$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.mft File: aaMtc-A4ow1HrKzrgc1zEq91Ork.mft (raw, json) Hash identifier: pylPPzccRl1KaHBVPPRpz1sP4rY3N2HNb5ISkAKh82Y= Subject key identifier: CE:54:2A:29:86:7A:69:C4:5D:8B:0D:EC:57:06:19:F1:90:33:C4:5A Authority key identifier: 69:A3:2D:73:E0:38:A3:0D:47:AC:AC:EB:81:CD:73:12:AF:75:3A:B9 Certificate issuer: /CN=A91E1F31/serialNumber=69A32D73E038A30D47ACACEB81CD7312AF753AB9 Certificate serial: 0108 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaMtc-A4ow1HrKzrgc1zEq91Ork.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.mft Manifest number: FE Signing time: Thu 03 Jul 2025 05:25:03 +0000 Manifest this update: Thu 03 Jul 2025 05:25:02 +0000 Manifest next update: Thu 10 Jul 2025 05:25:02 +0000 Files and hashes: 1: aaMtc-A4ow1HrKzrgc1zEq91Ork.crl (hash: 62f5ROGFiNXGKNBLOHzQn+jrcTrjDj7kjZlCvnkGnPk=) 2: 2F734D2E860111EFB49EB20DC4F9AE02.roa (hash: gfkWuMfDUYAqyRnTePZPV70xVbbxGR6RawYGUjcJFec=) 3: AAFEACF0500311F0A7E46C33C4F9AE02.roa (hash: kFrgJirbvirh1kV38XDRtsJ3nsQNa4+OvKJO0YsvLek=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.crl rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaMtc-A4ow1HrKzrgc1zEq91Ork.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 264 (0x108) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1F31, serialNumber=69A32D73E038A30D47ACACEB81CD7312AF753AB9 Validity Not Before: Jul 3 05:25:02 2025 GMT Not After : Jul 10 05:25:02 2025 GMT Subject: CN=6866142f-a7b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:d4:4a:79:c5:47:de:a2:41:1b:aa:32:02:a5: cc:14:f7:fd:41:48:c1:d0:45:2b:e6:b5:0c:da:81: 02:52:1b:ec:55:7d:d7:62:53:3d:16:a4:1e:49:6b: 21:74:a1:b3:ae:d5:1f:ad:1d:21:f8:ca:45:55:73: 7f:aa:05:e6:14:48:ab:c4:d2:57:cb:f1:06:78:50: 47:13:27:5a:ba:4e:5a:22:fa:75:97:77:77:f9:60: 66:f6:6f:f3:84:52:0a:fb:d1:47:ac:36:cc:3a:c5: 97:0b:4b:4c:21:c6:cf:2c:f9:bf:82:1c:44:6a:0a: 83:ff:01:dd:fa:be:95:75:50:37:9a:2c:8e:b0:6f: 8b:04:36:ea:f5:89:f5:3a:dc:25:53:bd:5d:7d:3a: 82:14:20:82:33:47:30:53:49:f8:cf:11:af:32:03: c9:77:47:7c:cd:23:b5:c0:88:7b:d9:83:db:6e:75: ae:d1:31:1d:b1:a0:70:d3:77:28:0c:e3:29:44:c5: 8e:af:80:7b:18:03:3f:d1:90:19:0c:8b:5c:df:eb: bd:e7:44:21:50:ab:a1:6d:29:31:66:3d:cd:7e:d6: 17:43:11:1b:ed:05:ac:6a:73:80:bb:53:f9:72:1c: f3:c1:03:7c:25:c1:0c:94:38:ea:94:d4:ff:f5:10: a1:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:54:2A:29:86:7A:69:C4:5D:8B:0D:EC:57:06:19:F1:90:33:C4:5A X509v3 Authority Key Identifier: keyid:69:A3:2D:73:E0:38:A3:0D:47:AC:AC:EB:81:CD:73:12:AF:75:3A:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaMtc-A4ow1HrKzrgc1zEq91Ork.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:f2:26:8a:83:82:1f:71:41:35:de:f1:40:2c:e0:4f:b4:f1: 92:88:cd:2a:b6:34:47:46:a5:e2:97:5b:a4:4f:b3:7a:63:f0: f1:5d:59:05:78:65:ec:ed:af:20:9f:e2:c6:48:96:04:1d:2e: 9b:11:2a:4d:d4:6a:73:e9:2a:d4:07:da:87:13:ec:ef:45:32: c5:45:4c:40:14:52:03:6d:ce:5d:e0:9f:26:14:59:83:6e:55: e0:9d:22:e1:ad:a8:b1:13:fc:9f:db:74:6b:81:ea:cd:c8:88: 11:74:2a:d5:8d:7d:12:c1:b1:2e:f0:dc:e8:8a:29:09:7b:d4: 67:3b:86:c9:f4:fe:d7:e3:31:fc:cf:e7:b5:72:2e:c2:44:79: 50:c6:d5:d9:fb:d3:46:60:ae:f2:55:c4:da:e3:ad:0c:69:42: f7:d5:34:44:c7:55:50:d8:23:d7:84:4f:c7:7b:da:41:d0:6a: 41:f5:91:f4:a1:ca:db:51:c3:2d:51:96:3a:ca:f7:6c:42:78: 56:02:b5:1d:93:0c:bd:48:7b:86:79:3d:63:27:98:cf:6a:e2: a8:f4:99:1f:b7:ba:8d:42:6c:33:ec:91:7d:25:02:39:8e:d9: af:df:4f:49:e5:b8:1a:a4:b6:36:7c:07:a4:41:10:54:c0:7d: 87:f3:c7:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTFGMzExMTAvBgNVBAUTKDY5QTMyRDczRTAzOEEzMEQ0N0FDQUNFQjgxQ0Q3MzEy QUY3NTNBQjkwHhcNMjUwNzAzMDUyNTAyWhcNMjUwNzEwMDUyNTAyWjAYMRYwFAYD VQQDEw02ODY2MTQyZi1hN2I0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6NRKecVH3qJBG6oyAqXMFPf9QUjB0EUr5rUM2oECUhvsVX3XYlM9FqQeSWsh dKGzrtUfrR0h+MpFVXN/qgXmFEirxNJXy/EGeFBHEydauk5aIvp1l3d3+WBm9m/z hFIK+9FHrDbMOsWXC0tMIcbPLPm/ghxEagqD/wHd+r6VdVA3miyOsG+LBDbq9Yn1 OtwlU71dfTqCFCCCM0cwU0n4zxGvMgPJd0d8zSO1wIh72YPbbnWu0TEdsaBw03co DOMpRMWOr4B7GAM/0ZAZDItc3+u950QhUKuhbSkxZj3NftYXQxEb7QWsanOAu1P5 chzzwQN8JcEMlDjqlNT/9RChdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM5UKimG emnEXYsN7FcGGfGQM8RaMB8GA1UdIwQYMBaAFGmjLXPgOKMNR6ys64HNcxKvdTq5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUYzMS9BMEY0RTBEMEUx QkUxMUVFQjA0NUVCMjZDNEY5QUUwMi9hYU10Yy1BNG93MUhyS3pyZ2MxekVxOTFP cmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FhTXRjLUE0b3cxSHJLenJnYzF6RXE5MU9yay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MUYzMS9BMEY0RTBEMEUxQkUxMUVFQjA0NUVCMjZDNEY5QUUwMi9hYU10Yy1BNG93 MUhyS3pyZ2MxekVxOTFPcmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAI8iaKg4IfcUE13vFALOBPtPGSiM0qtjRHRqXil1ukT7N6Y/DxXVkF eGXs7a8gn+LGSJYEHS6bESpN1Gpz6SrUB9qHE+zvRTLFRUxAFFIDbc5d4J8mFFmD blXgnSLhraixE/yf23RrgerNyIgRdCrVjX0SwbEu8NzoiikJe9RnO4bJ9P7X4zH8 z+e1ci7CRHlQxtXZ+9NGYK7yVcTa460MaUL31TREx1VQ2CPXhE/He9pB0GpB9ZH0 ocrbUcMtUZY6yvdsQnhWArUdkwy9SHuGeT1jJ5jPauKo9Jkft7qNQmwz7JF9JQI5 jtmv309J5bgapLY2fAekQRBUwH2H88fC -----END CERTIFICATE-----Generated at Thu Jul 3 12:28:10 2025 by rpki-client