$ rpki-client -vvf rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.mft File: af9o05rBdz4oqFeFx5G0qNmzhIY.mft (raw, json) Hash identifier: kig6yGkHKzwzLSSYbpuw1EhQ7DfhkWBpbY2EMD9fZ7Q= Subject key identifier: 49:E9:B7:F8:B2:AF:86:98:2D:6E:FA:FD:8A:F5:79:53:FC:62:C7:AE Authority key identifier: 69:FF:68:D3:9A:C1:77:3E:28:A8:57:85:C7:91:B4:A8:D9:B3:84:86 Certificate issuer: /CN=A9148D61/serialNumber=69FF68D39AC1773E28A85785C791B4A8D9B38486 Certificate serial: 01E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af9o05rBdz4oqFeFx5G0qNmzhIY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.mft Manifest number: 01DA Signing time: Thu 15 May 2025 02:14:22 +0000 Manifest this update: Thu 15 May 2025 02:14:21 +0000 Manifest next update: Thu 22 May 2025 02:14:21 +0000 Files and hashes: 1: af9o05rBdz4oqFeFx5G0qNmzhIY.crl (hash: +l7v5UmS4kUXf3gheWebVUsk8bfwJny0PZoXelpL4ZM=) 2: 349D4A7AB90A11EF97D24653C4F9AE02.roa (hash: BISS5CmxNxvmt9rFH6DiKF6LgvgQpzJ1qyGwOCZsmrY=) 3: 34386BAAB90A11EF97D24653C4F9AE02.roa (hash: gXomgC3UWF4hRBWpPOIJ1KbjovqaJl+GP7rjTy7IiYk=) 4: 35ADE898B90A11EF97D24653C4F9AE02.roa (hash: /sVqx8q3knVsrGKYvA1MUovYNq+EQPYvWXQlJdzVZFw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.crl rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af9o05rBdz4oqFeFx5G0qNmzhIY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 02:14:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 482 (0x1e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148D61, serialNumber=69FF68D39AC1773E28A85785C791B4A8D9B38486 Validity Not Before: May 15 02:14:21 2025 GMT Not After : May 22 02:14:21 2025 GMT Subject: CN=68254dfe-593a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:46:32:9c:17:22:be:ef:37:3c:af:92:ec:23: 6d:25:66:da:f6:81:f3:9f:e2:12:68:05:45:41:67: d6:5b:af:40:1a:23:a6:08:d9:f8:27:ce:b1:e2:5a: dd:b9:0a:b3:02:4f:9d:6d:9d:e4:c0:4f:1b:18:1f: f8:3b:ec:e0:2b:61:88:ac:c1:92:0b:2b:4f:b1:37: 01:8d:9a:09:c5:c7:ca:15:53:85:0a:00:87:cd:14: a2:3c:59:e5:f3:5c:1c:7c:8c:4e:97:60:75:ee:74: 91:be:13:55:2e:b6:00:fb:81:84:75:a7:c5:54:71: 01:ff:54:65:b8:95:cb:5e:0a:24:ad:41:a4:c5:5f: eb:c3:8a:00:0e:fc:d6:fd:70:61:52:a8:7f:00:d9: 40:b4:c9:ac:c5:20:dc:3d:f5:01:13:4b:ed:b5:fe: 34:d4:2b:4b:f8:cf:14:b0:43:6b:aa:fa:07:f2:5d: 5c:46:f3:2d:1c:9d:8d:e0:bf:94:0f:e3:30:e2:c9: f6:77:02:ec:85:44:66:c1:26:cc:1f:1d:ca:5d:27: d6:82:ca:ff:6e:e7:d6:78:3b:e1:b3:d3:1b:b7:57: 15:4e:7b:61:ab:5a:00:8f:20:62:52:46:b4:82:fc: 6e:32:cf:27:df:be:96:07:ba:2c:6c:74:7f:f2:87: c0:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:E9:B7:F8:B2:AF:86:98:2D:6E:FA:FD:8A:F5:79:53:FC:62:C7:AE X509v3 Authority Key Identifier: keyid:69:FF:68:D3:9A:C1:77:3E:28:A8:57:85:C7:91:B4:A8:D9:B3:84:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af9o05rBdz4oqFeFx5G0qNmzhIY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:56:b7:54:59:04:d5:9f:ee:90:5c:81:74:79:80:10:b1:86: 16:46:90:da:9d:53:79:15:71:2a:6c:c6:24:64:a5:1c:15:0e: 1f:53:d1:9f:17:d5:46:3e:a5:73:69:be:22:7b:71:5e:86:83: a6:f0:9b:9e:be:1e:89:bf:e7:d1:fb:8a:be:0b:5e:b2:8f:8b: c0:dd:48:68:9c:cd:66:73:08:2a:a1:52:54:06:80:02:67:5e: fd:5e:81:ce:be:0a:dd:e5:e8:c1:91:42:0f:e4:3a:62:97:0a: 68:8e:60:e1:e0:df:67:6f:35:c7:e3:27:4a:76:f5:f8:60:68: 65:5e:37:f0:ed:58:df:3a:30:be:84:3c:91:88:f3:28:e3:6f: 1a:94:84:ba:40:cb:cf:8c:24:f4:d4:1b:c3:ea:9b:30:88:c5: b5:63:09:5b:06:57:c1:32:04:e5:e5:3b:12:aa:7e:72:bd:b8: 33:b3:28:3c:71:20:af:de:5e:53:2a:70:73:88:d2:79:fe:63: 0e:42:25:ba:39:a5:c7:36:17:ed:5d:e7:39:13:c6:f2:f9:79: cc:13:82:9d:7c:29:24:1d:aa:65:f2:92:80:0d:ef:ec:d9:cf: 6b:37:1d:82:f7:9c:84:c3:65:44:da:c7:fa:2e:5b:84:b2:fb: 6f:e6:ef:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhENjExMTAvBgNVBAUTKDY5RkY2OEQzOUFDMTc3M0UyOEE4NTc4NUM3OTFCNEE4 RDlCMzg0ODYwHhcNMjUwNTE1MDIxNDIxWhcNMjUwNTIyMDIxNDIxWjAYMRYwFAYD VQQDEw02ODI1NGRmZS01OTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzEYynBcivu83PK+S7CNtJWba9oHzn+ISaAVFQWfWW69AGiOmCNn4J86x4lrd uQqzAk+dbZ3kwE8bGB/4O+zgK2GIrMGSCytPsTcBjZoJxcfKFVOFCgCHzRSiPFnl 81wcfIxOl2B17nSRvhNVLrYA+4GEdafFVHEB/1RluJXLXgokrUGkxV/rw4oADvzW /XBhUqh/ANlAtMmsxSDcPfUBE0vttf401CtL+M8UsENrqvoH8l1cRvMtHJ2N4L+U D+Mw4sn2dwLshURmwSbMHx3KXSfWgsr/bufWeDvhs9Mbt1cVTnthq1oAjyBiUka0 gvxuMs8n376WB7osbHR/8ofAtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEnpt/iy r4aYLW76/Yr1eVP8YseuMB8GA1UdIwQYMBaAFGn/aNOawXc+KKhXhceRtKjZs4SG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEQ2MS8yOTVFNEM3NjYw MUIxMUVEQTVDNzI3NkVDNEY5QUUwMi9hZjlvMDVyQmR6NG9xRmVGeDVHMHFObXpo SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FmOW8wNXJCZHo0b3FGZUZ4NUcwcU5temhJWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEQ2MS8yOTVFNEM3NjYwMUIxMUVEQTVDNzI3NkVDNEY5QUUwMi9hZjlvMDVyQmR6 NG9xRmVGeDVHMHFObXpoSVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcVrdUWQTVn+6QXIF0eYAQsYYWRpDanVN5FXEqbMYkZKUcFQ4fU9Gf F9VGPqVzab4ie3FehoOm8Juevh6Jv+fR+4q+C16yj4vA3UhonM1mcwgqoVJUBoAC Z179XoHOvgrd5ejBkUIP5DpilwpojmDh4N9nbzXH4ydKdvX4YGhlXjfw7VjfOjC+ hDyRiPMo428alIS6QMvPjCT01BvD6pswiMW1YwlbBlfBMgTl5TsSqn5yvbgzsyg8 cSCv3l5TKnBziNJ5/mMOQiW6OaXHNhftXec5E8by+XnME4KdfCkkHapl8pKADe/s 2c9rNx2C95yEw2VE2sf6LluEsvtv5u9X -----END CERTIFICATE-----Generated at Sat May 17 01:24:09 2025 by rpki-client