$ rpki-client -vvf rpki.apnic.net/member_repository/A91B253D/86B0D73EF71F11EAAE96B225C4F9AE02/AMEx5mi1_pTstDkxhHpyiqzoLUs.mft File: AMEx5mi1_pTstDkxhHpyiqzoLUs.mft (raw, json) Hash identifier: JQs0uzYnlFCuJdZ+6lU5byUDLhOUXEp4MI+26bUFRL4= Subject key identifier: C8:BB:9E:F9:DD:B2:1A:34:8B:FA:6D:C1:EF:A0:95:F9:EA:15:CC:07 Authority key identifier: 00:C1:31:E6:68:B5:FE:94:EC:B4:39:31:84:7A:72:8A:AC:E8:2D:4B Certificate issuer: /CN=A91B253D/serialNumber=00C131E668B5FE94ECB43931847A728AACE82D4B Certificate serial: 07B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AMEx5mi1_pTstDkxhHpyiqzoLUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B253D/86B0D73EF71F11EAAE96B225C4F9AE02/AMEx5mi1_pTstDkxhHpyiqzoLUs.mft Manifest number: 07B3 Signing time: Mon 28 Apr 2025 21:37:46 +0000 Manifest this update: Mon 28 Apr 2025 21:37:45 +0000 Manifest next update: Mon 05 May 2025 21:37:45 +0000 Files and hashes: 1: AMEx5mi1_pTstDkxhHpyiqzoLUs.crl (hash: CgF2bLrQjoaFX+6Z1JJIAs2p7n9QVfHW4fLqo16qyFM=) 2: 76EBD456F72011EA8776EC28C4F9AE02.roa (hash: OSuo22pCpFQlpJJN8xkAzm6P90bv2Mjg2FXUApiRfIg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B253D/86B0D73EF71F11EAAE96B225C4F9AE02/AMEx5mi1_pTstDkxhHpyiqzoLUs.crl rsync://rpki.apnic.net/member_repository/A91B253D/86B0D73EF71F11EAAE96B225C4F9AE02/AMEx5mi1_pTstDkxhHpyiqzoLUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AMEx5mi1_pTstDkxhHpyiqzoLUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 21:37:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1976 (0x7b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B253D, serialNumber=00C131E668B5FE94ECB43931847A728AACE82D4B Validity Not Before: Apr 28 21:37:45 2025 GMT Not After : May 5 21:37:45 2025 GMT Subject: CN=680ff529-bec8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:be:7c:81:bd:69:46:31:99:59:53:89:13:fd: 17:39:f9:b9:b2:55:92:f8:8e:9d:fd:f7:46:d2:44: 3f:af:6a:7c:b2:26:3d:10:d4:36:d1:3c:f4:84:f7: 9f:50:a7:28:3a:b7:5d:98:74:46:05:7c:61:4d:64: 4d:7f:23:e5:63:a3:a9:0d:ba:3f:92:01:dd:ab:10: 38:49:e4:60:1d:70:1f:f2:c7:57:9e:e0:20:cb:7d: dd:53:b1:1f:d8:cd:60:71:7e:d6:8f:85:eb:c3:34: 15:dc:0d:65:0b:86:58:06:09:34:8f:96:d6:7d:d1: a5:ba:c4:eb:e9:da:4d:ea:28:10:e0:f3:aa:2d:e7: b0:c8:f1:de:58:e3:04:eb:c6:64:3e:2d:97:34:30: 56:a4:a5:0c:78:fa:57:af:58:bf:52:fb:55:0a:e2: 11:c4:a1:76:f4:ae:1e:b3:87:b7:c6:03:e4:37:79: 42:9a:93:f9:f0:d1:41:1a:89:94:5f:5a:cd:b1:ca: 7b:4a:4e:ba:08:fb:13:2c:8c:c6:a5:73:1b:ac:e8: 11:da:75:ca:0d:63:32:40:d4:a8:b1:2a:a8:ca:36: 71:82:69:74:da:d1:69:31:86:57:c8:0b:59:7f:dc: 0a:b4:a5:00:db:7f:0a:4f:d0:35:2b:c2:82:15:0c: 76:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:BB:9E:F9:DD:B2:1A:34:8B:FA:6D:C1:EF:A0:95:F9:EA:15:CC:07 X509v3 Authority Key Identifier: keyid:00:C1:31:E6:68:B5:FE:94:EC:B4:39:31:84:7A:72:8A:AC:E8:2D:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B253D/86B0D73EF71F11EAAE96B225C4F9AE02/AMEx5mi1_pTstDkxhHpyiqzoLUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AMEx5mi1_pTstDkxhHpyiqzoLUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B253D/86B0D73EF71F11EAAE96B225C4F9AE02/AMEx5mi1_pTstDkxhHpyiqzoLUs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:09:ae:58:62:b9:ea:05:6f:bc:87:84:1a:80:71:33:54:d3: a1:c5:c8:f6:1f:48:68:fa:11:2a:65:9b:b0:80:de:1b:28:d7: e1:a3:d1:e5:a4:d0:91:31:1d:74:04:a0:37:c5:af:3d:fc:de: e0:12:2b:c4:1c:30:e1:1d:a0:2f:19:6a:51:c7:4e:60:61:d3: df:96:26:ab:30:60:0d:96:93:1a:e2:33:9d:b9:b8:3f:6b:ed: ab:4f:b4:64:ed:6f:ed:d0:b6:80:ef:28:b1:af:9d:4a:c9:c9: 17:c0:6f:2d:ba:f7:cd:2b:f7:92:6a:70:93:8b:a3:8a:09:92: 42:f3:38:17:91:f7:15:b7:b5:46:68:7c:de:11:5b:d2:8c:6f: de:c5:54:45:ec:2c:49:d7:7e:c0:16:f5:54:77:9e:b7:ca:54: a6:ed:09:c3:33:39:78:ff:77:5d:ec:7b:80:ad:38:4c:af:0b: 4b:e2:2c:fc:98:5f:96:86:94:02:51:6a:3d:20:3f:18:4e:f9: 16:49:fa:48:8f:03:c4:a7:82:f9:c7:94:11:9d:6c:05:ea:3f: eb:a5:d3:6d:dc:a3:0f:19:0f:76:1b:11:ef:cd:27:b6:b5:53: 1e:d7:90:44:84:8f:df:91:81:0b:20:dc:40:40:75:d4:1b:2c: 38:e1:78:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjI1M0QxMTAvBgNVBAUTKDAwQzEzMUU2NjhCNUZFOTRFQ0I0MzkzMTg0N0E3MjhB QUNFODJENEIwHhcNMjUwNDI4MjEzNzQ1WhcNMjUwNTA1MjEzNzQ1WjAYMRYwFAYD VQQDEw02ODBmZjUyOS1iZWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw758gb1pRjGZWVOJE/0XOfm5slWS+I6d/fdG0kQ/r2p8siY9ENQ20Tz0hPef UKcoOrddmHRGBXxhTWRNfyPlY6OpDbo/kgHdqxA4SeRgHXAf8sdXnuAgy33dU7Ef 2M1gcX7Wj4XrwzQV3A1lC4ZYBgk0j5bWfdGlusTr6dpN6igQ4POqLeewyPHeWOME 68ZkPi2XNDBWpKUMePpXr1i/UvtVCuIRxKF29K4es4e3xgPkN3lCmpP58NFBGomU X1rNscp7Sk66CPsTLIzGpXMbrOgR2nXKDWMyQNSosSqoyjZxgml02tFpMYZXyAtZ f9wKtKUA238KT9A1K8KCFQx2uQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMi7nvnd sho0i/ptwe+glfnqFcwHMB8GA1UdIwQYMBaAFADBMeZotf6U7LQ5MYR6coqs6C1L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjUzRC84NkIwRDczRUY3 MUYxMUVBQUU5NkIyMjVDNEY5QUUwMi9BTUV4NW1pMV9wVHN0RGt4aEhweWlxem9M VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FNRXg1bWkxX3BUc3REa3hoSHB5aXF6b0xVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MjUzRC84NkIwRDczRUY3MUYxMUVBQUU5NkIyMjVDNEY5QUUwMi9BTUV4NW1pMV9w VHN0RGt4aEhweWlxem9MVXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWCa5YYrnqBW+8h4QagHEzVNOhxcj2H0ho+hEqZZuwgN4bKNfho9Hl pNCRMR10BKA3xa89/N7gEivEHDDhHaAvGWpRx05gYdPfliarMGANlpMa4jOdubg/ a+2rT7Rk7W/t0LaA7yixr51KyckXwG8tuvfNK/eSanCTi6OKCZJC8zgXkfcVt7VG aHzeEVvSjG/exVRF7CxJ137AFvVUd563ylSm7QnDMzl4/3dd7HuArThMrwtL4iz8 mF+WhpQCUWo9ID8YTvkWSfpIjwPEp4L5x5QRnWwF6j/rpdNt3KMPGQ92GxHvzSe2 tVMe15BEhI/fkYELINxAQHXUGyw44XiI -----END CERTIFICATE-----Generated at Wed Apr 30 14:49:47 2025 by rpki-client