$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.mft File: aaMtc-A4ow1HrKzrgc1zEq91Ork.mft (raw, json) Hash identifier: KrJny7tPgcgBvSeb9eEETt1s6kvpt4apPOPpZ4lEz74= Subject key identifier: 79:65:CF:20:23:19:68:02:E8:15:53:CF:54:10:0E:78:6B:84:29:21 Authority key identifier: 69:A3:2D:73:E0:38:A3:0D:47:AC:AC:EB:81:CD:73:12:AF:75:3A:B9 Certificate issuer: /CN=A91E1F31/serialNumber=69A32D73E038A30D47ACACEB81CD7312AF753AB9 Certificate serial: F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaMtc-A4ow1HrKzrgc1zEq91Ork.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.mft Manifest number: F1 Signing time: Fri 13 Jun 2025 04:17:54 +0000 Manifest this update: Fri 13 Jun 2025 04:17:54 +0000 Manifest next update: Fri 20 Jun 2025 04:17:54 +0000 Files and hashes: 1: aaMtc-A4ow1HrKzrgc1zEq91Ork.crl (hash: CXPLfEQsHDh2+88VXfGEVopHotMvDY0zaPat8QoAfcQ=) 2: 2F734D2E860111EFB49EB20DC4F9AE02.roa (hash: lyH5OR1VxxfoorFwC9xWARZrZEWyPMAlZT0c6Gt7rg0=) 3: 43441626860111EF8B4DF50DC4F9AE02.roa (hash: mfBAlHBLtaChfMT6zfmbBV23T4d13rPLxjMmrWBPL0E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.crl rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaMtc-A4ow1HrKzrgc1zEq91Ork.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 04:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 249 (0xf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1F31, serialNumber=69A32D73E038A30D47ACACEB81CD7312AF753AB9 Validity Not Before: Jun 13 04:17:54 2025 GMT Not After : Jun 20 04:17:54 2025 GMT Subject: CN=684ba672-28ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:39:e1:a5:23:94:c2:f5:fc:40:51:93:a3:b4: 55:bf:80:be:63:a1:e7:34:8b:4a:a5:31:c5:60:18: 01:ff:64:98:ba:7c:2f:ee:f7:69:98:f5:75:3d:4f: d6:dc:dd:f5:da:2a:de:13:bd:a3:37:14:9c:8b:09: d6:cf:e9:12:c5:6a:a4:80:00:d0:e8:98:3a:d4:1a: 58:3c:c2:03:90:bb:8e:7d:e6:46:00:61:55:33:c7: ae:15:54:f5:bd:6a:67:ad:77:01:7b:5b:ce:f8:30: e8:ca:b1:89:ac:31:eb:53:d3:0f:7f:5a:82:ad:1e: 1e:1e:e5:12:fe:96:ba:ad:b8:ca:65:7e:bb:9e:1f: a1:c5:9f:cd:77:2d:9b:86:0d:ae:2e:db:77:ae:41: d7:e3:65:08:5a:66:ae:e6:ab:87:c7:2c:22:df:44: f5:15:d1:ff:b0:43:82:16:58:eb:7b:7b:b9:10:04: fa:ad:0f:76:eb:77:c5:2a:2c:64:c4:d7:81:07:1d: 5c:38:80:cc:b1:cb:49:72:cc:52:c2:bb:e8:1c:d6: 61:02:69:af:24:0d:c5:a6:24:95:fb:39:74:4c:5a: f9:c2:75:31:a8:54:5f:73:ed:d2:b8:91:9d:9f:4a: 55:03:30:ee:b1:a2:00:0b:04:3c:06:6e:ad:45:93: eb:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:65:CF:20:23:19:68:02:E8:15:53:CF:54:10:0E:78:6B:84:29:21 X509v3 Authority Key Identifier: keyid:69:A3:2D:73:E0:38:A3:0D:47:AC:AC:EB:81:CD:73:12:AF:75:3A:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaMtc-A4ow1HrKzrgc1zEq91Ork.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:d9:73:ff:42:58:f4:de:a2:d3:26:1b:36:67:84:f4:88:c4: af:b5:4e:e7:bf:45:db:79:9a:13:f0:a0:2c:3c:40:ee:41:3f: df:6b:84:7e:15:02:d9:0d:33:ce:6a:db:58:dd:fb:08:48:1e: 33:cb:0c:f9:97:b7:34:10:5c:45:9e:1f:95:3c:1a:2c:11:41: 1a:35:ef:31:f1:ee:f1:e5:3d:a6:8f:45:75:c7:4c:1d:f7:d3: 7f:3b:2d:8c:1f:2d:8f:df:58:45:08:88:5c:2d:88:95:8d:f3: 60:d8:55:e0:10:b2:eb:74:73:e2:f5:5f:60:32:1c:66:eb:a2: 1e:d4:bd:f5:3d:f6:2f:2e:a3:44:f4:14:94:6d:2d:15:6d:15: 90:36:1c:38:0c:27:7f:78:8c:01:ac:55:65:31:38:ae:a6:0e: f3:26:60:90:64:75:75:12:27:09:d8:be:96:d5:ce:eb:57:2a: a6:df:ec:14:93:f6:20:09:eb:13:4e:ed:62:ee:22:e1:cc:7a: ad:94:4d:7a:0c:d0:39:9c:b2:ff:03:fb:f5:77:e1:11:1e:ea: 7c:e8:4d:83:69:f5:6e:07:b4:04:bc:d7:23:b0:74:19:d3:33: 07:af:57:23:4f:0f:2d:c0:72:30:dc:c5:04:46:54:ab:2b:d7: b7:1c:be:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTFGMzExMTAvBgNVBAUTKDY5QTMyRDczRTAzOEEzMEQ0N0FDQUNFQjgxQ0Q3MzEy QUY3NTNBQjkwHhcNMjUwNjEzMDQxNzU0WhcNMjUwNjIwMDQxNzU0WjAYMRYwFAYD VQQDEw02ODRiYTY3Mi0yOGNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0TnhpSOUwvX8QFGTo7RVv4C+Y6HnNItKpTHFYBgB/2SYunwv7vdpmPV1PU/W 3N312ireE72jNxSciwnWz+kSxWqkgADQ6Jg61BpYPMIDkLuOfeZGAGFVM8euFVT1 vWpnrXcBe1vO+DDoyrGJrDHrU9MPf1qCrR4eHuUS/pa6rbjKZX67nh+hxZ/Ndy2b hg2uLtt3rkHX42UIWmau5quHxywi30T1FdH/sEOCFljre3u5EAT6rQ9263fFKixk xNeBBx1cOIDMsctJcsxSwrvoHNZhAmmvJA3FpiSV+zl0TFr5wnUxqFRfc+3SuJGd n0pVAzDusaIACwQ8Bm6tRZPrmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHllzyAj GWgC6BVTz1QQDnhrhCkhMB8GA1UdIwQYMBaAFGmjLXPgOKMNR6ys64HNcxKvdTq5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUYzMS9BMEY0RTBEMEUx QkUxMUVFQjA0NUVCMjZDNEY5QUUwMi9hYU10Yy1BNG93MUhyS3pyZ2MxekVxOTFP cmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FhTXRjLUE0b3cxSHJLenJnYzF6RXE5MU9yay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MUYzMS9BMEY0RTBEMEUxQkUxMUVFQjA0NUVCMjZDNEY5QUUwMi9hYU10Yy1BNG93 MUhyS3pyZ2MxekVxOTFPcmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB52XP/Qlj03qLTJhs2Z4T0iMSvtU7nv0XbeZoT8KAsPEDuQT/fa4R+ FQLZDTPOattY3fsISB4zywz5l7c0EFxFnh+VPBosEUEaNe8x8e7x5T2mj0V1x0wd 99N/Oy2MHy2P31hFCIhcLYiVjfNg2FXgELLrdHPi9V9gMhxm66Ie1L31PfYvLqNE 9BSUbS0VbRWQNhw4DCd/eIwBrFVlMTiupg7zJmCQZHV1EicJ2L6W1c7rVyqm3+wU k/YgCesTTu1i7iLhzHqtlE16DNA5nLL/A/v1d+ERHup86E2DafVuB7QEvNcjsHQZ 0zMHr1cjTw8twHIw3MUERlSrK9e3HL5p -----END CERTIFICATE-----Generated at Sat Jun 14 19:40:50 2025 by rpki-client