$ rpki-client -vvf rpki.apnic.net/member_repository/A9122B85/90E97D7089BE11EEBCF29A55C4F9AE02/aepi4_A-R8A3Gb7bFrTKJzuLMQM.mft File: aepi4_A-R8A3Gb7bFrTKJzuLMQM.mft (raw, json) Hash identifier: NNm+Oy7QuGNCDnA/NPrywYeN32aKJAEF5ntVQ5DPWYE= Subject key identifier: F2:EF:B3:DD:11:A6:16:A4:AD:7C:69:99:63:10:BB:AE:CD:71:63:86 Authority key identifier: 69:EA:62:E3:F0:3E:47:C0:37:19:BE:DB:16:B4:CA:27:3B:8B:31:03 Certificate issuer: /CN=A9122B85/serialNumber=69EA62E3F03E47C03719BEDB16B4CA273B8B3103 Certificate serial: 0122 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aepi4_A-R8A3Gb7bFrTKJzuLMQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122B85/90E97D7089BE11EEBCF29A55C4F9AE02/aepi4_A-R8A3Gb7bFrTKJzuLMQM.mft Manifest number: 011F Signing time: Sat 31 May 2025 04:24:24 +0000 Manifest this update: Sat 31 May 2025 04:24:23 +0000 Manifest next update: Sat 07 Jun 2025 04:24:23 +0000 Files and hashes: 1: aepi4_A-R8A3Gb7bFrTKJzuLMQM.crl (hash: av0VtFyCoBNN58Z5/DTNk5rAmn6Qd3zF0UsvBkCIWmc=) 2: 0287BD068A3D11EEADFABF09C4F9AE02.roa (hash: zthvVJ0xeL5J9gMyWu/Onbxvo/kp68K5vsS8CZ3Wqh8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122B85/90E97D7089BE11EEBCF29A55C4F9AE02/aepi4_A-R8A3Gb7bFrTKJzuLMQM.crl rsync://rpki.apnic.net/member_repository/A9122B85/90E97D7089BE11EEBCF29A55C4F9AE02/aepi4_A-R8A3Gb7bFrTKJzuLMQM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aepi4_A-R8A3Gb7bFrTKJzuLMQM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 290 (0x122) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122B85, serialNumber=69EA62E3F03E47C03719BEDB16B4CA273B8B3103 Validity Not Before: May 31 04:24:23 2025 GMT Not After : Jun 7 04:24:23 2025 GMT Subject: CN=683a8477-c65e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c8:75:64:9a:88:7c:16:d0:a6:c7:1f:30:5b: 93:86:f9:4a:9c:a4:97:c0:b5:ce:97:87:2e:4c:a3: 44:17:12:cf:d3:9f:e4:bd:8b:e9:bc:c6:29:85:2f: d0:cc:c0:09:a8:4a:b2:f0:6d:d8:89:49:7e:ba:dd: 5a:1c:08:64:4e:f0:0b:f8:de:ad:75:1c:cb:bb:51: 88:be:53:7a:05:91:20:4e:cd:87:fa:e3:b0:ee:39: 53:45:c1:07:ff:06:1b:40:58:06:16:b3:71:4e:27: d4:db:96:d8:11:9f:ea:6a:97:08:ea:3b:fc:8f:9c: 2e:36:94:ba:fa:73:71:6b:3f:07:45:b6:5c:54:82: ba:e1:1b:c8:41:08:05:97:4c:83:fb:e0:ed:54:d9: 95:c8:e3:ca:47:9a:44:d6:a8:c7:33:c3:13:ef:ff: 58:4b:aa:3f:a0:bb:d9:ee:8b:99:4d:01:18:e2:58: c8:96:fa:7c:18:45:34:11:c7:58:ea:02:80:d9:b1: 3d:52:95:f7:a7:b9:06:26:31:61:8f:66:04:6e:7f: cf:5c:8e:fd:95:a3:f5:51:9e:a1:b3:35:f5:37:09: a1:5d:20:77:2f:ed:d7:17:73:58:3f:6c:f5:22:16: 0d:1f:50:e2:cf:86:43:29:bc:3f:56:f6:d6:a2:01: 7d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:EF:B3:DD:11:A6:16:A4:AD:7C:69:99:63:10:BB:AE:CD:71:63:86 X509v3 Authority Key Identifier: keyid:69:EA:62:E3:F0:3E:47:C0:37:19:BE:DB:16:B4:CA:27:3B:8B:31:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122B85/90E97D7089BE11EEBCF29A55C4F9AE02/aepi4_A-R8A3Gb7bFrTKJzuLMQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aepi4_A-R8A3Gb7bFrTKJzuLMQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122B85/90E97D7089BE11EEBCF29A55C4F9AE02/aepi4_A-R8A3Gb7bFrTKJzuLMQM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:40:f4:12:94:fb:2d:8c:25:c3:dc:59:f5:aa:b1:71:5d:44: 22:53:10:0b:3a:91:08:9d:8b:76:90:be:e7:9b:f3:80:32:81: 7d:80:9a:81:e2:f5:01:e9:3e:0e:e6:ec:40:5f:05:ea:a2:9a: c2:39:a5:46:bc:eb:d6:c2:dc:4c:20:c8:96:f1:ea:77:69:4e: 73:15:02:44:99:e1:07:ad:80:0c:06:4b:7a:0f:74:1c:f6:cf: 4e:d4:44:23:00:78:f3:67:40:38:bd:f3:bd:52:2f:4b:8b:40: 16:09:cb:44:34:32:57:fc:e5:ee:6b:85:ae:22:15:d9:dd:75: 4a:64:bf:50:9e:80:f8:72:a3:ae:16:1f:74:0a:5b:8b:a0:ea: ce:ad:f3:ae:a1:0e:76:1d:1f:79:70:1c:83:59:bc:71:0b:70: e1:06:a0:c4:6b:fc:e5:4b:36:6d:91:9b:ef:0b:0b:e8:3d:ee: 96:c5:98:d6:22:e9:cd:eb:c6:a7:0b:67:8b:83:a2:36:8b:af: ac:9b:f0:9f:43:b6:cf:67:6c:ee:b6:00:a9:ab:45:24:ee:91: 24:34:e4:e2:90:54:43:c8:d5:23:e0:74:9a:6c:6d:d0:c7:40: 87:4d:fd:f7:11:af:ab:93:7d:9e:c5:ae:3c:ff:d9:10:8d:0c: 78:14:34:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJCODUxMTAvBgNVBAUTKDY5RUE2MkUzRjAzRTQ3QzAzNzE5QkVEQjE2QjRDQTI3 M0I4QjMxMDMwHhcNMjUwNTMxMDQyNDIzWhcNMjUwNjA3MDQyNDIzWjAYMRYwFAYD VQQDEw02ODNhODQ3Ny1jNjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwsh1ZJqIfBbQpscfMFuThvlKnKSXwLXOl4cuTKNEFxLP05/kvYvpvMYphS/Q zMAJqEqy8G3YiUl+ut1aHAhkTvAL+N6tdRzLu1GIvlN6BZEgTs2H+uOw7jlTRcEH /wYbQFgGFrNxTifU25bYEZ/qapcI6jv8j5wuNpS6+nNxaz8HRbZcVIK64RvIQQgF l0yD++DtVNmVyOPKR5pE1qjHM8MT7/9YS6o/oLvZ7ouZTQEY4ljIlvp8GEU0EcdY 6gKA2bE9UpX3p7kGJjFhj2YEbn/PXI79laP1UZ6hszX1NwmhXSB3L+3XF3NYP2z1 IhYNH1Diz4ZDKbw/VvbWogF9fwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPLvs90R phakrXxpmWMQu67NcWOGMB8GA1UdIwQYMBaAFGnqYuPwPkfANxm+2xa0yic7izED MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkI4NS85MEU5N0Q3MDg5 QkUxMUVFQkNGMjlBNTVDNEY5QUUwMi9hZXBpNF9BLVI4QTNHYjdiRnJUS0p6dUxN UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FlcGk0X0EtUjhBM0diN2JGclRLSnp1TE1RTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkI4NS85MEU5N0Q3MDg5QkUxMUVFQkNGMjlBNTVDNEY5QUUwMi9hZXBpNF9BLVI4 QTNHYjdiRnJUS0p6dUxNUU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvQPQSlPstjCXD3Fn1qrFxXUQiUxALOpEInYt2kL7nm/OAMoF9gJqB 4vUB6T4O5uxAXwXqoprCOaVGvOvWwtxMIMiW8ep3aU5zFQJEmeEHrYAMBkt6D3Qc 9s9O1EQjAHjzZ0A4vfO9Ui9Li0AWCctENDJX/OXua4WuIhXZ3XVKZL9QnoD4cqOu Fh90CluLoOrOrfOuoQ52HR95cByDWbxxC3DhBqDEa/zlSzZtkZvvCwvoPe6WxZjW IunN68anC2eLg6I2i6+sm/CfQ7bPZ2zutgCpq0Uk7pEkNOTikFRDyNUj4HSabG3Q x0CHTf33Ea+rk32exa48/9kQjQx4FDT4 -----END CERTIFICATE-----Generated at Sat May 31 17:45:00 2025 by rpki-client