$ rpki-client -vvf rpki.apnic.net/member_repository/A918DB7E/9C3FECDC64DC11EFB31EA839C4F9AE02/AtoTJ_UsQCOjghrIeFDJF9joNSc.mft File: AtoTJ_UsQCOjghrIeFDJF9joNSc.mft (raw, json) Hash identifier: 624bzsNws9hwpiRjqHKCISne9kcWO9o2EmaBcGJwdtQ= Subject key identifier: 1D:C8:B5:9D:CB:DB:DC:6E:A6:DA:99:CC:47:A5:4A:F6:58:7B:EE:D2 Authority key identifier: 02:DA:13:27:F5:2C:40:23:A3:82:1A:C8:78:50:C9:17:D8:E8:35:27 Certificate issuer: /CN=A918DB7E/serialNumber=02DA1327F52C4023A3821AC87850C917D8E83527 Certificate serial: 87 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AtoTJ_UsQCOjghrIeFDJF9joNSc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918DB7E/9C3FECDC64DC11EFB31EA839C4F9AE02/AtoTJ_UsQCOjghrIeFDJF9joNSc.mft Manifest number: 86 Signing time: Tue 13 May 2025 05:45:55 +0000 Manifest this update: Tue 13 May 2025 05:45:54 +0000 Manifest next update: Tue 20 May 2025 05:45:54 +0000 Files and hashes: 1: AtoTJ_UsQCOjghrIeFDJF9joNSc.crl (hash: /LFlhtedENzckgfonkhFd7OB+fzRzgDS9Og8gKSZfLM=) 2: CE1E14AE64DC11EFBE5A023AC4F9AE02.roa (hash: TL1SnZ/gVu4gXR6fktiVjS67hjGfn2PQM4oWEdnN0mQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918DB7E/9C3FECDC64DC11EFB31EA839C4F9AE02/AtoTJ_UsQCOjghrIeFDJF9joNSc.crl rsync://rpki.apnic.net/member_repository/A918DB7E/9C3FECDC64DC11EFB31EA839C4F9AE02/AtoTJ_UsQCOjghrIeFDJF9joNSc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AtoTJ_UsQCOjghrIeFDJF9joNSc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 135 (0x87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918DB7E, serialNumber=02DA1327F52C4023A3821AC87850C917D8E83527 Validity Not Before: May 13 05:45:54 2025 GMT Not After : May 20 05:45:54 2025 GMT Subject: CN=6822dc92-a355 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:de:b7:19:36:07:fc:f3:2d:9b:69:9e:0e:9c: e8:d3:e9:55:35:57:05:b5:8c:94:53:60:9f:af:d0: 01:47:c0:44:56:df:85:52:12:ff:f0:60:f5:d1:a8: 93:5e:12:ed:7e:1e:f8:e6:27:08:06:4c:dc:3a:59: 22:dd:22:03:78:7e:b2:68:c9:e4:56:c5:d2:02:31: ed:aa:4a:95:3d:c0:4a:af:46:e7:ef:70:da:29:41: 31:d4:73:ea:65:02:1f:64:af:5b:71:46:02:c0:31: de:fc:1a:68:7b:ec:47:8c:67:85:10:65:23:ea:3d: 7f:37:ac:4d:63:d2:57:f5:99:f5:4b:72:35:4f:3e: fa:a4:bd:e0:34:1d:46:df:7f:31:0e:cb:d5:bf:9e: 44:c6:c3:1d:bc:7a:5e:54:04:d0:5a:ba:fa:a4:a7: ec:fc:2f:a9:18:62:49:c0:e0:37:9e:8a:56:44:70: 6c:f3:78:8e:37:8f:5c:f1:9d:8a:48:d0:bf:c2:ee: 08:84:fd:95:3d:16:44:1a:ef:49:5b:5d:a4:28:43: 48:b5:2e:09:13:77:7e:ec:2f:99:ee:e8:75:b3:78: f7:5d:03:ac:92:b0:ef:ba:8c:f1:7a:81:0a:d3:b6: 79:cc:ba:9e:eb:56:c6:94:ca:e2:3a:a5:99:cd:55: 59:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:C8:B5:9D:CB:DB:DC:6E:A6:DA:99:CC:47:A5:4A:F6:58:7B:EE:D2 X509v3 Authority Key Identifier: keyid:02:DA:13:27:F5:2C:40:23:A3:82:1A:C8:78:50:C9:17:D8:E8:35:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918DB7E/9C3FECDC64DC11EFB31EA839C4F9AE02/AtoTJ_UsQCOjghrIeFDJF9joNSc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AtoTJ_UsQCOjghrIeFDJF9joNSc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DB7E/9C3FECDC64DC11EFB31EA839C4F9AE02/AtoTJ_UsQCOjghrIeFDJF9joNSc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:9a:d0:e6:04:c2:96:37:f0:aa:a1:08:f7:18:1f:1f:70:ec: 76:52:7a:3a:0a:71:5c:12:66:ae:60:66:df:b2:45:7b:0e:88: 19:39:dd:b0:c3:67:ec:cf:e7:d3:60:01:9b:41:cb:1c:67:e4: 91:45:8a:cc:d0:ad:69:0b:71:68:7d:f7:99:05:65:51:95:d3: 0e:5d:ca:b3:38:c4:08:8c:08:bd:3d:52:6d:47:58:be:19:cc: 80:ea:b5:cb:2b:1f:c5:e4:b8:00:70:8b:2a:b1:32:bb:67:5c: 0b:18:38:5e:76:7b:20:cb:2e:5e:2b:17:54:9f:08:72:03:14: c8:86:0c:7e:2d:a1:ee:7a:9d:00:4a:9b:a8:6c:bf:7f:68:a9: 3d:ab:54:b8:87:75:c4:fd:c0:f1:a7:52:82:a7:5e:a3:a1:38: 56:d5:1a:ec:14:8f:39:fa:60:1d:60:c5:ac:13:71:77:be:24: b3:6e:b0:bf:a8:32:37:c0:8a:6e:6d:93:36:b1:f4:5a:b1:ba: fe:6c:ae:b5:97:5c:e2:49:cb:cb:3c:10:ca:a1:f9:c2:39:bb: e4:07:f3:87:5b:16:e6:3c:1f:09:f4:2b:b0:f8:0e:a5:49:07: 99:d0:c1:dc:b6:ad:2f:e2:ae:e2:58:0f:8b:f5:4b:fb:89:d4: 56:d9:4b:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OERCN0UxMTAvBgNVBAUTKDAyREExMzI3RjUyQzQwMjNBMzgyMUFDODc4NTBDOTE3 RDhFODM1MjcwHhcNMjUwNTEzMDU0NTU0WhcNMjUwNTIwMDU0NTU0WjAYMRYwFAYD VQQDEw02ODIyZGM5Mi1hMzU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqd63GTYH/PMtm2meDpzo0+lVNVcFtYyUU2Cfr9ABR8BEVt+FUhL/8GD10aiT XhLtfh745icIBkzcOlki3SIDeH6yaMnkVsXSAjHtqkqVPcBKr0bn73DaKUEx1HPq ZQIfZK9bcUYCwDHe/Bpoe+xHjGeFEGUj6j1/N6xNY9JX9Zn1S3I1Tz76pL3gNB1G 338xDsvVv55ExsMdvHpeVATQWrr6pKfs/C+pGGJJwOA3nopWRHBs83iON49c8Z2K SNC/wu4IhP2VPRZEGu9JW12kKENItS4JE3d+7C+Z7uh1s3j3XQOskrDvuozxeoEK 07Z5zLqe61bGlMriOqWZzVVZtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB3ItZ3L 29xuptqZzEelSvZYe+7SMB8GA1UdIwQYMBaAFALaEyf1LEAjo4IayHhQyRfY6DUn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4REI3RS85QzNGRUNEQzY0 REMxMUVGQjMxRUE4MzlDNEY5QUUwMi9BdG9USl9Vc1FDT2pnaHJJZUZESkY5am9O U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0F0b1RKX1VzUUNPamdockllRkRKRjlqb05TYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 REI3RS85QzNGRUNEQzY0REMxMUVGQjMxRUE4MzlDNEY5QUUwMi9BdG9USl9Vc1FD T2pnaHJJZUZESkY5am9OU2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwmtDmBMKWN/CqoQj3GB8fcOx2Uno6CnFcEmauYGbfskV7DogZOd2w w2fsz+fTYAGbQcscZ+SRRYrM0K1pC3FoffeZBWVRldMOXcqzOMQIjAi9PVJtR1i+ GcyA6rXLKx/F5LgAcIsqsTK7Z1wLGDhednsgyy5eKxdUnwhyAxTIhgx+LaHuep0A SpuobL9/aKk9q1S4h3XE/cDxp1KCp16joThW1RrsFI85+mAdYMWsE3F3viSzbrC/ qDI3wIpubZM2sfRasbr+bK61l1ziScvLPBDKofnCObvkB/OHWxbmPB8J9Cuw+A6l SQeZ0MHctq0v4q7iWA+L9Uv7idRW2Uup -----END CERTIFICATE-----Generated at Tue May 13 08:26:43 2025 by rpki-client