$ rpki-client -vvf rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft File: Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft (raw, json) Hash identifier: QWHqQJXD4F7NYDZtCMTeIX4o2RPRSPoPvGJaC59RWxk= Subject key identifier: C8:DC:DB:25:73:A3:4B:BF:02:58:B2:E3:09:21:8A:3A:A9:D8:84:7F Authority key identifier: 02:AE:84:F6:11:B7:E8:2F:D7:D6:FF:8F:45:2D:87:25:EF:48:90:88 Certificate issuer: /CN=A91642A0/serialNumber=02AE84F611B7E82FD7D6FF8F452D8725EF489088 Certificate serial: 0CCA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aq6E9hG36C_X1v-PRS2HJe9IkIg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft Manifest number: 0CA2 Signing time: Sat 10 May 2025 18:03:56 +0000 Manifest this update: Sat 10 May 2025 18:03:56 +0000 Manifest next update: Sat 17 May 2025 18:03:56 +0000 Files and hashes: 1: Aq6E9hG36C_X1v-PRS2HJe9IkIg.crl (hash: REitSgPyra1/lUPCvdPIsiRr7rCx4G9RbCQJA8qkyOQ=) 2: B0B70006B19211EC9EAAD44EC4F9AE02.roa (hash: iAcBe9JsIgejkunApnFizR8kcd9hvKFDEaA+fu50sDE=) 3: AFB0FFCCB19211EC9EAAD44EC4F9AE02.roa (hash: I0QziAIo3oazYojvFNhbt9C/zSWf1Md92KB9f4lH27c=) 4: 0EF0E842839E11EEA1892A12C4F9AE02.roa (hash: CTDwhtj/lvv2X5UcpQAPIBaNmpDgoQygeS9l2k6Fjz0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.crl rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aq6E9hG36C_X1v-PRS2HJe9IkIg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 18:03:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3274 (0xcca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91642A0, serialNumber=02AE84F611B7E82FD7D6FF8F452D8725EF489088 Validity Not Before: May 10 18:03:56 2025 GMT Not After : May 17 18:03:56 2025 GMT Subject: CN=681f950c-12b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:59:22:7b:2c:f5:09:c1:bb:a4:5a:e6:b7:29: fe:e6:57:7a:2e:79:f2:85:56:d3:7b:58:d6:f1:55: 6f:37:33:ef:80:bf:8e:00:bd:87:5f:c2:90:90:8d: d2:2d:b2:59:0a:d0:84:4a:b4:32:30:6b:6c:9f:0e: a2:18:bb:56:f5:f6:88:c5:04:e4:80:bc:d4:ce:a9: ec:d8:b5:cf:b1:be:68:31:f7:96:12:e2:36:de:a7: 95:b4:ce:d5:80:6d:d5:18:83:01:16:fe:cc:43:f1: d4:53:f2:2d:00:22:22:b5:82:94:36:22:07:f4:6c: b1:7d:9f:9c:84:f8:f9:4c:56:7f:e8:a9:29:0a:81: 2f:3d:b9:e8:b4:ee:54:fd:7c:74:85:1e:e6:6c:b6: 4b:cb:b6:98:d7:92:75:a8:1f:e9:1c:43:d5:a3:10: b9:2e:cc:f4:fc:8b:5e:fa:e3:05:12:07:95:fe:97: 80:cc:db:e3:54:e4:08:0a:da:b1:6a:c0:0e:ef:eb: 18:8e:18:11:0b:a3:fa:ed:00:d4:53:98:70:cc:c7: 75:80:9c:4a:3c:08:c5:27:a9:3e:38:7f:28:51:2e: 22:8c:5c:75:31:34:42:f6:90:96:49:d6:12:28:00: f4:24:e3:9d:b2:95:fe:95:93:ee:2d:4b:4a:c2:62: 18:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:DC:DB:25:73:A3:4B:BF:02:58:B2:E3:09:21:8A:3A:A9:D8:84:7F X509v3 Authority Key Identifier: keyid:02:AE:84:F6:11:B7:E8:2F:D7:D6:FF:8F:45:2D:87:25:EF:48:90:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aq6E9hG36C_X1v-PRS2HJe9IkIg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:26:d9:45:bd:62:2c:2b:f1:72:47:9a:b6:57:01:a0:3e:72: 78:9d:71:f3:45:e8:fb:cc:c2:e8:59:9c:82:f8:dc:46:74:60: f7:18:95:76:df:a0:e5:8d:aa:1d:a0:ee:82:4d:de:b7:e8:97: 07:73:6e:8e:2c:e7:cb:35:9a:8f:ec:76:22:22:bb:6a:66:ad: 87:04:94:d8:3a:19:53:e9:22:7b:65:21:1f:1f:2d:e4:34:93: 77:cf:1c:18:a3:5b:2c:9e:8f:87:b4:58:92:91:68:b3:43:e2: d4:bd:cc:f5:1c:9f:02:62:3a:eb:d5:56:b6:4b:ce:45:d0:55: 75:51:3e:4b:6b:db:8e:d2:14:f7:0d:60:a9:fc:f5:63:49:28: c4:da:5c:cd:e5:21:fd:05:30:ff:0a:91:c2:17:21:46:0d:96: e1:ce:f9:f5:1e:df:4a:85:03:c8:63:42:15:cf:a1:3e:b1:f7: 61:f4:62:92:ad:cc:0e:12:49:c6:f8:28:c9:84:d9:05:fb:ff: d5:57:f1:ff:e0:30:8d:cc:26:c7:0a:cc:a5:db:48:89:22:d5: 24:7a:d1:4a:c4:c0:df:fe:f3:7b:37:8c:ba:1c:e0:64:94:bc: 1a:69:92:8e:1a:2f:51:10:1e:9e:b6:41:ad:4b:1b:4a:07:e6: ed:cb:58:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQyQTAxMTAvBgNVBAUTKDAyQUU4NEY2MTFCN0U4MkZEN0Q2RkY4RjQ1MkQ4NzI1 RUY0ODkwODgwHhcNMjUwNTEwMTgwMzU2WhcNMjUwNTE3MTgwMzU2WjAYMRYwFAYD VQQDEw02ODFmOTUwYy0xMmIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvVkieyz1CcG7pFrmtyn+5ld6LnnyhVbTe1jW8VVvNzPvgL+OAL2HX8KQkI3S LbJZCtCESrQyMGtsnw6iGLtW9faIxQTkgLzUzqns2LXPsb5oMfeWEuI23qeVtM7V gG3VGIMBFv7MQ/HUU/ItACIitYKUNiIH9GyxfZ+chPj5TFZ/6KkpCoEvPbnotO5U /Xx0hR7mbLZLy7aY15J1qB/pHEPVoxC5Lsz0/Ite+uMFEgeV/peAzNvjVOQICtqx asAO7+sYjhgRC6P67QDUU5hwzMd1gJxKPAjFJ6k+OH8oUS4ijFx1MTRC9pCWSdYS KAD0JOOdspX+lZPuLUtKwmIYSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMjc2yVz o0u/Aliy4wkhijqp2IR/MB8GA1UdIwQYMBaAFAKuhPYRt+gv19b/j0UthyXvSJCI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDJBMC9DQTdEMTE2MkY2 NzYxMUU5OTBCQUEyMjJDNEY5QUUwMi9BcTZFOWhHMzZDX1gxdi1QUlMySEplOUlr SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FxNkU5aEczNkNfWDF2LVBSUzJISmU5SWtJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDJBMC9DQTdEMTE2MkY2NzYxMUU5OTBCQUEyMjJDNEY5QUUwMi9BcTZFOWhHMzZD X1gxdi1QUlMySEplOUlrSWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8JtlFvWIsK/FyR5q2VwGgPnJ4nXHzRej7zMLoWZyC+NxGdGD3GJV2 36DljaodoO6CTd636JcHc26OLOfLNZqP7HYiIrtqZq2HBJTYOhlT6SJ7ZSEfHy3k NJN3zxwYo1ssno+HtFiSkWizQ+LUvcz1HJ8CYjrr1Va2S85F0FV1UT5La9uO0hT3 DWCp/PVjSSjE2lzN5SH9BTD/CpHCFyFGDZbhzvn1Ht9KhQPIY0IVz6E+sfdh9GKS rcwOEknG+CjJhNkF+//VV/H/4DCNzCbHCsyl20iJItUketFKxMDf/vN7N4y6HOBk lLwaaZKOGi9REB6etkGtSxtKB+bty1jr -----END CERTIFICATE-----Generated at Mon May 12 16:56:12 2025 by rpki-client