$ rpki-client -vvf rpki.apnic.net/member_repository/A912216A/FC51C9E8310B11E9BB82FE72C4F9AE02/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.mft File: AJYbj2Ot6dGfOs9CgzrF2cnHJ48.mft (raw, json) Hash identifier: ttWQNGdrxVCYe2bWp3A+C01r0/e4ixuhsRFEwuRmvW0= Subject key identifier: AC:48:11:3F:AA:D5:72:2A:76:22:1C:04:5C:BC:0F:EC:38:D1:CA:54 Authority key identifier: 00:96:1B:8F:63:AD:E9:D1:9F:3A:CF:42:83:3A:C5:D9:C9:C7:27:8F Certificate issuer: /CN=A912216A/serialNumber=00961B8F63ADE9D19F3ACF42833AC5D9C9C7278F Certificate serial: 1066 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912216A/FC51C9E8310B11E9BB82FE72C4F9AE02/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.mft Manifest number: 105E Signing time: Fri 04 Apr 2025 17:26:52 +0000 Manifest this update: Fri 04 Apr 2025 17:26:51 +0000 Manifest next update: Fri 11 Apr 2025 17:26:51 +0000 Files and hashes: 1: AJYbj2Ot6dGfOs9CgzrF2cnHJ48.crl (hash: NKA/DJFxyhky9HD+1vzR1ej+5xT7+eaUIRs1lfOhzGs=) 2: 2A44CEFE311111E98C69B181C4F9AE02.roa (hash: 0SVk2cOfikrAvRDDJgb5TANBAXNNynzVUWZgXY+3hcc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912216A/FC51C9E8310B11E9BB82FE72C4F9AE02/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.crl rsync://rpki.apnic.net/member_repository/A912216A/FC51C9E8310B11E9BB82FE72C4F9AE02/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 17:26:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4198 (0x1066) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912216A Validity Not Before: Apr 4 17:26:51 2025 GMT Not After : Apr 11 17:26:51 2025 GMT Subject: CN=67f0165c-4d29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2c:50:53:20:a7:54:9c:15:89:a6:4a:f3:4b: a8:8f:7f:58:40:00:7d:7d:e9:5f:b2:77:f2:11:88: 76:1f:51:fa:70:21:c2:86:22:a9:07:94:24:77:dd: 44:ae:2c:3d:7d:3f:45:4e:5a:2a:83:ea:ea:75:cd: 34:1a:f5:41:01:67:a8:f2:c4:ae:84:ea:0a:b0:c6: 84:96:9b:bb:22:44:25:00:a2:f6:e0:ee:2e:5e:ab: 9b:0e:ba:a3:94:eb:17:2d:12:ae:7f:5d:db:f1:ba: 33:64:eb:2f:c6:fc:a4:8f:d7:27:c0:8d:84:f1:ed: bc:43:90:5d:3d:a0:5d:75:7f:7b:8a:fd:f4:e6:3b: ce:d1:9a:14:93:08:a4:0c:16:2c:1a:9b:58:25:0c: a6:53:79:45:7b:61:c1:1a:2b:23:a8:c1:d0:ee:a9: e6:de:f8:ff:d9:62:8f:ad:e9:91:c3:5d:d7:89:ba: 3f:43:32:95:b5:9b:ee:fb:25:96:95:14:17:02:7b: 2b:50:8d:4b:f1:a6:d8:5b:5d:52:3e:31:51:85:69: 2c:d1:60:cf:bf:b7:8f:d2:32:d0:af:b9:35:df:8e: 27:b7:74:d0:6f:e1:ed:42:0f:57:96:e9:d8:95:01: 1d:f6:82:29:7b:bb:ca:43:b7:95:0d:24:76:3a:67: a9:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:48:11:3F:AA:D5:72:2A:76:22:1C:04:5C:BC:0F:EC:38:D1:CA:54 X509v3 Authority Key Identifier: keyid:00:96:1B:8F:63:AD:E9:D1:9F:3A:CF:42:83:3A:C5:D9:C9:C7:27:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912216A/FC51C9E8310B11E9BB82FE72C4F9AE02/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912216A/FC51C9E8310B11E9BB82FE72C4F9AE02/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:4f:00:8d:5e:45:93:d5:af:f1:40:a9:62:69:3a:9f:cf:d0: 69:05:08:f4:35:b1:4a:a5:7e:96:80:b4:b0:14:f7:4e:2e:87: 3e:5d:f3:74:0d:69:ed:1b:b5:b7:41:77:c1:a8:09:3f:17:2d: 41:f7:7f:b9:45:bc:01:ce:f9:ae:51:04:71:81:ac:b3:99:04: 20:ca:ed:b1:0b:31:9b:aa:79:ac:41:2a:5a:56:5a:ee:be:85: c7:b3:aa:1d:04:c9:44:2c:70:ef:a5:65:4e:44:fa:aa:58:f6: 9b:d3:c9:5b:fc:89:25:ad:6f:d3:1a:65:bc:a4:c3:c6:e7:d8: 7e:96:6f:4b:33:9a:90:94:41:e3:ff:c0:a9:e7:c1:3a:67:80: d2:ec:93:ca:00:bb:88:24:79:ae:a9:11:cb:a7:90:b3:89:61: 17:de:66:c1:09:ff:03:a9:ed:20:07:85:12:b8:0b:d9:32:e9: 55:e5:74:e7:0d:fd:13:c1:2f:bc:38:b7:99:4a:94:92:e3:ce: 87:31:9d:17:86:e7:28:d1:4f:68:fd:f8:de:23:9b:1a:8e:bf: 87:f1:20:34:26:96:4f:d1:86:f6:a6:71:62:85:62:a6:25:dc: 93:24:25:53:0a:81:11:30:80:6c:31:56:49:ed:2c:e6:e7:7e: d9:f0:ef:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEGYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIxNkExMTAvBgNVBAUTKDAwOTYxQjhGNjNBREU5RDE5RjNBQ0Y0MjgzM0FDNUQ5 QzlDNzI3OEYwHhcNMjUwNDA0MTcyNjUxWhcNMjUwNDExMTcyNjUxWjAYMRYwFAYD VQQDEw02N2YwMTY1Yy00ZDI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuCxQUyCnVJwViaZK80uoj39YQAB9felfsnfyEYh2H1H6cCHChiKpB5Qkd91E riw9fT9FTloqg+rqdc00GvVBAWeo8sSuhOoKsMaElpu7IkQlAKL24O4uXqubDrqj lOsXLRKuf13b8bozZOsvxvykj9cnwI2E8e28Q5BdPaBddX97iv305jvO0ZoUkwik DBYsGptYJQymU3lFe2HBGisjqMHQ7qnm3vj/2WKPremRw13Xibo/QzKVtZvu+yWW lRQXAnsrUI1L8abYW11SPjFRhWks0WDPv7eP0jLQr7k1344nt3TQb+HtQg9XlunY lQEd9oIpe7vKQ7eVDSR2Omep9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKxIET+q 1XIqdiIcBFy8D+w40cpUMB8GA1UdIwQYMBaAFACWG49jrenRnzrPQoM6xdnJxyeP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjE2QS9GQzUxQzlFODMx MEIxMUU5QkI4MkZFNzJDNEY5QUUwMi9BSlliajJPdDZkR2ZPczlDZ3pyRjJjbkhK NDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FKWWJqMk90NmRHZk9zOUNnenJGMmNuSEo0OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjE2QS9GQzUxQzlFODMxMEIxMUU5QkI4MkZFNzJDNEY5QUUwMi9BSlliajJPdDZk R2ZPczlDZ3pyRjJjbkhKNDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6TwCNXkWT1a/xQKliaTqfz9BpBQj0NbFKpX6WgLSwFPdOLoc+XfN0 DWntG7W3QXfBqAk/Fy1B93+5RbwBzvmuUQRxgayzmQQgyu2xCzGbqnmsQSpaVlru voXHs6odBMlELHDvpWVORPqqWPab08lb/IklrW/TGmW8pMPG59h+lm9LM5qQlEHj /8Cp58E6Z4DS7JPKALuIJHmuqRHLp5CziWEX3mbBCf8Dqe0gB4USuAvZMulV5XTn Df0TwS+8OLeZSpSS486HMZ0Xhuco0U9o/fjeI5sajr+H8SA0JpZP0Yb2pnFihWKm JdyTJCVTCoERMIBsMVZJ7Szm537Z8O+z -----END CERTIFICATE-----Generated at Sat Apr 5 10:39:07 2025 by rpki-client