$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft File: AJko8LjNMO2gVjCoumdOdiqdKDM.mft (raw, json) Hash identifier: A4HlrAgbJoECo3V8IWIIxdvr789yyyuNwZOoEPsM2SY= Subject key identifier: E0:9D:DD:6A:F6:79:D8:B9:88:B7:0C:86:2B:C2:20:AA:1E:E4:10:B6 Authority key identifier: 00:99:28:F0:B8:CD:30:ED:A0:56:30:A8:BA:67:4E:76:2A:9D:28:33 Certificate issuer: /CN=A91CE5A6/serialNumber=009928F0B8CD30EDA05630A8BA674E762A9D2833 Certificate serial: 013B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJko8LjNMO2gVjCoumdOdiqdKDM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft Manifest number: 0132 Signing time: Fri 25 Apr 2025 03:41:45 +0000 Manifest this update: Fri 25 Apr 2025 03:41:45 +0000 Manifest next update: Fri 02 May 2025 03:41:45 +0000 Files and hashes: 1: AJko8LjNMO2gVjCoumdOdiqdKDM.crl (hash: plUnwFrG4lg3wP9aUrvIOq2eJB++fPLwcC3kAI7LkxU=) 2: EC56413A5B4B11EE9A031C81C4F9AE02.roa (hash: L51Q68tVx2XVC4mIdbJx6yL7uZTn+EZdlLwf/zTugIc=) 3: 7022F6EE5B4611EE9093F11EC4F9AE02.roa (hash: 4Ob8OZ5S2H/WLKjYmff77WuX2DfNbq1F3IyX9D66TLg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.crl rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJko8LjNMO2gVjCoumdOdiqdKDM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:41:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 315 (0x13b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE5A6, serialNumber=009928F0B8CD30EDA05630A8BA674E762A9D2833 Validity Not Before: Apr 25 03:41:45 2025 GMT Not After : May 2 03:41:45 2025 GMT Subject: CN=680b0479-04ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0a:1a:ec:91:65:8e:2a:29:aa:db:c5:ab:2d: 95:68:bc:37:63:7b:33:39:94:aa:57:38:8e:61:6b: a8:d2:e3:10:e0:20:d4:f6:49:bc:a8:af:1e:6d:82: 18:47:a6:81:8a:1c:8d:65:8e:ef:54:d4:ce:be:f1: de:3b:06:cc:31:db:a4:85:49:b5:ba:f7:0c:0e:5d: 84:19:ef:18:a7:b1:c0:dd:2e:6b:2a:96:27:33:77: 4c:bf:a4:13:d9:e0:ea:cb:e7:4c:1d:ea:f7:87:42: 2b:43:de:07:db:08:c3:0d:fb:49:6b:10:43:72:0f: a7:51:9c:a2:4c:2f:66:ec:13:b5:7d:c6:a9:0a:88: e9:2c:50:96:98:ea:18:de:c5:f6:1c:6b:01:6e:f6: 74:63:be:d2:7a:67:55:fd:b6:aa:4b:a1:24:46:af: ca:07:27:de:64:0f:da:09:78:5e:a1:60:36:3f:d7: 30:80:c3:fa:dd:98:93:84:9d:0c:d7:7d:c0:71:7f: 9a:cd:9a:68:df:c4:33:0a:e6:75:68:24:ca:c3:9b: ec:b0:b9:ac:9c:a6:e8:81:2c:b7:21:bb:26:77:5f: ef:b6:6b:7d:90:1a:9b:84:23:e8:65:66:0d:30:43: be:99:ce:2d:88:95:fb:80:9b:ad:68:7d:78:c2:4b: 87:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:9D:DD:6A:F6:79:D8:B9:88:B7:0C:86:2B:C2:20:AA:1E:E4:10:B6 X509v3 Authority Key Identifier: keyid:00:99:28:F0:B8:CD:30:ED:A0:56:30:A8:BA:67:4E:76:2A:9D:28:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJko8LjNMO2gVjCoumdOdiqdKDM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:b7:9d:53:99:38:74:8f:24:97:48:a6:fe:e7:9f:f9:72:6c: ad:2f:7a:f8:cb:f8:91:61:b4:f1:4f:1f:2b:cc:a9:15:09:76: 92:d6:8a:c3:0e:22:7b:23:f3:72:dd:b1:ab:17:c3:d7:48:fe: 64:70:eb:85:cc:e2:64:07:0f:f8:89:4b:fd:e8:9c:75:8f:dd: 64:32:28:78:75:a7:8c:8e:ea:94:60:1e:e3:54:7b:03:5b:ce: c7:13:56:c2:52:b6:16:d0:5b:a7:28:39:19:72:61:74:9f:6e: 40:21:cb:30:d0:3f:32:76:91:b1:46:91:1f:ce:a6:4e:fa:e5: 98:e6:92:f0:21:e0:95:d6:8f:71:63:25:0b:94:f1:4d:30:d6: f6:e4:ce:51:c8:f2:72:ba:bb:b2:1c:2a:54:b2:bc:09:90:2a: c0:47:73:c1:51:bd:55:94:4b:41:d4:d7:d1:98:b1:92:61:12: dd:e8:61:42:d4:a6:24:b0:78:c2:8d:f6:a5:b5:c2:06:c1:e5: 13:13:ca:57:ce:4f:bd:6c:b5:82:02:4c:e5:b6:9d:5f:72:36: ef:de:56:b8:73:55:d0:ff:c3:5e:61:88:08:f3:ac:fc:ea:9f: 1d:e0:de:ba:0f:9e:07:f9:4d:62:5e:7c:61:e8:04:27:e6:7e: d7:4e:98:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U1QTYxMTAvBgNVBAUTKDAwOTkyOEYwQjhDRDMwRURBMDU2MzBBOEJBNjc0RTc2 MkE5RDI4MzMwHhcNMjUwNDI1MDM0MTQ1WhcNMjUwNTAyMDM0MTQ1WjAYMRYwFAYD VQQDEw02ODBiMDQ3OS0wNGVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsQoa7JFljiopqtvFqy2VaLw3Y3szOZSqVziOYWuo0uMQ4CDU9km8qK8ebYIY R6aBihyNZY7vVNTOvvHeOwbMMdukhUm1uvcMDl2EGe8Yp7HA3S5rKpYnM3dMv6QT 2eDqy+dMHer3h0IrQ94H2wjDDftJaxBDcg+nUZyiTC9m7BO1fcapCojpLFCWmOoY 3sX2HGsBbvZ0Y77SemdV/baqS6EkRq/KByfeZA/aCXheoWA2P9cwgMP63ZiThJ0M 133AcX+azZpo38QzCuZ1aCTKw5vssLmsnKbogSy3Ibsmd1/vtmt9kBqbhCPoZWYN MEO+mc4tiJX7gJutaH14wkuHMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOCd3Wr2 edi5iLcMhivCIKoe5BC2MB8GA1UdIwQYMBaAFACZKPC4zTDtoFYwqLpnTnYqnSgz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTVBNi9CMzc0OTcxMDVC M0YxMUVFOEYxRDNENkVDNEY5QUUwMi9BSmtvOExqTk1PMmdWakNvdW1kT2RpcWRL RE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FKa284TGpOTU8yZ1ZqQ291bWRPZGlxZEtETS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTVBNi9CMzc0OTcxMDVCM0YxMUVFOEYxRDNENkVDNEY5QUUwMi9BSmtvOExqTk1P MmdWakNvdW1kT2RpcWRLRE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+t51TmTh0jySXSKb+55/5cmytL3r4y/iRYbTxTx8rzKkVCXaS1orD DiJ7I/Ny3bGrF8PXSP5kcOuFzOJkBw/4iUv96Jx1j91kMih4daeMjuqUYB7jVHsD W87HE1bCUrYW0FunKDkZcmF0n25AIcsw0D8ydpGxRpEfzqZO+uWY5pLwIeCV1o9x YyULlPFNMNb25M5RyPJyuruyHCpUsrwJkCrAR3PBUb1VlEtB1NfRmLGSYRLd6GFC 1KYksHjCjfaltcIGweUTE8pXzk+9bLWCAkzltp1fcjbv3la4c1XQ/8NeYYgI86z8 6p8d4N66D54H+U1iXnxh6AQn5n7XTpiA -----END CERTIFICATE-----Generated at Sat Apr 26 04:23:46 2025 by rpki-client