$ rpki-client -vvf rpki.apnic.net/member_repository/A91B253D/86B0D73EF71F11EAAE96B225C4F9AE02/AMEx5mi1_pTstDkxhHpyiqzoLUs.mft File: AMEx5mi1_pTstDkxhHpyiqzoLUs.mft (raw, json) Hash identifier: pm3hakwEQuRXU39w582GW6SDHW+CBd7zHPI7tWEbvMo= Subject key identifier: 43:EE:19:47:36:86:14:3E:1C:38:2C:38:82:26:28:F1:19:E2:13:8A Authority key identifier: 00:C1:31:E6:68:B5:FE:94:EC:B4:39:31:84:7A:72:8A:AC:E8:2D:4B Certificate issuer: /CN=A91B253D/serialNumber=00C131E668B5FE94ECB43931847A728AACE82D4B Certificate serial: 07EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AMEx5mi1_pTstDkxhHpyiqzoLUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B253D/86B0D73EF71F11EAAE96B225C4F9AE02/AMEx5mi1_pTstDkxhHpyiqzoLUs.mft Manifest number: 07E6 Signing time: Fri 08 Aug 2025 21:23:22 +0000 Manifest this update: Fri 08 Aug 2025 21:23:22 +0000 Manifest next update: Fri 15 Aug 2025 21:23:22 +0000 Files and hashes: 1: AMEx5mi1_pTstDkxhHpyiqzoLUs.crl (hash: 75Zgz8Mu4RnE7lSU2LF4SHoXwx5BXO6h9G79jeyASks=) 2: 76EBD456F72011EA8776EC28C4F9AE02.roa (hash: OSuo22pCpFQlpJJN8xkAzm6P90bv2Mjg2FXUApiRfIg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B253D/86B0D73EF71F11EAAE96B225C4F9AE02/AMEx5mi1_pTstDkxhHpyiqzoLUs.crl rsync://rpki.apnic.net/member_repository/A91B253D/86B0D73EF71F11EAAE96B225C4F9AE02/AMEx5mi1_pTstDkxhHpyiqzoLUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AMEx5mi1_pTstDkxhHpyiqzoLUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2027 (0x7eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B253D, serialNumber=00C131E668B5FE94ECB43931847A728AACE82D4B Validity Not Before: Aug 8 21:23:22 2025 GMT Not After : Aug 15 21:23:22 2025 GMT Subject: CN=68966aca-48a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:37:b5:e4:0f:c6:f8:c6:37:fb:ff:01:59:4b: 1c:d2:89:18:48:c5:f0:58:a8:ce:e4:f6:0c:36:4e: 5e:54:c7:e9:73:4d:a4:2e:78:1d:72:a7:53:4a:32: 00:c5:e3:ea:51:e9:18:92:64:fe:8c:7d:72:e6:ab: df:79:ef:e4:ee:66:96:24:ea:d3:12:e7:61:92:2f: 55:ae:8d:a4:ad:d0:59:b0:ae:40:fa:0f:43:de:eb: 20:04:9f:1f:12:fe:4d:32:db:40:91:03:0c:0d:be: 91:84:97:bc:0e:43:3f:44:1a:74:46:e1:ff:68:a7: 9e:6d:1d:3e:10:99:1f:c1:e2:7c:be:a7:d5:7e:d6: 0f:5b:ce:58:ea:46:8d:cd:33:da:99:09:5d:1d:31: 5f:39:6d:10:44:f4:64:67:11:a9:2a:44:c4:74:62: ff:bb:16:af:07:28:34:4d:d7:33:f3:0f:2f:fb:ae: 65:eb:e5:ff:9f:27:cc:14:47:f9:78:b4:d3:8f:45: f3:43:8c:d2:6f:b6:f2:b1:b5:51:93:c7:5a:17:a3: 9d:cd:2f:56:f9:cf:d4:ac:b6:73:7d:92:c6:e4:cb: 4d:c4:f0:38:bb:1b:89:2f:63:b5:3e:2d:b4:bf:47: d3:46:12:a5:db:13:1e:ec:a2:65:ee:c3:e2:e7:51: 52:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:EE:19:47:36:86:14:3E:1C:38:2C:38:82:26:28:F1:19:E2:13:8A X509v3 Authority Key Identifier: keyid:00:C1:31:E6:68:B5:FE:94:EC:B4:39:31:84:7A:72:8A:AC:E8:2D:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B253D/86B0D73EF71F11EAAE96B225C4F9AE02/AMEx5mi1_pTstDkxhHpyiqzoLUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AMEx5mi1_pTstDkxhHpyiqzoLUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B253D/86B0D73EF71F11EAAE96B225C4F9AE02/AMEx5mi1_pTstDkxhHpyiqzoLUs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:ae:79:67:03:86:32:fa:d1:0a:59:76:28:0f:e7:44:cc:ae: 89:26:ee:df:4f:28:40:c5:2c:e9:da:58:40:8d:53:07:17:33: ba:f5:ce:4c:c3:fb:5d:5a:11:d5:f1:e5:0d:3e:00:9a:30:0f: 50:3a:9b:f2:4b:dc:c8:5e:81:13:d5:f7:24:ca:75:70:a0:c8: 51:b0:3b:18:8a:22:7e:29:80:a8:e0:f0:d3:d4:36:75:1a:5c: 09:d7:3a:a4:24:d0:27:66:10:41:38:59:90:e8:0d:2b:22:9e: 51:60:f5:f1:d7:1a:05:8f:3a:1c:48:93:64:30:b1:dd:76:a2: 5b:fe:16:12:f5:99:cb:7b:26:c2:a3:4b:78:73:3b:59:d2:5d: de:ca:33:32:87:8d:9a:d7:62:74:af:cc:1f:7b:c5:c8:6c:1b: 51:1f:59:6b:48:df:b7:8d:e9:7c:ba:1e:d3:ba:ec:66:73:8f: 66:63:0b:9d:2c:a0:f1:c4:b1:5e:14:ab:b2:c5:d4:57:b3:65: fb:5a:63:ba:33:52:0d:60:5a:bc:f9:eb:7e:84:b7:68:4d:2b: c7:e1:17:0c:5a:8f:96:de:c6:1b:f2:49:10:16:9a:d2:74:f2: fb:24:4b:0e:25:b6:6d:95:ed:29:4a:76:92:4c:a2:ed:14:50: 51:20:15:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjI1M0QxMTAvBgNVBAUTKDAwQzEzMUU2NjhCNUZFOTRFQ0I0MzkzMTg0N0E3MjhB QUNFODJENEIwHhcNMjUwODA4MjEyMzIyWhcNMjUwODE1MjEyMzIyWjAYMRYwFAYD VQQDEw02ODk2NmFjYS00OGE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuje15A/G+MY3+/8BWUsc0okYSMXwWKjO5PYMNk5eVMfpc02kLngdcqdTSjIA xePqUekYkmT+jH1y5qvfee/k7maWJOrTEudhki9Vro2krdBZsK5A+g9D3usgBJ8f Ev5NMttAkQMMDb6RhJe8DkM/RBp0RuH/aKeebR0+EJkfweJ8vqfVftYPW85Y6kaN zTPamQldHTFfOW0QRPRkZxGpKkTEdGL/uxavByg0Tdcz8w8v+65l6+X/nyfMFEf5 eLTTj0XzQ4zSb7bysbVRk8daF6OdzS9W+c/UrLZzfZLG5MtNxPA4uxuJL2O1Pi20 v0fTRhKl2xMe7KJl7sPi51FSDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEPuGUc2 hhQ+HDgsOIImKPEZ4hOKMB8GA1UdIwQYMBaAFADBMeZotf6U7LQ5MYR6coqs6C1L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjUzRC84NkIwRDczRUY3 MUYxMUVBQUU5NkIyMjVDNEY5QUUwMi9BTUV4NW1pMV9wVHN0RGt4aEhweWlxem9M VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FNRXg1bWkxX3BUc3REa3hoSHB5aXF6b0xVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MjUzRC84NkIwRDczRUY3MUYxMUVBQUU5NkIyMjVDNEY5QUUwMi9BTUV4NW1pMV9w VHN0RGt4aEhweWlxem9MVXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPrnlnA4Yy+tEKWXYoD+dEzK6JJu7fTyhAxSzp2lhAjVMHFzO69c5M w/tdWhHV8eUNPgCaMA9QOpvyS9zIXoET1fckynVwoMhRsDsYiiJ+KYCo4PDT1DZ1 GlwJ1zqkJNAnZhBBOFmQ6A0rIp5RYPXx1xoFjzocSJNkMLHddqJb/hYS9ZnLeybC o0t4cztZ0l3eyjMyh42a12J0r8wfe8XIbBtRH1lrSN+3jel8uh7Tuuxmc49mYwud LKDxxLFeFKuyxdRXs2X7WmO6M1INYFq8+et+hLdoTSvH4RcMWo+W3sYb8kkQFprS dPL7JEsOJbZtle0pSnaSTKLtFFBRIBXK -----END CERTIFICATE-----Generated at Sat Aug 9 03:01:59 2025 by rpki-client