$ rpki-client -vvf rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.mft File: aMW6vfwSOWbQX4DD-kI3lELEIgw.mft (raw, json) Hash identifier: Lixu2loKzsVeB3BEhi+IzvryerUdBpJRPHCdLUDQIkc= Subject key identifier: BD:C5:4D:12:31:93:12:B3:93:44:FD:6E:04:02:82:EF:A1:FC:E3:D9 Authority key identifier: 68:C5:BA:BD:FC:12:39:66:D0:5F:80:C3:FA:42:37:94:42:C4:22:0C Certificate issuer: /CN=A917201D/serialNumber=68C5BABDFC123966D05F80C3FA42379442C4220C Certificate serial: 34AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMW6vfwSOWbQX4DD-kI3lELEIgw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.mft Manifest number: 348E Signing time: Mon 12 May 2025 14:43:42 +0000 Manifest this update: Mon 12 May 2025 14:43:41 +0000 Manifest next update: Mon 19 May 2025 14:43:41 +0000 Files and hashes: 1: aMW6vfwSOWbQX4DD-kI3lELEIgw.crl (hash: xezPeiIkrL207mEsvdDk355ggjrLulGwJw8XtYLdeHU=) 2: E05FE99AB0D511E5B4F68B09C4F9AE02.roa (hash: /edqiqL2miGSNr0uoaTjo4btCNWXItXesGyoq/gND/E=) 3: 73438FF06DED11E9A21D1341C4F9AE02.roa (hash: C4bWHi41cN0y8JVNPFitYHiPYUVvz8I3upa7uMSFTP0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.crl rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMW6vfwSOWbQX4DD-kI3lELEIgw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 14:43:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13482 (0x34aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917201D, serialNumber=68C5BABDFC123966D05F80C3FA42379442C4220C Validity Not Before: May 12 14:43:41 2025 GMT Not After : May 19 14:43:41 2025 GMT Subject: CN=6822091e-b674 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:5b:ea:48:ff:bf:78:a5:00:34:67:9a:4d:7b: 39:30:fc:c8:58:58:f1:0f:1b:a2:92:81:f4:48:58: b2:1a:05:fd:7b:fd:41:d6:0f:2c:da:0f:11:61:23: 42:8d:95:d5:42:c1:87:0f:83:cf:c9:f5:6e:84:bb: 4f:15:80:17:e6:6a:1e:76:a4:21:28:5d:03:20:af: 8d:57:2f:0b:2d:59:9d:d7:e3:4c:78:3c:3b:c1:da: a9:8e:ea:ca:e6:cf:5a:5f:78:b4:96:0a:33:4d:79: 81:c5:00:5d:37:78:27:27:89:e9:c1:34:2b:55:b4: fb:44:7e:71:cc:3e:e0:9c:d8:3c:6e:52:c0:b4:24: a0:8a:96:e7:a1:40:37:1f:17:50:48:ab:1b:a7:ce: b2:a6:7f:da:0a:08:43:ab:66:90:bd:8d:b7:8d:a0: 8f:c9:a8:ae:41:35:d4:68:0f:e5:60:a3:99:f7:54: 4a:2d:89:35:74:02:a2:5c:1b:9a:4e:14:bb:1a:94: 68:78:fd:ea:8b:39:7c:c3:bb:32:f8:a4:47:67:ed: 5e:6f:b8:cb:a3:92:d0:2e:3a:ec:87:99:f2:4a:0d: d3:66:f4:ad:2a:1a:1a:36:49:a9:07:c4:99:91:43: c0:a7:e8:38:90:ba:c5:f0:f7:bb:fb:74:62:2c:7d: 28:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:C5:4D:12:31:93:12:B3:93:44:FD:6E:04:02:82:EF:A1:FC:E3:D9 X509v3 Authority Key Identifier: keyid:68:C5:BA:BD:FC:12:39:66:D0:5F:80:C3:FA:42:37:94:42:C4:22:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMW6vfwSOWbQX4DD-kI3lELEIgw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:d0:0e:71:10:e0:82:e7:b3:24:df:7e:17:ae:2e:7c:2d:ab: c7:88:db:ba:3f:eb:a5:b7:33:42:8b:b0:0b:4b:91:b8:58:31: a4:6e:50:40:f9:31:1a:74:96:d3:d6:a4:20:e0:7d:03:d4:f7: a0:10:9f:7d:39:00:f7:86:8b:c8:39:fd:7e:32:b9:d0:84:e9: 5d:ff:bc:92:cf:75:9a:23:c0:ef:24:43:24:b7:fe:a1:d4:c5: a2:f1:11:c3:30:6d:36:34:3b:b8:33:df:17:18:ad:e9:a2:52: 4a:80:05:b8:89:2e:5b:14:d9:a2:53:cb:03:78:62:b7:97:46: 0e:bd:61:a6:c3:d0:30:6b:ab:7a:ab:b1:46:5f:3a:2b:e8:d5: 13:db:14:0b:7d:6e:a9:89:38:19:2f:88:a3:0a:5e:00:85:a8: 01:14:5d:e3:b4:0e:a8:3f:e2:3f:4a:3e:fc:1b:80:53:59:2f: 84:a3:1d:6b:3b:e5:f1:a9:fd:ca:1c:3e:90:de:c1:3b:53:79: 87:f8:75:af:1b:07:70:5f:2a:fb:32:45:e4:3e:2a:70:bd:80: 79:b5:f4:d7:07:b4:0f:30:51:dc:f1:08:d0:5d:66:bf:c0:5e: 1b:a1:9c:33:27:9e:fb:d9:d2:f3:b7:6c:9e:dc:24:35:0f:cf: 70:fb:43:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzIwMUQxMTAvBgNVBAUTKDY4QzVCQUJERkMxMjM5NjZEMDVGODBDM0ZBNDIzNzk0 NDJDNDIyMEMwHhcNMjUwNTEyMTQ0MzQxWhcNMjUwNTE5MTQ0MzQxWjAYMRYwFAYD VQQDEw02ODIyMDkxZS1iNjc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyFvqSP+/eKUANGeaTXs5MPzIWFjxDxuikoH0SFiyGgX9e/1B1g8s2g8RYSNC jZXVQsGHD4PPyfVuhLtPFYAX5moedqQhKF0DIK+NVy8LLVmd1+NMeDw7wdqpjurK 5s9aX3i0lgozTXmBxQBdN3gnJ4npwTQrVbT7RH5xzD7gnNg8blLAtCSgipbnoUA3 HxdQSKsbp86ypn/aCghDq2aQvY23jaCPyaiuQTXUaA/lYKOZ91RKLYk1dAKiXBua ThS7GpRoeP3qizl8w7sy+KRHZ+1eb7jLo5LQLjrsh5nySg3TZvStKhoaNkmpB8SZ kUPAp+g4kLrF8Pe7+3RiLH0obQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL3FTRIx kxKzk0T9bgQCgu+h/OPZMB8GA1UdIwQYMBaAFGjFur38Ejlm0F+Aw/pCN5RCxCIM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MjAxRC9DRDFFMjk0ODFE OTIxMUUyQTNCMUY0RjUwOEIwMkNEMi9hTVc2dmZ3U09XYlFYNERELWtJM2xFTEVJ Z3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FNVzZ2ZndTT1diUVg0REQta0kzbEVMRUlndy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MjAxRC9DRDFFMjk0ODFEOTIxMUUyQTNCMUY0RjUwOEIwMkNEMi9hTVc2dmZ3U09X YlFYNERELWtJM2xFTEVJZ3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAy0A5xEOCC57Mk334Xri58LavHiNu6P+ultzNCi7ALS5G4WDGkblBA +TEadJbT1qQg4H0D1PegEJ99OQD3hovIOf1+MrnQhOld/7ySz3WaI8DvJEMkt/6h 1MWi8RHDMG02NDu4M98XGK3polJKgAW4iS5bFNmiU8sDeGK3l0YOvWGmw9Awa6t6 q7FGXzor6NUT2xQLfW6piTgZL4ijCl4AhagBFF3jtA6oP+I/Sj78G4BTWS+Eox1r O+Xxqf3KHD6Q3sE7U3mH+HWvGwdwXyr7MkXkPipwvYB5tfTXB7QPMFHc8QjQXWa/ wF4boZwzJ5772dLzt2ye3CQ1D89w+0Mx -----END CERTIFICATE-----Generated at Tue May 13 19:55:37 2025 by rpki-client