$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft File: AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft (raw, json) Hash identifier: N7FQqjn/tKLQLw8PD4kte3gE/CkX2hOc6Ao+4pQP4Lo= Subject key identifier: FA:26:B5:FB:8D:12:32:7A:EA:33:41:68:E1:62:50:44:3E:5F:24:03 Authority key identifier: 03:3B:31:1D:75:8F:04:34:0A:23:FB:08:16:75:95:1C:25:0E:80:78 Certificate issuer: /CN=A91E6EFE/serialNumber=033B311D758F04340A23FB081675951C250E8078 Certificate serial: 01C0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AzsxHXWPBDQKI_sIFnWVHCUOgHg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft Manifest number: 01BD Signing time: Wed 09 Apr 2025 02:04:10 +0000 Manifest this update: Wed 09 Apr 2025 02:04:10 +0000 Manifest next update: Wed 16 Apr 2025 02:04:10 +0000 Files and hashes: 1: AzsxHXWPBDQKI_sIFnWVHCUOgHg.crl (hash: EwsKKznrq72iWB2vAJWloJuw2V0FP6qFWs8J/2fDUZM=) 2: 250320C4761511EDA05B8A63C4F9AE02.roa (hash: oOi07nx+dcH2HXRplm35uVqX6ArK1VrfAwaOgSa1yfI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.crl rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AzsxHXWPBDQKI_sIFnWVHCUOgHg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 02:04:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 448 (0x1c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6EFE Validity Not Before: Apr 9 02:04:10 2025 GMT Not After : Apr 16 02:04:10 2025 GMT Subject: CN=67f5d59a-3309 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a8:e7:bf:36:6b:bf:1a:3f:cb:b3:22:2c:a4: 2f:8f:c5:5d:a1:00:e1:ca:00:63:e9:8a:30:4c:ea: c7:ef:15:a1:77:08:c0:fe:e4:72:09:f4:7c:b2:9f: c0:81:d3:9d:77:ff:d1:eb:89:ea:a3:f0:49:91:09: 56:bf:0e:8a:22:03:cd:c3:17:18:36:47:66:0e:f9: d3:f5:67:a4:7e:e6:24:4d:de:69:65:12:5a:57:25: 1b:58:bb:22:4c:4a:ea:e0:8a:23:a9:99:9e:cd:10: 1b:70:f8:af:d5:ce:9a:24:4c:d3:e6:ab:20:0e:c3: bd:b3:93:c1:b7:26:6f:71:3f:a9:00:ae:17:2d:2e: a3:dd:6e:0e:2b:d1:55:63:4f:e9:a2:e9:c8:0f:de: 74:63:59:dc:a2:c7:86:44:c0:0a:4a:ca:82:35:c5: a0:8a:78:a3:90:49:84:d5:c9:71:af:d9:d9:cd:55: f4:22:8f:ea:3f:c4:5f:91:dd:3a:52:40:a3:9f:81: bb:c6:ca:5e:f0:b1:74:0a:40:82:bf:57:57:5d:78: c8:92:32:30:ee:9a:5e:53:b5:43:f3:e7:1f:68:e6: 10:aa:51:87:ca:e6:e3:d1:2d:01:7a:f1:5c:29:41: 43:7f:2e:77:80:aa:56:a5:b8:07:b7:12:47:d4:aa: 02:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:26:B5:FB:8D:12:32:7A:EA:33:41:68:E1:62:50:44:3E:5F:24:03 X509v3 Authority Key Identifier: keyid:03:3B:31:1D:75:8F:04:34:0A:23:FB:08:16:75:95:1C:25:0E:80:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AzsxHXWPBDQKI_sIFnWVHCUOgHg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:f1:a8:9f:7d:37:4a:cc:60:d8:91:aa:7b:5b:64:f5:17:64: c2:04:ef:36:0c:19:dc:90:70:9f:e6:b9:c0:07:4c:b7:59:62: f2:c0:d4:e1:f7:ea:44:fc:3b:f7:b9:60:06:fb:9f:01:3c:0e: be:fd:0f:95:1f:37:69:1d:a4:ce:a4:8d:81:50:2a:0a:9f:14: c4:40:19:ef:20:c1:0d:8a:89:07:17:cf:c9:33:c4:9d:8d:4f: 7e:e1:10:01:de:5e:f5:65:27:b6:93:d0:a2:11:b1:38:69:c7: ad:32:70:44:aa:55:91:ad:e0:32:c3:93:77:79:f1:21:85:08: 50:d9:b8:22:98:b8:f4:27:d4:f6:b3:7a:2b:42:4b:1c:29:8d: 67:32:24:c7:e6:26:6a:f6:5a:3d:69:54:8b:8c:28:47:95:8a: 21:bb:0f:1a:91:16:52:46:8e:ff:c9:48:1d:36:76:ba:f2:31: b1:80:1f:fc:95:5f:88:98:fc:ca:8b:70:80:8a:15:f1:a5:60: 0d:d5:de:48:63:80:ce:74:0f:f1:47:1d:c9:af:ce:9d:ff:1b: c0:15:69:ac:cd:d8:08:ba:4d:0d:86:e8:db:98:92:48:c9:a9: f1:07:a3:a0:04:3e:08:f0:c6:93:f2:cd:28:1b:68:53:8a:cd: 8b:3e:0c:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZFRkUxMTAvBgNVBAUTKDAzM0IzMTFENzU4RjA0MzQwQTIzRkIwODE2NzU5NTFD MjUwRTgwNzgwHhcNMjUwNDA5MDIwNDEwWhcNMjUwNDE2MDIwNDEwWjAYMRYwFAYD VQQDEw02N2Y1ZDU5YS0zMzA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwKjnvzZrvxo/y7MiLKQvj8VdoQDhygBj6YowTOrH7xWhdwjA/uRyCfR8sp/A gdOdd//R64nqo/BJkQlWvw6KIgPNwxcYNkdmDvnT9WekfuYkTd5pZRJaVyUbWLsi TErq4IojqZmezRAbcPiv1c6aJEzT5qsgDsO9s5PBtyZvcT+pAK4XLS6j3W4OK9FV Y0/pounID950Y1ncoseGRMAKSsqCNcWginijkEmE1clxr9nZzVX0Io/qP8Rfkd06 UkCjn4G7xspe8LF0CkCCv1dXXXjIkjIw7ppeU7VD8+cfaOYQqlGHyubj0S0BevFc KUFDfy53gKpWpbgHtxJH1KoCtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPomtfuN EjJ66jNBaOFiUEQ+XyQDMB8GA1UdIwQYMBaAFAM7MR11jwQ0CiP7CBZ1lRwlDoB4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkVGRS9EQTRBNDNDMjZD QTExMUVEQjQ0RTc2NUJDNEY5QUUwMi9BenN4SFhXUEJEUUtJX3NJRm5XVkhDVU9n SGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0F6c3hIWFdQQkRRS0lfc0lGbldWSENVT2dIZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkVGRS9EQTRBNDNDMjZDQTExMUVEQjQ0RTc2NUJDNEY5QUUwMi9BenN4SFhXUEJE UUtJX3NJRm5XVkhDVU9nSGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA78aiffTdKzGDYkap7W2T1F2TCBO82DBnckHCf5rnAB0y3WWLywNTh 9+pE/Dv3uWAG+58BPA6+/Q+VHzdpHaTOpI2BUCoKnxTEQBnvIMENiokHF8/JM8Sd jU9+4RAB3l71ZSe2k9CiEbE4acetMnBEqlWRreAyw5N3efEhhQhQ2bgimLj0J9T2 s3orQkscKY1nMiTH5iZq9lo9aVSLjChHlYohuw8akRZSRo7/yUgdNna68jGxgB/8 lV+ImPzKi3CAihXxpWAN1d5IY4DOdA/xRx3Jr86d/xvAFWmszdgIuk0NhujbmJJI yanxB6OgBD4I8MaT8s0oG2hTis2LPgwx -----END CERTIFICATE-----Generated at Thu Apr 10 07:47:49 2025 by rpki-client