$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft File: AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft (raw, json) Hash identifier: xacnoTwouf9do3Om0qt8oBPgzllcfHOMJuPNC0aWyNU= Subject key identifier: 15:4D:BE:DE:E8:B9:15:B8:2A:7D:25:2C:9C:19:46:7C:6C:FC:3B:D3 Authority key identifier: 00:02:41:49:0E:3F:20:98:F7:9D:5C:93:03:7E:BF:F2:B9:56:CF:D7 Certificate issuer: /CN=A91CA1A6/serialNumber=000241490E3F2098F79D5C93037EBFF2B956CFD7 Certificate serial: 0738 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAJBSQ4_IJj3nVyTA36_8rlWz9c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft Manifest number: 0721 Signing time: Fri 30 May 2025 22:05:21 +0000 Manifest this update: Fri 30 May 2025 22:05:20 +0000 Manifest next update: Fri 06 Jun 2025 22:05:20 +0000 Files and hashes: 1: AAJBSQ4_IJj3nVyTA36_8rlWz9c.crl (hash: 0z5TSZB+itZlWQfWbHx3q+yQSojvNbvMNJBI6zPWKYo=) 2: EEE4C606B5D411ECA20B840AC4F9AE02.roa (hash: 0XMlIXCMAiJZlp7fDiVuLUwSsm0ebLntYydTAPsauDo=) 3: 910A49AAB5CC11ECAE337E78C4F9AE02.roa (hash: 3it6MgHyhXt2fOxKVzUm+aEDZP71P1ra3Nfl+4bBlR4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.crl rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAJBSQ4_IJj3nVyTA36_8rlWz9c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:05:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1848 (0x738) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA1A6, serialNumber=000241490E3F2098F79D5C93037EBFF2B956CFD7 Validity Not Before: May 30 22:05:20 2025 GMT Not After : Jun 6 22:05:20 2025 GMT Subject: CN=683a2ba0-8b94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:f0:ed:04:55:d4:a0:8f:78:bd:d1:06:19:34: 3a:8f:f7:27:c8:41:ef:fb:80:88:c1:6d:39:bd:8b: 2c:94:c9:d7:9c:a3:a5:19:ef:ea:11:2b:76:8a:94: d4:a3:69:12:25:94:34:62:84:e9:43:3a:6d:64:a1: d0:37:0b:96:73:32:ae:be:f7:25:cf:b6:aa:c2:06: c9:fd:30:ca:25:58:af:ae:23:a8:b8:d2:6c:23:cb: 08:40:22:50:c0:d3:7e:82:b1:c5:99:3c:13:66:a3: 3b:54:e0:6f:8a:4d:3a:62:c4:db:1f:f6:63:b3:9f: 22:65:e9:de:1c:8f:0d:58:36:2a:53:ab:eb:1a:ab: 14:88:77:bb:1e:d3:36:18:b6:52:f8:20:fb:3c:66: f1:33:8f:cc:90:6e:38:30:79:bc:51:7c:95:f9:07: 87:d1:65:05:cf:ab:e7:96:e4:56:51:f3:15:63:e0: 50:60:d7:f0:a1:e2:fa:2e:a4:fc:8c:c4:dc:b1:5b: 13:34:94:7a:5d:59:49:e1:8e:d2:5d:38:00:da:9f: 47:c7:f2:70:01:6e:53:24:76:7f:78:1e:f9:4b:a1: 91:13:5f:24:2f:94:96:c8:25:14:cc:75:c2:6f:35: 30:70:05:cd:64:5d:56:7d:cd:fb:6a:7c:01:78:bf: 37:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:4D:BE:DE:E8:B9:15:B8:2A:7D:25:2C:9C:19:46:7C:6C:FC:3B:D3 X509v3 Authority Key Identifier: keyid:00:02:41:49:0E:3F:20:98:F7:9D:5C:93:03:7E:BF:F2:B9:56:CF:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAJBSQ4_IJj3nVyTA36_8rlWz9c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:93:e1:13:f0:d7:df:a5:58:00:8a:bb:e5:46:c7:f8:e6:86: 8c:e2:a1:7b:f4:eb:18:11:c1:09:6a:bb:a9:55:b6:3a:dd:75: ac:dc:db:04:e5:ee:47:95:b8:37:50:9f:01:55:a5:da:b9:ac: 8d:ff:f1:4b:f0:4b:47:7b:4a:6f:77:4f:49:9f:63:1c:55:3e: a7:6e:1b:9d:b4:8d:94:96:ea:e0:b5:97:ee:c5:5f:26:e7:10: bc:70:6c:78:44:30:a1:67:aa:68:de:58:04:26:a0:1c:70:e8: 0c:89:1f:5c:87:b6:b0:9a:0f:bd:d3:90:76:b3:0a:a4:7e:51: 08:ef:62:fa:a9:ac:ed:fe:5f:24:b4:b0:d7:ab:3f:1a:b1:99: 6e:0a:0a:c5:62:dc:67:60:30:84:5f:91:51:f9:00:d4:66:1c: 70:aa:e2:ae:bd:d2:dc:84:31:be:ca:f1:66:75:53:9f:16:11: 30:bf:91:0c:8f:70:04:d5:c9:00:e1:0f:12:b6:ab:2b:cd:45: e7:3f:52:c6:02:bf:01:91:da:4d:74:51:e1:ab:f9:61:0a:08: 32:89:7a:17:15:2f:a4:95:ea:34:16:26:1c:86:8d:c9:e8:2d: 91:9f:6c:42:04:40:6c:b3:f9:ff:9f:92:da:05:1e:7d:2e:be: 0e:f8:13:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ExQTYxMTAvBgNVBAUTKDAwMDI0MTQ5MEUzRjIwOThGNzlENUM5MzAzN0VCRkYy Qjk1NkNGRDcwHhcNMjUwNTMwMjIwNTIwWhcNMjUwNjA2MjIwNTIwWjAYMRYwFAYD VQQDEw02ODNhMmJhMC04Yjk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3/DtBFXUoI94vdEGGTQ6j/cnyEHv+4CIwW05vYsslMnXnKOlGe/qESt2ipTU o2kSJZQ0YoTpQzptZKHQNwuWczKuvvclz7aqwgbJ/TDKJVivriOouNJsI8sIQCJQ wNN+grHFmTwTZqM7VOBvik06YsTbH/Zjs58iZeneHI8NWDYqU6vrGqsUiHe7HtM2 GLZS+CD7PGbxM4/MkG44MHm8UXyV+QeH0WUFz6vnluRWUfMVY+BQYNfwoeL6LqT8 jMTcsVsTNJR6XVlJ4Y7SXTgA2p9Hx/JwAW5TJHZ/eB75S6GRE18kL5SWyCUUzHXC bzUwcAXNZF1Wfc37anwBeL83lwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBVNvt7o uRW4Kn0lLJwZRnxs/DvTMB8GA1UdIwQYMBaAFAACQUkOPyCY951ckwN+v/K5Vs/X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTFBNi8zOEQ5M0UxRTNE MzAxMUVCQjNCMkQ2NkVDNEY5QUUwMi9BQUpCU1E0X0lKajNuVnlUQTM2XzhybFd6 OWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FBSkJTUTRfSUpqM25WeVRBMzZfOHJsV3o5Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTFBNi8zOEQ5M0UxRTNEMzAxMUVCQjNCMkQ2NkVDNEY5QUUwMi9BQUpCU1E0X0lK ajNuVnlUQTM2XzhybFd6OWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKk+ET8NffpVgAirvlRsf45oaM4qF79OsYEcEJarupVbY63XWs3NsE 5e5Hlbg3UJ8BVaXauayN//FL8EtHe0pvd09Jn2McVT6nbhudtI2UlurgtZfuxV8m 5xC8cGx4RDChZ6po3lgEJqAccOgMiR9ch7awmg+905B2swqkflEI72L6qazt/l8k tLDXqz8asZluCgrFYtxnYDCEX5FR+QDUZhxwquKuvdLchDG+yvFmdVOfFhEwv5EM j3AE1ckA4Q8StqsrzUXnP1LGAr8BkdpNdFHhq/lhCggyiXoXFS+kleo0FiYcho3J 6C2Rn2xCBEBss/n/n5LaBR59Lr4O+BMB -----END CERTIFICATE-----Generated at Sat May 31 16:47:50 2025 by rpki-client