9b: 8c:55:35:0f:13:38:47:db:a5:63:ae:7a:c1:b5:95:ac:98:81: a0:49:92:0c:87:15:1a:79:46:68:b9:48:79:4f:bc:a3:cb:25: f9:f8:c5:a2:ca:7e:18:81:db:b5:6f:7c:aa:11:60:0b:f9:6b: cd:c6:27:2f:49:5a:b1:bb:53:f3:75:51:63:1b:36:1b:5d:c1: 32:df:35:f6:8c:9a:73:4e:2c:9d:94:a0:f0:81:a7:9a:66:a3: f1:12:a5:63:ed:c3:81:d0:20:c1:12:9f:c8:81:77:d4:c2:ff: cf:3d:87:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEIwRDgxMTAvBgNVBAUTKDAwOEIyMzUxQkU5RkQ2NkQzOEIxMTA1MDY3OTczNEY0 NEZBNUQ5N0QwHhcNMjUwNDA3MDQ0OTQzWhcNMjUwNDE0MDQ0OTQzWjAYMRYwFAYD VQQDEw02N2YzNTk2OC1lODk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5TMNezbYNmOGeLaTBi+STm92ih/iKy7Yfdpcqu/a+D+pM1io5Oj/hplGqTc3 bz5lK+28lEzfJWt+/PCgSsNP4KhvlpBU9WmoS5r96FE6Ej7f8EeFvU4RKCzfFLWO qWfewaothRnfl/5KsL41pw5hzrv1aMmAfckBlD9wXGCRt8VAz5h2ueoMZ39xVjJx dbI6Ob0rnmTKk0kEpBYjIyEyufhCLlsC3RFrz4tVa0GWwtxfnd7dHeKgojugaRZd NYyqW1QCf5Isf4Qaf38v5Z7Giu8hrnIwCPjBNRKwcK9WgykJgVVkWBMw/t+ZkGpq BjFLg77QlGQWFboOvCaqdSgFYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIOBjJ3l EqRTYbZnHlm6QCFBnxD+MB8GA1UdIwQYMBaAFACLI1G+n9ZtOLEQUGeXNPRPpdl9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjBEOC8wN0FBQkNEQUZC MTExMUVFOTEyMzM5MUJDNEY5QUUwMi9BSXNqVWI2ZjFtMDRzUkJRWjVjMDlFLWwy WDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FJc2pVYjZmMW0wNHNSQlFaNWMwOUUtbDJYMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjBEOC8wN0FBQkNEQUZCMTExMUVFOTEyMzM5MUJDNEY5QUUwMi9BSXNqVWI2ZjFt MDRzUkJRWjVjMDlFLWwyWDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXHPQloOa7wQ81q1MXPcLieYD3DeUqy5/HoDeaxzDsnJRyylk4M0c0 QsIKEgRfGApiJ30inM3FZmHseTXyxEy1VDn/3nmf+aVkAp6iKiLBrY/LanvXZ3Bg kiSdrSjeQfzkFoB+ZKnefbMD1HxUUG1XEuAL7K8ijOEpSmPRlFyEKPsymfS4Jap2 0enbA/CA65uMVTUPEzhH26VjrnrBtZWsmIGgSZIMhxUaeUZouUh5T7yjyyX5+MWi yn4Ygdu1b3yqEWAL+WvNxicvSVqxu1PzdVFjGzYbXcEy3zX2jJpzTiydlKDwgaea ZqPxEqVj7cOB0CDBEp/IgXfUwv/PPYfp -----END CERTIFICATE-----Generated at Tue Apr 8 15:01:33 2025 by rpki-client