$ rpki-client -vvf rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/aVihqzrPf5Xtpa2cnkHkSbbRF_I.mft File: aVihqzrPf5Xtpa2cnkHkSbbRF_I.mft (raw, json) Hash identifier: +41YnoqqzHbRqma1d/fdUU5fdxGh0TC4ZVaMm7/GRo0= Subject key identifier: 40:BD:85:ED:10:EB:9E:85:08:02:6A:8F:05:2F:83:71:34:39:CD:61 Authority key identifier: 69:58:A1:AB:3A:CF:7F:95:ED:A5:AD:9C:9E:41:E4:49:B6:D1:17:F2 Certificate issuer: /CN=A9141274/serialNumber=6958A1AB3ACF7F95EDA5AD9C9E41E449B6D117F2 Certificate serial: 34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aVihqzrPf5Xtpa2cnkHkSbbRF_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/aVihqzrPf5Xtpa2cnkHkSbbRF_I.mft Manifest number: 32 Signing time: Thu 05 Jun 2025 07:02:55 +0000 Manifest this update: Thu 05 Jun 2025 07:02:54 +0000 Manifest next update: Thu 12 Jun 2025 07:02:54 +0000 Files and hashes: 1: aVihqzrPf5Xtpa2cnkHkSbbRF_I.crl (hash: VLdcRp/+yLelbO31xkNw66AMuYssQfrsrlfQJ1W10x4=) 2: 1C8955ACFB3911EFA7A85D5EC4F9AE02.roa (hash: M3snfK7ggVA+iQyGKxoZGKOn/y2wDmLDbPmf0CbxKc8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/aVihqzrPf5Xtpa2cnkHkSbbRF_I.crl rsync://rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/aVihqzrPf5Xtpa2cnkHkSbbRF_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aVihqzrPf5Xtpa2cnkHkSbbRF_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 07:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141274, serialNumber=6958A1AB3ACF7F95EDA5AD9C9E41E449B6D117F2 Validity Not Before: Jun 5 07:02:54 2025 GMT Not After : Jun 12 07:02:54 2025 GMT Subject: CN=6841411f-769c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:44:1f:32:e1:21:32:21:13:32:f0:3c:b8:45: 27:19:b5:93:ce:f3:bc:42:0d:8e:dc:67:9b:ef:b0: 32:8d:c6:1c:55:a2:a7:28:c3:50:71:41:b1:57:bc: a3:60:5c:d1:b3:0f:99:d5:01:a6:ec:cf:72:7b:f3: ed:68:2e:10:86:63:38:cc:0d:d9:49:a1:22:46:19: da:2d:29:32:c2:d6:76:57:f9:27:59:89:1c:74:e5: c1:26:c4:ab:45:87:e7:80:f6:e8:6e:eb:c8:a7:d8: 41:01:1a:84:7a:35:20:ec:b8:c8:a2:a8:f0:ad:f5: be:ab:19:8b:b3:ff:fd:bf:16:08:6d:95:ef:9c:db: 6f:c1:1c:f2:1a:9c:98:4d:3b:a6:d4:51:c4:f9:6f: c9:39:cd:61:b7:8c:18:c6:43:b7:c0:36:73:e7:20: 50:dc:bf:d6:98:30:fa:e3:3b:42:9a:2c:36:c6:fc: b8:de:f0:b4:6c:a0:5f:9f:a0:6f:a0:61:c4:83:67: 15:f9:84:a5:8b:27:c5:a3:45:94:bd:15:01:d5:fb: 97:90:e7:9b:3c:b8:a1:a4:ea:bf:c3:ac:c6:0e:7f: df:d3:22:98:70:d6:c4:37:e7:4b:25:36:a3:98:31: 76:28:88:1d:9b:8e:f7:7c:7e:17:0c:c3:95:51:da: 58:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:BD:85:ED:10:EB:9E:85:08:02:6A:8F:05:2F:83:71:34:39:CD:61 X509v3 Authority Key Identifier: keyid:69:58:A1:AB:3A:CF:7F:95:ED:A5:AD:9C:9E:41:E4:49:B6:D1:17:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/aVihqzrPf5Xtpa2cnkHkSbbRF_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aVihqzrPf5Xtpa2cnkHkSbbRF_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/aVihqzrPf5Xtpa2cnkHkSbbRF_I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:c9:77:e6:f2:b8:77:81:02:f9:3f:78:ab:0e:84:71:c2:2a: 85:d7:b4:67:0a:ea:90:fc:f8:8f:03:cc:49:2e:2f:c5:7e:f3: f1:03:fd:e7:6a:48:5c:0c:b3:da:3d:3c:62:49:19:ce:e7:39: 25:64:41:c3:95:98:9f:c8:1c:8b:75:fc:df:c3:f7:a8:03:36: a1:0b:50:72:74:90:ed:82:70:0c:34:ce:9f:99:d1:5c:dd:35: 6d:38:3c:bb:5b:5d:26:52:74:a1:38:aa:fe:02:6a:31:bd:cc: 43:42:e7:4b:87:27:6a:a9:cb:79:84:28:41:a6:fd:85:39:22: 9d:07:88:47:70:1b:23:0d:cd:66:3e:60:49:12:1d:2e:2e:b1: 50:84:78:8a:eb:83:35:e7:c0:7d:cf:45:b9:7e:d0:cb:21:1d: 6f:3f:20:f8:b6:30:de:dc:49:82:89:63:21:32:c6:a1:ab:3e: 71:5c:d0:19:c2:28:09:81:53:59:e1:3f:b2:e7:de:0b:e7:36: a7:ac:f6:49:51:17:b0:b2:21:b7:e3:70:1b:f3:5d:50:5d:16: 3a:47:3f:c9:af:cd:04:f9:26:46:70:24:8c:de:1b:82:3d:d6: 00:94:ba:fd:6d:f7:18:3e:8f:d8:07:34:42:f8:89:44:3e:a2: e0:09:a7:ba -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MTI3NDExMC8GA1UEBRMoNjk1OEExQUIzQUNGN0Y5NUVEQTVBRDlDOUU0MUU0NDlC NkQxMTdGMjAeFw0yNTA2MDUwNzAyNTRaFw0yNTA2MTIwNzAyNTRaMBgxFjAUBgNV BAMTDTY4NDE0MTFmLTc2OWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6RB8y4SEyIRMy8Dy4RScZtZPO87xCDY7cZ5vvsDKNxhxVoqcow1BxQbFXvKNg XNGzD5nVAabsz3J78+1oLhCGYzjMDdlJoSJGGdotKTLC1nZX+SdZiRx05cEmxKtF h+eA9uhu68in2EEBGoR6NSDsuMiiqPCt9b6rGYuz//2/Fghtle+c22/BHPIanJhN O6bUUcT5b8k5zWG3jBjGQ7fANnPnIFDcv9aYMPrjO0KaLDbG/Lje8LRsoF+foG+g YcSDZxX5hKWLJ8WjRZS9FQHV+5eQ55s8uKGk6r/DrMYOf9/TIphw1sQ350slNqOY MXYoiB2bjvd8fhcMw5VR2liNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQL2F7RDr noUIAmqPBS+DcTQ5zWEwHwYDVR0jBBgwFoAUaVihqzrPf5Xtpa2cnkHkSbbRF/Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQxMjc0L0Q5OUYzQUZBRkIy MzExRUY5RjE1Qzc0QUM0RjlBRTAyL2FWaWhxenJQZjVYdHBhMmNua0hrU2JiUkZf SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYVZpaHF6clBmNVh0cGEyY25rSGtTYmJSRl9JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQx Mjc0L0Q5OUYzQUZBRkIyMzExRUY5RjE1Qzc0QUM0RjlBRTAyL2FWaWhxenJQZjVY dHBhMmNua0hrU2JiUkZfSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKLJd+byuHeBAvk/eKsOhHHCKoXXtGcK6pD8+I8DzEkuL8V+8/ED/edq SFwMs9o9PGJJGc7nOSVkQcOVmJ/IHIt1/N/D96gDNqELUHJ0kO2CcAw0zp+Z0Vzd NW04PLtbXSZSdKE4qv4CajG9zENC50uHJ2qpy3mEKEGm/YU5Ip0HiEdwGyMNzWY+ YEkSHS4usVCEeIrrgzXnwH3PRbl+0MshHW8/IPi2MN7cSYKJYyEyxqGrPnFc0BnC KAmBU1nhP7Ln3gvnNqes9klRF7CyIbfjcBvzXVBdFjpHP8mvzQT5JkZwJIzeG4I9 1gCUuv1t9xg+j9gHNEL4iUQ+ouAJp7o= -----END CERTIFICATE-----Generated at Sat Jun 7 06:30:47 2025 by rpki-client