$ rpki-client -vvf rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.mft File: ah5W1f4mxr0uywRXgX3GujwN5H0.mft (raw, json) Hash identifier: z6+4CJdaYL6rWAFEuaKlJIvDcneLAiGPpuAX3IeZEpA= Subject key identifier: 08:03:D4:2F:E8:EE:F2:47:B8:7A:02:60:09:56:D7:44:BC:F3:A3:D5 Authority key identifier: 6A:1E:56:D5:FE:26:C6:BD:2E:CB:04:57:81:7D:C6:BA:3C:0D:E4:7D Certificate issuer: /CN=A9118F69/serialNumber=6A1E56D5FE26C6BD2ECB0457817DC6BA3C0DE47D Certificate serial: 022D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5W1f4mxr0uywRXgX3GujwN5H0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.mft Manifest number: 022A Signing time: Tue 13 May 2025 01:44:46 +0000 Manifest this update: Tue 13 May 2025 01:44:45 +0000 Manifest next update: Tue 20 May 2025 01:44:45 +0000 Files and hashes: 1: ah5W1f4mxr0uywRXgX3GujwN5H0.crl (hash: qnPnfknAylvhSwvOCtedDF5T97GRCtmhtG+VBzu0Rok=) 2: 3B0E8BD2292211ED93341915C4F9AE02.roa (hash: nIc0DzbDh/PwNmfiEtRIcpTiu7BnHHbJ2kvWsihcckg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.crl rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5W1f4mxr0uywRXgX3GujwN5H0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 01:44:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 557 (0x22d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118F69, serialNumber=6A1E56D5FE26C6BD2ECB0457817DC6BA3C0DE47D Validity Not Before: May 13 01:44:45 2025 GMT Not After : May 20 01:44:45 2025 GMT Subject: CN=6822a40e-675b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:98:41:6a:b6:35:3d:43:d0:c5:72:52:64:db: 3e:23:4d:7d:04:c1:03:02:a0:44:78:3a:85:73:2f: b8:57:cd:6c:1c:5f:39:47:fb:83:f8:05:bd:c3:f7: b2:2e:38:c3:ce:66:f3:5e:70:58:e5:7c:21:53:9c: f1:48:9f:ce:9d:5c:7b:38:3c:ff:ae:79:16:9f:9e: 71:9d:e4:db:ec:79:93:76:09:2f:03:48:5a:c7:4d: 32:14:97:2a:c1:51:c4:a6:10:2a:3f:df:a8:e6:af: d4:23:94:fb:32:93:63:b9:23:2b:a3:c9:18:e3:4e: cd:1e:26:9b:82:f2:34:c8:4e:a6:7d:7e:ad:ae:4a: 0e:6c:94:bc:43:54:89:a9:7d:58:ba:2e:1a:2e:be: 4c:c1:3a:c1:54:84:5b:20:4d:a6:b8:f5:9d:71:c7: 9c:56:5a:da:48:d1:d9:54:9a:4f:61:79:b5:0c:ed: b7:c4:6a:72:8f:57:a5:f9:ed:9f:01:2c:37:d6:bd: a9:42:8c:fa:9d:dd:c9:f6:df:f6:3f:91:1c:b5:fc: f8:82:f4:c6:1b:45:9a:90:e7:bd:0d:11:eb:a6:0c: 55:3f:2c:46:ce:5a:63:cb:07:09:9b:a0:10:0c:27: 62:5b:46:cf:cd:fa:08:f8:f5:26:c6:a2:59:6a:b1: 42:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:03:D4:2F:E8:EE:F2:47:B8:7A:02:60:09:56:D7:44:BC:F3:A3:D5 X509v3 Authority Key Identifier: keyid:6A:1E:56:D5:FE:26:C6:BD:2E:CB:04:57:81:7D:C6:BA:3C:0D:E4:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5W1f4mxr0uywRXgX3GujwN5H0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:d9:79:93:95:4a:68:ea:f2:d9:26:f9:30:4b:fe:93:b2:34: bd:5a:d1:50:ca:d5:02:89:fc:df:7f:55:e6:b9:33:6b:d9:65: c6:57:65:0c:a0:1a:01:bb:44:82:40:b9:c4:1e:a4:28:5a:f0: 70:ef:b1:71:9e:96:36:ee:87:67:59:b9:d8:9c:6d:61:b8:0d: 24:18:a8:52:5a:4b:02:0b:7d:77:d3:59:e2:3d:44:12:49:57: 69:30:a3:43:84:a5:75:d7:0f:eb:6a:1d:84:bf:87:f3:e8:9e: ff:bc:9a:af:ff:35:b8:fb:74:c6:88:16:9b:4c:1e:82:20:87: 79:30:23:30:28:f5:70:71:37:78:39:8b:78:9a:7f:d3:82:54: 00:9e:a0:fb:54:38:96:ae:fe:7e:c3:b2:90:56:ab:ee:33:41: 76:bb:9e:c2:18:2e:08:23:02:fe:57:d5:84:21:eb:75:ec:dc: a4:b9:6c:15:b1:4f:c8:2d:9f:c8:5f:68:ff:3c:c2:1a:39:2f: da:ce:40:60:78:63:8f:e7:d9:dd:69:98:c5:3e:ea:77:50:94: fc:46:08:1c:ed:6f:b5:ee:b6:1a:f6:a9:dd:54:1a:63:a5:94: db:77:95:7b:b1:8e:af:25:e7:04:d8:52:22:7b:5a:5e:07:81: 72:ca:4b:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAi0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThGNjkxMTAvBgNVBAUTKDZBMUU1NkQ1RkUyNkM2QkQyRUNCMDQ1NzgxN0RDNkJB M0MwREU0N0QwHhcNMjUwNTEzMDE0NDQ1WhcNMjUwNTIwMDE0NDQ1WjAYMRYwFAYD VQQDEw02ODIyYTQwZS02NzViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7JhBarY1PUPQxXJSZNs+I019BMEDAqBEeDqFcy+4V81sHF85R/uD+AW9w/ey LjjDzmbzXnBY5XwhU5zxSJ/OnVx7ODz/rnkWn55xneTb7HmTdgkvA0hax00yFJcq wVHEphAqP9+o5q/UI5T7MpNjuSMro8kY407NHiabgvI0yE6mfX6trkoObJS8Q1SJ qX1Yui4aLr5MwTrBVIRbIE2muPWdccecVlraSNHZVJpPYXm1DO23xGpyj1el+e2f ASw31r2pQoz6nd3J9t/2P5Ectfz4gvTGG0WakOe9DRHrpgxVPyxGzlpjywcJm6AQ DCdiW0bPzfoI+PUmxqJZarFC3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAgD1C/o 7vJHuHoCYAlW10S886PVMB8GA1UdIwQYMBaAFGoeVtX+Jsa9LssEV4F9xro8DeR9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOEY2OS9COTk4REQzQzI5 MDgxMUVEQkQyNjJCMjhDNEY5QUUwMi9haDVXMWY0bXhyMHV5d1JYZ1gzR3Vqd041 SDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FoNVcxZjRteHIwdXl3UlhnWDNHdWp3TjVIMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OEY2OS9COTk4REQzQzI5MDgxMUVEQkQyNjJCMjhDNEY5QUUwMi9haDVXMWY0bXhy MHV5d1JYZ1gzR3Vqd041SDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA52XmTlUpo6vLZJvkwS/6TsjS9WtFQytUCifzff1XmuTNr2WXGV2UM oBoBu0SCQLnEHqQoWvBw77FxnpY27odnWbnYnG1huA0kGKhSWksCC31301niPUQS SVdpMKNDhKV11w/rah2Ev4fz6J7/vJqv/zW4+3TGiBabTB6CIId5MCMwKPVwcTd4 OYt4mn/TglQAnqD7VDiWrv5+w7KQVqvuM0F2u57CGC4IIwL+V9WEIet17NykuWwV sU/ILZ/IX2j/PMIaOS/azkBgeGOP59ndaZjFPup3UJT8Rggc7W+17rYa9qndVBpj pZTbd5V7sY6vJecE2FIie1peB4FyyktW -----END CERTIFICATE-----Generated at Wed May 14 06:07:52 2025 by rpki-client