$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.mft File: AKEAg_2wFsMD1OYZ7GGrZYOADSc.mft (raw, json) Hash identifier: Orzv1dVZ0zoGHehJo4d8QFC5NFS2GZ8ixr0pudMMonk= Subject key identifier: 5E:FC:3D:46:1D:FA:CE:68:76:37:00:CA:9E:B5:15:A9:58:21:D5:5C Authority key identifier: 00:A1:00:83:FD:B0:16:C3:03:D4:E6:19:EC:61:AB:65:83:80:0D:27 Certificate issuer: /CN=A91C5CB1/serialNumber=00A10083FDB016C303D4E619EC61AB6583800D27 Certificate serial: 0288 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKEAg_2wFsMD1OYZ7GGrZYOADSc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.mft Manifest number: 0285 Signing time: Sat 31 May 2025 01:48:37 +0000 Manifest this update: Sat 31 May 2025 01:48:37 +0000 Manifest next update: Sat 07 Jun 2025 01:48:37 +0000 Files and hashes: 1: AKEAg_2wFsMD1OYZ7GGrZYOADSc.crl (hash: sD2O8l0VTX+T24QCw0qiVuWRCHvraHVgitcd1WXq/ZQ=) 2: CBD4FE1208B611EDACE57065C4F9AE02.roa (hash: WXESl+cDjvowOeUJyXhiCBItPAjmmkM/CbjCul3Q7bU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.crl rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKEAg_2wFsMD1OYZ7GGrZYOADSc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:48:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 648 (0x288) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5CB1, serialNumber=00A10083FDB016C303D4E619EC61AB6583800D27 Validity Not Before: May 31 01:48:37 2025 GMT Not After : Jun 7 01:48:37 2025 GMT Subject: CN=683a5ff5-44bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:d0:1d:e8:a6:28:37:b5:34:ba:54:23:60:eb: 2c:6b:58:b1:80:bf:c3:b5:78:a1:63:9f:94:4c:11: 60:b5:31:d1:80:91:59:df:6a:07:88:3f:7f:59:e7: e0:c3:1c:63:99:9f:d4:08:21:4f:95:fd:72:cc:89: 3a:ad:cd:3c:3e:63:47:b3:19:2a:5b:13:fb:98:08: 28:42:4e:85:78:8b:96:2f:e5:4e:a6:a4:a0:d3:ad: 38:ce:6f:cc:c3:35:95:25:d9:d3:e3:c1:12:16:45: 1c:de:ba:8e:fc:37:f4:d1:09:21:d3:39:61:98:60: 93:c0:57:db:ac:c9:0b:7a:b2:8c:4d:a3:3e:dd:cc: 64:22:b3:da:40:78:db:a4:53:b8:67:2f:15:f7:8a: 1a:5e:38:69:f9:ae:a3:9f:8b:7d:a9:11:d2:d6:d0: ca:a9:cb:af:43:03:20:57:fc:bb:86:f0:1a:1b:8f: 3b:b9:b0:72:87:da:cd:07:90:b5:3c:db:15:9d:f3: 48:c2:ca:01:2e:41:7d:48:62:83:82:dd:f0:2d:ff: 38:c2:45:44:c9:ae:e0:90:93:61:6b:43:24:86:91: 1e:6d:b1:6b:07:d4:7c:d3:db:18:52:ec:b4:73:4b: d1:ec:31:ef:67:8a:1f:07:d5:c8:f0:02:81:b6:49: 96:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:FC:3D:46:1D:FA:CE:68:76:37:00:CA:9E:B5:15:A9:58:21:D5:5C X509v3 Authority Key Identifier: keyid:00:A1:00:83:FD:B0:16:C3:03:D4:E6:19:EC:61:AB:65:83:80:0D:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKEAg_2wFsMD1OYZ7GGrZYOADSc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:a6:c8:9d:49:da:25:81:f1:68:1d:db:80:6b:12:18:e5:87: 1d:71:f9:7c:56:9b:be:7a:e6:0e:ce:ad:34:b6:4c:06:4c:72: 07:5c:ad:dc:1a:e3:e0:59:1b:61:1b:57:90:21:54:b6:d7:1c: bc:6a:b7:82:e1:bf:14:b4:77:4c:1c:81:ed:a6:72:39:9d:94: c1:3f:cb:0e:73:6d:e4:4f:ef:05:51:29:50:aa:ba:0f:4f:0f: da:4a:be:7e:77:98:73:80:65:be:b5:61:3b:d6:5b:51:b8:a7: dd:b7:9f:e7:21:9c:0d:e6:bb:f8:12:b5:ed:34:ab:6c:bb:7e: 0f:89:0c:38:22:7d:07:3e:da:9b:6d:fc:de:a8:bb:53:53:b9: cc:ed:13:d3:0d:c9:9e:6a:bd:76:95:75:e9:a1:77:7f:70:aa: f0:6d:53:52:b4:6e:de:65:49:67:10:02:3a:6d:bb:3a:08:db: a2:c0:97:39:ab:d1:9d:d6:44:f6:5a:0d:0e:dc:9f:81:5f:3c: 84:a8:09:8e:98:8d:37:58:56:c8:3d:91:86:b0:4d:4b:71:a3: ef:72:bb:9e:33:6b:2a:3c:b8:36:39:b8:a5:60:b1:12:99:62: fc:b9:33:ae:70:bf:50:21:b2:5f:e9:d0:9f:17:37:60:fe:01: 29:d8:d1:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAogwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVDQjExMTAvBgNVBAUTKDAwQTEwMDgzRkRCMDE2QzMwM0Q0RTYxOUVDNjFBQjY1 ODM4MDBEMjcwHhcNMjUwNTMxMDE0ODM3WhcNMjUwNjA3MDE0ODM3WjAYMRYwFAYD VQQDEw02ODNhNWZmNS00NGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6tAd6KYoN7U0ulQjYOssa1ixgL/DtXihY5+UTBFgtTHRgJFZ32oHiD9/Wefg wxxjmZ/UCCFPlf1yzIk6rc08PmNHsxkqWxP7mAgoQk6FeIuWL+VOpqSg0604zm/M wzWVJdnT48ESFkUc3rqO/Df00Qkh0zlhmGCTwFfbrMkLerKMTaM+3cxkIrPaQHjb pFO4Zy8V94oaXjhp+a6jn4t9qRHS1tDKqcuvQwMgV/y7hvAaG487ubByh9rNB5C1 PNsVnfNIwsoBLkF9SGKDgt3wLf84wkVEya7gkJNha0MkhpEebbFrB9R809sYUuy0 c0vR7DHvZ4ofB9XI8AKBtkmW9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF78PUYd +s5odjcAyp61FalYIdVcMB8GA1UdIwQYMBaAFAChAIP9sBbDA9TmGexhq2WDgA0n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUNCMS8xMTY3MkMyMDA3 RjkxMUVEODIyN0U1NzJDNEY5QUUwMi9BS0VBZ18yd0ZzTUQxT1laN0dHclpZT0FE U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FLRUFnXzJ3RnNNRDFPWVo3R0dyWllPQURTYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NUNCMS8xMTY3MkMyMDA3RjkxMUVEODIyN0U1NzJDNEY5QUUwMi9BS0VBZ18yd0Zz TUQxT1laN0dHclpZT0FEU2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7psidSdolgfFoHduAaxIY5Ycdcfl8Vpu+euYOzq00tkwGTHIHXK3c GuPgWRthG1eQIVS21xy8areC4b8UtHdMHIHtpnI5nZTBP8sOc23kT+8FUSlQqroP Tw/aSr5+d5hzgGW+tWE71ltRuKfdt5/nIZwN5rv4ErXtNKtsu34PiQw4In0HPtqb bfzeqLtTU7nM7RPTDcmear12lXXpoXd/cKrwbVNStG7eZUlnEAI6bbs6CNuiwJc5 q9Gd1kT2Wg0O3J+BXzyEqAmOmI03WFbIPZGGsE1LcaPvcrueM2sqPLg2ObilYLES mWL8uTOucL9QIbJf6dCfFzdg/gEp2NE4 -----END CERTIFICATE-----Generated at Sat May 31 16:55:05 2025 by rpki-client