$ rpki-client -vvf rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.mft File: pAislKDTNvRzJJBakYrySQLw3os.mft (raw, json) Hash identifier: 2TyT182wb6UMBz3jZESfMOt70ia9Rxf6XJz7qSa0/Ck= Subject key identifier: 64:44:7D:97:C5:1B:DF:1D:45:DF:15:95:AD:98:95:F7:99:8E:BD:96 Authority key identifier: A4:08:AC:94:A0:D3:36:F4:73:24:90:5A:91:8A:F2:49:02:F0:DE:8B Certificate issuer: /CN=A9158620/serialNumber=A408AC94A0D336F47324905A918AF24902F0DE8B Certificate serial: 0134 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pAislKDTNvRzJJBakYrySQLw3os.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.mft Manifest number: 0124 Signing time: Mon 05 May 2025 03:47:07 +0000 Manifest this update: Mon 05 May 2025 03:47:06 +0000 Manifest next update: Mon 12 May 2025 03:47:06 +0000 Files and hashes: 1: pAislKDTNvRzJJBakYrySQLw3os.crl (hash: yaGSKxjcMohfYxOeR7Yk9v51O6pe9pyk3VmdWsQSeVI=) 2: 62258D42C93A11EEA1A4CA4FC4F9AE02.roa (hash: h5rk3Xz6VW0VeUtdbytEnw8Pa8H3Io324xwpZFHPhXc=) 3: 31A1996898F711EEB7B27877C4F9AE02.roa (hash: Vl/bZ/gdPwuufyZFmfVq5SymVLQXqPiJLzDWamKz3l4=) 4: 62C61398C93A11EEA1A4CA4FC4F9AE02.roa (hash: ROYJghlVOvaMnbHvL/73QuVNi54B62NVGwKlydNJjfk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.crl rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pAislKDTNvRzJJBakYrySQLw3os.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 03:47:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 308 (0x134) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158620, serialNumber=A408AC94A0D336F47324905A918AF24902F0DE8B Validity Not Before: May 5 03:47:06 2025 GMT Not After : May 12 03:47:06 2025 GMT Subject: CN=681834bb-1c1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f9:2f:40:54:7e:7f:f7:cb:e6:bc:af:af:f4: 73:35:2f:7d:e4:eb:09:f4:89:06:f8:f4:27:7f:20: a7:0e:2e:f5:46:7d:0b:46:e4:bf:4e:2f:a2:6f:ce: d1:55:86:4d:57:83:02:81:d8:19:6f:7b:34:05:6c: 8a:c4:b0:2d:8d:ad:72:8f:35:5b:4f:24:6e:22:8b: 5f:56:77:e3:9a:33:8a:cb:49:55:1f:cd:91:a1:5f: c1:0b:16:d9:e1:5e:ca:10:4c:8a:5b:f9:0d:7e:01: b7:fe:b8:04:16:8f:65:3f:08:5a:4a:43:79:b1:9d: 16:ed:4c:e7:1c:cf:8a:3e:7a:92:73:0c:15:f4:24: 40:6b:47:3f:77:49:fd:01:a6:80:c0:4b:5f:e2:54: 77:f7:e5:77:08:16:9e:45:89:eb:ba:82:f5:b0:8e: 3d:7b:57:84:2c:0d:5b:33:e0:5e:76:97:03:c7:27: 99:fd:7d:64:01:c7:e8:23:b9:6e:08:4c:9c:15:7f: de:98:45:b3:25:df:b8:f3:ad:ac:f4:87:11:ec:e3: 5c:44:c0:2c:5e:65:3a:eb:a4:66:60:64:b5:24:db: 79:f4:29:4e:5a:d3:c6:92:6a:07:39:71:64:70:f1: bd:05:4c:ec:18:28:db:86:ee:ed:3d:47:41:93:43: 30:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:44:7D:97:C5:1B:DF:1D:45:DF:15:95:AD:98:95:F7:99:8E:BD:96 X509v3 Authority Key Identifier: keyid:A4:08:AC:94:A0:D3:36:F4:73:24:90:5A:91:8A:F2:49:02:F0:DE:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pAislKDTNvRzJJBakYrySQLw3os.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:f9:6f:80:81:ce:d6:5f:dc:35:6f:07:dc:b3:17:35:c9:3b: 19:4d:a6:b6:f8:3e:53:a8:eb:40:77:e8:ed:00:6c:82:b9:bf: 66:30:44:ef:29:f1:4d:f1:12:52:fc:a3:75:39:78:e7:73:4f: 20:df:df:0d:37:10:d9:98:af:26:7b:59:5d:3a:e0:dd:e6:ac: 81:cd:ce:6d:a3:84:a8:bc:42:09:14:0f:fa:7f:41:36:3d:af: 53:88:95:45:72:9f:8a:cd:9d:7d:20:72:b0:53:99:2e:63:1b: 76:af:e4:55:2a:d9:b9:db:26:02:a1:a2:73:ae:34:bf:de:fd: 18:76:94:ac:af:15:a8:b7:27:6e:31:d1:4e:47:a6:da:39:53: cc:d6:a2:8e:b7:e4:1d:84:7a:ae:d2:19:f2:cb:d9:9e:8c:5c: 69:ee:40:0d:b7:f9:00:41:63:95:24:4b:d9:16:6c:6e:a5:f9: bd:92:af:5a:35:b6:84:4f:19:3a:33:5e:9e:dc:c1:39:88:79: 34:ee:9f:39:38:f5:92:e0:df:36:19:04:2e:cc:d0:36:3b:db: 05:bd:13:7e:62:f3:a0:21:98:58:75:04:57:8a:7e:7d:c7:ff: 4c:bc:1b:40:2c:77:37:03:b8:13:45:58:21:81:85:82:01:c5: f1:45:07:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg2MjAxMTAvBgNVBAUTKEE0MDhBQzk0QTBEMzM2RjQ3MzI0OTA1QTkxOEFGMjQ5 MDJGMERFOEIwHhcNMjUwNTA1MDM0NzA2WhcNMjUwNTEyMDM0NzA2WjAYMRYwFAYD VQQDEw02ODE4MzRiYi0xYzFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtvkvQFR+f/fL5ryvr/RzNS995OsJ9IkG+PQnfyCnDi71Rn0LRuS/Ti+ib87R VYZNV4MCgdgZb3s0BWyKxLAtja1yjzVbTyRuIotfVnfjmjOKy0lVH82RoV/BCxbZ 4V7KEEyKW/kNfgG3/rgEFo9lPwhaSkN5sZ0W7UznHM+KPnqScwwV9CRAa0c/d0n9 AaaAwEtf4lR39+V3CBaeRYnruoL1sI49e1eELA1bM+BedpcDxyeZ/X1kAcfoI7lu CEycFX/emEWzJd+4862s9IcR7ONcRMAsXmU666RmYGS1JNt59ClOWtPGkmoHOXFk cPG9BUzsGCjbhu7tPUdBk0Mw3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGREfZfF G98dRd8Vla2YlfeZjr2WMB8GA1UdIwQYMBaAFKQIrJSg0zb0cySQWpGK8kkC8N6L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODYyMC8wRTkxOTkzNDg4 NDIxMUVFQTdEOEM4MTRDNEY5QUUwMi9wQWlzbEtEVE52UnpKSkJha1lyeVNRTHcz b3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BBaXNsS0RUTnZSekpKQmFrWXJ5U1FMdzNvcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODYyMC8wRTkxOTkzNDg4NDIxMUVFQTdEOEM4MTRDNEY5QUUwMi9wQWlzbEtEVE52 UnpKSkJha1lyeVNRTHczb3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1+W+Agc7WX9w1bwfcsxc1yTsZTaa2+D5TqOtAd+jtAGyCub9mMETv KfFN8RJS/KN1OXjnc08g398NNxDZmK8me1ldOuDd5qyBzc5to4SovEIJFA/6f0E2 Pa9TiJVFcp+KzZ19IHKwU5kuYxt2r+RVKtm52yYCoaJzrjS/3v0YdpSsrxWotydu MdFOR6baOVPM1qKOt+QdhHqu0hnyy9mejFxp7kANt/kAQWOVJEvZFmxupfm9kq9a NbaETxk6M16e3ME5iHk07p85OPWS4N82GQQuzNA2O9sFvRN+YvOgIZhYdQRXin59 x/9MvBtALHc3A7gTRVghgYWCAcXxRQcA -----END CERTIFICATE-----Generated at Tue May 6 02:31:49 2025 by rpki-client