$ rpki-client -vvf rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.mft File: AZgxEf1vCyfiQEY7aKehmEXHuwo.mft (raw, json) Hash identifier: GYgFIYBOeJ/2kkj06HAHTMpQFm1A50KYLJexXTFU1ck= Subject key identifier: FD:80:23:C4:E4:66:E6:3D:74:73:DB:BE:53:50:79:BD:36:47:F9:49 Authority key identifier: 01:98:31:11:FD:6F:0B:27:E2:40:46:3B:68:A7:A1:98:45:C7:BB:0A Certificate issuer: /CN=A91513B0/serialNumber=01983111FD6F0B27E240463B68A7A19845C7BB0A Certificate serial: 04F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZgxEf1vCyfiQEY7aKehmEXHuwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.mft Manifest number: 04E2 Signing time: Thu 10 Apr 2025 23:43:55 +0000 Manifest this update: Thu 10 Apr 2025 23:43:54 +0000 Manifest next update: Thu 17 Apr 2025 23:43:54 +0000 Files and hashes: 1: AZgxEf1vCyfiQEY7aKehmEXHuwo.crl (hash: sWR8UuT5m49qUtJUjk2h/oZwWe49ZuU3v2KCTaZW7/4=) 2: 4FE459C8B97211EFA7B7E47DC4F9AE02.roa (hash: m7WV1VKI7ClZpgbpWthM6Ip2WNf7bXuqABVjburQENc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.crl rsync://rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZgxEf1vCyfiQEY7aKehmEXHuwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 23:43:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1264 (0x4f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91513B0, serialNumber=01983111FD6F0B27E240463B68A7A19845C7BB0A Validity Not Before: Apr 10 23:43:54 2025 GMT Not After : Apr 17 23:43:54 2025 GMT Subject: CN=67f857bb-56a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e0:ed:8d:8c:de:68:68:96:56:3d:ae:07:c5: ad:6e:06:ac:91:02:da:52:35:30:1c:6c:c0:43:2e: 1c:7b:2d:f7:52:b5:56:e2:7f:49:29:49:49:45:56: 82:48:4e:32:d1:fa:0c:70:cd:db:22:47:bc:8e:a7: 19:53:06:68:e3:95:57:53:c5:a3:05:8e:97:ff:04: fa:13:81:e8:21:73:1c:a1:25:8d:75:90:c2:65:fa: ef:2b:ad:b6:1b:1c:64:f9:60:32:56:f0:81:05:38: 86:26:d7:92:c5:6a:4a:d6:6c:d3:a8:00:e7:a6:31: 94:23:6c:98:20:eb:aa:b0:ba:7a:b8:51:30:67:26: 27:f1:4b:c4:27:f9:cf:06:f6:1e:c7:4c:ac:23:52: 17:7c:85:80:6e:be:ae:7d:6a:d2:58:fa:e2:a6:3a: 7f:60:1e:5b:f3:49:44:7b:11:2f:08:8c:fc:57:e0: 34:70:95:7c:a9:0f:67:f5:71:12:b9:3f:f1:4a:f0: 82:b1:9a:77:d1:b2:33:9d:c6:c3:fc:60:fb:e4:9a: 5b:48:6c:f0:63:ac:cc:95:64:5f:83:a8:7b:38:38: 12:7d:30:fe:e5:93:a9:b6:c4:37:89:7b:f4:02:f6: 05:59:54:7f:98:cb:e2:d7:bc:c8:72:24:d5:3b:2a: 50:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:80:23:C4:E4:66:E6:3D:74:73:DB:BE:53:50:79:BD:36:47:F9:49 X509v3 Authority Key Identifier: keyid:01:98:31:11:FD:6F:0B:27:E2:40:46:3B:68:A7:A1:98:45:C7:BB:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZgxEf1vCyfiQEY7aKehmEXHuwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:94:3f:8a:fd:b5:51:e2:8a:9a:41:22:62:a1:ef:39:d8:b4: 81:d1:6f:c0:e3:39:d7:85:c6:65:18:b6:07:e6:c8:9c:b9:77: 2f:3d:2f:16:3a:1e:51:20:6a:57:2d:a3:1e:0e:0f:37:9e:e7: 96:1c:b3:98:3d:10:0a:e3:40:ed:58:63:98:5c:40:d6:8a:9c: ae:ce:06:0c:83:8a:6f:d1:39:88:57:cf:e8:b0:95:71:40:e9: 43:eb:64:83:5f:73:3c:e6:69:f4:78:8c:b0:26:59:29:cd:6f: ad:41:19:46:c2:2d:ce:6d:1e:c6:fa:ff:2e:8c:3f:68:08:1c: 26:aa:6c:56:30:b4:27:38:49:11:d1:a2:db:03:cc:8a:d1:f8: 43:c3:a9:6c:df:bd:6e:dc:97:c8:59:d5:ed:84:4d:8f:3b:0f: f7:00:2d:a3:2e:64:3f:bf:55:70:46:92:e8:bc:3c:3c:96:1c: 13:dd:4a:8e:75:ac:cc:7f:73:d6:fd:2b:fb:1b:09:6a:2d:da: 9d:4a:7e:46:c7:55:48:53:a9:fd:28:19:22:07:49:f5:a1:ae: 3a:81:b8:d8:c4:ef:2d:8b:dd:20:af:34:f5:e3:a4:e3:b9:70: b6:fa:90:3c:01:22:97:d1:9c:b4:3d:93:54:5b:d5:08:8b:4f: b9:b5:92:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTEzQjAxMTAvBgNVBAUTKDAxOTgzMTExRkQ2RjBCMjdFMjQwNDYzQjY4QTdBMTk4 NDVDN0JCMEEwHhcNMjUwNDEwMjM0MzU0WhcNMjUwNDE3MjM0MzU0WjAYMRYwFAYD VQQDEw02N2Y4NTdiYi01NmEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2eDtjYzeaGiWVj2uB8WtbgaskQLaUjUwHGzAQy4cey33UrVW4n9JKUlJRVaC SE4y0foMcM3bIke8jqcZUwZo45VXU8WjBY6X/wT6E4HoIXMcoSWNdZDCZfrvK622 Gxxk+WAyVvCBBTiGJteSxWpK1mzTqADnpjGUI2yYIOuqsLp6uFEwZyYn8UvEJ/nP BvYex0ysI1IXfIWAbr6ufWrSWPripjp/YB5b80lEexEvCIz8V+A0cJV8qQ9n9XES uT/xSvCCsZp30bIzncbD/GD75JpbSGzwY6zMlWRfg6h7ODgSfTD+5ZOptsQ3iXv0 AvYFWVR/mMvi17zIciTVOypQ/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP2AI8Tk ZuY9dHPbvlNQeb02R/lJMB8GA1UdIwQYMBaAFAGYMRH9bwsn4kBGO2inoZhFx7sK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTNCMC8xMzhFMTQzMDE0 NEYxMUVDODkxN0QwMENDNEY5QUUwMi9BWmd4RWYxdkN5ZmlRRVk3YUtlaG1FWEh1 d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FaZ3hFZjF2Q3lmaVFFWTdhS2VobUVYSHV3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTNCMC8xMzhFMTQzMDE0NEYxMUVDODkxN0QwMENDNEY5QUUwMi9BWmd4RWYxdkN5 ZmlRRVk3YUtlaG1FWEh1d28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDlD+K/bVR4oqaQSJioe852LSB0W/A4znXhcZlGLYH5sicuXcvPS8W Oh5RIGpXLaMeDg83nueWHLOYPRAK40DtWGOYXEDWipyuzgYMg4pv0TmIV8/osJVx QOlD62SDX3M85mn0eIywJlkpzW+tQRlGwi3ObR7G+v8ujD9oCBwmqmxWMLQnOEkR 0aLbA8yK0fhDw6ls371u3JfIWdXthE2POw/3AC2jLmQ/v1VwRpLovDw8lhwT3UqO dazMf3PW/Sv7GwlqLdqdSn5Gx1VIU6n9KBkiB0n1oa46gbjYxO8ti90grzT146Tj uXC2+pA8ASKX0Zy0PZNUW9UIi0+5tZIc -----END CERTIFICATE-----Generated at Sat Apr 12 16:17:31 2025 by rpki-client