$ rpki-client -vvf rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft File: aZoPjRWjT1mVbLSADGxEBNwOvV0.mft (raw, json) Hash identifier: omnmRzw+jx7A8GV6sou1agXOcd5ggBnZDGXTwInctPg= Subject key identifier: 6C:F0:C2:1D:DD:58:48:64:86:43:D6:69:C0:F5:27:65:94:28:17:47 Authority key identifier: 69:9A:0F:8D:15:A3:4F:59:95:6C:B4:80:0C:6C:44:04:DC:0E:BD:5D Certificate issuer: /CN=A915C1FE/serialNumber=699A0F8D15A34F59956CB4800C6C4404DC0EBD5D Certificate serial: 34A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZoPjRWjT1mVbLSADGxEBNwOvV0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft Manifest number: 3488 Signing time: Mon 12 May 2025 15:16:26 +0000 Manifest this update: Mon 12 May 2025 15:16:25 +0000 Manifest next update: Mon 19 May 2025 15:16:25 +0000 Files and hashes: 1: aZoPjRWjT1mVbLSADGxEBNwOvV0.crl (hash: 4vKs21UYdiBOkxTLdAvfAtKMNgl6aPk/56OCDu/+B20=) 2: 6BC5DC4AB10511E591A3E484C4F9AE02.roa (hash: H9fsyURTb8qh5DVJOvXZinGpj/nUZcubrPdBUX+wonM=) 3: 6A9E6940B10511E591A3E484C4F9AE02.roa (hash: jaRSKEufT55PHq8OPoLG/qgSfjEXVPXjl00275Oa/lI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.crl rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZoPjRWjT1mVbLSADGxEBNwOvV0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 15:16:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13477 (0x34a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C1FE, serialNumber=699A0F8D15A34F59956CB4800C6C4404DC0EBD5D Validity Not Before: May 12 15:16:25 2025 GMT Not After : May 19 15:16:25 2025 GMT Subject: CN=682210ca-a2b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:23:d6:8b:0a:89:80:99:ec:06:7c:17:3b:d0: ff:ca:03:d6:b4:16:22:8e:3d:30:b6:b9:86:7d:40: 8c:40:41:2b:bf:8c:e9:c4:e4:c8:92:b4:3e:fb:18: d3:8b:3b:4a:b0:35:31:20:19:7c:30:e8:04:e6:93: 5b:4e:48:c2:8f:ff:cc:9b:20:17:ea:d7:53:30:34: 92:ad:30:ab:27:d6:81:aa:34:78:71:ac:8f:da:43: 5b:13:75:48:2d:bc:ae:3e:60:40:0f:5e:ad:2b:7b: 0e:b2:6b:f0:40:40:fa:48:60:2f:9e:f9:d1:e3:86: d6:ae:d3:e4:26:08:e2:f8:4a:b1:03:72:e0:bc:a6: 0c:46:e7:42:49:94:7c:fb:5e:f1:32:0f:f3:f5:c0: d0:e2:be:7f:23:7e:04:6b:ae:4d:c1:1c:7d:63:c1: dd:1e:41:cd:a5:20:5b:57:90:c5:89:50:00:41:0c: 77:11:f8:74:be:9c:85:95:b3:80:a9:0c:a5:7d:6b: 76:e9:62:fa:90:96:0a:3f:a0:40:15:fc:76:80:ca: 8b:1f:38:a2:70:73:51:5f:a9:ed:ae:11:58:e6:e0: 5c:92:68:2a:66:05:bb:1a:62:77:9f:ca:37:85:43: d4:75:3a:80:6a:65:17:9d:2f:49:fc:09:23:f0:e7: 14:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:F0:C2:1D:DD:58:48:64:86:43:D6:69:C0:F5:27:65:94:28:17:47 X509v3 Authority Key Identifier: keyid:69:9A:0F:8D:15:A3:4F:59:95:6C:B4:80:0C:6C:44:04:DC:0E:BD:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZoPjRWjT1mVbLSADGxEBNwOvV0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:4e:89:ab:3b:fd:cb:bb:f5:75:56:c5:ff:fb:af:04:39:1d: 39:81:26:99:95:92:0d:80:b1:28:79:5e:57:c9:aa:3f:e9:18: 4e:11:8b:8c:9e:75:15:70:71:36:bb:31:81:ac:1e:7e:5f:06: 72:1f:a3:ea:9d:25:fb:4b:76:b2:b5:77:2d:f7:0a:09:05:fd: 34:e4:d4:34:1c:ba:83:35:49:fd:b7:51:37:af:08:89:e1:91: f3:23:d6:8e:64:3a:2b:d0:7c:f9:87:68:f8:58:d6:a4:1d:e1: ac:e8:9c:62:83:0a:c7:e9:47:d0:ad:34:fb:99:a8:6f:c4:10: 70:3e:84:d7:66:79:17:79:d6:98:6f:2c:66:01:50:48:ac:8e: 1d:8c:7e:fb:af:bc:a9:ee:ab:1e:32:6b:1b:b8:08:39:af:12: bb:13:22:78:97:b4:3e:2d:bd:04:02:99:ba:8d:2e:73:8f:46: 7b:96:21:e2:a8:6e:9f:fb:b8:58:6d:d6:f4:31:e0:1f:a9:c4: b0:d3:91:7c:04:02:be:71:7c:2d:d5:05:9a:50:0d:8f:af:fd: b4:f1:1f:81:f2:a4:2b:af:6f:bd:21:bc:bf:f0:bf:bc:6e:29: b6:8e:68:98:8f:82:63:0e:ab:da:cc:b0:6b:00:33:fe:fc:07: 2a:79:c5:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUMxRkUxMTAvBgNVBAUTKDY5OUEwRjhEMTVBMzRGNTk5NTZDQjQ4MDBDNkM0NDA0 REMwRUJENUQwHhcNMjUwNTEyMTUxNjI1WhcNMjUwNTE5MTUxNjI1WjAYMRYwFAYD VQQDEw02ODIyMTBjYS1hMmIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArSPWiwqJgJnsBnwXO9D/ygPWtBYijj0wtrmGfUCMQEErv4zpxOTIkrQ++xjT iztKsDUxIBl8MOgE5pNbTkjCj//MmyAX6tdTMDSSrTCrJ9aBqjR4cayP2kNbE3VI LbyuPmBAD16tK3sOsmvwQED6SGAvnvnR44bWrtPkJgji+EqxA3LgvKYMRudCSZR8 +17xMg/z9cDQ4r5/I34Ea65NwRx9Y8HdHkHNpSBbV5DFiVAAQQx3Efh0vpyFlbOA qQylfWt26WL6kJYKP6BAFfx2gMqLHziicHNRX6ntrhFY5uBckmgqZgW7GmJ3n8o3 hUPUdTqAamUXnS9J/Akj8OcUiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGzwwh3d WEhkhkPWacD1J2WUKBdHMB8GA1UdIwQYMBaAFGmaD40Vo09ZlWy0gAxsRATcDr1d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzFGRS9EMTE4QUFCQTFE QUExMUUyQTJFQ0NBQTYwOEIwMkNEMi9hWm9QalJXalQxbVZiTFNBREd4RUJOd092 VjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Fab1BqUldqVDFtVmJMU0FER3hFQk53T3ZWMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QzFGRS9EMTE4QUFCQTFEQUExMUUyQTJFQ0NBQTYwOEIwMkNEMi9hWm9QalJXalQx bVZiTFNBREd4RUJOd092VjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0TomrO/3Lu/V1VsX/+68EOR05gSaZlZINgLEoeV5Xyao/6RhOEYuM nnUVcHE2uzGBrB5+XwZyH6PqnSX7S3aytXct9woJBf005NQ0HLqDNUn9t1E3rwiJ 4ZHzI9aOZDor0Hz5h2j4WNakHeGs6JxigwrH6UfQrTT7mahvxBBwPoTXZnkXedaY byxmAVBIrI4djH77r7yp7qseMmsbuAg5rxK7EyJ4l7Q+Lb0EApm6jS5zj0Z7liHi qG6f+7hYbdb0MeAfqcSw05F8BAK+cXwt1QWaUA2Pr/208R+B8qQrr2+9Iby/8L+8 bim2jmiYj4JjDqvazLBrADP+/AcqecVI -----END CERTIFICATE-----Generated at Tue May 13 06:53:39 2025 by rpki-client