$ rpki-client -vvf rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft File: aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft (raw, json) Hash identifier: IqoYje78OVBSmVnwr2q0YDiZd3Vxe5qwThWVAVqeDJg= Subject key identifier: 9F:D7:D2:97:5D:86:21:35:E7:28:AA:85:58:34:FD:92:42:09:09:0F Authority key identifier: 69:9E:67:42:56:7B:E7:32:9C:C3:A7:86:DE:B7:85:7E:2C:24:20:F9 Certificate issuer: /CN=A9119333/serialNumber=699E6742567BE7329CC3A786DEB7857E2C2420F9 Certificate serial: 22AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ5nQlZ75zKcw6eG3reFfiwkIPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft Manifest number: 226B Signing time: Sun 04 May 2025 15:48:20 +0000 Manifest this update: Sun 04 May 2025 15:48:19 +0000 Manifest next update: Sun 11 May 2025 15:48:19 +0000 Files and hashes: 1: aZ5nQlZ75zKcw6eG3reFfiwkIPk.crl (hash: PIn2CLCUuIpdFW9Vj8ImnwXrhYVI7Y59hBMrDvUfvEs=) 2: 443C3AF2D3F611EFB03C5C14C4F9AE02.roa (hash: QalrWEPHK1c0+wAh4Y9v/QxVAuOH9u4KL51JrDmBQPs=) 3: DD73806ED3C811EF9D76942FC4F9AE02.roa (hash: yV/SjGOrZoU6XjMAo/QC3pR5jQlSni/vmLDt0r4ftkA=) 4: 1AC9199AD3CB11EF84052053C4F9AE02.roa (hash: 3g8CG6eXI2y/sKSche4ErWaN1/woBDrqwhgjSA2yZ4o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.crl rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ5nQlZ75zKcw6eG3reFfiwkIPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 15:48:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8878 (0x22ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119333, serialNumber=699E6742567BE7329CC3A786DEB7857E2C2420F9 Validity Not Before: May 4 15:48:19 2025 GMT Not After : May 11 15:48:19 2025 GMT Subject: CN=68178c43-8cc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a2:1d:30:0c:5c:72:e8:63:32:91:d3:49:72: 43:80:35:23:3f:9f:30:01:8c:a2:88:3d:d1:dc:4b: 28:34:ea:43:84:03:5e:cb:17:ba:b9:db:e6:97:ae: 86:9e:95:a4:58:a5:94:98:f9:b2:25:b4:09:b3:f8: a7:35:a5:fe:31:29:23:94:ab:22:d1:48:7c:13:de: db:98:b8:81:43:fd:d4:78:8b:19:18:5a:d1:cd:17: 3f:21:e6:10:b4:3b:d8:e6:35:35:80:be:70:00:01: d0:f6:9b:16:20:fb:7d:c2:96:c0:47:ad:2d:ea:1f: a9:8e:8e:75:ff:90:71:e8:34:3f:57:dd:4d:2c:78: 97:2e:3a:be:5c:8e:c9:2d:ad:e5:d6:d1:05:dd:b0: 4b:33:4b:b6:6f:c7:1a:9c:5f:34:4b:3b:dc:62:48: 37:a6:e9:de:88:63:76:55:e9:02:c7:58:29:34:b7: d4:f1:d7:eb:08:0b:b0:88:f9:2d:b1:bd:32:1d:d0: c8:7b:18:60:e3:f7:8d:c9:58:76:8f:6f:59:41:6d: 2d:cf:6a:24:94:7c:51:ef:1a:bc:73:0f:e5:bb:a3: d9:ef:8d:b8:fe:50:a1:01:bd:e0:f4:a9:45:b2:11: 03:84:f7:78:59:f4:a0:0e:bf:f8:c4:a4:30:1c:17: 47:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:D7:D2:97:5D:86:21:35:E7:28:AA:85:58:34:FD:92:42:09:09:0F X509v3 Authority Key Identifier: keyid:69:9E:67:42:56:7B:E7:32:9C:C3:A7:86:DE:B7:85:7E:2C:24:20:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ5nQlZ75zKcw6eG3reFfiwkIPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:c9:6b:c2:ac:6f:df:f6:dd:d4:8c:84:b7:a3:96:39:5d:00: 90:44:2e:67:9a:fc:62:c6:63:5e:b0:6c:1d:98:6f:e7:8a:ef: b9:d6:5c:87:3e:81:31:d1:86:4b:23:c1:a7:12:d5:2e:eb:e0: cb:d4:87:6d:1e:28:07:8e:3c:62:47:2d:fb:36:38:9c:b8:d5: 93:f6:39:fa:92:52:16:4d:cf:aa:74:d6:b5:3f:c3:52:4c:81: 01:53:76:95:0b:98:0f:19:72:fe:d9:7c:90:75:b3:d2:02:fd: bd:3b:3e:ad:3a:25:83:64:c3:d0:ce:4e:b1:d9:fd:ee:b9:47: 39:c2:f3:4e:1c:87:45:69:b6:59:2a:35:b1:e0:e9:99:fc:3f: a9:f6:fe:a4:71:9d:59:af:c1:c8:29:f2:47:8a:2b:6c:8e:30: d7:f7:9b:b9:82:56:2b:63:18:10:5a:a9:8c:d0:c3:4d:cf:38: 38:51:b6:fa:bd:3e:a1:56:01:6a:92:31:db:83:e7:05:7b:c5: d7:6b:3b:d1:b4:15:02:10:c8:d3:b7:ad:53:28:ae:ce:60:96: 1d:9b:aa:69:3d:85:6f:f5:a4:53:2c:4d:af:f8:24:ff:8f:59: b1:c4:85:e4:7e:7b:bd:26:51:91:71:11:0a:8b:82:70:ac:a7: fe:64:1c:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIq4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkzMzMxMTAvBgNVBAUTKDY5OUU2NzQyNTY3QkU3MzI5Q0MzQTc4NkRFQjc4NTdF MkMyNDIwRjkwHhcNMjUwNTA0MTU0ODE5WhcNMjUwNTExMTU0ODE5WjAYMRYwFAYD VQQDEw02ODE3OGM0My04Y2M5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsKIdMAxccuhjMpHTSXJDgDUjP58wAYyiiD3R3EsoNOpDhANeyxe6udvml66G npWkWKWUmPmyJbQJs/inNaX+MSkjlKsi0Uh8E97bmLiBQ/3UeIsZGFrRzRc/IeYQ tDvY5jU1gL5wAAHQ9psWIPt9wpbAR60t6h+pjo51/5Bx6DQ/V91NLHiXLjq+XI7J La3l1tEF3bBLM0u2b8canF80SzvcYkg3puneiGN2VekCx1gpNLfU8dfrCAuwiPkt sb0yHdDIexhg4/eNyVh2j29ZQW0tz2oklHxR7xq8cw/lu6PZ7424/lChAb3g9KlF shEDhPd4WfSgDr/4xKQwHBdH5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ/X0pdd hiE15yiqhVg0/ZJCCQkPMB8GA1UdIwQYMBaAFGmeZ0JWe+cynMOnht63hX4sJCD5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTMzMy8wNjVEQTNCQUI4 NDQxMUU1QjUzNTdCMkZDNEY5QUUwMi9hWjVuUWxaNzV6S2N3NmVHM3JlRmZpd2tJ UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FaNW5RbFo3NXpLY3c2ZUczcmVGZml3a0lQay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTMzMy8wNjVEQTNCQUI4NDQxMUU1QjUzNTdCMkZDNEY5QUUwMi9hWjVuUWxaNzV6 S2N3NmVHM3JlRmZpd2tJUGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMyWvCrG/f9t3UjIS3o5Y5XQCQRC5nmvxixmNesGwdmG/niu+51lyH PoEx0YZLI8GnEtUu6+DL1IdtHigHjjxiRy37NjicuNWT9jn6klIWTc+qdNa1P8NS TIEBU3aVC5gPGXL+2XyQdbPSAv29Oz6tOiWDZMPQzk6x2f3uuUc5wvNOHIdFabZZ KjWx4OmZ/D+p9v6kcZ1Zr8HIKfJHiitsjjDX95u5glYrYxgQWqmM0MNNzzg4Ubb6 vT6hVgFqkjHbg+cFe8XXazvRtBUCEMjTt61TKK7OYJYdm6ppPYVv9aRTLE2v+CT/ j1mxxIXkfnu9JlGRcREKi4JwrKf+ZBxP -----END CERTIFICATE-----Generated at Mon May 5 03:02:56 2025 by rpki-client