$ rpki-client -vvf rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft File: Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft (raw, json) Hash identifier: Ca+LAAuemDPb3fBIWJdIYDm9TFmnQeqZHXUPVkx33Qk= Subject key identifier: 9C:E7:8A:7D:5B:63:C1:7C:F4:4E:AE:90:CE:02:F5:89:10:0E:42:97 Authority key identifier: 03:1E:29:F2:6E:78:32:81:B7:68:E8:91:08:53:14:4D:F1:EE:55:34 Certificate issuer: /CN=A91805BF/serialNumber=031E29F26E783281B768E8910853144DF1EE5534 Certificate serial: 0777 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft Manifest number: 0771 Signing time: Sat 10 May 2025 21:08:54 +0000 Manifest this update: Sat 10 May 2025 21:08:54 +0000 Manifest next update: Sat 17 May 2025 21:08:54 +0000 Files and hashes: 1: Ax4p8m54MoG3aOiRCFMUTfHuVTQ.crl (hash: tQMtGGiHdclbqR51WBmFvYgrc1d5b1qADQJCEbYM4jA=) 2: B89D979A13F411EB8BF49553C4F9AE02.roa (hash: uA//4m9RZCjXQutR/xTMIccaTwt8NsdxBBjUfw2F3iI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.crl rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 21:08:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1911 (0x777) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91805BF, serialNumber=031E29F26E783281B768E8910853144DF1EE5534 Validity Not Before: May 10 21:08:54 2025 GMT Not After : May 17 21:08:54 2025 GMT Subject: CN=681fc066-c07a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:54:44:85:47:16:74:ec:9a:ba:ce:17:44:58: a8:f1:69:05:b4:7c:63:34:c1:06:45:21:2a:90:11: 9d:92:18:c8:70:33:44:d4:ff:f5:2e:79:d3:02:1b: f6:50:02:2c:90:fc:eb:cd:ca:8e:1a:4b:e7:95:90: 7c:67:41:f4:6a:21:94:c1:4a:1a:41:4a:3b:53:de: 0d:ad:28:2a:99:66:be:18:fd:af:c7:38:df:7e:8b: 66:90:a0:1d:d3:ba:11:32:13:c5:b2:c0:24:84:25: 1b:74:1c:26:d3:36:21:13:6b:fd:2d:e4:5c:be:ba: bf:53:da:2b:93:91:68:2d:ad:d3:47:de:83:9a:d0: d0:ad:e3:f5:97:57:1f:d2:26:74:28:ad:67:40:b7: 22:ae:fb:5f:79:36:af:26:84:ce:b0:f5:b1:ae:69: bd:25:bd:99:65:8b:bd:20:ae:30:72:39:0f:e6:48: 9a:f0:ff:d8:83:18:94:d5:48:52:bc:ce:fe:c7:a9: 9e:21:ad:8a:bf:b7:f3:14:c3:5d:37:f7:0b:b4:ff: ab:65:ad:cc:b4:76:51:98:7d:36:ea:38:89:23:cd: c5:1a:87:02:3d:4f:3e:f0:ee:8a:73:5e:b7:c5:e6: c1:fc:dc:ac:82:c8:27:53:48:8a:68:f3:69:f5:21: f1:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:E7:8A:7D:5B:63:C1:7C:F4:4E:AE:90:CE:02:F5:89:10:0E:42:97 X509v3 Authority Key Identifier: keyid:03:1E:29:F2:6E:78:32:81:B7:68:E8:91:08:53:14:4D:F1:EE:55:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:03:4c:57:7f:32:20:aa:b8:a9:fc:94:f2:b6:47:16:e6:38: df:e9:46:58:66:48:b0:32:3e:ec:72:1e:ea:09:ef:b9:3b:f4: 7c:93:e8:0d:d1:68:c7:8f:53:3f:dc:bf:a5:3d:f0:ed:5b:ab: c9:b7:96:04:97:8c:3e:eb:89:55:a7:7f:74:d3:3c:7f:ba:40: bb:41:23:3b:1f:73:49:b5:af:39:13:15:8a:a9:11:29:9d:62: 7c:b5:a2:24:a2:b2:32:65:95:26:b3:d5:2c:19:c4:28:da:1d: b7:76:82:fa:f2:bf:41:92:12:36:4a:88:39:ed:09:68:a1:bd: ab:26:9f:34:cd:81:04:52:5c:37:e8:35:49:5d:fa:9a:c4:3a: 3d:5e:76:32:e8:4d:87:41:ed:cd:c0:9f:21:f5:73:cf:57:54: 4b:26:79:6a:49:a6:00:73:3f:37:43:2a:c2:f0:ba:c6:59:cd: 63:a9:ff:5c:bc:3b:ed:99:fd:63:c7:b8:b8:89:fe:4c:38:7d: 9e:b1:09:df:fa:da:0b:a0:6d:82:96:2a:c8:67:53:13:95:a3: 78:6e:7f:0e:ec:a5:28:10:b5:27:dd:bd:0c:0e:5d:70:03:0b: 81:9d:52:8d:19:b1:f4:bb:93:eb:5f:ae:c4:b2:3e:f2:b5:b5: e6:2e:2d:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB3cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA1QkYxMTAvBgNVBAUTKDAzMUUyOUYyNkU3ODMyODFCNzY4RTg5MTA4NTMxNDRE RjFFRTU1MzQwHhcNMjUwNTEwMjEwODU0WhcNMjUwNTE3MjEwODU0WjAYMRYwFAYD VQQDEw02ODFmYzA2Ni1jMDdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqFREhUcWdOyaus4XRFio8WkFtHxjNMEGRSEqkBGdkhjIcDNE1P/1LnnTAhv2 UAIskPzrzcqOGkvnlZB8Z0H0aiGUwUoaQUo7U94NrSgqmWa+GP2vxzjffotmkKAd 07oRMhPFssAkhCUbdBwm0zYhE2v9LeRcvrq/U9ork5FoLa3TR96DmtDQreP1l1cf 0iZ0KK1nQLcirvtfeTavJoTOsPWxrmm9Jb2ZZYu9IK4wcjkP5kia8P/YgxiU1UhS vM7+x6meIa2Kv7fzFMNdN/cLtP+rZa3MtHZRmH026jiJI83FGocCPU8+8O6Kc163 xebB/NysgsgnU0iKaPNp9SHxBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJznin1b Y8F89E6ukM4C9YkQDkKXMB8GA1UdIwQYMBaAFAMeKfJueDKBt2jokQhTFE3x7lU0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDVCRi9GMTMzQkRBQzEz RjIxMUVCOUJFRkNENTFDNEY5QUUwMi9BeDRwOG01NE1vRzNhT2lSQ0ZNVVRmSHVW VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0F4NHA4bTU0TW9HM2FPaVJDRk1VVGZIdVZUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDVCRi9GMTMzQkRBQzEzRjIxMUVCOUJFRkNENTFDNEY5QUUwMi9BeDRwOG01NE1v RzNhT2lSQ0ZNVVRmSHVWVFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwA0xXfzIgqrip/JTytkcW5jjf6UZYZkiwMj7sch7qCe+5O/R8k+gN 0WjHj1M/3L+lPfDtW6vJt5YEl4w+64lVp3900zx/ukC7QSM7H3NJta85ExWKqREp nWJ8taIkorIyZZUms9UsGcQo2h23doL68r9BkhI2Sog57Qloob2rJp80zYEEUlw3 6DVJXfqaxDo9XnYy6E2HQe3NwJ8h9XPPV1RLJnlqSaYAcz83QyrC8LrGWc1jqf9c vDvtmf1jx7i4if5MOH2esQnf+toLoG2ClirIZ1MTlaN4bn8O7KUoELUn3b0MDl1w AwuBnVKNGbH0u5PrX67Esj7ytbXmLi3z -----END CERTIFICATE-----Generated at Sun May 11 18:59:27 2025 by rpki-client