$ rpki-client -vvf rpki.apnic.net/member_repository/A912216A/FC51C9E8310B11E9BB82FE72C4F9AE02/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.mft File: AJYbj2Ot6dGfOs9CgzrF2cnHJ48.mft (raw, json) Hash identifier: /5Uovz2gIXQux3gETs0hKsgC2YeC2xWbdZFmBuTmZjc= Subject key identifier: 99:26:70:70:9D:9F:D8:09:96:C6:51:05:BA:1E:7F:93:EA:6F:C2:FF Authority key identifier: 00:96:1B:8F:63:AD:E9:D1:9F:3A:CF:42:83:3A:C5:D9:C9:C7:27:8F Certificate issuer: /CN=A912216A/serialNumber=00961B8F63ADE9D19F3ACF42833AC5D9C9C7278F Certificate serial: 1078 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912216A/FC51C9E8310B11E9BB82FE72C4F9AE02/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.mft Manifest number: 1070 Signing time: Sat 10 May 2025 17:14:16 +0000 Manifest this update: Sat 10 May 2025 17:14:16 +0000 Manifest next update: Sat 17 May 2025 17:14:16 +0000 Files and hashes: 1: AJYbj2Ot6dGfOs9CgzrF2cnHJ48.crl (hash: L69205SDX5nF4d7K4LGW5KW4XNqKqNwNfQTb5euir9s=) 2: 2A44CEFE311111E98C69B181C4F9AE02.roa (hash: 0SVk2cOfikrAvRDDJgb5TANBAXNNynzVUWZgXY+3hcc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912216A/FC51C9E8310B11E9BB82FE72C4F9AE02/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.crl rsync://rpki.apnic.net/member_repository/A912216A/FC51C9E8310B11E9BB82FE72C4F9AE02/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 17:14:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4216 (0x1078) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912216A, serialNumber=00961B8F63ADE9D19F3ACF42833AC5D9C9C7278F Validity Not Before: May 10 17:14:16 2025 GMT Not After : May 17 17:14:16 2025 GMT Subject: CN=681f8968-6f52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:a5:19:e3:5e:89:e7:2a:f8:fe:48:47:b8:de: 18:d6:9f:be:f0:24:b3:cc:a1:22:3e:64:68:9a:8b: 78:c5:0d:cc:54:9f:5f:7b:84:e6:a6:81:22:ea:a1: e2:43:76:02:71:67:ba:4d:7e:66:16:e7:35:ee:28: b8:f3:cb:c9:20:e8:f2:07:d3:9c:6e:37:9f:4d:f8: 74:40:31:51:f4:2d:a3:e7:d8:3b:cf:43:8c:7f:1c: 71:37:f3:cb:e4:06:c7:50:19:06:cf:ae:d6:9f:a7: 9a:2f:55:b1:7f:0f:13:ee:3c:61:50:06:33:95:19: d7:78:68:b6:8c:00:9d:62:60:50:c5:58:12:1b:60: 63:e6:a5:67:e6:11:2a:15:0f:08:d0:9c:b0:54:29: 35:48:8e:0e:b9:80:f9:88:5d:43:d9:73:53:7c:2a: bc:39:d6:f9:b0:03:0d:97:c8:fe:b8:5a:d4:bf:e6: cc:9a:0c:52:23:f7:7b:24:0b:ef:ad:7c:2e:a9:b4: ee:6f:af:46:9c:26:4a:a1:61:f0:6e:55:bf:79:8a: aa:a5:fd:ef:5d:dc:88:1c:14:23:1d:0c:17:b5:b0: b5:f3:9a:20:c9:fa:bf:70:ef:41:a6:12:d3:6e:d4: 15:cd:85:15:c8:1d:0d:86:5a:d3:c8:3d:03:5c:65: bb:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:26:70:70:9D:9F:D8:09:96:C6:51:05:BA:1E:7F:93:EA:6F:C2:FF X509v3 Authority Key Identifier: keyid:00:96:1B:8F:63:AD:E9:D1:9F:3A:CF:42:83:3A:C5:D9:C9:C7:27:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912216A/FC51C9E8310B11E9BB82FE72C4F9AE02/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912216A/FC51C9E8310B11E9BB82FE72C4F9AE02/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:ed:c3:ad:be:c5:29:9e:d3:be:6f:15:7f:a6:f7:f2:e5:ae: b3:c3:34:69:f4:8d:40:a5:7f:52:47:7c:9a:8c:f4:95:f6:be: 4f:70:b3:3c:69:1b:74:a5:4f:fc:98:89:91:5d:a0:34:98:2a: 81:16:37:10:9d:60:39:c4:0a:7c:b6:0d:d8:a8:20:3e:78:eb: 99:67:4e:42:f7:f6:73:00:2f:fd:9b:94:18:8c:59:eb:d2:45: 20:ef:c3:df:7c:b8:09:1f:5e:e3:73:b7:ad:ea:59:2c:3e:e5: 15:ca:eb:2b:6a:82:54:15:84:43:99:36:e7:8c:5c:8e:25:1a: 6b:d7:37:3c:36:0a:7a:fb:a8:f0:25:06:96:3d:9a:ed:9e:66: d0:88:13:95:4c:00:17:a1:98:ac:b6:a3:06:89:6c:54:e5:80: 98:93:10:dd:bb:6c:37:77:fa:40:11:e8:98:6f:3c:72:5f:06: 5b:d8:ad:c2:d4:8b:ff:5b:08:b8:38:da:20:68:59:1a:19:28: 93:49:43:11:8c:90:cf:1a:89:0c:6d:40:79:a9:12:8d:14:c3: 94:be:ea:49:52:00:8d:a8:5d:c6:4c:68:bc:77:1e:53:1b:d2: 89:d1:41:ed:3c:fa:c8:95:e8:09:e5:57:86:73:d2:d4:76:cb: 3f:3d:06:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEHgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIxNkExMTAvBgNVBAUTKDAwOTYxQjhGNjNBREU5RDE5RjNBQ0Y0MjgzM0FDNUQ5 QzlDNzI3OEYwHhcNMjUwNTEwMTcxNDE2WhcNMjUwNTE3MTcxNDE2WjAYMRYwFAYD VQQDEw02ODFmODk2OC02ZjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5aUZ416J5yr4/khHuN4Y1p++8CSzzKEiPmRomot4xQ3MVJ9fe4TmpoEi6qHi Q3YCcWe6TX5mFuc17ii488vJIOjyB9OcbjefTfh0QDFR9C2j59g7z0OMfxxxN/PL 5AbHUBkGz67Wn6eaL1Wxfw8T7jxhUAYzlRnXeGi2jACdYmBQxVgSG2Bj5qVn5hEq FQ8I0JywVCk1SI4OuYD5iF1D2XNTfCq8Odb5sAMNl8j+uFrUv+bMmgxSI/d7JAvv rXwuqbTub69GnCZKoWHwblW/eYqqpf3vXdyIHBQjHQwXtbC185ogyfq/cO9BphLT btQVzYUVyB0NhlrTyD0DXGW7SQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJkmcHCd n9gJlsZRBboef5Pqb8L/MB8GA1UdIwQYMBaAFACWG49jrenRnzrPQoM6xdnJxyeP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjE2QS9GQzUxQzlFODMx MEIxMUU5QkI4MkZFNzJDNEY5QUUwMi9BSlliajJPdDZkR2ZPczlDZ3pyRjJjbkhK NDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FKWWJqMk90NmRHZk9zOUNnenJGMmNuSEo0OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjE2QS9GQzUxQzlFODMxMEIxMUU5QkI4MkZFNzJDNEY5QUUwMi9BSlliajJPdDZk R2ZPczlDZ3pyRjJjbkhKNDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA37cOtvsUpntO+bxV/pvfy5a6zwzRp9I1ApX9SR3yajPSV9r5PcLM8 aRt0pU/8mImRXaA0mCqBFjcQnWA5xAp8tg3YqCA+eOuZZ05C9/ZzAC/9m5QYjFnr 0kUg78PffLgJH17jc7et6lksPuUVyusraoJUFYRDmTbnjFyOJRpr1zc8Ngp6+6jw JQaWPZrtnmbQiBOVTAAXoZistqMGiWxU5YCYkxDdu2w3d/pAEeiYbzxyXwZb2K3C 1Iv/Wwi4ONogaFkaGSiTSUMRjJDPGokMbUB5qRKNFMOUvupJUgCNqF3GTGi8dx5T G9KJ0UHtPPrIlegJ5VeGc9LUdss/PQbp -----END CERTIFICATE-----Generated at Mon May 12 04:35:23 2025 by rpki-client