$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft File: AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft (raw, json) Hash identifier: lfuMMn6uxquKYNcpa6ineZEZhqU7xX48Gk7Jy5bvrIk= Subject key identifier: 64:AC:9C:A5:A2:F0:7C:BD:0D:1E:2F:B4:CC:32:AB:16:30:42:75:51 Authority key identifier: 00:02:41:49:0E:3F:20:98:F7:9D:5C:93:03:7E:BF:F2:B9:56:CF:D7 Certificate issuer: /CN=A91CA1A6/serialNumber=000241490E3F2098F79D5C93037EBFF2B956CFD7 Certificate serial: 072F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAJBSQ4_IJj3nVyTA36_8rlWz9c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft Manifest number: 0718 Signing time: Sat 10 May 2025 21:32:21 +0000 Manifest this update: Sat 10 May 2025 21:32:21 +0000 Manifest next update: Sat 17 May 2025 21:32:21 +0000 Files and hashes: 1: AAJBSQ4_IJj3nVyTA36_8rlWz9c.crl (hash: D6S/m0eqVa4tifUt67iH/kTDCaUaLs3cc076OyLer1M=) 2: EEE4C606B5D411ECA20B840AC4F9AE02.roa (hash: 0XMlIXCMAiJZlp7fDiVuLUwSsm0ebLntYydTAPsauDo=) 3: 910A49AAB5CC11ECAE337E78C4F9AE02.roa (hash: 3it6MgHyhXt2fOxKVzUm+aEDZP71P1ra3Nfl+4bBlR4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.crl rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAJBSQ4_IJj3nVyTA36_8rlWz9c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 21:32:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1839 (0x72f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA1A6, serialNumber=000241490E3F2098F79D5C93037EBFF2B956CFD7 Validity Not Before: May 10 21:32:21 2025 GMT Not After : May 17 21:32:21 2025 GMT Subject: CN=681fc5e5-46b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:4f:73:40:fe:08:26:ec:6f:18:54:36:e5:34: d7:fc:ea:30:74:f2:49:e1:3a:9a:2b:a2:f6:3b:25: 44:9e:02:ca:5b:d1:df:cd:36:d8:6b:8c:1c:53:2e: df:fd:d4:a0:38:df:61:76:d6:73:7a:26:1e:6f:ab: 25:a2:57:44:0e:d1:1d:c4:fc:af:f0:69:a9:c9:a6: 01:e3:d6:b6:66:c2:a6:8c:df:2a:7b:9e:8f:2b:e0: 57:9b:3c:5d:13:1a:30:4e:50:6d:a0:ed:dc:ed:52: 98:2c:e3:cd:41:1a:4e:1d:4a:63:6c:66:c7:c4:88: 7d:9f:e1:7f:8d:89:6b:9d:01:4a:07:7b:32:ad:33: bc:de:5f:30:04:ea:7f:c7:1a:51:88:a1:33:8f:1c: d4:26:e9:ef:76:ca:d9:c4:27:9a:63:8f:91:ad:44: 96:ea:39:6b:47:5e:c4:a1:f8:ae:85:56:16:93:43: 65:42:85:1d:43:5d:98:89:6d:19:dd:51:91:14:cb: 58:d1:77:1a:3f:6d:ec:96:bc:9c:50:87:76:f5:5f: 07:d3:6b:b9:e5:8a:e4:1b:47:68:2a:37:62:7f:1b: 20:47:4b:c2:76:a0:51:96:36:de:fc:d6:96:86:5e: 82:85:28:c6:32:5d:b2:97:94:e2:ee:2f:04:42:94: 8b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:AC:9C:A5:A2:F0:7C:BD:0D:1E:2F:B4:CC:32:AB:16:30:42:75:51 X509v3 Authority Key Identifier: keyid:00:02:41:49:0E:3F:20:98:F7:9D:5C:93:03:7E:BF:F2:B9:56:CF:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAJBSQ4_IJj3nVyTA36_8rlWz9c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:3f:9a:90:04:a3:8b:ad:16:8e:22:7f:93:a4:b0:42:8c:12: d6:96:49:f1:47:69:4e:b4:7d:2d:65:34:14:0b:4a:2a:9b:f8: 82:d1:79:22:84:a6:32:23:f3:90:f2:d6:3b:57:2e:11:5f:b1: bf:c0:19:48:ac:08:1c:4d:06:bd:b5:ce:44:3c:39:2c:3a:4b: 25:91:9f:91:65:b7:1e:92:12:d6:27:aa:6c:45:d7:e0:d5:42: 31:46:df:ae:9c:76:c2:c9:89:2f:ce:db:de:8b:ba:33:4d:a1: 3c:3e:d8:48:e2:27:90:d2:5c:32:4b:96:9b:d5:39:09:96:f6: 86:14:c3:74:1f:cc:4d:84:0c:c1:28:7b:10:79:b1:94:c3:fd: 7f:00:5f:29:c1:b0:0e:79:ee:c6:0f:da:02:a8:dc:00:52:41: 66:27:f1:73:f9:7a:1a:c6:90:3b:06:05:7c:c4:6c:df:11:d7: 4e:49:e2:c4:a3:ad:35:05:a9:e1:c0:a9:1d:82:d4:12:4a:d0: fb:82:75:71:76:e7:b3:e1:39:62:08:c5:41:1f:ea:40:50:dd: 10:e4:f0:25:c4:b2:24:33:9e:fe:3b:29:66:8e:cd:35:34:cb: a0:c3:a4:7b:df:eb:98:0f:d5:48:ec:d7:40:c7:74:0c:98:d7: cf:f1:c5:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBy8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ExQTYxMTAvBgNVBAUTKDAwMDI0MTQ5MEUzRjIwOThGNzlENUM5MzAzN0VCRkYy Qjk1NkNGRDcwHhcNMjUwNTEwMjEzMjIxWhcNMjUwNTE3MjEzMjIxWjAYMRYwFAYD VQQDEw02ODFmYzVlNS00NmIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA009zQP4IJuxvGFQ25TTX/OowdPJJ4TqaK6L2OyVEngLKW9HfzTbYa4wcUy7f /dSgON9hdtZzeiYeb6sloldEDtEdxPyv8GmpyaYB49a2ZsKmjN8qe56PK+BXmzxd ExowTlBtoO3c7VKYLOPNQRpOHUpjbGbHxIh9n+F/jYlrnQFKB3syrTO83l8wBOp/ xxpRiKEzjxzUJunvdsrZxCeaY4+RrUSW6jlrR17EofiuhVYWk0NlQoUdQ12YiW0Z 3VGRFMtY0XcaP23slrycUId29V8H02u55YrkG0doKjdifxsgR0vCdqBRljbe/NaW hl6ChSjGMl2yl5Ti7i8EQpSLfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGSsnKWi 8Hy9DR4vtMwyqxYwQnVRMB8GA1UdIwQYMBaAFAACQUkOPyCY951ckwN+v/K5Vs/X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTFBNi8zOEQ5M0UxRTNE MzAxMUVCQjNCMkQ2NkVDNEY5QUUwMi9BQUpCU1E0X0lKajNuVnlUQTM2XzhybFd6 OWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FBSkJTUTRfSUpqM25WeVRBMzZfOHJsV3o5Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTFBNi8zOEQ5M0UxRTNEMzAxMUVCQjNCMkQ2NkVDNEY5QUUwMi9BQUpCU1E0X0lK ajNuVnlUQTM2XzhybFd6OWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKP5qQBKOLrRaOIn+TpLBCjBLWlknxR2lOtH0tZTQUC0oqm/iC0Xki hKYyI/OQ8tY7Vy4RX7G/wBlIrAgcTQa9tc5EPDksOkslkZ+RZbcekhLWJ6psRdfg 1UIxRt+unHbCyYkvztvei7ozTaE8PthI4ieQ0lwyS5ab1TkJlvaGFMN0H8xNhAzB KHsQebGUw/1/AF8pwbAOee7GD9oCqNwAUkFmJ/Fz+XoaxpA7BgV8xGzfEddOSeLE o601BanhwKkdgtQSStD7gnVxduez4TliCMVBH+pAUN0Q5PAlxLIkM57+Oylmjs01 NMugw6R73+uYD9VI7NdAx3QMmNfP8cVS -----END CERTIFICATE-----Generated at Mon May 12 04:04:04 2025 by rpki-client