$ rpki-client -vvf rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.mft File: pAislKDTNvRzJJBakYrySQLw3os.mft (raw, json) Hash identifier: /jrR2QC4Mm85GetPB1t4qXCvlTNw8FW2am8jq4hzIHc= Subject key identifier: F4:08:F0:6B:A8:15:56:34:80:C9:6A:57:2E:24:B9:94:0E:B0:94:4E Authority key identifier: A4:08:AC:94:A0:D3:36:F4:73:24:90:5A:91:8A:F2:49:02:F0:DE:8B Certificate issuer: /CN=A9158620/serialNumber=A408AC94A0D336F47324905A918AF24902F0DE8B Certificate serial: 0147 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pAislKDTNvRzJJBakYrySQLw3os.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.mft Manifest number: 0137 Signing time: Fri 13 Jun 2025 03:38:08 +0000 Manifest this update: Fri 13 Jun 2025 03:38:07 +0000 Manifest next update: Fri 20 Jun 2025 03:38:07 +0000 Files and hashes: 1: pAislKDTNvRzJJBakYrySQLw3os.crl (hash: WMeSLCBMdP5VoSqiff7vbM0pBHiBwnC3xCIDuTFIkfs=) 2: 62258D42C93A11EEA1A4CA4FC4F9AE02.roa (hash: h5rk3Xz6VW0VeUtdbytEnw8Pa8H3Io324xwpZFHPhXc=) 3: 31A1996898F711EEB7B27877C4F9AE02.roa (hash: Vl/bZ/gdPwuufyZFmfVq5SymVLQXqPiJLzDWamKz3l4=) 4: 62C61398C93A11EEA1A4CA4FC4F9AE02.roa (hash: ROYJghlVOvaMnbHvL/73QuVNi54B62NVGwKlydNJjfk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.crl rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pAislKDTNvRzJJBakYrySQLw3os.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 03:38:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 327 (0x147) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158620, serialNumber=A408AC94A0D336F47324905A918AF24902F0DE8B Validity Not Before: Jun 13 03:38:07 2025 GMT Not After : Jun 20 03:38:07 2025 GMT Subject: CN=684b9d20-114e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d4:34:f1:df:f6:54:cf:ec:51:72:75:64:a3: ec:dc:8b:86:2b:6c:b7:27:0b:52:14:f0:d4:83:ee: 78:5f:22:58:cc:85:63:ee:3f:6a:ea:4a:33:a5:1c: 37:3f:67:cb:26:b4:f5:73:51:31:07:e6:d0:99:3f: 4d:9d:3a:ce:49:ec:78:24:c9:fc:d2:b3:47:be:f5: bb:42:0b:1f:62:26:68:ab:57:bc:23:e1:24:1a:ee: a6:c6:95:c5:0d:d8:41:c4:16:7a:5c:2c:68:60:a9: 5c:cd:03:25:03:e9:3f:e8:04:68:86:3b:1e:34:3c: b9:9c:c5:28:3f:9d:a0:3f:3a:48:30:ed:7c:11:92: 88:99:f2:7c:13:5d:a6:56:31:25:e0:74:27:da:4f: 04:ac:43:27:83:3a:ed:fd:5b:c3:74:8e:b3:ab:dd: 34:55:2d:55:d8:a2:b1:d0:42:ad:ca:5c:4d:13:f6: fc:6b:db:a7:c4:83:7b:a4:87:21:9d:c1:47:99:7b: e3:6c:ba:f4:97:02:66:85:4a:f3:f2:ec:8f:8c:ef: 88:17:c4:61:93:b2:25:f9:f4:68:9d:da:16:16:11: d3:d6:c6:ad:bd:54:68:5a:be:eb:c0:db:7e:fc:87: 92:3e:0f:86:12:a0:ea:e8:dd:04:d6:80:29:ec:69: 14:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:08:F0:6B:A8:15:56:34:80:C9:6A:57:2E:24:B9:94:0E:B0:94:4E X509v3 Authority Key Identifier: keyid:A4:08:AC:94:A0:D3:36:F4:73:24:90:5A:91:8A:F2:49:02:F0:DE:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pAislKDTNvRzJJBakYrySQLw3os.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:86:94:24:7d:cc:ac:9a:e6:8a:0e:7b:8d:a4:b2:b5:63:9b: d0:9a:db:bc:5a:a1:9a:e9:dc:55:c5:24:3e:fa:c4:dd:7f:52: 0e:5e:6c:ea:35:06:7e:b8:39:ad:6a:6f:8a:f8:fe:02:42:9a: 8d:86:90:a9:ac:03:18:15:a9:3e:1b:b8:61:52:4e:2f:3f:b3: 95:7c:cc:17:dd:97:4b:0a:fe:6a:3c:a2:e5:7c:b3:0d:33:31: 00:86:d4:4a:be:6d:57:09:38:c4:ff:a3:11:56:6c:e6:5c:80: c7:cf:13:85:d8:22:9a:0a:81:5d:b9:33:07:e3:a6:8b:a1:62: 27:a0:4c:bd:21:7a:80:01:78:b9:11:ab:89:22:dd:0f:3b:7d: 83:a5:7a:5c:3a:89:ff:bc:43:83:b0:71:37:f6:40:91:3e:43: 7f:e7:0a:5f:2a:c2:cc:e5:7a:5b:96:c3:34:98:b6:10:7a:3d: 46:ad:e1:3c:ad:6a:f7:c2:1b:47:8a:9d:7b:d7:03:72:a0:9f: f4:73:de:a3:58:2e:4e:dd:33:57:d8:8c:2e:35:75:03:b3:47: 93:e2:78:da:0b:a2:e2:48:14:c5:44:e8:54:30:78:69:4a:fa: 43:3c:56:28:54:4f:f7:ae:02:86:fb:cf:9a:24:2a:6e:36:97: fa:5f:5d:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg2MjAxMTAvBgNVBAUTKEE0MDhBQzk0QTBEMzM2RjQ3MzI0OTA1QTkxOEFGMjQ5 MDJGMERFOEIwHhcNMjUwNjEzMDMzODA3WhcNMjUwNjIwMDMzODA3WjAYMRYwFAYD VQQDEw02ODRiOWQyMC0xMTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAydQ08d/2VM/sUXJ1ZKPs3IuGK2y3JwtSFPDUg+54XyJYzIVj7j9q6kozpRw3 P2fLJrT1c1ExB+bQmT9NnTrOSex4JMn80rNHvvW7QgsfYiZoq1e8I+EkGu6mxpXF DdhBxBZ6XCxoYKlczQMlA+k/6ARohjseNDy5nMUoP52gPzpIMO18EZKImfJ8E12m VjEl4HQn2k8ErEMngzrt/VvDdI6zq900VS1V2KKx0EKtylxNE/b8a9unxIN7pIch ncFHmXvjbLr0lwJmhUrz8uyPjO+IF8Rhk7Il+fRondoWFhHT1satvVRoWr7rwNt+ /IeSPg+GEqDq6N0E1oAp7GkU1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPQI8Guo FVY0gMlqVy4kuZQOsJROMB8GA1UdIwQYMBaAFKQIrJSg0zb0cySQWpGK8kkC8N6L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODYyMC8wRTkxOTkzNDg4 NDIxMUVFQTdEOEM4MTRDNEY5QUUwMi9wQWlzbEtEVE52UnpKSkJha1lyeVNRTHcz b3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BBaXNsS0RUTnZSekpKQmFrWXJ5U1FMdzNvcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODYyMC8wRTkxOTkzNDg4NDIxMUVFQTdEOEM4MTRDNEY5QUUwMi9wQWlzbEtEVE52 UnpKSkJha1lyeVNRTHczb3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCihpQkfcysmuaKDnuNpLK1Y5vQmtu8WqGa6dxVxSQ++sTdf1IOXmzq NQZ+uDmtam+K+P4CQpqNhpCprAMYFak+G7hhUk4vP7OVfMwX3ZdLCv5qPKLlfLMN MzEAhtRKvm1XCTjE/6MRVmzmXIDHzxOF2CKaCoFduTMH46aLoWInoEy9IXqAAXi5 EauJIt0PO32DpXpcOon/vEODsHE39kCRPkN/5wpfKsLM5XpblsM0mLYQej1GreE8 rWr3whtHip171wNyoJ/0c96jWC5O3TNX2IwuNXUDs0eT4njaC6LiSBTFROhUMHhp SvpDPFYoVE/3rgKG+8+aJCpuNpf6X11R -----END CERTIFICATE-----Generated at Sat Jun 14 18:35:14 2025 by rpki-client