$ rpki-client -vvf rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.mft File: aJtDtI4RHmnx33nMohHMtCZaJns.mft (raw, json) Hash identifier: buyfNEsKv3NtAJmclepT+5VwkptCLvGlNuDlcsDlLUc= Subject key identifier: 58:28:B9:93:E3:B4:CC:C0:EF:3D:FC:10:D6:0D:28:80:48:9A:B0:1A Authority key identifier: 68:9B:43:B4:8E:11:1E:69:F1:DF:79:CC:A2:11:CC:B4:26:5A:26:7B Certificate issuer: /CN=A91688C4/serialNumber=689B43B48E111E69F1DF79CCA211CCB4265A267B Certificate serial: 0737 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aJtDtI4RHmnx33nMohHMtCZaJns.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.mft Manifest number: 0731 Signing time: Fri 30 May 2025 21:59:56 +0000 Manifest this update: Fri 30 May 2025 21:59:56 +0000 Manifest next update: Fri 06 Jun 2025 21:59:56 +0000 Files and hashes: 1: aJtDtI4RHmnx33nMohHMtCZaJns.crl (hash: LY417QlN+lqmJqzac+lSWet7bfAuEKVvyfuX2MLUUxc=) 2: 56FB3BA630DB11EBB36CAB54C4F9AE02.roa (hash: Tkzl81mL9jCkezlpTqealMA+SaYDCxv0/vXNUScGesg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.crl rsync://rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aJtDtI4RHmnx33nMohHMtCZaJns.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:59:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1847 (0x737) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91688C4, serialNumber=689B43B48E111E69F1DF79CCA211CCB4265A267B Validity Not Before: May 30 21:59:56 2025 GMT Not After : Jun 6 21:59:56 2025 GMT Subject: CN=683a2a5c-8aa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e8:91:77:b2:c4:a9:bb:10:9c:ad:88:64:d3: 6f:2d:9d:d3:83:60:09:9d:ed:00:b9:cc:8e:c9:48: b3:4b:07:2e:10:07:17:8e:12:12:b8:72:a1:72:6b: a9:c1:84:2d:d1:f4:32:9f:60:56:28:75:4b:7f:71: f3:ed:1f:59:b1:5f:55:7e:84:dd:52:b7:af:42:6d: 99:61:0a:b5:35:1e:f8:8d:8e:fb:f7:3d:8c:c0:88: 76:2c:31:dc:8a:a9:06:67:8e:85:3f:de:7e:be:32: 63:55:8b:f2:a2:de:2f:8c:97:09:09:7e:ca:52:9f: 81:31:c7:6e:00:1e:0f:f7:b5:3d:46:c7:02:37:b8: a4:ce:fe:72:a8:98:2b:21:0a:97:d6:63:56:aa:a5: ca:e2:8f:30:c0:4d:82:73:07:8d:04:f7:ec:c8:46: e2:0a:55:5e:70:a2:cc:b5:a1:84:01:91:cf:f1:2d: fe:7b:e2:79:43:1e:ce:65:7a:b0:9a:2d:ae:64:36: ca:73:72:8e:cc:46:d1:9d:ef:e8:ee:ad:ad:65:c9: dc:eb:d4:78:ac:94:b4:8f:61:b8:a4:bc:00:3c:fa: ce:43:dd:0c:a9:4d:02:55:06:ab:b2:9e:c1:d3:07: 2a:d0:19:25:28:c8:90:4a:78:7d:de:72:98:e7:79: e3:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:28:B9:93:E3:B4:CC:C0:EF:3D:FC:10:D6:0D:28:80:48:9A:B0:1A X509v3 Authority Key Identifier: keyid:68:9B:43:B4:8E:11:1E:69:F1:DF:79:CC:A2:11:CC:B4:26:5A:26:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aJtDtI4RHmnx33nMohHMtCZaJns.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:ee:a4:0b:60:da:0c:f8:0b:4c:b4:5f:78:8d:b4:22:8c:ea: 79:95:32:b0:0f:ba:42:48:82:31:40:8c:b1:a3:da:f7:4e:26: aa:f5:75:de:9c:73:8f:f0:00:7d:db:64:6e:da:0b:e9:38:11: e5:21:43:5e:fb:89:bc:e3:eb:9a:c2:b6:5d:4c:27:cb:b3:f7: 63:d9:1f:cf:97:42:11:39:89:af:81:91:97:1c:b4:4e:b5:a1: d0:1a:a8:4f:d2:59:1b:6c:06:71:f3:cc:a8:2b:93:0d:c5:bf: 5f:d4:a1:bf:c5:92:c1:46:54:60:d6:52:8f:d9:e9:b3:25:34: 4c:1c:53:fa:1f:6b:bc:c2:57:38:ca:c3:af:29:eb:17:e1:8b: 51:ce:4f:4d:f2:02:97:07:91:ab:2e:2b:82:dc:8d:24:45:83: d7:3c:19:da:fe:70:4c:45:c0:9e:d0:be:b6:da:1c:fa:aa:02: 5e:5b:33:50:4d:dc:03:ae:21:cd:cf:ad:68:ea:cd:cb:d4:71: 0b:44:b6:7d:b7:65:dc:2c:9e:1d:19:a4:ee:cd:89:bb:0d:a8: 1a:62:cf:88:b9:ac:07:1c:28:0e:a3:98:90:2c:dc:2c:fc:45: ab:a0:96:3b:f4:3c:95:f0:12:54:95:3a:4c:43:1d:08:a9:1d: 3f:ab:0a:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg4QzQxMTAvBgNVBAUTKDY4OUI0M0I0OEUxMTFFNjlGMURGNzlDQ0EyMTFDQ0I0 MjY1QTI2N0IwHhcNMjUwNTMwMjE1OTU2WhcNMjUwNjA2MjE1OTU2WjAYMRYwFAYD VQQDEw02ODNhMmE1Yy04YWE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAluiRd7LEqbsQnK2IZNNvLZ3Tg2AJne0AucyOyUizSwcuEAcXjhISuHKhcmup wYQt0fQyn2BWKHVLf3Hz7R9ZsV9VfoTdUrevQm2ZYQq1NR74jY779z2MwIh2LDHc iqkGZ46FP95+vjJjVYvyot4vjJcJCX7KUp+BMcduAB4P97U9RscCN7ikzv5yqJgr IQqX1mNWqqXK4o8wwE2CcweNBPfsyEbiClVecKLMtaGEAZHP8S3+e+J5Qx7OZXqw mi2uZDbKc3KOzEbRne/o7q2tZcnc69R4rJS0j2G4pLwAPPrOQ90MqU0CVQarsp7B 0wcq0BklKMiQSnh93nKY53njXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFgouZPj tMzA7z38ENYNKIBImrAaMB8GA1UdIwQYMBaAFGibQ7SOER5p8d95zKIRzLQmWiZ7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODhDNC9EODk0N0VCODMw RDkxMUVCODdFMDkzNTNDNEY5QUUwMi9hSnREdEk0UkhtbngzM25Nb2hITXRDWmFK bnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FKdER0STRSSG1ueDMzbk1vaEhNdENaYUpucy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODhDNC9EODk0N0VCODMwRDkxMUVCODdFMDkzNTNDNEY5QUUwMi9hSnREdEk0Ukht bngzM25Nb2hITXRDWmFKbnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCS7qQLYNoM+AtMtF94jbQijOp5lTKwD7pCSIIxQIyxo9r3Tiaq9XXe nHOP8AB922Ru2gvpOBHlIUNe+4m84+uawrZdTCfLs/dj2R/Pl0IROYmvgZGXHLRO taHQGqhP0lkbbAZx88yoK5MNxb9f1KG/xZLBRlRg1lKP2emzJTRMHFP6H2u8wlc4 ysOvKesX4YtRzk9N8gKXB5GrLiuC3I0kRYPXPBna/nBMRcCe0L622hz6qgJeWzNQ TdwDriHNz61o6s3L1HELRLZ9t2XcLJ4dGaTuzYm7DagaYs+IuawHHCgOo5iQLNws /EWroJY79DyV8BJUlTpMQx0IqR0/qwqo -----END CERTIFICATE-----Generated at Sat May 31 17:22:10 2025 by rpki-client