$ rpki-client -vvf rpki.apnic.net/member_repository/A913168E/143D02548C2311ED90AE9710C4F9AE02/rricAm_pVSoVCwPDCqDNxHnR4qE.mft File: rricAm_pVSoVCwPDCqDNxHnR4qE.mft (raw, json) Hash identifier: 1UuWCCGi61h8b6SftZag8HMBBNSv6Qf5hSpFB4jOVB4= Subject key identifier: 65:B2:62:6A:66:86:4C:D4:66:22:65:0B:A0:CE:DA:08:46:1A:49:11 Authority key identifier: AE:B8:9C:02:6F:E9:55:2A:15:0B:03:C3:0A:A0:CD:C4:79:D1:E2:A1 Certificate issuer: /CN=A913168E/serialNumber=AEB89C026FE9552A150B03C30AA0CDC479D1E2A1 Certificate serial: 01C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rricAm_pVSoVCwPDCqDNxHnR4qE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913168E/143D02548C2311ED90AE9710C4F9AE02/rricAm_pVSoVCwPDCqDNxHnR4qE.mft Manifest number: 01BA Signing time: Tue 13 May 2025 02:21:35 +0000 Manifest this update: Tue 13 May 2025 02:21:35 +0000 Manifest next update: Tue 20 May 2025 02:21:35 +0000 Files and hashes: 1: rricAm_pVSoVCwPDCqDNxHnR4qE.crl (hash: 6/RkMzyt6iIUXMDtOzyetcaEY/QaO/yA7Xuq93x4Znk=) 2: 417BD1448C2511EDB64DB410C4F9AE02.roa (hash: 2nDc53USeA7aAjY3ISsXCIB8o+f3yAtyG+8IWIJiOOY=) 3: 40EB2FD68C2511EDB64DB410C4F9AE02.roa (hash: lpoiNJ1KNGIBpka1MtOW7yyVNvOoyYTQvtF9uDpVp3E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913168E/143D02548C2311ED90AE9710C4F9AE02/rricAm_pVSoVCwPDCqDNxHnR4qE.crl rsync://rpki.apnic.net/member_repository/A913168E/143D02548C2311ED90AE9710C4F9AE02/rricAm_pVSoVCwPDCqDNxHnR4qE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rricAm_pVSoVCwPDCqDNxHnR4qE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 02:21:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 449 (0x1c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913168E, serialNumber=AEB89C026FE9552A150B03C30AA0CDC479D1E2A1 Validity Not Before: May 13 02:21:35 2025 GMT Not After : May 20 02:21:35 2025 GMT Subject: CN=6822acaf-6027 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:db:ac:58:02:7b:73:2e:31:fe:c1:7e:69:f5: e8:46:b1:40:9f:ec:63:cb:61:11:53:7c:96:fd:85: 77:c2:d2:cd:cf:e5:64:bf:4b:d1:57:23:8c:7a:d6: 13:be:9d:69:5e:9f:7e:00:47:be:af:32:cd:70:a3: c8:95:30:71:10:d8:98:0a:46:bc:9a:67:b4:b5:e8: 03:f1:8d:9e:15:34:f8:fd:e7:e5:cd:6b:8e:a4:a3: 28:b3:2f:eb:d9:95:30:90:35:ad:d3:87:0f:2c:3b: 8a:22:ef:bb:ca:fb:5a:a7:a2:7c:67:8e:53:da:3b: 05:5f:91:89:9a:f0:c2:d2:50:45:7b:33:d8:59:9e: ea:ae:9c:95:97:0d:ca:6d:13:de:a0:b5:45:b7:cb: 04:8b:a0:0d:ba:fc:2a:b6:5e:33:3f:1a:2d:d9:2b: ff:84:15:d9:17:24:27:bf:1b:f7:79:f5:58:a9:7f: db:b7:7f:c5:3f:3a:6a:18:19:15:d1:9f:4d:4e:bc: 32:ce:10:f5:da:3c:17:ec:f2:a6:08:85:e2:ff:12: 28:51:4b:93:2a:d2:34:51:f3:89:44:5f:dc:fb:98: 50:75:50:2a:77:96:81:23:5a:7e:cf:d5:ac:36:8c: 19:63:57:18:7a:dc:9a:3d:89:ae:2e:4a:fd:ad:21: e3:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:B2:62:6A:66:86:4C:D4:66:22:65:0B:A0:CE:DA:08:46:1A:49:11 X509v3 Authority Key Identifier: keyid:AE:B8:9C:02:6F:E9:55:2A:15:0B:03:C3:0A:A0:CD:C4:79:D1:E2:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913168E/143D02548C2311ED90AE9710C4F9AE02/rricAm_pVSoVCwPDCqDNxHnR4qE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rricAm_pVSoVCwPDCqDNxHnR4qE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913168E/143D02548C2311ED90AE9710C4F9AE02/rricAm_pVSoVCwPDCqDNxHnR4qE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:10:34:2f:50:6b:9d:d2:b2:4c:78:ae:30:35:e7:f6:58:5f: 29:dc:cf:ce:6f:0e:d8:94:d0:0e:8a:57:2a:cb:d5:75:00:71: fe:17:d8:97:e7:2c:61:f3:67:e5:3a:60:5b:a4:2f:a6:e8:06: 8b:98:f6:f9:2e:dd:e2:a3:b1:ec:5a:ca:23:12:59:ec:8e:11: 77:44:0d:59:81:99:47:3e:b2:43:5f:5a:07:b8:6f:63:ce:e2: 42:d8:c8:57:01:fe:49:c7:4a:40:98:ff:97:79:08:97:c3:14: 77:e1:28:ac:fc:04:7e:23:51:af:50:66:ec:b1:09:2a:59:a4: d2:db:71:32:1d:34:f7:22:15:22:e4:7c:31:fb:2c:0c:37:e8: 54:28:d3:b5:67:83:0c:28:7a:09:70:40:22:a8:ed:ed:fc:19: 66:f2:c2:ed:e5:1f:71:af:8f:76:d4:a1:ca:31:67:04:b7:6a: b0:23:f5:bb:02:8c:2e:d5:43:e4:15:8c:92:66:d8:71:13:ef: 08:fc:28:24:26:b3:db:3d:51:fc:6e:56:23:ee:77:d2:94:e3: 3c:3b:b5:33:81:31:da:7b:f6:08:75:9e:f2:e3:18:22:41:02: 5c:0b:23:0d:36:06:b8:bf:64:27:9e:5c:a2:22:88:44:a7:2a: b2:8a:25:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE2OEUxMTAvBgNVBAUTKEFFQjg5QzAyNkZFOTU1MkExNTBCMDNDMzBBQTBDREM0 NzlEMUUyQTEwHhcNMjUwNTEzMDIyMTM1WhcNMjUwNTIwMDIyMTM1WjAYMRYwFAYD VQQDEw02ODIyYWNhZi02MDI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA19usWAJ7cy4x/sF+afXoRrFAn+xjy2ERU3yW/YV3wtLNz+Vkv0vRVyOMetYT vp1pXp9+AEe+rzLNcKPIlTBxENiYCka8mme0tegD8Y2eFTT4/eflzWuOpKMosy/r 2ZUwkDWt04cPLDuKIu+7yvtap6J8Z45T2jsFX5GJmvDC0lBFezPYWZ7qrpyVlw3K bRPeoLVFt8sEi6ANuvwqtl4zPxot2Sv/hBXZFyQnvxv3efVYqX/bt3/FPzpqGBkV 0Z9NTrwyzhD12jwX7PKmCIXi/xIoUUuTKtI0UfOJRF/c+5hQdVAqd5aBI1p+z9Ws NowZY1cYetyaPYmuLkr9rSHjdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGWyYmpm hkzUZiJlC6DO2ghGGkkRMB8GA1UdIwQYMBaAFK64nAJv6VUqFQsDwwqgzcR50eKh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTY4RS8xNDNEMDI1NDhD MjMxMUVEOTBBRTk3MTBDNEY5QUUwMi9ycmljQW1fcFZTb1ZDd1BEQ3FETnhIblI0 cUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JyaWNBbV9wVlNvVkN3UERDcUROeEhuUjRxRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTY4RS8xNDNEMDI1NDhDMjMxMUVEOTBBRTk3MTBDNEY5QUUwMi9ycmljQW1fcFZT b1ZDd1BEQ3FETnhIblI0cUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkEDQvUGud0rJMeK4wNef2WF8p3M/Obw7YlNAOilcqy9V1AHH+F9iX 5yxh82flOmBbpC+m6AaLmPb5Lt3io7HsWsojElnsjhF3RA1ZgZlHPrJDX1oHuG9j zuJC2MhXAf5Jx0pAmP+XeQiXwxR34Sis/AR+I1GvUGbssQkqWaTS23EyHTT3IhUi 5Hwx+ywMN+hUKNO1Z4MMKHoJcEAiqO3t/Blm8sLt5R9xr4921KHKMWcEt2qwI/W7 Aowu1UPkFYySZthxE+8I/CgkJrPbPVH8blYj7nfSlOM8O7UzgTHae/YIdZ7y4xgi QQJcCyMNNga4v2QnnlyiIohEpyqyiiVU -----END CERTIFICATE-----Generated at Wed May 14 22:50:23 2025 by rpki-client