$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.mft File: Aqo6dsRZSXsbRfJukESsxvLoBE8.mft (raw, json) Hash identifier: fcR1Jjt4+5zdxNwPrxXYcQUtoWkZyIr4vr4k1tETRic= Subject key identifier: DC:9E:62:3A:E4:E8:6B:78:EA:3C:4E:87:C5:F8:A1:9C:28:34:E9:18 Authority key identifier: 02:AA:3A:76:C4:59:49:7B:1B:45:F2:6E:90:44:AC:C6:F2:E8:04:4F Certificate issuer: /CN=A91BA5BA/serialNumber=02AA3A76C459497B1B45F26E9044ACC6F2E8044F Certificate serial: 0369 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aqo6dsRZSXsbRfJukESsxvLoBE8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.mft Manifest number: 0358 Signing time: Tue 13 May 2025 00:49:12 +0000 Manifest this update: Tue 13 May 2025 00:49:12 +0000 Manifest next update: Tue 20 May 2025 00:49:12 +0000 Files and hashes: 1: Aqo6dsRZSXsbRfJukESsxvLoBE8.crl (hash: iMO2DtcjXz5RYPX9cMtKG2BIh+4/xvTULnE0jNNwCTA=) 2: 87F2D334F2D811EC8F663D52C4F9AE02.roa (hash: /NuTqSUBTeFJ9CyVzXuBIUWT5gpveEGDRyxNvLNEQIM=) 3: 5FFA5548B5A311EEA95C5732C4F9AE02.roa (hash: GQNcpw13U6rTwcbD2+x10d2Oo9BkdgjUG3Bpk2yiXDc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.crl rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aqo6dsRZSXsbRfJukESsxvLoBE8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 00:49:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 873 (0x369) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA5BA, serialNumber=02AA3A76C459497B1B45F26E9044ACC6F2E8044F Validity Not Before: May 13 00:49:12 2025 GMT Not After : May 20 00:49:12 2025 GMT Subject: CN=68229708-e424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a7:45:45:30:f3:31:8f:3d:15:10:a0:70:da: dd:d3:06:56:3d:b7:d8:ce:bb:95:38:ca:30:44:eb: 56:d0:c7:99:95:88:73:90:5a:49:ac:11:f0:31:d8: 05:bf:2c:8b:74:69:d2:db:42:61:02:b3:0a:09:40: df:01:98:59:11:83:54:ee:ec:32:e4:b7:dd:23:4f: 50:06:05:27:98:8b:31:35:cf:f7:8b:51:7b:eb:c9: 65:e2:e9:30:a7:e1:a2:7d:fe:ca:2a:64:5a:b6:66: 92:cb:31:93:a0:0a:59:0f:6c:0d:3c:a9:b1:49:83: e4:c2:cd:4a:cc:94:68:c7:4b:40:df:f4:1d:a2:d9: f6:02:4d:bc:4d:67:44:c7:f7:4d:42:1d:1a:b3:6b: 61:1d:1d:ed:c3:b7:de:a9:85:40:0f:ea:c8:7b:e7: 6f:90:6b:04:af:9d:1e:5a:02:d9:4a:e1:e5:ef:1e: 59:7e:c0:cd:12:1f:cd:19:fa:f0:8a:7a:30:80:b3: ce:bc:51:c4:40:02:7e:45:22:d6:70:f2:99:67:be: 48:5c:7b:ca:5a:1a:28:98:f7:fc:58:76:b1:b3:e6: 6a:d1:3f:ea:59:1d:c3:d9:b8:64:50:57:3d:78:15: db:ea:87:fb:e3:ea:28:bb:7d:4b:df:87:01:db:ae: e6:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:9E:62:3A:E4:E8:6B:78:EA:3C:4E:87:C5:F8:A1:9C:28:34:E9:18 X509v3 Authority Key Identifier: keyid:02:AA:3A:76:C4:59:49:7B:1B:45:F2:6E:90:44:AC:C6:F2:E8:04:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aqo6dsRZSXsbRfJukESsxvLoBE8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:37:de:71:af:3c:3f:7b:44:32:84:91:48:e2:69:3b:7b:cf: f7:4c:45:9c:87:e1:f9:ad:1c:0a:78:2a:53:88:5a:da:f0:ed: df:d4:07:1d:af:3a:13:ab:a9:8e:22:c3:8f:44:b2:c9:28:0d: 5d:fa:70:0b:a9:21:bb:d4:f1:16:59:2a:d0:01:0a:f3:1c:a8: c9:c3:e1:05:c2:cf:f5:28:c1:b5:84:8c:80:eb:f3:0b:80:c0: ce:7d:4a:51:18:9c:ee:57:6c:c1:50:d0:19:a6:28:b9:5a:04: d4:ef:7d:5c:e5:0e:93:a9:b7:b9:00:e3:79:1d:33:32:54:fc: 71:8e:1a:44:99:44:97:4e:db:72:4d:19:a1:53:79:e9:4b:dc: 26:53:6d:b5:88:f9:77:67:4d:4e:19:16:f1:ad:2e:07:b4:85: 3b:3d:70:f3:c1:95:7e:5f:43:b1:58:f2:7e:ba:21:63:79:17: 26:54:6e:ee:79:08:95:f3:6e:f4:e3:46:1c:5e:36:78:9b:c0: a1:1e:24:1f:f6:65:11:c6:b2:54:82:26:1a:e7:d9:ab:87:58: 9d:69:c8:06:3a:e6:d4:5d:4a:f9:34:ca:5c:fc:d1:45:53:f9: f4:07:c2:69:0b:17:c8:a7:0e:a1:28:86:fb:8c:2d:68:68:80: be:29:bb:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkE1QkExMTAvBgNVBAUTKDAyQUEzQTc2QzQ1OTQ5N0IxQjQ1RjI2RTkwNDRBQ0M2 RjJFODA0NEYwHhcNMjUwNTEzMDA0OTEyWhcNMjUwNTIwMDA0OTEyWjAYMRYwFAYD VQQDEw02ODIyOTcwOC1lNDI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzadFRTDzMY89FRCgcNrd0wZWPbfYzruVOMowROtW0MeZlYhzkFpJrBHwMdgF vyyLdGnS20JhArMKCUDfAZhZEYNU7uwy5LfdI09QBgUnmIsxNc/3i1F768ll4ukw p+Giff7KKmRatmaSyzGToApZD2wNPKmxSYPkws1KzJRox0tA3/Qdotn2Ak28TWdE x/dNQh0as2thHR3tw7feqYVAD+rIe+dvkGsEr50eWgLZSuHl7x5ZfsDNEh/NGfrw inowgLPOvFHEQAJ+RSLWcPKZZ75IXHvKWhoomPf8WHaxs+Zq0T/qWR3D2bhkUFc9 eBXb6of74+oou31L34cB267miwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNyeYjrk 6Gt46jxOh8X4oZwoNOkYMB8GA1UdIwQYMBaAFAKqOnbEWUl7G0XybpBErMby6ARP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTVCQS80MzI2Q0JDMEI3 Q0QxMUVDQUY2ODEzMzVDNEY5QUUwMi9BcW82ZHNSWlNYc2JSZkp1a0VTc3h2TG9C RTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FxbzZkc1JaU1hzYlJmSnVrRVNzeHZMb0JFOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTVCQS80MzI2Q0JDMEI3Q0QxMUVDQUY2ODEzMzVDNEY5QUUwMi9BcW82ZHNSWlNY c2JSZkp1a0VTc3h2TG9CRTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLN95xrzw/e0QyhJFI4mk7e8/3TEWch+H5rRwKeCpTiFra8O3f1Acd rzoTq6mOIsOPRLLJKA1d+nALqSG71PEWWSrQAQrzHKjJw+EFws/1KMG1hIyA6/ML gMDOfUpRGJzuV2zBUNAZpii5WgTU731c5Q6Tqbe5AON5HTMyVPxxjhpEmUSXTtty TRmhU3npS9wmU221iPl3Z01OGRbxrS4HtIU7PXDzwZV+X0OxWPJ+uiFjeRcmVG7u eQiV827040YcXjZ4m8ChHiQf9mURxrJUgiYa59mrh1idacgGOubUXUr5NMpc/NFF U/n0B8JpCxfIpw6hKIb7jC1oaIC+Kbva -----END CERTIFICATE-----Generated at Tue May 13 15:14:18 2025 by rpki-client