$ rpki-client -vvf rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/aVihqzrPf5Xtpa2cnkHkSbbRF_I.mft File: aVihqzrPf5Xtpa2cnkHkSbbRF_I.mft (raw, json) Hash identifier: nvtkeAwhlDFUUlYVXVp+890u1u/rUGPrNX45Lq6QRmI= Subject key identifier: C4:DE:D6:C0:29:83:DC:0F:3F:65:BC:E5:74:5C:1A:C9:B2:EE:E3:37 Authority key identifier: 69:58:A1:AB:3A:CF:7F:95:ED:A5:AD:9C:9E:41:E4:49:B6:D1:17:F2 Certificate issuer: /CN=A9141274/serialNumber=6958A1AB3ACF7F95EDA5AD9C9E41E449B6D117F2 Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aVihqzrPf5Xtpa2cnkHkSbbRF_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/aVihqzrPf5Xtpa2cnkHkSbbRF_I.mft Manifest number: 27 Signing time: Tue 13 May 2025 07:01:27 +0000 Manifest this update: Tue 13 May 2025 07:01:26 +0000 Manifest next update: Tue 20 May 2025 07:01:26 +0000 Files and hashes: 1: aVihqzrPf5Xtpa2cnkHkSbbRF_I.crl (hash: mllpB4XNeHjV4JBSgNqOn/7NIqDlKCrbgyx1ubcT5p4=) 2: 1C8955ACFB3911EFA7A85D5EC4F9AE02.roa (hash: M3snfK7ggVA+iQyGKxoZGKOn/y2wDmLDbPmf0CbxKc8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/aVihqzrPf5Xtpa2cnkHkSbbRF_I.crl rsync://rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/aVihqzrPf5Xtpa2cnkHkSbbRF_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aVihqzrPf5Xtpa2cnkHkSbbRF_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 07:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141274, serialNumber=6958A1AB3ACF7F95EDA5AD9C9E41E449B6D117F2 Validity Not Before: May 13 07:01:26 2025 GMT Not After : May 20 07:01:26 2025 GMT Subject: CN=6822ee46-4654 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:19:bb:06:4c:a2:75:26:2e:d9:ee:c4:2f:89: 50:38:f9:01:f9:f0:31:4f:e2:14:3c:ac:9b:3d:de: 6d:01:90:8e:6e:b3:89:ca:71:b6:75:da:af:ce:09: ed:78:e1:03:86:b4:1a:a4:50:67:e2:c1:5e:5c:46: ca:a7:e8:8f:82:00:f7:1b:0a:f8:76:9f:2b:cc:36: 63:a8:f6:7d:23:ac:b0:77:03:63:46:11:a3:16:cf: 1a:33:cf:a6:a9:e5:95:6e:bf:14:0b:47:18:98:b3: f9:c4:4a:30:bb:38:01:d9:4a:84:ab:60:65:34:1d: a4:8f:4d:25:5b:ff:4d:f1:7c:3d:07:cd:f8:91:68: 02:29:b3:5f:6b:f6:1d:15:11:b0:4f:b6:ff:54:33: b1:8c:b3:1a:ae:db:6e:be:a6:5a:56:bf:bf:a1:84: f1:3c:da:59:1b:c6:53:70:e7:14:8a:cc:20:de:b5: 90:07:8c:5a:4d:24:fa:92:d9:03:4d:f1:06:32:83: 3a:20:fd:54:62:4f:41:1b:4c:76:95:41:e9:c7:5c: 81:a5:ea:0f:09:91:bd:b3:30:69:66:b4:66:52:66: 72:b7:2d:48:37:fc:7b:46:c6:a2:7d:ef:a9:27:d2: 09:a9:2f:ba:6f:f8:73:67:28:96:e4:06:e6:4d:f0: 2a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:DE:D6:C0:29:83:DC:0F:3F:65:BC:E5:74:5C:1A:C9:B2:EE:E3:37 X509v3 Authority Key Identifier: keyid:69:58:A1:AB:3A:CF:7F:95:ED:A5:AD:9C:9E:41:E4:49:B6:D1:17:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/aVihqzrPf5Xtpa2cnkHkSbbRF_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aVihqzrPf5Xtpa2cnkHkSbbRF_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/aVihqzrPf5Xtpa2cnkHkSbbRF_I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:69:21:a1:5f:cc:4c:5d:07:10:6d:45:e3:0b:5e:7d:e0:f9: 06:5a:f2:50:37:18:ae:6c:94:15:03:fe:79:9c:d3:d5:d0:9a: 1a:72:d2:07:f6:ea:ad:42:66:d6:ed:09:56:65:54:49:79:f5: 83:8e:ee:c1:b1:4f:a3:0c:89:1b:f3:26:25:c1:fe:f1:c3:1a: 05:76:25:5d:f0:d6:58:51:fc:87:72:71:67:5c:17:05:8e:83: 4f:54:f8:c1:ff:89:7b:96:ee:41:ef:6f:34:3c:a6:c9:89:06: d6:07:f9:19:d5:09:3b:8a:67:13:44:7f:41:81:5e:fc:26:d1: 9f:af:b3:58:58:d7:f0:82:8e:9e:27:2c:17:65:90:0c:e5:af: 64:35:5f:99:a5:e4:94:c4:7a:92:79:65:1d:de:87:86:7e:2b: 6c:ad:04:a7:58:ab:bf:c1:04:6f:a8:ea:ec:a1:a5:c0:eb:ad: 17:58:da:e5:27:ae:d6:a3:32:c0:ef:23:18:29:96:cf:34:15: bb:15:af:c6:8c:56:b0:1c:e9:e8:3e:61:e5:87:7a:01:fd:cb: 27:70:1a:da:96:70:b9:74:a8:82:39:d1:4c:fb:28:37:02:d5: b2:b4:a4:09:12:a2:a1:f8:95:6c:aa:34:ff:44:a8:7f:f2:e7: da:46:38:38 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MTI3NDExMC8GA1UEBRMoNjk1OEExQUIzQUNGN0Y5NUVEQTVBRDlDOUU0MUU0NDlC NkQxMTdGMjAeFw0yNTA1MTMwNzAxMjZaFw0yNTA1MjAwNzAxMjZaMBgxFjAUBgNV BAMTDTY4MjJlZTQ2LTQ2NTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDbGbsGTKJ1Ji7Z7sQviVA4+QH58DFP4hQ8rJs93m0BkI5us4nKcbZ12q/OCe14 4QOGtBqkUGfiwV5cRsqn6I+CAPcbCvh2nyvMNmOo9n0jrLB3A2NGEaMWzxozz6ap 5ZVuvxQLRxiYs/nESjC7OAHZSoSrYGU0HaSPTSVb/03xfD0HzfiRaAIps19r9h0V EbBPtv9UM7GMsxqu226+plpWv7+hhPE82lkbxlNw5xSKzCDetZAHjFpNJPqS2QNN 8QYygzog/VRiT0EbTHaVQenHXIGl6g8Jkb2zMGlmtGZSZnK3LUg3/HtGxqJ976kn 0gmpL7pv+HNnKJbkBuZN8CqHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxN7WwCmD 3A8/ZbzldFwaybLu4zcwHwYDVR0jBBgwFoAUaVihqzrPf5Xtpa2cnkHkSbbRF/Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQxMjc0L0Q5OUYzQUZBRkIy MzExRUY5RjE1Qzc0QUM0RjlBRTAyL2FWaWhxenJQZjVYdHBhMmNua0hrU2JiUkZf SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYVZpaHF6clBmNVh0cGEyY25rSGtTYmJSRl9JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQx Mjc0L0Q5OUYzQUZBRkIyMzExRUY5RjE1Qzc0QUM0RjlBRTAyL2FWaWhxenJQZjVY dHBhMmNua0hrU2JiUkZfSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADlpIaFfzExdBxBtReMLXn3g+QZa8lA3GK5slBUD/nmc09XQmhpy0gf2 6q1CZtbtCVZlVEl59YOO7sGxT6MMiRvzJiXB/vHDGgV2JV3w1lhR/IdycWdcFwWO g09U+MH/iXuW7kHvbzQ8psmJBtYH+RnVCTuKZxNEf0GBXvwm0Z+vs1hY1/CCjp4n LBdlkAzlr2Q1X5ml5JTEepJ5ZR3eh4Z+K2ytBKdYq7/BBG+o6uyhpcDrrRdY2uUn rtajMsDvIxgpls80FbsVr8aMVrAc6eg+YeWHegH9yydwGtqWcLl0qII50Uz7KDcC 1bK0pAkSoqH4lWyqNP9EqH/y59pGODg= -----END CERTIFICATE-----Generated at Tue May 13 18:30:24 2025 by rpki-client