$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.mft File: aaMtc-A4ow1HrKzrgc1zEq91Ork.mft (raw, json) Hash identifier: yh5o+Kc4Wvc1DH8WF/YNYxieDXeS7zYCX0aUezowOz4= Subject key identifier: 62:D7:AF:47:CC:96:DF:23:81:D2:F4:FA:73:27:A9:17:53:95:44:79 Authority key identifier: 69:A3:2D:73:E0:38:A3:0D:47:AC:AC:EB:81:CD:73:12:AF:75:3A:B9 Certificate issuer: /CN=A91E1F31/serialNumber=69A32D73E038A30D47ACACEB81CD7312AF753AB9 Certificate serial: E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaMtc-A4ow1HrKzrgc1zEq91Ork.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.mft Manifest number: D9 Signing time: Fri 25 Apr 2025 04:41:23 +0000 Manifest this update: Fri 25 Apr 2025 04:41:23 +0000 Manifest next update: Fri 02 May 2025 04:41:23 +0000 Files and hashes: 1: aaMtc-A4ow1HrKzrgc1zEq91Ork.crl (hash: Ma1hUCitsk4693TxW4c0XmXugUBUuzMf04TxSok4vw4=) 2: 2F734D2E860111EFB49EB20DC4F9AE02.roa (hash: lyH5OR1VxxfoorFwC9xWARZrZEWyPMAlZT0c6Gt7rg0=) 3: 43441626860111EF8B4DF50DC4F9AE02.roa (hash: mfBAlHBLtaChfMT6zfmbBV23T4d13rPLxjMmrWBPL0E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.crl rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaMtc-A4ow1HrKzrgc1zEq91Ork.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:41:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 225 (0xe1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1F31, serialNumber=69A32D73E038A30D47ACACEB81CD7312AF753AB9 Validity Not Before: Apr 25 04:41:23 2025 GMT Not After : May 2 04:41:23 2025 GMT Subject: CN=680b1273-d36c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c7:46:c5:71:15:73:15:58:a3:bf:bc:76:2a: 95:20:67:3d:d9:ea:eb:91:02:b0:93:ae:21:eb:f9: 9a:f1:fd:26:05:ae:44:b5:77:3d:8e:29:28:af:61: 70:db:03:c1:2d:dd:aa:61:90:fd:74:9f:00:99:b7: c7:10:d1:b6:24:2e:53:10:6a:a6:af:d4:04:31:20: 7d:f3:2f:5c:57:b0:f4:c0:9c:29:70:22:a1:64:89: 68:e8:af:e7:ef:19:0a:99:d6:77:c5:9f:66:0a:e2: a0:6c:20:83:a1:b5:a9:ee:1a:20:ff:25:ef:48:7b: e4:33:2a:0a:de:d3:cf:f3:66:61:f0:e3:05:ce:06: 9c:40:f8:7c:e9:2b:6e:63:bf:ad:85:2f:c0:37:61: 66:58:18:b7:3c:5a:23:3a:9c:38:b3:83:96:f5:85: a0:69:b1:0b:8f:6b:fa:34:0b:89:73:c8:57:21:bd: f7:19:32:40:ef:3a:2b:a4:92:d7:57:8a:b1:c2:f6: 76:7f:d4:92:b6:16:0e:4f:d0:92:de:62:6b:b3:62: a5:58:39:03:49:ca:43:b7:37:99:0f:0b:00:d7:8c: 03:1b:1a:5c:7e:0c:e6:23:e0:19:97:c6:6b:6b:a3: 5e:c1:24:bb:d5:5a:64:67:91:43:ea:9f:e4:5a:5a: 17:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:D7:AF:47:CC:96:DF:23:81:D2:F4:FA:73:27:A9:17:53:95:44:79 X509v3 Authority Key Identifier: keyid:69:A3:2D:73:E0:38:A3:0D:47:AC:AC:EB:81:CD:73:12:AF:75:3A:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaMtc-A4ow1HrKzrgc1zEq91Ork.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:8e:5f:6c:ac:b6:99:c4:e4:61:9a:c9:bf:70:b2:39:2c:3a: d4:55:a9:a8:ef:59:0b:73:93:a6:ea:de:1f:49:7c:a1:2d:0e: 9e:91:7f:50:0b:44:00:f1:e6:e7:37:5d:fc:8f:2e:e1:ea:e8: e5:44:76:ea:69:e0:b6:e9:cb:b9:41:dd:42:f0:f6:0a:66:07: bf:90:08:ac:6f:b0:68:a8:55:a6:a2:6e:68:51:75:09:9e:4c: 58:f9:33:bc:93:c9:64:85:17:91:55:94:c7:bc:92:c8:e0:dc: 72:5b:c8:82:17:55:32:40:56:5c:4d:03:47:63:93:43:61:2b: f4:67:50:ae:87:28:50:b4:71:a6:c7:22:a0:71:02:fa:b3:09: 36:41:2a:9d:e1:40:c3:14:a4:bd:ae:74:69:4a:b7:b1:cf:78: 5d:87:85:b0:70:e4:96:9c:6f:52:4f:47:88:2d:ce:cd:28:02: 41:aa:80:c5:da:51:38:a0:98:fd:42:e1:7c:9e:99:c6:0d:2e: 5d:1b:eb:d8:bb:84:81:ff:69:e2:38:02:3a:72:60:ef:05:40: 3c:7a:ab:ed:27:65:0d:36:3b:15:30:d5:dc:18:ba:22:c2:8f: a4:c1:89:20:53:3d:04:67:6c:b7:1a:3f:b2:19:67:ad:0e:8d: c7:f3:1c:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTFGMzExMTAvBgNVBAUTKDY5QTMyRDczRTAzOEEzMEQ0N0FDQUNFQjgxQ0Q3MzEy QUY3NTNBQjkwHhcNMjUwNDI1MDQ0MTIzWhcNMjUwNTAyMDQ0MTIzWjAYMRYwFAYD VQQDEw02ODBiMTI3My1kMzZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvsdGxXEVcxVYo7+8diqVIGc92errkQKwk64h6/ma8f0mBa5EtXc9jikor2Fw 2wPBLd2qYZD9dJ8AmbfHENG2JC5TEGqmr9QEMSB98y9cV7D0wJwpcCKhZIlo6K/n 7xkKmdZ3xZ9mCuKgbCCDobWp7hog/yXvSHvkMyoK3tPP82Zh8OMFzgacQPh86Stu Y7+thS/AN2FmWBi3PFojOpw4s4OW9YWgabELj2v6NAuJc8hXIb33GTJA7zorpJLX V4qxwvZ2f9SSthYOT9CS3mJrs2KlWDkDScpDtzeZDwsA14wDGxpcfgzmI+AZl8Zr a6NewSS71VpkZ5FD6p/kWloXNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGLXr0fM lt8jgdL0+nMnqRdTlUR5MB8GA1UdIwQYMBaAFGmjLXPgOKMNR6ys64HNcxKvdTq5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUYzMS9BMEY0RTBEMEUx QkUxMUVFQjA0NUVCMjZDNEY5QUUwMi9hYU10Yy1BNG93MUhyS3pyZ2MxekVxOTFP cmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FhTXRjLUE0b3cxSHJLenJnYzF6RXE5MU9yay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MUYzMS9BMEY0RTBEMEUxQkUxMUVFQjA0NUVCMjZDNEY5QUUwMi9hYU10Yy1BNG93 MUhyS3pyZ2MxekVxOTFPcmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDjl9srLaZxORhmsm/cLI5LDrUVamo71kLc5Om6t4fSXyhLQ6ekX9Q C0QA8ebnN138jy7h6ujlRHbqaeC26cu5Qd1C8PYKZge/kAisb7BoqFWmom5oUXUJ nkxY+TO8k8lkhReRVZTHvJLI4NxyW8iCF1UyQFZcTQNHY5NDYSv0Z1CuhyhQtHGm xyKgcQL6swk2QSqd4UDDFKS9rnRpSrexz3hdh4WwcOSWnG9ST0eILc7NKAJBqoDF 2lE4oJj9QuF8npnGDS5dG+vYu4SB/2niOAI6cmDvBUA8eqvtJ2UNNjsVMNXcGLoi wo+kwYkgUz0EZ2y3Gj+yGWetDo3H8xyv -----END CERTIFICATE-----Generated at Sat Apr 26 04:39:42 2025 by rpki-client