$ rpki-client -vvf rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.mft File: AQtAe3X24zjzr7WajWJxXDwC7PQ.mft (raw, json) Hash identifier: DWqwZy4qp8xJYM7Xo7QvOPeKr/Zh92X2Q3eB5P/0dHQ= Subject key identifier: BE:2C:8F:35:61:0D:3E:62:BC:18:EF:16:86:7A:5F:CF:2E:A6:D5:1B Authority key identifier: 01:0B:40:7B:75:F6:E3:38:F3:AF:B5:9A:8D:62:71:5C:3C:02:EC:F4 Certificate issuer: /CN=A9132EC7/serialNumber=010B407B75F6E338F3AFB59A8D62715C3C02ECF4 Certificate serial: 16CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQtAe3X24zjzr7WajWJxXDwC7PQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.mft Manifest number: 16B7 Signing time: Mon 12 May 2025 16:36:49 +0000 Manifest this update: Mon 12 May 2025 16:36:48 +0000 Manifest next update: Mon 19 May 2025 16:36:48 +0000 Files and hashes: 1: AQtAe3X24zjzr7WajWJxXDwC7PQ.crl (hash: unUR+VvJt96hBzyDVSpX0mAXTihuxCu7cMWZAV3MH4c=) 2: 0D4F5906FA7911E7B85F4E7EC4F9AE02.roa (hash: 822Cv07i81nzITiBp8oPidqObRAFnQ5Dsa+D8sFZUvo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.crl rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQtAe3X24zjzr7WajWJxXDwC7PQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 16:36:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5834 (0x16ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132EC7, serialNumber=010B407B75F6E338F3AFB59A8D62715C3C02ECF4 Validity Not Before: May 12 16:36:48 2025 GMT Not After : May 19 16:36:48 2025 GMT Subject: CN=682223a0-1cdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f3:a6:7f:b2:77:04:aa:ec:e5:7d:2f:81:35: 05:95:f7:fd:10:12:ef:ab:6e:3e:06:e4:ab:db:f1: f1:ca:33:f6:86:4a:88:5c:9f:43:60:a3:00:5b:60: 54:2b:a4:58:3e:e3:54:3f:52:a1:c2:0a:21:2d:e9: be:5e:38:96:1d:45:18:8e:0c:68:af:c7:8b:cb:d3: ab:05:b0:8a:21:f7:55:26:7b:98:78:3f:c7:ad:c9: e0:89:88:7f:02:a3:7d:7c:dc:8d:38:6f:e5:d5:9f: ab:fd:64:23:88:ab:f2:d6:99:c9:3d:92:e8:45:e8: 70:98:03:3d:bd:1a:2e:7c:70:3a:75:d8:fd:2a:8c: ef:80:df:c0:2f:f3:63:43:d9:af:97:9b:c9:e4:c3: da:a7:c7:37:2c:c8:3e:cc:fb:53:0e:f6:46:ca:92: f6:ab:b0:8e:fa:65:3d:fc:53:43:bd:00:f2:50:ef: 92:7f:f9:72:2e:c2:89:2f:59:b8:23:bc:3a:38:32: 01:1e:a0:07:aa:5d:95:df:2a:97:85:23:77:6e:fb: 9a:5b:05:9a:ea:6d:2b:ff:2e:f8:9d:59:9b:37:22: 31:11:0a:9c:4e:d9:20:ea:ad:62:84:2b:b8:7d:b4: 38:83:9d:27:a8:09:0d:d8:2d:7d:72:6c:50:81:4d: 8e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:2C:8F:35:61:0D:3E:62:BC:18:EF:16:86:7A:5F:CF:2E:A6:D5:1B X509v3 Authority Key Identifier: keyid:01:0B:40:7B:75:F6:E3:38:F3:AF:B5:9A:8D:62:71:5C:3C:02:EC:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQtAe3X24zjzr7WajWJxXDwC7PQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:ad:56:82:b3:ec:08:89:a8:a5:02:4f:d1:03:b2:1e:7b:20: fe:d3:cd:47:bb:8c:de:aa:51:2f:4b:e3:d1:aa:bf:d0:ff:c4: 38:78:09:3f:e4:a6:aa:a6:c2:95:61:78:e2:eb:24:fd:ea:dd: a4:68:ce:29:d0:1b:bb:5f:cc:23:c7:ca:3c:5e:f9:2f:5e:43: 78:88:88:f8:4e:8a:0d:40:78:f7:a9:4d:29:97:3f:0a:6f:2c: ad:96:d2:b0:2b:01:2c:1d:9b:14:5f:a6:b0:a7:92:f2:16:9d: ef:ea:47:4d:7c:48:8e:47:bd:da:11:29:81:33:89:94:d0:17: 8a:a8:21:77:ad:e9:df:bb:51:9c:44:22:70:d2:90:fa:17:96: 48:ba:54:35:40:a9:a0:f7:1e:b6:ba:3e:21:a8:3a:d3:60:81: a2:c0:e4:c8:5c:46:4e:f2:6e:79:7c:77:b4:9d:73:2e:ca:97: 89:8c:99:36:b1:37:c2:21:4f:f5:a1:19:71:d9:bf:90:9a:7f: 58:c4:a4:9b:28:4f:3c:2b:2c:eb:ea:a4:24:8b:d0:2c:d6:a3: c2:9d:bd:49:0a:11:e1:22:b5:65:ff:9b:c6:06:d9:bc:e6:84: 3a:22:86:91:62:59:0c:da:fe:f3:08:7b:f8:b2:6b:88:a9:8e: 56:98:b8:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFsowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJFQzcxMTAvBgNVBAUTKDAxMEI0MDdCNzVGNkUzMzhGM0FGQjU5QThENjI3MTVD M0MwMkVDRjQwHhcNMjUwNTEyMTYzNjQ4WhcNMjUwNTE5MTYzNjQ4WjAYMRYwFAYD VQQDEw02ODIyMjNhMC0xY2RmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqvOmf7J3BKrs5X0vgTUFlff9EBLvq24+BuSr2/HxyjP2hkqIXJ9DYKMAW2BU K6RYPuNUP1KhwgohLem+XjiWHUUYjgxor8eLy9OrBbCKIfdVJnuYeD/HrcngiYh/ AqN9fNyNOG/l1Z+r/WQjiKvy1pnJPZLoRehwmAM9vRoufHA6ddj9KozvgN/AL/Nj Q9mvl5vJ5MPap8c3LMg+zPtTDvZGypL2q7CO+mU9/FNDvQDyUO+Sf/lyLsKJL1m4 I7w6ODIBHqAHql2V3yqXhSN3bvuaWwWa6m0r/y74nVmbNyIxEQqcTtkg6q1ihCu4 fbQ4g50nqAkN2C19cmxQgU2OTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL4sjzVh DT5ivBjvFoZ6X88uptUbMB8GA1UdIwQYMBaAFAELQHt19uM486+1mo1icVw8Auz0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkVDNy8yOTM0NzI2QUZB NzgxMUU3OUNCNjA4N0RDNEY5QUUwMi9BUXRBZTNYMjR6anpyN1dhaldKeFhEd0M3 UFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FRdEFlM1gyNHpqenI3V2FqV0p4WER3QzdQUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkVDNy8yOTM0NzI2QUZBNzgxMUU3OUNCNjA4N0RDNEY5QUUwMi9BUXRBZTNYMjR6 anpyN1dhaldKeFhEd0M3UFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCirVaCs+wIiailAk/RA7IeeyD+081Hu4zeqlEvS+PRqr/Q/8Q4eAk/ 5KaqpsKVYXji6yT96t2kaM4p0Bu7X8wjx8o8XvkvXkN4iIj4TooNQHj3qU0plz8K byytltKwKwEsHZsUX6awp5LyFp3v6kdNfEiOR73aESmBM4mU0BeKqCF3renfu1Gc RCJw0pD6F5ZIulQ1QKmg9x62uj4hqDrTYIGiwOTIXEZO8m55fHe0nXMuypeJjJk2 sTfCIU/1oRlx2b+Qmn9YxKSbKE88Kyzr6qQki9As1qPCnb1JChHhIrVl/5vGBtm8 5oQ6IoaRYlkM2v7zCHv4smuIqY5WmLio -----END CERTIFICATE-----Generated at Wed May 14 16:37:34 2025 by rpki-client