$ rpki-client -vvf rpki.apnic.net/member_repository/A9144BAD/D5D74346047811EBA7BD3A48C4F9AE02/AyrCJB0Yz7vBwzyt9ej2VUEtSos.mft File: AyrCJB0Yz7vBwzyt9ej2VUEtSos.mft (raw, json) Hash identifier: 5loUMdgwStIb4rMOJ6GUtmY+Qb5FBBEeHXjfXZ7reno= Subject key identifier: 37:6B:B4:E9:62:FB:F5:5C:7F:49:83:91:50:94:1A:F6:A5:85:8F:B4 Authority key identifier: 03:2A:C2:24:1D:18:CF:BB:C1:C3:3C:AD:F5:E8:F6:55:41:2D:4A:8B Certificate issuer: /CN=A9144BAD/serialNumber=032AC2241D18CFBBC1C33CADF5E8F655412D4A8B Certificate serial: 07A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AyrCJB0Yz7vBwzyt9ej2VUEtSos.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144BAD/D5D74346047811EBA7BD3A48C4F9AE02/AyrCJB0Yz7vBwzyt9ej2VUEtSos.mft Manifest number: 079B Signing time: Sat 10 May 2025 20:57:23 +0000 Manifest this update: Sat 10 May 2025 20:57:22 +0000 Manifest next update: Sat 17 May 2025 20:57:22 +0000 Files and hashes: 1: AyrCJB0Yz7vBwzyt9ej2VUEtSos.crl (hash: QToXp8x8S+EZ8vXckH9WbOYiUVKU8AccAgsQ+1lNNcM=) 2: D3D1C19E0F2111EBBC6E5028C4F9AE02.roa (hash: MXW87fZ4qznNog7Mqv1dybumPTtWHlhfVDxRXuxWlk8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144BAD/D5D74346047811EBA7BD3A48C4F9AE02/AyrCJB0Yz7vBwzyt9ej2VUEtSos.crl rsync://rpki.apnic.net/member_repository/A9144BAD/D5D74346047811EBA7BD3A48C4F9AE02/AyrCJB0Yz7vBwzyt9ej2VUEtSos.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AyrCJB0Yz7vBwzyt9ej2VUEtSos.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 20:57:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1952 (0x7a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144BAD, serialNumber=032AC2241D18CFBBC1C33CADF5E8F655412D4A8B Validity Not Before: May 10 20:57:22 2025 GMT Not After : May 17 20:57:22 2025 GMT Subject: CN=681fbdb2-3049 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b6:cf:ca:7d:e4:45:21:51:3a:ef:d5:69:0a: 9f:a6:c4:f4:11:0e:24:d9:7a:49:2e:7d:38:5f:ce: 38:bc:55:4c:c3:4e:8e:a8:62:62:e1:3a:71:83:e5: 90:a0:a7:98:a2:86:6d:35:04:c2:1f:21:e2:f9:e6: fb:ef:4e:ae:db:68:c5:31:d2:18:d2:02:9e:31:fa: 5f:e5:ac:8b:d5:3d:8d:17:9a:a3:eb:5a:fa:05:76: 59:1d:90:35:3b:d7:b5:54:21:d3:26:d4:de:34:f7: 3c:60:67:42:f2:f3:db:20:94:f3:45:2e:5b:c4:c1: bb:96:ca:1c:ed:46:91:40:5c:e8:43:7d:2a:74:fb: a3:6d:b1:37:ab:92:8d:e5:0f:8e:f4:10:2d:c4:26: ea:7a:2f:fd:6a:79:84:be:cf:07:b1:d7:40:0d:a0: 7c:9f:42:bf:dd:7f:3b:03:2e:70:42:99:b1:28:21: 77:22:07:05:92:c9:34:ca:e9:9d:44:de:ba:d7:30: 3c:55:d8:98:73:fa:b5:d3:de:79:cf:d9:a3:6a:85: 37:dc:5b:01:67:c8:b0:ab:6c:6b:c7:d0:45:1e:12: 03:cb:b3:0f:04:ec:a7:49:78:ea:ab:ad:6c:aa:3e: f7:0a:b5:49:95:a0:37:00:66:4f:6e:c9:c7:91:8f: b1:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:6B:B4:E9:62:FB:F5:5C:7F:49:83:91:50:94:1A:F6:A5:85:8F:B4 X509v3 Authority Key Identifier: keyid:03:2A:C2:24:1D:18:CF:BB:C1:C3:3C:AD:F5:E8:F6:55:41:2D:4A:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144BAD/D5D74346047811EBA7BD3A48C4F9AE02/AyrCJB0Yz7vBwzyt9ej2VUEtSos.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AyrCJB0Yz7vBwzyt9ej2VUEtSos.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144BAD/D5D74346047811EBA7BD3A48C4F9AE02/AyrCJB0Yz7vBwzyt9ej2VUEtSos.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:5b:51:58:f8:93:e0:f0:36:b2:04:79:9c:c6:c0:ba:fd:68: 44:f6:54:72:11:df:cf:62:b1:79:de:9c:d3:5b:60:c4:23:f0: 1a:eb:1d:2e:d7:c0:d3:05:98:a1:2b:4b:7a:d1:ef:20:59:22: 31:48:f7:76:39:e7:ec:b4:e7:de:95:5f:69:7f:1d:a7:b7:67: 12:ec:87:99:40:f1:71:06:08:60:e1:7e:9e:47:2c:85:82:fa: 24:75:44:0c:94:10:ee:23:12:c7:24:ee:c0:f5:57:e5:5f:6b: 19:02:0b:c6:d6:fb:f8:75:16:e2:86:e3:7a:9f:83:5a:70:55: 3a:b5:8a:2a:94:d8:ad:2c:f6:2c:a8:2e:1c:9d:41:20:a9:20: 5e:b4:1d:f6:84:14:11:91:8c:e1:28:3b:2b:dc:fb:e0:bc:a2: 3d:fd:0b:56:a2:e5:3e:3f:31:e0:11:e9:45:e5:e1:8c:1c:aa: 38:cb:b2:f3:99:36:e7:af:89:ec:1e:ab:d6:9e:ef:8a:82:ee: ff:f0:bb:ab:b2:d9:22:3c:68:6d:27:2d:81:c1:a0:80:98:31: 46:54:a3:5f:3b:da:05:58:90:89:96:87:14:2a:8f:92:bb:e7: 67:75:5c:1f:49:dd:63:8d:37:c5:70:d8:e2:5a:e5:ce:c4:38: bf:69:69:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRCQUQxMTAvBgNVBAUTKDAzMkFDMjI0MUQxOENGQkJDMUMzM0NBREY1RThGNjU1 NDEyRDRBOEIwHhcNMjUwNTEwMjA1NzIyWhcNMjUwNTE3MjA1NzIyWjAYMRYwFAYD VQQDEw02ODFmYmRiMi0zMDQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApLbPyn3kRSFROu/VaQqfpsT0EQ4k2XpJLn04X844vFVMw06OqGJi4Tpxg+WQ oKeYooZtNQTCHyHi+eb7706u22jFMdIY0gKeMfpf5ayL1T2NF5qj61r6BXZZHZA1 O9e1VCHTJtTeNPc8YGdC8vPbIJTzRS5bxMG7lsoc7UaRQFzoQ30qdPujbbE3q5KN 5Q+O9BAtxCbqei/9anmEvs8HsddADaB8n0K/3X87Ay5wQpmxKCF3IgcFksk0yumd RN661zA8VdiYc/q10955z9mjaoU33FsBZ8iwq2xrx9BFHhIDy7MPBOynSXjqq61s qj73CrVJlaA3AGZPbsnHkY+xGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDdrtOli +/Vcf0mDkVCUGvalhY+0MB8GA1UdIwQYMBaAFAMqwiQdGM+7wcM8rfXo9lVBLUqL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEJBRC9ENUQ3NDM0NjA0 NzgxMUVCQTdCRDNBNDhDNEY5QUUwMi9BeXJDSkIwWXo3dkJ3enl0OWVqMlZVRXRT b3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0F5ckNKQjBZejd2Qnd6eXQ5ZWoyVlVFdFNvcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NEJBRC9ENUQ3NDM0NjA0NzgxMUVCQTdCRDNBNDhDNEY5QUUwMi9BeXJDSkIwWXo3 dkJ3enl0OWVqMlZVRXRTb3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjW1FY+JPg8DayBHmcxsC6/WhE9lRyEd/PYrF53pzTW2DEI/Aa6x0u 18DTBZihK0t60e8gWSIxSPd2OefstOfelV9pfx2nt2cS7IeZQPFxBghg4X6eRyyF gvokdUQMlBDuIxLHJO7A9VflX2sZAgvG1vv4dRbihuN6n4NacFU6tYoqlNitLPYs qC4cnUEgqSBetB32hBQRkYzhKDsr3PvgvKI9/QtWouU+PzHgEelF5eGMHKo4y7Lz mTbnr4nsHqvWnu+Kgu7/8LurstkiPGhtJy2BwaCAmDFGVKNfO9oFWJCJlocUKo+S u+dndVwfSd1jjTfFcNjiWuXOxDi/aWlf -----END CERTIFICATE-----Generated at Sun May 11 22:24:53 2025 by rpki-client