$ rpki-client -vvf rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft File: Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft (raw, json) Hash identifier: beuITilUhn/8ukicbDbBM2ivf+aXZPCHyV2y6MDnWeg= Subject key identifier: 85:3E:FD:EE:37:37:4A:A4:BF:69:09:2D:5A:40:45:B1:2B:4F:F9:EF Authority key identifier: 02:AE:84:F6:11:B7:E8:2F:D7:D6:FF:8F:45:2D:87:25:EF:48:90:88 Certificate issuer: /CN=A91642A0/serialNumber=02AE84F611B7E82FD7D6FF8F452D8725EF489088 Certificate serial: 0CB3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aq6E9hG36C_X1v-PRS2HJe9IkIg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft Manifest number: 0C8E Signing time: Fri 04 Apr 2025 18:22:06 +0000 Manifest this update: Fri 04 Apr 2025 18:22:05 +0000 Manifest next update: Fri 11 Apr 2025 18:22:05 +0000 Files and hashes: 1: Aq6E9hG36C_X1v-PRS2HJe9IkIg.crl (hash: 5m/oYvFmkKjJWakluvg0rnll+nV1+6YpsE0ubj1PA0Y=) 2: B0B70006B19211EC9EAAD44EC4F9AE02.roa (hash: i853W0E/Chff6sq6i5MGm8h4afp0uwHZH5nrhPAd2hQ=) 3: AFB0FFCCB19211EC9EAAD44EC4F9AE02.roa (hash: LopWOlrdi+KR3zv5rk9gA4cot01KZERzAUu2r2vV8is=) 4: 0EF0E842839E11EEA1892A12C4F9AE02.roa (hash: /52qTFp6aiRpt+ltl9ngfv+TFAUotZNWt2Dzg7OlohE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.crl rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aq6E9hG36C_X1v-PRS2HJe9IkIg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 18:22:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3251 (0xcb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91642A0 Validity Not Before: Apr 4 18:22:05 2025 GMT Not After : Apr 11 18:22:05 2025 GMT Subject: CN=67f0234e-585c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:67:40:dd:fd:da:91:37:64:a9:70:a8:aa:91: 3e:3c:35:3a:52:57:23:24:57:91:8d:f4:32:84:6c: a9:7f:1c:1a:dc:42:0e:79:a8:5c:4c:b5:f3:6f:d8: 4e:3b:2c:ec:b7:aa:c9:37:24:af:66:f7:47:a4:87: 4c:d0:d6:b0:1f:fc:05:57:ee:6f:99:14:7d:7f:91: 7d:55:ae:b1:af:e4:74:fc:fb:5a:3d:dc:4e:38:22: 3d:95:d5:80:bb:ac:16:63:13:b4:34:ed:c4:ce:3a: ae:3f:97:1e:18:a0:54:29:28:07:8d:85:66:57:6b: 8b:ee:47:22:eb:fb:a7:dc:7c:21:09:f2:f1:d2:c0: 2c:98:37:b0:d0:c0:88:a0:b0:44:ea:ef:b8:3b:f3: c9:a2:a7:1f:b1:c4:90:41:b5:98:f3:a1:3f:57:d9: 46:f0:2c:07:b8:04:a6:34:f0:7f:c9:a3:e6:86:43: 95:5c:ec:0e:67:77:04:50:87:b0:48:ca:23:e8:72: df:33:a1:0c:ff:42:a5:1a:d7:b3:5c:b3:da:d0:c3: 95:53:1e:2b:f5:7c:fe:a3:a8:d6:11:58:0c:90:b1: be:ae:d4:a2:e4:40:b0:0d:94:26:c0:e9:70:0e:46: cc:0c:9a:8f:9d:13:cf:f9:0b:c1:54:aa:70:ac:a7: 41:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:3E:FD:EE:37:37:4A:A4:BF:69:09:2D:5A:40:45:B1:2B:4F:F9:EF X509v3 Authority Key Identifier: keyid:02:AE:84:F6:11:B7:E8:2F:D7:D6:FF:8F:45:2D:87:25:EF:48:90:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aq6E9hG36C_X1v-PRS2HJe9IkIg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:31:fa:c2:01:f3:a3:7b:a7:f4:76:ec:55:de:94:72:55:a1: e1:b0:36:43:22:c7:37:db:5b:0b:91:e4:f2:47:a4:4f:b5:4b: 53:e8:af:75:67:07:43:0e:e2:3f:48:24:9b:90:ba:ac:a2:fd: 8f:d4:7c:5c:52:c6:00:31:c1:ca:cb:fc:c7:6e:a7:cd:70:52: 99:48:2b:61:94:5c:76:e9:c1:42:28:12:86:5f:c3:3e:42:2c: e8:7a:68:5a:2f:0d:a9:00:3d:3e:a0:f3:72:8b:4d:62:3a:20: 9e:26:3a:44:41:af:c2:53:93:e8:cc:73:50:5d:ff:fc:f0:5b: 8f:70:95:6c:aa:61:ef:56:1b:64:9b:0d:8a:ed:2b:b0:31:8f: c3:98:69:32:a1:44:d0:29:84:bf:bb:d5:89:d1:b8:69:70:53: fc:0a:7c:e4:13:3b:1a:9a:ba:98:a7:1c:8b:8b:ad:eb:2b:20: fa:1d:55:50:4c:cd:85:f6:93:7e:49:4b:65:7e:e8:81:b7:f4: 2e:47:b1:15:a4:43:18:b3:14:e3:b0:09:30:d7:ae:f7:30:ea: e5:f1:03:03:e4:43:ac:82:ad:e6:96:f3:13:fe:9e:f4:7b:73: ba:b2:b0:0d:0a:ee:c0:d9:eb:a5:e3:f2:a8:fd:91:f3:4c:4f: e2:af:40:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQyQTAxMTAvBgNVBAUTKDAyQUU4NEY2MTFCN0U4MkZEN0Q2RkY4RjQ1MkQ4NzI1 RUY0ODkwODgwHhcNMjUwNDA0MTgyMjA1WhcNMjUwNDExMTgyMjA1WjAYMRYwFAYD VQQDEw02N2YwMjM0ZS01ODVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxmdA3f3akTdkqXCoqpE+PDU6UlcjJFeRjfQyhGypfxwa3EIOeahcTLXzb9hO Oyzst6rJNySvZvdHpIdM0NawH/wFV+5vmRR9f5F9Va6xr+R0/PtaPdxOOCI9ldWA u6wWYxO0NO3EzjquP5ceGKBUKSgHjYVmV2uL7kci6/un3HwhCfLx0sAsmDew0MCI oLBE6u+4O/PJoqcfscSQQbWY86E/V9lG8CwHuASmNPB/yaPmhkOVXOwOZ3cEUIew SMoj6HLfM6EM/0KlGtezXLPa0MOVUx4r9Xz+o6jWEVgMkLG+rtSi5ECwDZQmwOlw DkbMDJqPnRPP+QvBVKpwrKdBIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIU+/e43 N0qkv2kJLVpARbErT/nvMB8GA1UdIwQYMBaAFAKuhPYRt+gv19b/j0UthyXvSJCI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDJBMC9DQTdEMTE2MkY2 NzYxMUU5OTBCQUEyMjJDNEY5QUUwMi9BcTZFOWhHMzZDX1gxdi1QUlMySEplOUlr SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FxNkU5aEczNkNfWDF2LVBSUzJISmU5SWtJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDJBMC9DQTdEMTE2MkY2NzYxMUU5OTBCQUEyMjJDNEY5QUUwMi9BcTZFOWhHMzZD X1gxdi1QUlMySEplOUlrSWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/MfrCAfOje6f0duxV3pRyVaHhsDZDIsc321sLkeTyR6RPtUtT6K91 ZwdDDuI/SCSbkLqsov2P1HxcUsYAMcHKy/zHbqfNcFKZSCthlFx26cFCKBKGX8M+ QizoemhaLw2pAD0+oPNyi01iOiCeJjpEQa/CU5PozHNQXf/88FuPcJVsqmHvVhtk mw2K7SuwMY/DmGkyoUTQKYS/u9WJ0bhpcFP8CnzkEzsamrqYpxyLi63rKyD6HVVQ TM2F9pN+SUtlfuiBt/QuR7EVpEMYsxTjsAkw1673MOrl8QMD5EOsgq3mlvMT/p70 e3O6srANCu7A2eul4/Ko/ZHzTE/ir0BQ -----END CERTIFICATE-----Generated at Sat Apr 5 16:22:58 2025 by rpki-client