$ rpki-client -vvf rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.mft File: aBEEkGz5PaQ7bFshNaAkFJqPwFc.mft (raw, json) Hash identifier: dIbd8DDcxtkmAtwE51oICbs+3u1E+edMzeZr552deY8= Subject key identifier: A2:84:D8:FE:08:4C:0A:5A:1E:26:F1:EC:94:9C:F0:9F:4B:9A:A6:CB Authority key identifier: 68:11:04:90:6C:F9:3D:A4:3B:6C:5B:21:35:A0:24:14:9A:8F:C0:57 Certificate issuer: /CN=A9156751/serialNumber=681104906CF93DA43B6C5B2135A024149A8FC057 Certificate serial: 02A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBEEkGz5PaQ7bFshNaAkFJqPwFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.mft Manifest number: 02A6 Signing time: Sun 11 May 2025 01:02:02 +0000 Manifest this update: Sun 11 May 2025 01:02:01 +0000 Manifest next update: Sun 18 May 2025 01:02:01 +0000 Files and hashes: 1: aBEEkGz5PaQ7bFshNaAkFJqPwFc.crl (hash: V9wXPwulQwEWUDxE1pxZ9c8T0lL4mGOEH1kuBUE2XtU=) 2: 776724AAF7B711ECAE4F7935C4F9AE02.roa (hash: PKEZfZTmj/mGEPOfYVGBRNahCa+W7goVh1g1wDRTSDE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.crl rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBEEkGz5PaQ7bFshNaAkFJqPwFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 01:02:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 681 (0x2a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156751, serialNumber=681104906CF93DA43B6C5B2135A024149A8FC057 Validity Not Before: May 11 01:02:01 2025 GMT Not After : May 18 01:02:01 2025 GMT Subject: CN=681ff709-6d18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5f:fc:73:e8:ec:a5:01:84:65:c9:3c:b5:6c: ed:cb:67:b3:a5:bd:52:29:06:a2:fc:99:b1:12:46: 60:22:2f:41:63:f1:74:b8:de:8e:94:48:7c:ef:1a: d2:41:33:8f:ea:97:37:ca:12:68:d2:3d:48:fa:e9: 0f:68:e2:90:ef:58:c9:f7:df:27:6c:82:65:60:5d: ae:4e:d8:f5:c3:77:32:bf:0a:08:6a:e3:78:67:5b: 25:f7:86:56:c9:7f:23:81:25:7b:70:62:a3:c7:dd: 13:74:02:3f:7c:bd:aa:94:e9:ce:68:49:37:ad:b2: c3:ad:12:36:a1:d3:e0:28:bf:52:b4:1b:7b:66:4e: 6c:93:50:3e:85:5d:df:2c:4e:28:d4:43:e8:e0:08: 7f:b1:6d:d9:70:34:18:9b:d8:f9:99:cb:28:e4:74: 8a:6a:09:83:52:86:4a:ee:52:f4:c1:0a:57:2b:d6: 65:38:27:5a:7d:4f:4b:d6:b0:5d:52:7b:5e:e3:79: 4c:48:7f:97:30:60:cc:29:47:b8:5f:ac:83:98:37: 6b:26:9e:1d:34:e5:19:18:d4:d8:90:27:9c:6d:66: 41:a8:6a:49:9c:c0:a7:dc:4e:0e:b5:b6:d8:95:ce: a8:73:d0:5a:a1:c6:28:f9:63:37:e2:b4:ae:55:94: 37:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:84:D8:FE:08:4C:0A:5A:1E:26:F1:EC:94:9C:F0:9F:4B:9A:A6:CB X509v3 Authority Key Identifier: keyid:68:11:04:90:6C:F9:3D:A4:3B:6C:5B:21:35:A0:24:14:9A:8F:C0:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBEEkGz5PaQ7bFshNaAkFJqPwFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:0c:e4:85:85:e9:86:14:9c:27:6e:43:94:22:98:b2:ed:20: 22:d3:0c:eb:75:41:c2:d9:ef:ac:68:aa:d5:d2:3e:66:db:71: 52:28:0a:f0:56:ac:a0:4d:bc:39:6e:ed:88:94:44:e1:a0:a3: 63:bb:c6:3b:99:21:b3:01:ea:3c:5d:cc:e6:04:42:0d:cb:5e: 6e:b8:6a:c4:5b:c0:4f:06:cd:58:9c:e5:bc:93:a6:1d:70:8f: e3:8a:e1:18:00:15:54:e2:81:69:d2:15:e8:e7:fc:ab:32:2b: c1:70:21:37:38:6b:cd:fd:8f:47:b8:8c:1f:0b:63:29:0a:de: 8a:ee:ee:b4:18:59:49:34:6c:e0:e7:01:04:ea:63:82:76:2e: 7f:75:d7:1e:8b:ae:a1:c0:80:15:bb:eb:84:59:a7:0b:d9:be: e0:11:4c:b9:74:1c:65:ef:77:06:b7:24:91:44:a8:00:24:a4: a1:d7:6f:00:cf:9f:86:0e:a6:b9:4d:b0:46:38:85:79:7f:eb: 51:fb:70:fe:5f:b7:0f:a3:b9:36:bd:3a:ee:de:af:7b:aa:74: c6:4f:0c:d8:f2:f0:f6:cd:68:7c:5e:4f:9d:69:58:47:2b:3c: 7a:95:2b:51:e4:0d:84:7f:2c:07:31:41:6c:cf:f9:05:f9:c5: 51:65:a2:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY3NTExMTAvBgNVBAUTKDY4MTEwNDkwNkNGOTNEQTQzQjZDNUIyMTM1QTAyNDE0 OUE4RkMwNTcwHhcNMjUwNTExMDEwMjAxWhcNMjUwNTE4MDEwMjAxWjAYMRYwFAYD VQQDEw02ODFmZjcwOS02ZDE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv1/8c+jspQGEZck8tWzty2ezpb1SKQai/JmxEkZgIi9BY/F0uN6OlEh87xrS QTOP6pc3yhJo0j1I+ukPaOKQ71jJ998nbIJlYF2uTtj1w3cyvwoIauN4Z1sl94ZW yX8jgSV7cGKjx90TdAI/fL2qlOnOaEk3rbLDrRI2odPgKL9StBt7Zk5sk1A+hV3f LE4o1EPo4Ah/sW3ZcDQYm9j5mcso5HSKagmDUoZK7lL0wQpXK9ZlOCdafU9L1rBd Unte43lMSH+XMGDMKUe4X6yDmDdrJp4dNOUZGNTYkCecbWZBqGpJnMCn3E4OtbbY lc6oc9BaocYo+WM34rSuVZQ30wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKKE2P4I TApaHibx7JSc8J9LmqbLMB8GA1UdIwQYMBaAFGgRBJBs+T2kO2xbITWgJBSaj8BX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Njc1MS8wRjg3MDJCQUY3 QjIxMUVDQjJBRTYzMkVDNEY5QUUwMi9hQkVFa0d6NVBhUTdiRnNoTmFBa0ZKcVB3 RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FCRUVrR3o1UGFRN2JGc2hOYUFrRkpxUHdGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Njc1MS8wRjg3MDJCQUY3QjIxMUVDQjJBRTYzMkVDNEY5QUUwMi9hQkVFa0d6NVBh UTdiRnNoTmFBa0ZKcVB3RmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUDOSFhemGFJwnbkOUIpiy7SAi0wzrdUHC2e+saKrV0j5m23FSKArw VqygTbw5bu2IlEThoKNju8Y7mSGzAeo8XczmBEINy15uuGrEW8BPBs1YnOW8k6Yd cI/jiuEYABVU4oFp0hXo5/yrMivBcCE3OGvN/Y9HuIwfC2MpCt6K7u60GFlJNGzg 5wEE6mOCdi5/ddcei66hwIAVu+uEWacL2b7gEUy5dBxl73cGtySRRKgAJKSh128A z5+GDqa5TbBGOIV5f+tR+3D+X7cPo7k2vTru3q97qnTGTwzY8vD2zWh8Xk+daVhH Kzx6lStR5A2EfywHMUFsz/kF+cVRZaLj -----END CERTIFICATE-----Generated at Tue May 13 01:47:05 2025 by rpki-client