$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.mft File: aaMtc-A4ow1HrKzrgc1zEq91Ork.mft (raw, json) Hash identifier: zzDM0gzve7yMvWWzbkG5U1ui/QSLCfMYdQBnYxAZ1Wo= Subject key identifier: F5:1C:7C:76:39:62:C7:90:56:E7:96:7C:43:86:93:D8:7C:7C:C3:BA Authority key identifier: 69:A3:2D:73:E0:38:A3:0D:47:AC:AC:EB:81:CD:73:12:AF:75:3A:B9 Certificate issuer: /CN=A91E1F31/serialNumber=69A32D73E038A30D47ACACEB81CD7312AF753AB9 Certificate serial: D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaMtc-A4ow1HrKzrgc1zEq91Ork.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.mft Manifest number: CE Signing time: Thu 03 Apr 2025 05:01:01 +0000 Manifest this update: Thu 03 Apr 2025 05:01:00 +0000 Manifest next update: Thu 10 Apr 2025 05:01:00 +0000 Files and hashes: 1: aaMtc-A4ow1HrKzrgc1zEq91Ork.crl (hash: m4sqp8ht2ySevKUHb6EJVJvbSgqC37v5o2eTpuYFW4U=) 2: 2F734D2E860111EFB49EB20DC4F9AE02.roa (hash: lyH5OR1VxxfoorFwC9xWARZrZEWyPMAlZT0c6Gt7rg0=) 3: 43441626860111EF8B4DF50DC4F9AE02.roa (hash: mfBAlHBLtaChfMT6zfmbBV23T4d13rPLxjMmrWBPL0E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.crl rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaMtc-A4ow1HrKzrgc1zEq91Ork.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 05:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 214 (0xd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1F31 Validity Not Before: Apr 3 05:01:00 2025 GMT Not After : Apr 10 05:01:00 2025 GMT Subject: CN=67ee160c-68b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b1:5c:9c:3e:dd:3c:d3:75:21:73:b0:93:0d: 57:2d:33:4a:31:3f:00:34:26:77:eb:ce:95:77:24: f6:24:28:ec:b0:f2:6f:47:2d:b6:4c:78:66:46:d8: ed:63:0a:aa:dd:20:b1:02:b0:b4:e9:18:a8:10:1c: ec:e3:c2:92:89:bf:f9:91:11:0b:87:d4:ca:f7:f6: f8:a2:ae:75:49:ac:de:9f:99:a8:73:ec:ea:c6:09: 1e:c5:43:df:04:4e:ed:73:f2:4b:76:a7:5c:90:8d: aa:b6:1f:71:58:f3:1b:a4:b8:16:9b:c4:87:e2:80: 67:e7:03:34:77:a1:0e:17:6f:d4:a6:91:25:f4:38: df:bd:9a:84:3f:49:19:a1:a4:57:67:b4:8c:de:50: ac:fe:6e:c9:7e:64:6a:1f:f6:05:a7:43:94:80:32: c2:3a:eb:6e:11:88:b4:9f:bf:23:fb:39:7c:68:c5: 92:ac:ae:44:ce:1c:9d:db:4c:e9:fd:75:ca:ba:61: 69:89:e4:f6:b3:e0:8a:ca:68:e8:c8:59:7a:b4:5b: 64:83:b2:cc:90:4c:f5:f2:19:9c:0e:30:87:a0:b5: 16:1e:e8:61:57:f7:6c:f9:49:a1:5b:27:fd:71:50: ff:7a:5c:1c:1d:ad:87:bc:e9:fe:2f:38:64:e4:40: 39:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:1C:7C:76:39:62:C7:90:56:E7:96:7C:43:86:93:D8:7C:7C:C3:BA X509v3 Authority Key Identifier: keyid:69:A3:2D:73:E0:38:A3:0D:47:AC:AC:EB:81:CD:73:12:AF:75:3A:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaMtc-A4ow1HrKzrgc1zEq91Ork.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:15:d4:c1:d4:e6:75:c0:13:ca:d0:cb:7b:d1:90:96:71:70: c0:1c:1f:7a:a0:9a:2a:a7:b8:60:55:7a:04:0f:71:c4:d9:6c: 3c:35:33:4d:a4:29:97:44:a2:6a:dd:c9:21:c6:58:bc:4c:a6: 89:98:21:f8:94:c6:48:88:7f:f6:e7:0c:e9:30:1c:6c:5c:ee: fe:5e:ea:c1:a2:62:d3:7a:b6:b4:f6:62:38:bf:59:84:c9:ac: 63:89:04:1a:39:6f:da:40:f5:08:51:0b:a2:75:c2:79:66:d8: b4:0e:3f:9e:f4:62:a4:6a:43:df:c1:35:47:56:11:08:e2:1c: 1f:7a:50:4b:37:0e:b2:72:e8:cd:18:8b:5c:87:5a:03:6f:6b: ad:5c:63:f8:28:0e:0e:05:45:4c:aa:34:ac:6a:34:d8:62:8f: ff:96:38:9b:72:43:30:d9:4a:23:2f:00:24:fa:f5:c2:b1:27: 6b:74:70:c8:d5:ad:d0:51:0e:b5:b4:0b:e7:ba:f6:c4:5b:d5: ed:81:ae:b4:cb:72:a3:1c:2d:a1:c9:9a:39:5d:03:f8:2b:d2: 21:71:a7:ed:c7:7a:94:3a:2c:8c:22:1c:09:9e:58:6a:7a:4b: 6e:75:7a:a2:5c:e1:29:66:d5:6a:fc:2b:48:46:0f:b3:82:4f: 24:35:89:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTFGMzExMTAvBgNVBAUTKDY5QTMyRDczRTAzOEEzMEQ0N0FDQUNFQjgxQ0Q3MzEy QUY3NTNBQjkwHhcNMjUwNDAzMDUwMTAwWhcNMjUwNDEwMDUwMTAwWjAYMRYwFAYD VQQDEw02N2VlMTYwYy02OGI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvrFcnD7dPNN1IXOwkw1XLTNKMT8ANCZ3686VdyT2JCjssPJvRy22THhmRtjt Ywqq3SCxArC06RioEBzs48KSib/5kRELh9TK9/b4oq51Sazen5moc+zqxgkexUPf BE7tc/JLdqdckI2qth9xWPMbpLgWm8SH4oBn5wM0d6EOF2/UppEl9DjfvZqEP0kZ oaRXZ7SM3lCs/m7JfmRqH/YFp0OUgDLCOutuEYi0n78j+zl8aMWSrK5Ezhyd20zp /XXKumFpieT2s+CKymjoyFl6tFtkg7LMkEz18hmcDjCHoLUWHuhhV/ds+UmhWyf9 cVD/elwcHa2HvOn+Lzhk5EA50QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPUcfHY5 YseQVueWfEOGk9h8fMO6MB8GA1UdIwQYMBaAFGmjLXPgOKMNR6ys64HNcxKvdTq5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUYzMS9BMEY0RTBEMEUx QkUxMUVFQjA0NUVCMjZDNEY5QUUwMi9hYU10Yy1BNG93MUhyS3pyZ2MxekVxOTFP cmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FhTXRjLUE0b3cxSHJLenJnYzF6RXE5MU9yay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MUYzMS9BMEY0RTBEMEUxQkUxMUVFQjA0NUVCMjZDNEY5QUUwMi9hYU10Yy1BNG93 MUhyS3pyZ2MxekVxOTFPcmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClFdTB1OZ1wBPK0Mt70ZCWcXDAHB96oJoqp7hgVXoED3HE2Ww8NTNN pCmXRKJq3ckhxli8TKaJmCH4lMZIiH/25wzpMBxsXO7+XurBomLTera09mI4v1mE yaxjiQQaOW/aQPUIUQuidcJ5Zti0Dj+e9GKkakPfwTVHVhEI4hwfelBLNw6ycujN GItch1oDb2utXGP4KA4OBUVMqjSsajTYYo//ljibckMw2UojLwAk+vXCsSdrdHDI 1a3QUQ61tAvnuvbEW9Xtga60y3KjHC2hyZo5XQP4K9Ihcaftx3qUOiyMIhwJnlhq ektudXqiXOEpZtVq/CtIRg+zgk8kNYn8 -----END CERTIFICATE-----Generated at Fri Apr 4 22:42:17 2025 by rpki-client