$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft File: AJko8LjNMO2gVjCoumdOdiqdKDM.mft (raw, json) Hash identifier: iamXLy/eCiXDnr+rDVKB2fB2JJovNyY6hMjA9Dd5q5w= Subject key identifier: AB:7F:8F:53:7A:F4:5D:55:82:29:39:E9:D9:C4:E6:07:35:CA:54:CD Authority key identifier: 00:99:28:F0:B8:CD:30:ED:A0:56:30:A8:BA:67:4E:76:2A:9D:28:33 Certificate issuer: /CN=A91CE5A6/serialNumber=009928F0B8CD30EDA05630A8BA674E762A9D2833 Certificate serial: 0143 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJko8LjNMO2gVjCoumdOdiqdKDM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft Manifest number: 013A Signing time: Sun 11 May 2025 03:22:57 +0000 Manifest this update: Sun 11 May 2025 03:22:57 +0000 Manifest next update: Sun 18 May 2025 03:22:57 +0000 Files and hashes: 1: AJko8LjNMO2gVjCoumdOdiqdKDM.crl (hash: r/dmkXQeefrS8MSl6qw2RQ4b5PImX9sECpORQCJCfhQ=) 2: EC56413A5B4B11EE9A031C81C4F9AE02.roa (hash: L51Q68tVx2XVC4mIdbJx6yL7uZTn+EZdlLwf/zTugIc=) 3: 7022F6EE5B4611EE9093F11EC4F9AE02.roa (hash: 4Ob8OZ5S2H/WLKjYmff77WuX2DfNbq1F3IyX9D66TLg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.crl rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJko8LjNMO2gVjCoumdOdiqdKDM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 03:22:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 323 (0x143) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE5A6, serialNumber=009928F0B8CD30EDA05630A8BA674E762A9D2833 Validity Not Before: May 11 03:22:57 2025 GMT Not After : May 18 03:22:57 2025 GMT Subject: CN=68201811-21dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:49:67:67:2a:a3:e8:f8:d2:f3:f6:78:cd:3c: 9d:d9:36:4e:77:b4:22:68:11:9e:13:25:55:79:b2: cd:be:cd:d0:5b:78:00:66:89:b3:f5:90:c7:cd:af: 5f:8d:c8:79:18:5a:b1:06:e2:26:66:59:e9:95:bd: d8:c5:bb:42:c0:39:68:c7:b7:eb:78:01:d3:14:1b: 5f:46:da:60:e5:6f:b2:c9:1b:3a:f7:72:0e:18:ce: 9b:8e:0c:ad:80:bc:0f:80:28:9f:09:c9:ed:ee:4a: 0c:32:c2:bc:13:82:e1:58:58:ce:94:81:87:c4:67: 03:da:93:e5:81:b3:96:9f:60:20:7b:12:1c:bc:21: da:51:53:91:ef:8d:a7:f6:b1:b5:48:e5:89:16:bf: 23:8b:98:00:8e:bf:c0:9f:32:0b:25:99:e6:b4:e1: 3f:86:26:73:d4:21:2f:6d:dc:ba:65:be:58:dc:39: 09:d4:df:36:7c:95:84:bf:95:2c:a1:4e:88:7a:1f: 6e:09:c0:99:27:80:04:57:e4:4f:65:43:41:9f:02: 8b:cf:3a:10:d0:d5:05:44:6d:53:00:9b:06:cf:84: 31:6f:ef:cc:fb:4b:22:fc:96:15:a9:99:7e:82:7a: a9:f6:77:67:e2:14:39:ac:f5:c0:5d:87:22:ec:82: 65:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:7F:8F:53:7A:F4:5D:55:82:29:39:E9:D9:C4:E6:07:35:CA:54:CD X509v3 Authority Key Identifier: keyid:00:99:28:F0:B8:CD:30:ED:A0:56:30:A8:BA:67:4E:76:2A:9D:28:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJko8LjNMO2gVjCoumdOdiqdKDM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:33:b2:94:e4:28:cb:f1:17:39:a2:5c:35:81:65:72:43:c4: 70:b1:0e:e5:bb:b3:5e:91:2f:de:fd:61:2a:80:6e:66:db:f3: cb:15:9f:a4:ae:7c:64:9d:3f:10:cf:c5:2f:c7:9b:d3:d5:53: 2a:36:18:66:3f:3a:ab:53:da:41:2e:49:37:ed:9c:9e:d1:db: aa:fd:4a:bc:89:ab:8c:3f:08:fe:9c:9e:91:7e:0c:37:b1:30: 58:bd:52:3a:2f:4c:3f:b1:a3:1c:ea:c4:6e:33:9e:5b:48:fc: 01:e9:36:64:a2:3c:ad:6c:41:82:a3:e6:ff:d1:c3:95:c0:3a: 71:62:69:1f:0f:76:af:00:85:15:c9:a1:fe:c3:a0:5b:6f:95: 98:6f:62:51:89:d1:ee:22:f4:3d:12:4b:c6:27:bd:5b:68:36: ff:7d:b1:b4:15:01:86:e0:04:da:7c:a5:25:c9:d5:c9:f2:80: c3:94:4d:0d:e4:2e:e5:bd:f4:2d:c3:e6:6a:7e:ca:75:5b:e4: 29:d1:6a:e7:f9:c2:30:8b:80:17:76:a9:34:d1:ea:fc:d8:6a: c8:84:13:f4:45:ff:39:8d:07:60:fa:d5:8f:d2:ae:39:a0:51: ff:90:5e:e7:ae:99:7b:7b:47:9f:ca:14:07:8b:7f:d0:a1:95: b7:d3:5c:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U1QTYxMTAvBgNVBAUTKDAwOTkyOEYwQjhDRDMwRURBMDU2MzBBOEJBNjc0RTc2 MkE5RDI4MzMwHhcNMjUwNTExMDMyMjU3WhcNMjUwNTE4MDMyMjU3WjAYMRYwFAYD VQQDEw02ODIwMTgxMS0yMWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtElnZyqj6PjS8/Z4zTyd2TZOd7QiaBGeEyVVebLNvs3QW3gAZomz9ZDHza9f jch5GFqxBuImZlnplb3YxbtCwDlox7freAHTFBtfRtpg5W+yyRs693IOGM6bjgyt gLwPgCifCcnt7koMMsK8E4LhWFjOlIGHxGcD2pPlgbOWn2AgexIcvCHaUVOR742n 9rG1SOWJFr8ji5gAjr/AnzILJZnmtOE/hiZz1CEvbdy6Zb5Y3DkJ1N82fJWEv5Us oU6Ieh9uCcCZJ4AEV+RPZUNBnwKLzzoQ0NUFRG1TAJsGz4Qxb+/M+0si/JYVqZl+ gnqp9ndn4hQ5rPXAXYci7IJlEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKt/j1N6 9F1Vgik56dnE5gc1ylTNMB8GA1UdIwQYMBaAFACZKPC4zTDtoFYwqLpnTnYqnSgz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTVBNi9CMzc0OTcxMDVC M0YxMUVFOEYxRDNENkVDNEY5QUUwMi9BSmtvOExqTk1PMmdWakNvdW1kT2RpcWRL RE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FKa284TGpOTU8yZ1ZqQ291bWRPZGlxZEtETS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTVBNi9CMzc0OTcxMDVCM0YxMUVFOEYxRDNENkVDNEY5QUUwMi9BSmtvOExqTk1P MmdWakNvdW1kT2RpcWRLRE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRM7KU5CjL8Rc5olw1gWVyQ8RwsQ7lu7NekS/e/WEqgG5m2/PLFZ+k rnxknT8Qz8Uvx5vT1VMqNhhmPzqrU9pBLkk37Zye0duq/Uq8iauMPwj+nJ6Rfgw3 sTBYvVI6L0w/saMc6sRuM55bSPwB6TZkojytbEGCo+b/0cOVwDpxYmkfD3avAIUV yaH+w6Bbb5WYb2JRidHuIvQ9EkvGJ71baDb/fbG0FQGG4ATafKUlydXJ8oDDlE0N 5C7lvfQtw+Zqfsp1W+Qp0Wrn+cIwi4AXdqk00er82GrIhBP0Rf85jQdg+tWP0q45 oFH/kF7nrpl7e0efyhQHi3/QoZW301wF -----END CERTIFICATE-----Generated at Sun May 11 22:20:49 2025 by rpki-client