$ rpki-client -vvf rpki.apnic.net/member_repository/A912B23F/670C2F2CE29F11EEB682C611C4F9AE02/aamToYghmKytXxzqNQZrr0nn1dA.mft File: aamToYghmKytXxzqNQZrr0nn1dA.mft (raw, json) Hash identifier: ddQqU2wqXZa9j8us+K9QHVx3lPiQ2EG+CQeu6gj9Vi8= Subject key identifier: 99:1D:59:9C:9E:3F:FC:38:49:60:5B:86:8F:3A:B8:A1:49:DC:B5:E4 Authority key identifier: 69:A9:93:A1:88:21:98:AC:AD:5F:1C:EA:35:06:6B:AF:49:E7:D5:D0 Certificate issuer: /CN=A912B23F/serialNumber=69A993A1882198ACAD5F1CEA35066BAF49E7D5D0 Certificate serial: DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aamToYghmKytXxzqNQZrr0nn1dA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B23F/670C2F2CE29F11EEB682C611C4F9AE02/aamToYghmKytXxzqNQZrr0nn1dA.mft Manifest number: DC Signing time: Thu 15 May 2025 04:52:23 +0000 Manifest this update: Thu 15 May 2025 04:52:22 +0000 Manifest next update: Thu 22 May 2025 04:52:22 +0000 Files and hashes: 1: aamToYghmKytXxzqNQZrr0nn1dA.crl (hash: D9SRcwl8kUjA+F3aY9d6eN1BkLso8PemzovwbWBhrmI=) 2: 78585C5EB6E011EFBB3E2A0DC4F9AE02.roa (hash: eMhCb8Y7hz6TbBI3GN4y5RWtGaIS6jYSPRe2ESsv3M0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B23F/670C2F2CE29F11EEB682C611C4F9AE02/aamToYghmKytXxzqNQZrr0nn1dA.crl rsync://rpki.apnic.net/member_repository/A912B23F/670C2F2CE29F11EEB682C611C4F9AE02/aamToYghmKytXxzqNQZrr0nn1dA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aamToYghmKytXxzqNQZrr0nn1dA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 04:52:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 222 (0xde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B23F, serialNumber=69A993A1882198ACAD5F1CEA35066BAF49E7D5D0 Validity Not Before: May 15 04:52:22 2025 GMT Not After : May 22 04:52:22 2025 GMT Subject: CN=68257307-7b54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ac:6c:66:a7:b5:ca:7e:1a:97:7b:c8:c2:1e: 50:42:8d:73:d7:98:94:ad:32:7d:b1:69:fa:3e:3e: 10:04:f5:44:a2:da:c2:47:ec:75:5a:2e:ab:ea:ef: b2:5d:36:8f:cb:52:1f:77:64:8d:1e:d2:f0:dc:4e: 9d:0b:8e:2d:7c:b6:7f:08:8b:1c:3c:1e:e5:4a:ba: fd:ec:53:66:f6:b7:2c:61:82:95:96:ee:24:d5:67: ba:a9:0b:7d:e8:fa:9c:ed:d8:b4:29:cf:11:ed:b3: 7e:d8:6d:48:92:4d:97:a9:b7:10:40:79:2e:00:cf: e2:b4:70:5a:c9:fe:31:38:4b:78:4f:f4:8a:c3:69: a7:b4:7b:2c:e9:92:01:62:bb:b1:e9:3e:1e:ba:4c: 26:3f:64:1e:af:00:5a:73:45:8b:d7:72:e8:4a:ee: 60:44:51:23:dc:40:a4:5b:9f:bd:5c:a4:d9:c6:73: 1f:e1:2a:b6:79:e6:63:9f:ba:d3:a5:a9:d6:b0:56: 02:a9:94:d2:ce:1b:e3:db:18:76:e1:e9:b8:f8:b9: 63:5c:04:41:03:f1:ff:15:a2:4f:7a:87:f2:c0:8e: f4:9b:a0:b1:ad:3f:c8:4f:a1:68:a4:6b:f9:3c:c8: f0:6a:c8:c7:07:0d:f1:98:78:d2:62:64:89:7b:3f: 30:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:1D:59:9C:9E:3F:FC:38:49:60:5B:86:8F:3A:B8:A1:49:DC:B5:E4 X509v3 Authority Key Identifier: keyid:69:A9:93:A1:88:21:98:AC:AD:5F:1C:EA:35:06:6B:AF:49:E7:D5:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B23F/670C2F2CE29F11EEB682C611C4F9AE02/aamToYghmKytXxzqNQZrr0nn1dA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aamToYghmKytXxzqNQZrr0nn1dA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B23F/670C2F2CE29F11EEB682C611C4F9AE02/aamToYghmKytXxzqNQZrr0nn1dA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:a1:1a:57:08:e3:28:45:1f:7f:95:0c:c5:e8:a9:3c:90:a4: 5b:ef:ee:32:fe:3e:c2:79:32:b4:40:8e:de:19:4c:4a:03:b1: 0f:e0:f7:3b:bb:b1:5b:3d:b5:4f:d9:af:7d:35:c9:c2:f2:66: 68:d1:08:8f:60:53:10:19:db:4c:90:e9:61:3b:f4:a5:a0:d0: a5:5d:98:5f:e1:bb:d0:90:12:d4:b0:5a:3a:d0:47:10:e6:b4: 1b:7f:ce:94:f0:be:45:5f:9d:f4:05:f7:f0:95:13:83:0d:1c: c2:c6:a2:25:62:aa:37:5c:21:4d:56:49:70:5b:e3:0d:6f:36: e0:8e:0c:5f:a4:67:24:18:a9:4f:db:c3:90:75:91:38:f0:bf: 91:d8:90:01:02:1b:91:f6:6c:a1:ee:b2:50:73:c5:cc:2f:ad: a4:15:54:87:47:cb:82:40:35:74:a1:ff:a8:85:4b:1d:0e:e2: 4c:02:79:dc:73:ac:84:98:b5:36:c8:eb:c0:ec:6a:a3:7f:29: f8:a2:66:c9:86:15:e9:6a:65:00:64:98:62:d1:a9:4a:9a:93: bf:75:f9:e1:62:d6:da:c9:38:09:7e:63:93:9a:b3:ee:ad:c5: d1:01:b9:de:5b:b9:96:12:ef:73:4f:d6:29:b0:10:44:e4:e0: 27:8e:cb:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkIyM0YxMTAvBgNVBAUTKDY5QTk5M0ExODgyMTk4QUNBRDVGMUNFQTM1MDY2QkFG NDlFN0Q1RDAwHhcNMjUwNTE1MDQ1MjIyWhcNMjUwNTIyMDQ1MjIyWjAYMRYwFAYD VQQDEw02ODI1NzMwNy03YjU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv6xsZqe1yn4al3vIwh5QQo1z15iUrTJ9sWn6Pj4QBPVEotrCR+x1Wi6r6u+y XTaPy1Ifd2SNHtLw3E6dC44tfLZ/CIscPB7lSrr97FNm9rcsYYKVlu4k1We6qQt9 6Pqc7di0Kc8R7bN+2G1Ikk2XqbcQQHkuAM/itHBayf4xOEt4T/SKw2mntHss6ZIB Yrux6T4eukwmP2QerwBac0WL13LoSu5gRFEj3ECkW5+9XKTZxnMf4Sq2eeZjn7rT panWsFYCqZTSzhvj2xh24em4+LljXARBA/H/FaJPeofywI70m6CxrT/IT6FopGv5 PMjwasjHBw3xmHjSYmSJez8wWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJkdWZye P/w4SWBbho86uKFJ3LXkMB8GA1UdIwQYMBaAFGmpk6GIIZisrV8c6jUGa69J59XQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjIzRi82NzBDMkYyQ0Uy OUYxMUVFQjY4MkM2MTFDNEY5QUUwMi9hYW1Ub1lnaG1LeXRYeHpxTlFacnIwbm4x ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FhbVRvWWdobUt5dFh4enFOUVpycjBubjFkQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjIzRi82NzBDMkYyQ0UyOUYxMUVFQjY4MkM2MTFDNEY5QUUwMi9hYW1Ub1lnaG1L eXRYeHpxTlFacnIwbm4xZEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOoRpXCOMoRR9/lQzF6Kk8kKRb7+4y/j7CeTK0QI7eGUxKA7EP4Pc7 u7FbPbVP2a99NcnC8mZo0QiPYFMQGdtMkOlhO/SloNClXZhf4bvQkBLUsFo60EcQ 5rQbf86U8L5FX530BffwlRODDRzCxqIlYqo3XCFNVklwW+MNbzbgjgxfpGckGKlP 28OQdZE48L+R2JABAhuR9myh7rJQc8XML62kFVSHR8uCQDV0of+ohUsdDuJMAnnc c6yEmLU2yOvA7Gqjfyn4ombJhhXpamUAZJhi0alKmpO/dfnhYtbayTgJfmOTmrPu rcXRAbneW7mWEu9zT9YpsBBE5OAnjssY -----END CERTIFICATE-----Generated at Fri May 16 06:22:05 2025 by rpki-client