$ rpki-client -vvf rpki.apnic.net/member_repository/A9138271/81F9E2D01C4411EC9B2E6A5FC4F9AE02/AXJLovQFMrfgjXIPTAlmQbShyMQ.mft File: AXJLovQFMrfgjXIPTAlmQbShyMQ.mft (raw, json) Hash identifier: wCXOmAAHNFDnFLnVZQHbsXnYzktzeZ8exP3OTbWfENc= Subject key identifier: 1B:19:39:B9:67:97:82:67:0B:31:E5:01:BB:27:B4:EE:8C:6D:6F:6F Authority key identifier: 01:72:4B:A2:F4:05:32:B7:E0:8D:72:0F:4C:09:66:41:B4:A1:C8:C4 Certificate issuer: /CN=A9138271/serialNumber=01724BA2F40532B7E08D720F4C096641B4A1C8C4 Certificate serial: 04DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXJLovQFMrfgjXIPTAlmQbShyMQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138271/81F9E2D01C4411EC9B2E6A5FC4F9AE02/AXJLovQFMrfgjXIPTAlmQbShyMQ.mft Manifest number: 04DB Signing time: Fri 30 May 2025 23:58:03 +0000 Manifest this update: Fri 30 May 2025 23:58:02 +0000 Manifest next update: Fri 06 Jun 2025 23:58:02 +0000 Files and hashes: 1: AXJLovQFMrfgjXIPTAlmQbShyMQ.crl (hash: CLm8PiVlfCtrysKE4tWOXL/2WpGliFjHsVi8aIEC3hM=) 2: BD4D8A2C1C4811ECBAA21A3CC4F9AE02.roa (hash: ACAwTbWxAFnsJHmx19kYwRZ2kYaKIODFxQCzfuXITvo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138271/81F9E2D01C4411EC9B2E6A5FC4F9AE02/AXJLovQFMrfgjXIPTAlmQbShyMQ.crl rsync://rpki.apnic.net/member_repository/A9138271/81F9E2D01C4411EC9B2E6A5FC4F9AE02/AXJLovQFMrfgjXIPTAlmQbShyMQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXJLovQFMrfgjXIPTAlmQbShyMQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:58:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1247 (0x4df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138271, serialNumber=01724BA2F40532B7E08D720F4C096641B4A1C8C4 Validity Not Before: May 30 23:58:02 2025 GMT Not After : Jun 6 23:58:02 2025 GMT Subject: CN=683a460b-0c5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:92:fd:d2:fb:3c:bf:92:35:d9:eb:2e:fb:a3: b5:b2:2b:ed:4b:61:ed:9d:63:81:2e:ff:47:54:3d: ca:4d:51:ef:78:6d:bf:15:f0:95:0c:f2:57:3b:33: d9:3e:1a:c5:fe:09:12:e4:a3:eb:19:39:ad:a2:35: f7:37:e3:f8:bf:3b:1d:1f:63:a8:3e:f8:d9:38:db: f3:4e:21:26:ff:33:af:b5:ca:33:12:4f:72:b4:61: 52:97:0a:1d:e0:c3:f3:a6:05:f2:74:e9:b8:99:df: 18:be:ad:16:36:ea:1f:df:44:7b:27:9a:48:ee:fb: 00:94:c5:0b:a5:19:1c:0c:02:f9:d3:63:7d:38:25: 34:3d:20:4d:45:2f:0f:1a:dc:f9:e4:4d:c9:4b:6f: 48:89:df:a7:f1:56:3c:70:73:ae:fc:b2:23:52:14: de:e9:e4:e1:7b:36:90:58:a5:0f:20:de:5c:3c:19: e0:16:a3:47:a4:9d:40:bd:a5:62:ad:99:1f:6c:00: 95:f8:2f:59:22:6e:e5:1f:19:3a:12:a2:f1:12:cf: 3a:84:e0:00:66:2e:ee:2c:cd:03:f2:4a:30:fb:09: 70:6f:a3:bb:c0:1d:0d:fa:89:e8:24:1b:56:5c:ed: 3a:bc:48:36:71:78:fe:70:50:f9:44:78:6d:1c:fc: c2:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:19:39:B9:67:97:82:67:0B:31:E5:01:BB:27:B4:EE:8C:6D:6F:6F X509v3 Authority Key Identifier: keyid:01:72:4B:A2:F4:05:32:B7:E0:8D:72:0F:4C:09:66:41:B4:A1:C8:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138271/81F9E2D01C4411EC9B2E6A5FC4F9AE02/AXJLovQFMrfgjXIPTAlmQbShyMQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXJLovQFMrfgjXIPTAlmQbShyMQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138271/81F9E2D01C4411EC9B2E6A5FC4F9AE02/AXJLovQFMrfgjXIPTAlmQbShyMQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:c7:17:48:50:cb:c2:a2:02:8c:de:26:46:dc:e1:e8:1d:a7: 70:c0:c2:de:3b:c3:3b:9f:61:e0:c7:8b:8b:1a:2c:78:a8:85: c3:c6:27:ca:7a:04:fe:ad:75:ac:94:30:40:4a:c3:0c:b7:12: de:f1:ce:75:6d:eb:79:fa:80:b6:ec:d5:33:68:2f:5e:34:ea: 46:05:01:13:3c:b6:69:d7:bf:66:8f:1b:1b:e4:c6:a0:45:f5: a4:04:75:6d:9e:0b:cd:19:5d:cc:b8:08:dd:65:11:16:d8:50: 01:9f:05:3d:73:fa:63:d6:ef:16:c2:db:d2:cc:b3:a1:b9:77: 2e:50:2b:5a:40:88:2a:a8:3e:85:26:f1:03:12:26:1e:84:a1: 3c:18:45:d5:d4:8d:0a:88:07:71:3d:05:50:72:72:2d:18:c3: 37:59:0c:bd:b8:4b:43:6f:aa:20:45:31:8f:cc:19:55:54:f4: 1f:c4:87:96:ba:18:ca:73:7c:46:2e:a2:24:6e:7f:d0:a3:aa: 11:96:85:3e:00:2b:8b:de:d3:aa:25:81:81:5d:18:7a:b0:b0: cc:e8:b2:5f:d0:57:c7:16:b0:dc:6b:f0:ab:56:5e:a8:52:91: 23:24:0e:9e:85:0d:dd:ac:b6:f5:f9:47:17:cb:ba:4a:45:54: 01:fc:37:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgyNzExMTAvBgNVBAUTKDAxNzI0QkEyRjQwNTMyQjdFMDhENzIwRjRDMDk2NjQx QjRBMUM4QzQwHhcNMjUwNTMwMjM1ODAyWhcNMjUwNjA2MjM1ODAyWjAYMRYwFAYD VQQDEw02ODNhNDYwYi0wYzVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApZL90vs8v5I12esu+6O1sivtS2HtnWOBLv9HVD3KTVHveG2/FfCVDPJXOzPZ PhrF/gkS5KPrGTmtojX3N+P4vzsdH2OoPvjZONvzTiEm/zOvtcozEk9ytGFSlwod 4MPzpgXydOm4md8Yvq0WNuof30R7J5pI7vsAlMULpRkcDAL502N9OCU0PSBNRS8P Gtz55E3JS29Iid+n8VY8cHOu/LIjUhTe6eThezaQWKUPIN5cPBngFqNHpJ1AvaVi rZkfbACV+C9ZIm7lHxk6EqLxEs86hOAAZi7uLM0D8kow+wlwb6O7wB0N+onoJBtW XO06vEg2cXj+cFD5RHhtHPzCHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBsZObln l4JnCzHlAbsntO6MbW9vMB8GA1UdIwQYMBaAFAFyS6L0BTK34I1yD0wJZkG0ocjE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODI3MS84MUY5RTJEMDFD NDQxMUVDOUIyRTZBNUZDNEY5QUUwMi9BWEpMb3ZRRk1yZmdqWElQVEFsbVFiU2h5 TVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FYSkxvdlFGTXJmZ2pYSVBUQWxtUWJTaHlNUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODI3MS84MUY5RTJEMDFDNDQxMUVDOUIyRTZBNUZDNEY5QUUwMi9BWEpMb3ZRRk1y ZmdqWElQVEFsbVFiU2h5TVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSxxdIUMvCogKM3iZG3OHoHadwwMLeO8M7n2Hgx4uLGix4qIXDxifK egT+rXWslDBASsMMtxLe8c51bet5+oC27NUzaC9eNOpGBQETPLZp179mjxsb5Mag RfWkBHVtngvNGV3MuAjdZREW2FABnwU9c/pj1u8WwtvSzLOhuXcuUCtaQIgqqD6F JvEDEiYehKE8GEXV1I0KiAdxPQVQcnItGMM3WQy9uEtDb6ogRTGPzBlVVPQfxIeW uhjKc3xGLqIkbn/Qo6oRloU+ACuL3tOqJYGBXRh6sLDM6LJf0FfHFrDca/CrVl6o UpEjJA6ehQ3drLb1+UcXy7pKRVQB/DeD -----END CERTIFICATE-----Generated at Sat May 31 17:10:17 2025 by rpki-client