$ rpki-client -vvf rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/Aonh4IK22hq6VVKEDAyrAsKjt04.mft File: Aonh4IK22hq6VVKEDAyrAsKjt04.mft (raw, json) Hash identifier: kqneFc8HegHGqqS5XnHzb690oGErpIPy3WW32B2U1Eo= Subject key identifier: 4E:02:7C:D8:71:DD:32:8F:37:E1:9E:6F:D1:14:B7:6B:CD:2E:F2:B3 Authority key identifier: 02:89:E1:E0:82:B6:DA:1A:BA:55:52:84:0C:0C:AB:02:C2:A3:B7:4E Certificate issuer: /CN=A9144C70/serialNumber=0289E1E082B6DA1ABA5552840C0CAB02C2A3B74E Certificate serial: 65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aonh4IK22hq6VVKEDAyrAsKjt04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/Aonh4IK22hq6VVKEDAyrAsKjt04.mft Manifest number: 03D4 Signing time: Tue 13 May 2025 00:44:40 +0000 Manifest this update: Tue 13 May 2025 00:44:40 +0000 Manifest next update: Tue 20 May 2025 00:44:40 +0000 Files and hashes: 1: Aonh4IK22hq6VVKEDAyrAsKjt04.crl (hash: Dv7oi3EeXMBTt7isK9xvXo5FMNv5S8HEUzxRvrZGpps=) 2: F23B6474DCCB11EFA04C156DC4F9AE02.roa (hash: 8CP+soQ8V1MqPicKDXfIlfLOoa+kVRyCORkx4Rr2qj4=) 3: B250F522DCCB11EFB54CD16CC4F9AE02.roa (hash: rwa7KCX9itOMHcH4U2EV1YtaU4sGAP6iXjp2VE332xU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/Aonh4IK22hq6VVKEDAyrAsKjt04.crl rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/Aonh4IK22hq6VVKEDAyrAsKjt04.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aonh4IK22hq6VVKEDAyrAsKjt04.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 00:44:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 101 (0x65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144C70, serialNumber=0289E1E082B6DA1ABA5552840C0CAB02C2A3B74E Validity Not Before: May 13 00:44:40 2025 GMT Not After : May 20 00:44:40 2025 GMT Subject: CN=682295f8-b96f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:99:18:dd:17:71:0f:f8:24:95:65:a4:64:df: 7a:8d:b4:87:80:fb:ff:ab:a6:86:6b:35:51:dd:8d: f9:17:61:42:70:3c:e0:c9:a8:44:37:5b:d8:2b:2a: 51:ef:60:25:01:a5:0b:10:08:05:01:ec:06:05:aa: 23:f4:fe:ff:44:ba:59:27:a3:f4:49:26:63:af:60: 48:97:e3:a8:24:f2:05:80:9a:de:ee:40:cb:a9:ab: f0:e9:ed:be:c0:d4:1e:d6:a5:91:78:6a:db:1c:96: 3e:fb:cf:d7:77:4d:e9:b2:34:c9:59:2f:67:87:6d: 4c:7e:fc:c6:ee:fe:0c:be:a9:da:32:2a:5a:db:25: 9a:ad:3e:99:81:72:13:d4:25:09:38:e3:4a:2e:06: 21:e4:30:cb:2e:26:b9:76:bf:fd:74:1d:ae:39:35: 26:64:d2:96:28:21:b5:98:ba:d4:a0:2e:2b:5f:39: 59:e6:50:a3:a0:7d:66:a0:36:60:3b:15:77:2b:b7: f0:55:82:d9:48:8a:cf:1e:9a:d0:e0:f7:4a:a0:5d: 03:4a:f5:5a:50:5b:fc:6a:72:91:43:37:59:5f:2f: ff:b1:42:dc:79:43:60:b8:d0:af:49:81:63:24:39: 01:ab:6c:48:92:5e:26:f0:1f:48:51:79:44:7a:14: cd:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:02:7C:D8:71:DD:32:8F:37:E1:9E:6F:D1:14:B7:6B:CD:2E:F2:B3 X509v3 Authority Key Identifier: keyid:02:89:E1:E0:82:B6:DA:1A:BA:55:52:84:0C:0C:AB:02:C2:A3:B7:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/Aonh4IK22hq6VVKEDAyrAsKjt04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aonh4IK22hq6VVKEDAyrAsKjt04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/Aonh4IK22hq6VVKEDAyrAsKjt04.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:31:6a:87:d7:60:51:fd:0d:76:30:7b:08:6d:24:4d:7f:4e: 12:0d:d7:07:b4:21:e1:7a:7b:6a:1e:a0:a7:61:37:32:89:71: be:24:93:fb:7b:14:2f:5b:05:c4:6c:ed:79:02:4d:25:67:96: dd:ea:d6:fa:ff:63:e3:0a:2b:0b:31:45:98:3e:ca:6f:22:ad: ca:4c:28:bc:64:0e:e9:b7:bc:06:7e:72:ce:69:f0:5f:6e:53: 10:d3:c6:9b:6b:9b:0f:46:61:19:cb:ae:6e:8d:6b:4a:ec:23: 6d:5a:1b:c4:c0:5c:d1:5d:c6:4a:98:52:f0:ed:76:f7:c3:32: b4:de:b8:c6:cf:93:be:25:42:04:14:7b:61:01:04:24:25:2b: de:4c:2f:6e:09:ff:41:56:61:2c:36:f4:a4:2a:f1:55:6b:2f: b9:90:2f:b1:c3:c9:6f:e0:f1:3b:bc:95:ce:c9:95:2b:ce:78: aa:61:7e:9c:7f:47:bf:b6:19:67:c0:6c:3b:42:b3:e5:18:1c: b4:a5:ce:72:26:b8:a0:86:f9:93:b1:25:30:30:f5:30:52:d5: 3d:cc:94:b5:31:4d:22:da:b0:f4:b4:cb:41:59:ef:2f:66:7d: bd:4c:fa:f6:61:d0:d4:76:87:32:ca:30:ef:7d:0f:98:2a:6f: b9:02:d3:60 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NEM3MDExMC8GA1UEBRMoMDI4OUUxRTA4MkI2REExQUJBNTU1Mjg0MEMwQ0FCMDJD MkEzQjc0RTAeFw0yNTA1MTMwMDQ0NDBaFw0yNTA1MjAwMDQ0NDBaMBgxFjAUBgNV BAMTDTY4MjI5NWY4LWI5NmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZmRjdF3EP+CSVZaRk33qNtIeA+/+rpoZrNVHdjfkXYUJwPODJqEQ3W9grKlHv YCUBpQsQCAUB7AYFqiP0/v9Eulkno/RJJmOvYEiX46gk8gWAmt7uQMupq/Dp7b7A 1B7WpZF4atsclj77z9d3TemyNMlZL2eHbUx+/Mbu/gy+qdoyKlrbJZqtPpmBchPU JQk440ouBiHkMMsuJrl2v/10Ha45NSZk0pYoIbWYutSgLitfOVnmUKOgfWagNmA7 FXcrt/BVgtlIis8emtDg90qgXQNK9VpQW/xqcpFDN1lfL/+xQtx5Q2C40K9JgWMk OQGrbEiSXibwH0hReUR6FM2lAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTgJ82HHd Mo834Z5v0RS3a80u8rMwHwYDVR0jBBgwFoAUAonh4IK22hq6VVKEDAyrAsKjt04w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0QzcwLzgyQkM4NEVFQUM2 NzExRUNCNzVDREEyNEM0RjlBRTAyL0Fvbmg0SUsyMmhxNlZWS0VEQXlyQXNLanQw NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQW9uaDRJSzIyaHE2VlZLRURBeXJBc0tqdDA0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0 QzcwLzgyQkM4NEVFQUM2NzExRUNCNzVDREEyNEM0RjlBRTAyL0Fvbmg0SUsyMmhx NlZWS0VEQXlyQXNLanQwNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADMxaofXYFH9DXYwewhtJE1/ThIN1we0IeF6e2oeoKdhNzKJcb4kk/t7 FC9bBcRs7XkCTSVnlt3q1vr/Y+MKKwsxRZg+ym8ircpMKLxkDum3vAZ+cs5p8F9u UxDTxptrmw9GYRnLrm6Na0rsI21aG8TAXNFdxkqYUvDtdvfDMrTeuMbPk74lQgQU e2EBBCQlK95ML24J/0FWYSw29KQq8VVrL7mQL7HDyW/g8Tu8lc7JlSvOeKphfpx/ R7+2GWfAbDtCs+UYHLSlznImuKCG+ZOxJTAw9TBS1T3MlLUxTSLasPS0y0FZ7y9m fb1M+vZh0NR2hzLKMO99D5gqb7kC02A= -----END CERTIFICATE-----Generated at Wed May 14 02:11:22 2025 by rpki-client