$ rpki-client -vvf rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.mft File: aQVBhnn0PKiIyyO_K8sr5pnAw2Y.mft (raw, json) Hash identifier: zFQzcKoTE0HcRL9d5AgxjCizEDAcCswkCi+c064sxJs= Subject key identifier: 83:0A:7A:E5:31:29:BF:59:1A:A0:1F:D3:54:80:30:D9:25:99:E2:B0 Authority key identifier: 69:05:41:86:79:F4:3C:A8:88:CB:23:BF:2B:CB:2B:E6:99:C0:C3:66 Certificate issuer: /CN=A9183010/serialNumber=6905418679F43CA888CB23BF2BCB2BE699C0C366 Certificate serial: 3483 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.mft Manifest number: 347B Signing time: Wed 14 May 2025 15:08:56 +0000 Manifest this update: Wed 14 May 2025 15:08:56 +0000 Manifest next update: Wed 21 May 2025 15:08:56 +0000 Files and hashes: 1: aQVBhnn0PKiIyyO_K8sr5pnAw2Y.crl (hash: PqfSw/PHIKjvGnYLzpY9V5n9DTcHy9B6+JKjRu/Tv4g=) 2: 99144F3C03DB11F09FBAF32DC4F9AE02.roa (hash: 2QPhy8okP7a5b727IcPA6kh/C7CWYx/FM2MEQeDTjxM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.crl rsync://rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 15:08:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13443 (0x3483) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183010, serialNumber=6905418679F43CA888CB23BF2BCB2BE699C0C366 Validity Not Before: May 14 15:08:56 2025 GMT Not After : May 21 15:08:56 2025 GMT Subject: CN=6824b208-a20a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f9:76:48:af:fd:d8:f7:fc:7e:2f:af:63:00: 58:92:18:87:cd:17:80:54:be:8c:75:74:d4:75:98: 9d:b5:3e:9c:ea:44:71:57:09:fb:1d:cf:96:29:c0: ff:b0:9c:56:85:0a:cf:94:d6:70:27:ec:11:a2:20: 13:ae:8a:60:22:a1:d9:d1:92:5f:be:e6:44:45:1c: c8:50:7f:6a:49:fc:78:06:3b:dc:0c:97:87:96:5d: b7:3a:46:a7:a3:18:d9:1a:9a:f5:1f:53:3f:90:1e: 91:12:81:1f:51:27:c4:7f:ac:82:45:dc:ab:4c:cc: 14:37:4b:33:22:c9:05:c8:dd:bc:f8:94:de:a6:2b: 6a:7d:8f:0d:e6:60:dc:cc:38:01:1d:38:3c:94:8b: e0:5f:3d:e0:fc:3c:ed:0b:9e:53:42:8f:b8:df:74: bb:ed:0d:34:82:24:6a:7e:b2:90:9e:ab:71:6a:83: 3b:77:8f:ad:5b:5f:55:9e:b7:44:4d:06:1a:d5:92: 86:82:ec:54:c8:25:ce:32:32:b6:65:c6:e0:d6:ec: 2c:2d:fc:c1:b3:c8:d3:b5:b8:21:fa:e1:bd:c1:45: e2:53:bb:56:a5:b6:bf:f5:ee:62:4f:87:f6:01:bc: ff:a8:b6:c2:b8:63:e5:93:f5:67:03:a0:aa:ea:58: c0:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:0A:7A:E5:31:29:BF:59:1A:A0:1F:D3:54:80:30:D9:25:99:E2:B0 X509v3 Authority Key Identifier: keyid:69:05:41:86:79:F4:3C:A8:88:CB:23:BF:2B:CB:2B:E6:99:C0:C3:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:48:9b:6a:f0:0d:40:a7:0b:80:df:4f:bc:c0:8c:9a:0b:52: b2:0e:27:6f:90:cb:86:f2:0a:d1:95:14:ee:20:2c:ab:36:57: d0:c0:69:52:40:d0:73:79:44:ed:73:86:9d:e3:73:43:5d:d9: 65:93:b3:2f:22:85:68:2b:ec:5c:db:bc:a3:a2:11:64:f7:03: ba:ca:26:47:53:45:14:a5:7d:33:61:f0:b9:a4:b0:bf:ce:a1: b6:28:29:3c:20:b7:20:2a:d0:3b:2b:3f:62:c6:0c:60:c5:5c: fc:b7:67:34:95:63:4e:f9:46:0e:17:cc:d1:93:44:38:2c:66: 8c:32:36:de:8f:ba:c2:71:f5:4e:ce:d5:18:ec:99:52:26:2f: 47:7d:41:a6:69:a8:f3:3c:7c:f5:89:f4:d7:a8:10:70:8a:d1: 1c:d8:e1:6b:bb:84:28:b0:fe:ce:2f:30:59:67:5c:f8:76:2b: 82:d1:d0:3d:c5:e6:3f:72:dc:6a:05:1c:f4:b6:35:e8:ba:d5: c0:17:c2:04:24:92:2a:26:57:07:63:76:4a:62:67:e1:a9:81: ed:37:d9:5d:ae:b5:12:d1:96:95:67:4c:29:fb:a8:f7:99:e1: 77:ef:ae:6c:1b:02:b9:92:e2:27:5d:d4:06:61:8b:dc:72:1c: 87:0f:04:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODMwMTAxMTAvBgNVBAUTKDY5MDU0MTg2NzlGNDNDQTg4OENCMjNCRjJCQ0IyQkU2 OTlDMEMzNjYwHhcNMjUwNTE0MTUwODU2WhcNMjUwNTIxMTUwODU2WjAYMRYwFAYD VQQDEw02ODI0YjIwOC1hMjBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwPl2SK/92Pf8fi+vYwBYkhiHzReAVL6MdXTUdZidtT6c6kRxVwn7Hc+WKcD/ sJxWhQrPlNZwJ+wRoiATropgIqHZ0ZJfvuZERRzIUH9qSfx4BjvcDJeHll23Okan oxjZGpr1H1M/kB6REoEfUSfEf6yCRdyrTMwUN0szIskFyN28+JTepitqfY8N5mDc zDgBHTg8lIvgXz3g/DztC55TQo+433S77Q00giRqfrKQnqtxaoM7d4+tW19VnrdE TQYa1ZKGguxUyCXOMjK2Zcbg1uwsLfzBs8jTtbgh+uG9wUXiU7tWpba/9e5iT4f2 Abz/qLbCuGPlk/VnA6Cq6ljAJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIMKeuUx Kb9ZGqAf01SAMNklmeKwMB8GA1UdIwQYMBaAFGkFQYZ59DyoiMsjvyvLK+aZwMNm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzAxMC81RjFEREIxMjFE QTMxMUUyOTNCMTlFOTgwOEIwMkNEMi9hUVZCaG5uMFBLaUl5eU9fSzhzcjVwbkF3 MlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FRVkJobm4wUEtpSXl5T19LOHNyNXBuQXcyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzAxMC81RjFEREIxMjFEQTMxMUUyOTNCMTlFOTgwOEIwMkNEMi9hUVZCaG5uMFBL aUl5eU9fSzhzcjVwbkF3MlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBySJtq8A1ApwuA30+8wIyaC1KyDidvkMuG8grRlRTuICyrNlfQwGlS QNBzeUTtc4ad43NDXdllk7MvIoVoK+xc27yjohFk9wO6yiZHU0UUpX0zYfC5pLC/ zqG2KCk8ILcgKtA7Kz9ixgxgxVz8t2c0lWNO+UYOF8zRk0Q4LGaMMjbej7rCcfVO ztUY7JlSJi9HfUGmaajzPHz1ifTXqBBwitEc2OFru4QosP7OLzBZZ1z4diuC0dA9 xeY/ctxqBRz0tjXoutXAF8IEJJIqJlcHY3ZKYmfhqYHtN9ldrrUS0ZaVZ0wp+6j3 meF3765sGwK5kuInXdQGYYvcchyHDwR5 -----END CERTIFICATE-----Generated at Wed May 14 18:30:33 2025 by rpki-client