$ rpki-client -vvf rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft File: awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft (raw, json) Hash identifier: kPzkQ29A1/6T0+cV6Kc28Ve3gNRgcLRSLlxG/TfYIrU= Subject key identifier: 62:68:3C:59:F8:B1:62:73:F5:80:BF:CF:9F:55:75:48:8B:55:94:84 Authority key identifier: 6B:0C:B5:95:03:DA:89:5F:F9:42:69:D7:A9:BC:20:26:17:04:DC:E9 Certificate issuer: /CN=A91A45E0/serialNumber=6B0CB59503DA895FF94269D7A9BC20261704DCE9 Certificate serial: 0C1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/awy1lQPaiV_5QmnXqbwgJhcE3Ok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft Manifest number: 0BFD Signing time: Fri 04 Apr 2025 18:51:51 +0000 Manifest this update: Fri 04 Apr 2025 18:51:51 +0000 Manifest next update: Fri 11 Apr 2025 18:51:51 +0000 Files and hashes: 1: awy1lQPaiV_5QmnXqbwgJhcE3Ok.crl (hash: xBUoFOVtNaLzpMyCiwCfeMzkD5Yk3Tb7gSnf+i1B4FE=) 2: 1ECA8050696211EC8A05D115C4F9AE02.roa (hash: TDJGQsW2NIk73+noi3yai+lnEcUS65iyjDduaFF8MsU=) 3: 7A0359125C0E11ECA36CBF0FC4F9AE02.roa (hash: o+CZ7fn0neERiRGT74H4pMCJhxb2efrn1ZqyAv5eZQ0=) 4: DF1E2FEA97D611EB8BEF8223C4F9AE02.roa (hash: +Z1f48sI1Kz7JI6qJ55JG0SRXt9VC0MvWpOU7eCKqS8=) 5: 884C5FB8E60411EFBF5A7957C4F9AE02.roa (hash: lJpIF/DoFI3JvxRyvCQySFIPNE83lEmMNZBRdgQLMfI=) 6: 84CFF0D6D2F311EEAFCF3273C4F9AE02.roa (hash: lwAwrTafRErL3moVwMNPzUjYlQsMQhM9S9kLt9SAVBg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.crl rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/awy1lQPaiV_5QmnXqbwgJhcE3Ok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 18:51:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3103 (0xc1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A45E0 Validity Not Before: Apr 4 18:51:51 2025 GMT Not After : Apr 11 18:51:51 2025 GMT Subject: CN=67f02a47-e4f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:2f:5a:ff:7f:af:62:cb:a0:24:32:42:0a:0a: cb:72:63:9e:65:11:d4:b0:0b:3c:da:76:63:b5:d2: c6:7c:88:2b:6e:5d:c7:23:74:c1:18:46:0e:9c:aa: fe:3f:4c:b7:95:f9:76:f1:d0:9b:df:9e:ec:da:4c: 99:89:07:4f:d4:5a:d2:5e:bc:12:a7:b4:ed:8d:86: 04:3f:27:09:2d:2e:01:40:88:42:83:3a:40:0a:d9: 24:14:e5:4a:a3:65:13:9d:f3:45:4e:02:a8:3c:4e: 18:71:25:42:c9:03:61:63:05:9f:de:32:1c:78:61: 12:00:a5:18:4d:16:6d:86:70:f6:9c:b3:42:37:44: d4:e3:61:c9:61:df:48:87:28:6a:61:3e:0e:c9:50: 93:ae:60:dc:67:40:06:70:19:ca:17:41:f4:91:99: 3e:5f:78:05:01:23:af:7f:fb:79:d6:f6:cb:fe:23: 7e:d2:e6:cb:9e:d0:41:84:16:ee:1a:a0:b0:08:01: 26:89:e2:09:ee:5c:bb:04:8d:ae:90:8f:5f:5d:af: 11:79:f0:8e:e4:65:e4:db:ce:93:f2:f6:b9:e3:03: df:ab:85:52:81:3a:4e:6b:90:54:31:04:4c:33:cd: ec:23:c5:af:ce:69:23:82:1e:f6:ff:23:27:73:44: e5:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:68:3C:59:F8:B1:62:73:F5:80:BF:CF:9F:55:75:48:8B:55:94:84 X509v3 Authority Key Identifier: keyid:6B:0C:B5:95:03:DA:89:5F:F9:42:69:D7:A9:BC:20:26:17:04:DC:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/awy1lQPaiV_5QmnXqbwgJhcE3Ok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:1d:99:3e:8f:44:40:41:e1:ca:bc:df:af:57:b9:18:dd:8a: c4:e3:fa:25:be:81:55:36:1e:ac:a0:43:c5:f9:75:3d:77:67: 0f:81:16:80:5e:1e:68:44:0d:7e:24:6c:ac:22:ff:62:53:be: 14:c1:9a:92:37:30:0a:9b:9d:7a:65:cb:52:62:ea:30:99:fa: 49:e3:1b:29:ea:d7:c5:1e:48:95:0f:4e:9a:ea:c1:9d:ed:59: 7d:30:4a:1e:bb:2c:c4:71:49:fa:6d:ed:bc:24:8c:c4:29:13: 54:91:6f:55:ab:f6:f2:e9:19:3d:d0:00:9e:89:57:44:91:14: a3:99:ba:b9:c1:dd:4b:05:bd:34:d8:23:62:65:39:b9:eb:19: 06:44:9b:71:55:17:d4:25:ff:5a:70:9f:98:23:1c:b6:31:33: 01:aa:42:b5:68:7b:c7:08:78:b3:77:00:a0:62:8e:9f:8b:44: 2d:93:a3:7c:e3:e7:8a:d8:c4:7e:d1:35:82:34:4a:88:81:52: 73:1d:5d:03:89:8f:e0:b8:8b:6e:6d:9f:5b:f5:61:5b:e2:ea: 82:f5:32:56:3a:06:9c:8f:c7:38:bf:92:74:ac:40:8e:8f:3e: 40:1d:96:da:79:84:82:bf:f0:7b:27:55:c4:59:dc:e7:37:a5: a7:0d:9d:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDB8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ1RTAxMTAvBgNVBAUTKDZCMENCNTk1MDNEQTg5NUZGOTQyNjlEN0E5QkMyMDI2 MTcwNERDRTkwHhcNMjUwNDA0MTg1MTUxWhcNMjUwNDExMTg1MTUxWjAYMRYwFAYD VQQDEw02N2YwMmE0Ny1lNGY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApi9a/3+vYsugJDJCCgrLcmOeZRHUsAs82nZjtdLGfIgrbl3HI3TBGEYOnKr+ P0y3lfl28dCb357s2kyZiQdP1FrSXrwSp7TtjYYEPycJLS4BQIhCgzpACtkkFOVK o2UTnfNFTgKoPE4YcSVCyQNhYwWf3jIceGESAKUYTRZthnD2nLNCN0TU42HJYd9I hyhqYT4OyVCTrmDcZ0AGcBnKF0H0kZk+X3gFASOvf/t51vbL/iN+0ubLntBBhBbu GqCwCAEmieIJ7ly7BI2ukI9fXa8RefCO5GXk286T8va54wPfq4VSgTpOa5BUMQRM M83sI8Wvzmkjgh72/yMnc0Tl3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGJoPFn4 sWJz9YC/z59VdUiLVZSEMB8GA1UdIwQYMBaAFGsMtZUD2olf+UJp16m8ICYXBNzp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDVFMC8yM0JGMkYyNjEx M0UxMUVBODhFODc4NzZDNEY5QUUwMi9hd3kxbFFQYWlWXzVRbW5YcWJ3Z0poY0Uz T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2F3eTFsUVBhaVZfNVFtblhxYndnSmhjRTNPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDVFMC8yM0JGMkYyNjExM0UxMUVBODhFODc4NzZDNEY5QUUwMi9hd3kxbFFQYWlW XzVRbW5YcWJ3Z0poY0UzT2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmHZk+j0RAQeHKvN+vV7kY3YrE4/olvoFVNh6soEPF+XU9d2cPgRaA Xh5oRA1+JGysIv9iU74UwZqSNzAKm516ZctSYuowmfpJ4xsp6tfFHkiVD06a6sGd 7Vl9MEoeuyzEcUn6be28JIzEKRNUkW9Vq/by6Rk90ACeiVdEkRSjmbq5wd1LBb00 2CNiZTm56xkGRJtxVRfUJf9acJ+YIxy2MTMBqkK1aHvHCHizdwCgYo6fi0Qtk6N8 4+eK2MR+0TWCNEqIgVJzHV0DiY/guItubZ9b9WFb4uqC9TJWOgacj8c4v5J0rECO jz5AHZbaeYSCv/B7J1XEWdznN6WnDZ0D -----END CERTIFICATE-----Generated at Fri Apr 4 22:37:02 2025 by rpki-client