$ rpki-client -vvf rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/AQMtnfw2KpWHQ-htPI0GEaatsFs.mft File: AQMtnfw2KpWHQ-htPI0GEaatsFs.mft (raw, json) Hash identifier: cP7oN1mjfvXL+NJq4yXvhsJDZkBrMRYK0IjWmye3gR4= Subject key identifier: 92:17:D0:47:D8:A2:EB:65:AD:7A:E6:F7:36:6C:D1:25:5A:4B:38:0A Authority key identifier: 01:03:2D:9D:FC:36:2A:95:87:43:E8:6D:3C:8D:06:11:A6:AD:B0:5B Certificate issuer: /CN=A9166E2B/serialNumber=01032D9DFC362A958743E86D3C8D0611A6ADB05B Certificate serial: 0C21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQMtnfw2KpWHQ-htPI0GEaatsFs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/AQMtnfw2KpWHQ-htPI0GEaatsFs.mft Manifest number: 0C0D Signing time: Sat 12 Apr 2025 18:30:59 +0000 Manifest this update: Sat 12 Apr 2025 18:30:59 +0000 Manifest next update: Sat 19 Apr 2025 18:30:59 +0000 Files and hashes: 1: AQMtnfw2KpWHQ-htPI0GEaatsFs.crl (hash: YRWNOnvCMQKD0ZXFt9C9arrVG7uXIJGuNTkdnvECOUY=) 2: 2D0509BC078511ED87041524C4F9AE02.roa (hash: mkLhDheVvSZEQXdMpQZm/3lb3eLuVbKFGeKtwuwQQaM=) 3: 8045C26A3B3E11EC94B9CE0BC4F9AE02.roa (hash: I/1YYRZufm+Qc/8Hh8/4oZUCrPLEFvhM/LrJmE0hiuA=) 4: 2BA0624C078511ED87041524C4F9AE02.roa (hash: 1RZU0spXmvxzBxOJllCgbla9KxLkGAPl5bLUojUqNcc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/AQMtnfw2KpWHQ-htPI0GEaatsFs.crl rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/AQMtnfw2KpWHQ-htPI0GEaatsFs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQMtnfw2KpWHQ-htPI0GEaatsFs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 17:48:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3105 (0xc21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166E2B, serialNumber=01032D9DFC362A958743E86D3C8D0611A6ADB05B Validity Not Before: Apr 12 18:30:59 2025 GMT Not After : Apr 19 18:30:59 2025 GMT Subject: CN=67fab163-eea3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:65:b5:73:5c:fc:fe:3a:09:72:69:0d:f9:15: 6b:d4:1f:a1:ea:8b:09:88:9a:1c:93:e7:c5:be:d9: f9:44:a1:89:65:74:b3:8f:5f:72:f7:32:71:3a:8f: 5b:6a:3f:70:6e:d7:78:41:29:a7:42:e1:e1:6f:db: 70:48:27:ff:bd:70:25:84:2f:88:07:18:53:70:dd: dd:35:72:d5:96:d6:5f:8f:10:02:83:4e:7d:86:04: fd:09:d9:ea:b5:2e:9d:90:ec:2d:60:c3:86:29:18: c3:6f:bf:62:fd:14:1e:3f:d4:c8:6e:d7:83:6c:35: f9:6c:8d:2d:47:c1:87:e3:0e:0f:ce:1a:01:4f:24: e8:7b:13:3d:aa:df:36:e8:ff:ab:37:14:f7:c9:ce: 6b:ba:d3:89:84:44:10:50:0e:2f:28:01:fe:8f:05: fa:76:d2:b8:ab:bf:9a:99:e5:ff:5b:91:d8:76:70: bd:c9:0c:98:ad:9a:ec:ec:3f:a7:8d:f9:2f:01:b1: e2:db:0f:a9:d1:71:7f:37:fd:8b:d5:52:aa:73:43: 6e:13:ee:6b:2b:d9:5f:c5:b4:a7:79:51:67:4a:f6: 8e:b1:93:ed:b6:75:0b:8b:fd:39:db:9e:e8:76:1f: f2:e8:6a:e7:46:93:78:93:95:6b:09:f1:4f:29:f4: 3b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:17:D0:47:D8:A2:EB:65:AD:7A:E6:F7:36:6C:D1:25:5A:4B:38:0A X509v3 Authority Key Identifier: keyid:01:03:2D:9D:FC:36:2A:95:87:43:E8:6D:3C:8D:06:11:A6:AD:B0:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/AQMtnfw2KpWHQ-htPI0GEaatsFs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQMtnfw2KpWHQ-htPI0GEaatsFs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/AQMtnfw2KpWHQ-htPI0GEaatsFs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:dd:af:f3:33:ad:10:ed:91:31:8c:91:b9:79:56:67:62:96: 02:60:96:9c:03:8f:cf:89:03:56:07:2f:84:10:69:fa:f7:65: 52:f9:e8:71:d9:b7:b9:14:8b:08:b6:45:6a:69:de:dd:6e:2b: 28:da:97:bd:f3:5a:8e:3d:28:b7:fd:3e:b6:69:25:b3:27:7d: dc:b3:68:8f:95:60:33:36:8d:0f:42:35:f4:1b:6a:89:4c:da: d5:64:6a:bd:8e:51:b7:2c:c3:60:67:0c:98:cb:95:36:d3:e2: 82:2f:c8:eb:e5:c9:d5:63:0c:0e:24:fd:73:a0:8b:12:f6:bf: 6b:8e:2f:c9:60:2b:50:47:9b:64:a3:60:1e:51:38:3b:5a:7b: 5d:b9:a2:cb:7a:47:89:62:94:67:6b:5d:40:0c:c4:49:0d:39: 5b:93:4e:06:ad:94:60:2b:7f:0e:a6:87:87:77:76:10:d0:09: a5:61:14:93:16:f5:a8:6e:2d:6d:32:1d:e8:32:fc:0b:64:97: 3c:59:44:c5:d5:99:db:55:6d:66:85:10:78:d5:24:f8:bb:2b: 49:c6:3f:06:c0:f7:64:20:63:5c:fc:e7:b2:dc:7a:2f:bd:65: 2f:f3:53:dd:62:f9:1a:1f:b3:5a:19:59:7a:70:53:5a:d3:b9: 0b:e1:69:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjZFMkIxMTAvBgNVBAUTKDAxMDMyRDlERkMzNjJBOTU4NzQzRTg2RDNDOEQwNjEx QTZBREIwNUIwHhcNMjUwNDEyMTgzMDU5WhcNMjUwNDE5MTgzMDU5WjAYMRYwFAYD VQQDEw02N2ZhYjE2My1lZWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtGW1c1z8/joJcmkN+RVr1B+h6osJiJock+fFvtn5RKGJZXSzj19y9zJxOo9b aj9wbtd4QSmnQuHhb9twSCf/vXAlhC+IBxhTcN3dNXLVltZfjxACg059hgT9Cdnq tS6dkOwtYMOGKRjDb79i/RQeP9TIbteDbDX5bI0tR8GH4w4PzhoBTyToexM9qt82 6P+rNxT3yc5rutOJhEQQUA4vKAH+jwX6dtK4q7+ameX/W5HYdnC9yQyYrZrs7D+n jfkvAbHi2w+p0XF/N/2L1VKqc0NuE+5rK9lfxbSneVFnSvaOsZPttnULi/05257o dh/y6GrnRpN4k5VrCfFPKfQ7lQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJIX0EfY outlrXrm9zZs0SVaSzgKMB8GA1UdIwQYMBaAFAEDLZ38NiqVh0PobTyNBhGmrbBb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NkUyQi8yN0U3Q0FBNjBD MkQxMUVBQjAyOURCNTNDNEY5QUUwMi9BUU10bmZ3MktwV0hRLWh0UEkwR0VhYXRz RnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FRTXRuZncyS3BXSFEtaHRQSTBHRWFhdHNGcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NkUyQi8yN0U3Q0FBNjBDMkQxMUVBQjAyOURCNTNDNEY5QUUwMi9BUU10bmZ3Mktw V0hRLWh0UEkwR0VhYXRzRnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAw3a/zM60Q7ZExjJG5eVZnYpYCYJacA4/PiQNWBy+EEGn692VS+ehx 2be5FIsItkVqad7dbiso2pe981qOPSi3/T62aSWzJ33cs2iPlWAzNo0PQjX0G2qJ TNrVZGq9jlG3LMNgZwyYy5U20+KCL8jr5cnVYwwOJP1zoIsS9r9rji/JYCtQR5tk o2AeUTg7WntduaLLekeJYpRna11ADMRJDTlbk04GrZRgK38OpoeHd3YQ0AmlYRST FvWobi1tMh3oMvwLZJc8WUTF1ZnbVW1mhRB41ST4uytJxj8GwPdkIGNc/Oey3Hov vWUv81PdYvkaH7NaGVl6cFNa07kL4Wmn -----END CERTIFICATE-----Generated at Sat Apr 12 23:52:54 2025 by rpki-client