$ rpki-client -vvf rpki.apnic.net/member_repository/A9116B43/59421A4E8D7C11EB8D8BD60BC4F9AE02/s-AwGXTWpAg9ufSdWtbloVd5KgY.mft File: s-AwGXTWpAg9ufSdWtbloVd5KgY.mft (raw, json) Hash identifier: Zs4J/Bx5YOgyp308b+z1kneISv1wK0UBLG1oCXuB3DQ= Subject key identifier: FD:33:3B:B0:DB:B9:6D:B5:43:A2:E5:68:E6:B4:EC:2A:26:0B:2F:84 Authority key identifier: B3:E0:30:19:74:D6:A4:08:3D:B9:F4:9D:5A:D6:E5:A1:57:79:2A:06 Certificate issuer: /CN=A9116B43/serialNumber=B3E0301974D6A4083DB9F49D5AD6E5A157792A06 Certificate serial: 064E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-AwGXTWpAg9ufSdWtbloVd5KgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116B43/59421A4E8D7C11EB8D8BD60BC4F9AE02/s-AwGXTWpAg9ufSdWtbloVd5KgY.mft Manifest number: 064A Signing time: Wed 14 May 2025 14:52:01 +0000 Manifest this update: Wed 14 May 2025 14:52:01 +0000 Manifest next update: Wed 21 May 2025 14:52:01 +0000 Files and hashes: 1: s-AwGXTWpAg9ufSdWtbloVd5KgY.crl (hash: 9VC2JYMgGy9tKDaxuaUV6uSbtGOY+VeL2vrJ1Dxrtt8=) 2: 3A77AE12CB9C11EC9230F70BC4F9AE02.roa (hash: TwjuoGTydiIvsI8500O496Q/mOvNfgRtaZ3KwMAE5xE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116B43/59421A4E8D7C11EB8D8BD60BC4F9AE02/s-AwGXTWpAg9ufSdWtbloVd5KgY.crl rsync://rpki.apnic.net/member_repository/A9116B43/59421A4E8D7C11EB8D8BD60BC4F9AE02/s-AwGXTWpAg9ufSdWtbloVd5KgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-AwGXTWpAg9ufSdWtbloVd5KgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 14:52:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1614 (0x64e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116B43, serialNumber=B3E0301974D6A4083DB9F49D5AD6E5A157792A06 Validity Not Before: May 14 14:52:01 2025 GMT Not After : May 21 14:52:01 2025 GMT Subject: CN=6824ae11-d3e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:19:bf:b6:0d:62:fd:e4:f4:f4:8a:d1:03:e2: 86:70:4a:35:43:2d:20:35:51:54:38:18:f8:9e:8e: 10:dc:7b:08:87:c5:a3:af:ae:fd:27:e6:6f:6b:0c: 50:7c:28:00:f4:be:83:9a:89:ce:98:0e:76:65:d7: 96:af:8d:08:cf:23:10:67:bd:e1:f7:bd:0f:40:e2: 32:0d:fe:cf:de:c5:ab:c2:d7:c4:88:7c:3f:65:cf: 0a:bc:76:b1:fc:66:8e:c9:ac:06:e6:f2:a9:bc:75: ba:0c:61:99:56:bf:70:0b:88:50:4e:23:ad:83:92: 9f:8e:13:fe:e8:59:c0:d0:d6:1d:d4:2d:51:3e:11: 4c:a5:5e:2b:81:d0:b8:48:48:5b:61:9b:22:02:e0: 74:a2:02:3e:89:af:bc:1a:f9:44:6d:b6:5a:fe:30: fa:16:3c:d2:d4:2c:3a:c9:03:86:d4:c8:43:77:34: 20:e2:8b:01:0c:45:01:8f:f2:5f:13:e5:b3:1c:8f: 4c:61:dd:47:f6:de:01:91:ed:a4:b4:aa:fc:1f:33: 69:b8:1b:c8:60:c9:d6:9e:53:52:c6:b0:de:4a:55: 5b:0d:8d:94:f7:c0:94:20:07:2e:4c:58:51:7a:49: b8:86:08:db:c5:5d:50:19:91:a1:2b:c4:f6:f4:0a: c7:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:33:3B:B0:DB:B9:6D:B5:43:A2:E5:68:E6:B4:EC:2A:26:0B:2F:84 X509v3 Authority Key Identifier: keyid:B3:E0:30:19:74:D6:A4:08:3D:B9:F4:9D:5A:D6:E5:A1:57:79:2A:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116B43/59421A4E8D7C11EB8D8BD60BC4F9AE02/s-AwGXTWpAg9ufSdWtbloVd5KgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-AwGXTWpAg9ufSdWtbloVd5KgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116B43/59421A4E8D7C11EB8D8BD60BC4F9AE02/s-AwGXTWpAg9ufSdWtbloVd5KgY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:b8:93:a3:03:3a:c2:ef:44:3d:cb:de:83:9a:3a:e2:26:23: 04:9c:a7:64:24:50:f6:04:51:aa:21:87:91:00:d5:84:de:74: 14:25:4a:a5:99:01:fb:af:f7:d6:19:4a:9a:7f:43:ea:c8:72: 31:9f:2a:8f:75:0f:bb:20:1e:bd:e2:71:a6:51:bc:11:af:dd: 07:ff:2e:a8:81:2a:64:aa:65:c6:27:24:87:e1:e6:18:f1:fe: f6:c9:74:59:d3:5a:32:8e:01:b5:09:fb:e2:ab:37:ed:70:c4: 41:c7:16:0b:e3:8b:04:d2:49:82:2e:f9:1d:ab:56:5c:a7:71: 0a:0f:a4:b5:b2:c6:f6:44:0c:c7:d0:23:f2:78:a5:98:bc:a9: ee:f5:31:10:9b:bb:ab:57:c9:d4:b3:f8:aa:7a:0c:56:38:55: 45:29:3f:78:12:f4:1e:e1:d8:39:3c:fa:7b:1e:8a:62:e2:02: 19:3d:59:0d:60:ea:a1:bc:94:ec:e8:7f:02:23:1f:08:27:a2: 72:35:ac:11:13:18:05:0c:24:97:29:be:19:90:45:f1:2e:8c: cf:4c:a1:bc:4d:67:53:03:0e:93:30:86:8c:3b:67:8a:b1:c7: fb:0f:5e:03:c4:6f:ca:7a:96:69:ac:24:a0:ba:b9:35:c8:b4: 93:e7:a4:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBk4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZCNDMxMTAvBgNVBAUTKEIzRTAzMDE5NzRENkE0MDgzREI5RjQ5RDVBRDZFNUEx NTc3OTJBMDYwHhcNMjUwNTE0MTQ1MjAxWhcNMjUwNTIxMTQ1MjAxWjAYMRYwFAYD VQQDEw02ODI0YWUxMS1kM2UzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6Rm/tg1i/eT09IrRA+KGcEo1Qy0gNVFUOBj4no4Q3HsIh8Wjr679J+ZvawxQ fCgA9L6DmonOmA52ZdeWr40IzyMQZ73h970PQOIyDf7P3sWrwtfEiHw/Zc8KvHax /GaOyawG5vKpvHW6DGGZVr9wC4hQTiOtg5KfjhP+6FnA0NYd1C1RPhFMpV4rgdC4 SEhbYZsiAuB0ogI+ia+8GvlEbbZa/jD6FjzS1Cw6yQOG1MhDdzQg4osBDEUBj/Jf E+WzHI9MYd1H9t4Bke2ktKr8HzNpuBvIYMnWnlNSxrDeSlVbDY2U98CUIAcuTFhR ekm4hgjbxV1QGZGhK8T29ArHAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP0zO7Db uW21Q6LlaOa07ComCy+EMB8GA1UdIwQYMBaAFLPgMBl01qQIPbn0nVrW5aFXeSoG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkI0My81OTQyMUE0RThE N0MxMUVCOEQ4QkQ2MEJDNEY5QUUwMi9zLUF3R1hUV3BBZzl1ZlNkV3RibG9WZDVL Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3MtQXdHWFRXcEFnOXVmU2RXdGJsb1ZkNUtnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkI0My81OTQyMUE0RThEN0MxMUVCOEQ4QkQ2MEJDNEY5QUUwMi9zLUF3R1hUV3BB Zzl1ZlNkV3RibG9WZDVLZ1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbuJOjAzrC70Q9y96DmjriJiMEnKdkJFD2BFGqIYeRANWE3nQUJUql mQH7r/fWGUqaf0PqyHIxnyqPdQ+7IB694nGmUbwRr90H/y6ogSpkqmXGJySH4eYY 8f72yXRZ01oyjgG1CfviqzftcMRBxxYL44sE0kmCLvkdq1Zcp3EKD6S1ssb2RAzH 0CPyeKWYvKnu9TEQm7urV8nUs/iqegxWOFVFKT94EvQe4dg5PPp7Hopi4gIZPVkN YOqhvJTs6H8CIx8IJ6JyNawRExgFDCSXKb4ZkEXxLozPTKG8TWdTAw6TMIaMO2eK scf7D14DxG/KepZprCSgurk1yLST56SI -----END CERTIFICATE-----Generated at Thu May 15 22:20:59 2025 by rpki-client