$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/aGoAVxZNFDjsWVhtqLqlRl_YKcc.mft File: aGoAVxZNFDjsWVhtqLqlRl_YKcc.mft (raw, json) Hash identifier: XzFAflQqHO8z5w3yIATQD1GqbgcWArsZTCitmEUwHco= Subject key identifier: 4A:1D:E4:43:1E:26:15:FA:9C:97:89:F3:A6:42:AE:7A:21:5C:CE:9B Authority key identifier: 68:6A:00:57:16:4D:14:38:EC:59:58:6D:A8:BA:A5:46:5F:D8:29:C7 Certificate issuer: /CN=A91EA9BD/serialNumber=686A0057164D1438EC59586DA8BAA5465FD829C7 Certificate serial: 30A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aGoAVxZNFDjsWVhtqLqlRl_YKcc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/aGoAVxZNFDjsWVhtqLqlRl_YKcc.mft Manifest number: 30A2 Signing time: Thu 08 May 2025 15:29:10 +0000 Manifest this update: Thu 08 May 2025 15:29:09 +0000 Manifest next update: Thu 15 May 2025 15:29:09 +0000 Files and hashes: 1: aGoAVxZNFDjsWVhtqLqlRl_YKcc.crl (hash: tmAlP2wijVe71ozhFicrYLfDQ3exmVjraM2sli0tuFY=) 2: 93C0837AA52911EC9D2DAE83C4F9AE02.roa (hash: QijzfOAskdpqspHv2hl6DWJmVGpVIoUXprNfU2Pxi8k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/aGoAVxZNFDjsWVhtqLqlRl_YKcc.crl rsync://rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/aGoAVxZNFDjsWVhtqLqlRl_YKcc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aGoAVxZNFDjsWVhtqLqlRl_YKcc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 15:29:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12454 (0x30a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA9BD, serialNumber=686A0057164D1438EC59586DA8BAA5465FD829C7 Validity Not Before: May 8 15:29:09 2025 GMT Not After : May 15 15:29:09 2025 GMT Subject: CN=681ccdc6-8302 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:98:83:70:ee:04:e9:6f:98:1b:d6:6f:8a:3c: 8f:35:3f:c0:9f:2f:9a:f8:64:70:96:b8:7a:ee:8b: e0:ea:07:5d:ca:8e:cd:8d:3b:5a:3b:46:85:7e:3b: 17:08:5a:ff:98:f0:8c:ac:af:cf:ef:69:06:fa:a8: 3f:24:dd:cf:81:a8:f9:6d:ad:05:03:19:7e:5c:c3: 80:b6:d4:68:0c:43:e2:e7:61:77:6d:e2:9b:fe:c7: 32:48:82:1f:97:35:9e:8c:a9:0a:de:78:ac:0a:87: fe:90:2e:da:99:e2:fd:e3:b9:62:4a:db:80:7f:f6: 1a:b4:ab:5b:f4:a0:be:06:f3:f5:f3:cb:99:c5:87: f8:72:de:b7:fd:99:ce:23:ae:45:47:da:09:f3:ef: 9d:da:e6:4e:2a:35:3e:80:4a:61:92:56:17:aa:fc: b6:b2:6c:df:cd:af:8f:7a:1f:a2:0d:c4:68:4b:d2: 01:d5:28:01:bc:83:9e:c4:c1:f4:ce:06:ae:96:73: 34:1e:4f:bd:69:8a:1b:7d:37:2f:d2:ba:f7:e7:c1: 57:6f:f4:e6:8d:38:e1:d7:75:73:5d:53:bd:51:db: ba:a7:61:09:04:82:f7:f7:a6:a4:74:4a:05:63:d5: bc:dd:a4:ee:9c:8d:f9:ba:92:a0:08:4b:3f:7c:71: c8:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:1D:E4:43:1E:26:15:FA:9C:97:89:F3:A6:42:AE:7A:21:5C:CE:9B X509v3 Authority Key Identifier: keyid:68:6A:00:57:16:4D:14:38:EC:59:58:6D:A8:BA:A5:46:5F:D8:29:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/aGoAVxZNFDjsWVhtqLqlRl_YKcc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aGoAVxZNFDjsWVhtqLqlRl_YKcc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/aGoAVxZNFDjsWVhtqLqlRl_YKcc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:ba:55:39:e9:7f:23:06:55:58:d5:86:81:2a:62:7e:1c:8e: 34:05:a4:36:3d:e5:93:13:54:c2:9e:95:b2:6a:7c:60:fc:2d: 3d:60:0d:c9:86:e2:0c:b4:21:56:a0:ce:0c:3a:a9:10:21:5f: e2:a4:89:12:41:a2:1c:30:e3:5c:56:d4:d0:1c:a8:b8:d0:96: 35:b4:3d:51:4b:2e:cb:39:07:e6:c2:49:b3:bd:e3:70:78:62: 19:a1:d1:d4:6a:86:31:58:20:cc:56:05:2d:97:c1:b0:cc:02: bd:30:a6:c9:6f:ec:98:21:1f:46:b4:29:47:85:34:ef:61:c0: 0d:1f:22:2f:9d:cd:a7:35:c1:e8:16:7f:b9:44:96:a0:8b:2b: e2:89:30:89:5f:e1:97:77:0d:eb:c6:54:bd:28:bf:c3:0c:9b: 00:25:6d:ad:af:ab:42:10:75:a4:de:95:89:aa:a9:45:70:c8: c8:e9:af:30:78:5a:86:c8:fe:f3:d1:17:4f:cd:85:26:7d:d1: 50:f3:41:78:02:b2:65:88:62:63:e1:35:d9:3e:38:88:66:3d: 23:1a:1c:6e:f3:e8:8c:5b:e5:e6:da:6e:67:1e:dc:b3:c0:94: d2:6c:f4:47:2b:02:39:28:01:be:82:70:75:2f:cb:5c:a1:2d: 45:83:ce:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE5QkQxMTAvBgNVBAUTKDY4NkEwMDU3MTY0RDE0MzhFQzU5NTg2REE4QkFBNTQ2 NUZEODI5QzcwHhcNMjUwNTA4MTUyOTA5WhcNMjUwNTE1MTUyOTA5WjAYMRYwFAYD VQQDEw02ODFjY2RjNi04MzAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqpiDcO4E6W+YG9ZvijyPNT/Any+a+GRwlrh67ovg6gddyo7NjTtaO0aFfjsX CFr/mPCMrK/P72kG+qg/JN3Pgaj5ba0FAxl+XMOAttRoDEPi52F3beKb/scySIIf lzWejKkK3nisCof+kC7ameL947liStuAf/YatKtb9KC+BvP188uZxYf4ct63/ZnO I65FR9oJ8++d2uZOKjU+gEphklYXqvy2smzfza+Peh+iDcRoS9IB1SgBvIOexMH0 zgaulnM0Hk+9aYobfTcv0rr358FXb/TmjTjh13VzXVO9Udu6p2EJBIL396akdEoF Y9W83aTunI35upKgCEs/fHHIhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEod5EMe JhX6nJeJ86ZCrnohXM6bMB8GA1UdIwQYMBaAFGhqAFcWTRQ47FlYbai6pUZf2CnH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTlCRC8wM0I4MEYzOERG NUMxMUUyOTcyQTk0Mjc1OTExRUEzMi9hR29BVnhaTkZEanNXVmh0cUxxbFJsX1lL Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FHb0FWeFpORkRqc1dWaHRxTHFsUmxfWUtjYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTlCRC8wM0I4MEYzOERGNUMxMUUyOTcyQTk0Mjc1OTExRUEzMi9hR29BVnhaTkZE anNXVmh0cUxxbFJsX1lLY2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsulU56X8jBlVY1YaBKmJ+HI40BaQ2PeWTE1TCnpWyanxg/C09YA3J huIMtCFWoM4MOqkQIV/ipIkSQaIcMONcVtTQHKi40JY1tD1RSy7LOQfmwkmzveNw eGIZodHUaoYxWCDMVgUtl8GwzAK9MKbJb+yYIR9GtClHhTTvYcANHyIvnc2nNcHo Fn+5RJagiyviiTCJX+GXdw3rxlS9KL/DDJsAJW2tr6tCEHWk3pWJqqlFcMjI6a8w eFqGyP7z0RdPzYUmfdFQ80F4ArJliGJj4TXZPjiIZj0jGhxu8+iMW+Xm2m5nHtyz wJTSbPRHKwI5KAG+gnB1L8tcoS1Fg86b -----END CERTIFICATE-----Generated at Sat May 10 10:36:21 2025 by rpki-client