$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft File: AJko8LjNMO2gVjCoumdOdiqdKDM.mft (raw, json) Hash identifier: 7jjZuP/1LGTTq/v5mugVqmBeuDwodqJ/xaeo0E+7vkM= Subject key identifier: 81:36:CA:B6:96:43:C1:DE:38:51:FC:7F:C5:07:26:C6:F1:E8:73:70 Authority key identifier: 00:99:28:F0:B8:CD:30:ED:A0:56:30:A8:BA:67:4E:76:2A:9D:28:33 Certificate issuer: /CN=A91CE5A6/serialNumber=009928F0B8CD30EDA05630A8BA674E762A9D2833 Certificate serial: 014C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJko8LjNMO2gVjCoumdOdiqdKDM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft Manifest number: 0143 Signing time: Sat 31 May 2025 04:03:15 +0000 Manifest this update: Sat 31 May 2025 04:03:15 +0000 Manifest next update: Sat 07 Jun 2025 04:03:15 +0000 Files and hashes: 1: AJko8LjNMO2gVjCoumdOdiqdKDM.crl (hash: 0EjAe1RopWiSPQfHt5KDyGuR+fsSgSyNH0O1C5i3EBk=) 2: EC56413A5B4B11EE9A031C81C4F9AE02.roa (hash: L51Q68tVx2XVC4mIdbJx6yL7uZTn+EZdlLwf/zTugIc=) 3: 7022F6EE5B4611EE9093F11EC4F9AE02.roa (hash: 4Ob8OZ5S2H/WLKjYmff77WuX2DfNbq1F3IyX9D66TLg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.crl rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJko8LjNMO2gVjCoumdOdiqdKDM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:03:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 332 (0x14c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE5A6, serialNumber=009928F0B8CD30EDA05630A8BA674E762A9D2833 Validity Not Before: May 31 04:03:15 2025 GMT Not After : Jun 7 04:03:15 2025 GMT Subject: CN=683a7f83-db4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:76:4c:98:00:55:02:04:a2:9d:27:35:bb:c1: ac:61:90:8a:23:6e:1e:29:9c:f4:d1:95:1d:ea:29: 5a:f6:69:e2:e5:43:c2:c6:28:06:66:f1:ac:f9:4d: 5e:9e:d9:7a:7d:f4:cb:72:f2:9b:3a:ad:3a:96:1e: c2:48:3d:6b:bb:d0:ba:9e:d7:56:08:47:f1:a4:7f: 19:c4:3f:1d:65:73:e0:0d:2f:18:6b:c7:91:9b:04: 49:ca:2c:12:b0:e6:fc:bc:75:08:de:d0:24:ab:1b: e0:c5:40:44:00:d7:d1:b1:5b:1a:51:db:19:b1:d2: 17:71:82:12:34:68:69:64:ac:0a:2a:37:fe:a6:68: 78:41:2d:96:5a:36:87:3d:b8:54:5a:8b:18:59:c6: 8e:fa:fa:7a:09:ec:75:1d:43:59:7e:8f:14:4f:8c: 46:9f:1e:5a:c4:a0:e1:5e:38:a9:3d:34:fa:c1:44: c9:9f:f4:05:3e:46:a1:3f:b3:a8:e3:b1:a1:24:93: a5:53:63:dc:42:ed:77:c2:53:4c:12:17:d0:a2:ea: 44:a3:ed:b6:23:b3:ed:ae:9e:ac:4b:26:42:c9:c4: 98:5f:e2:cc:af:b0:93:96:e8:c0:2f:44:a9:82:16: fe:17:a1:6d:51:3a:23:ed:ef:b1:fa:3a:4d:84:b2: 52:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:36:CA:B6:96:43:C1:DE:38:51:FC:7F:C5:07:26:C6:F1:E8:73:70 X509v3 Authority Key Identifier: keyid:00:99:28:F0:B8:CD:30:ED:A0:56:30:A8:BA:67:4E:76:2A:9D:28:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJko8LjNMO2gVjCoumdOdiqdKDM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:75:de:3a:f5:85:f4:45:d9:ed:e0:24:98:47:ec:a3:a0:e7: bb:f3:91:49:fe:d8:08:01:76:9e:75:a9:1f:29:c5:03:b7:bc: 5b:d4:7b:b5:8a:52:24:1a:32:83:9f:83:b4:ce:30:d0:20:7c: 20:84:09:e1:68:1e:d3:d3:16:0f:d6:6d:f4:f0:4c:4b:2d:75: 54:19:ac:75:5f:02:f1:c7:95:91:19:a0:3e:02:1a:38:36:23: f3:89:f4:25:37:4e:0f:de:f9:a1:a2:79:6c:db:0e:62:8a:0a: 2a:3c:ef:2d:b2:9c:fd:8c:0a:9b:3d:53:06:42:5d:78:81:2f: 28:c0:94:e9:56:9e:d4:fc:62:91:53:f3:ee:1f:f6:68:4c:30: 89:a5:9d:81:9d:f2:f5:c4:f5:d9:4d:10:c2:e7:b9:a9:06:3c: c8:a0:9a:a0:21:d5:5e:3a:b1:ac:52:c0:81:82:a8:4d:e2:7e: 4b:05:f3:2b:4f:d4:ce:46:be:b0:b3:e7:e6:4a:01:b6:cf:18: 55:3b:b5:f0:27:8e:a5:4d:1c:8d:ba:c1:51:aa:50:da:f3:65: 87:e8:9a:26:f8:f4:43:00:11:0f:66:b8:e9:8f:94:8f:4f:45: 8d:a5:b3:52:1f:62:cc:7b:f2:f5:4e:0e:b6:41:5f:38:af:b8: b6:19:c3:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U1QTYxMTAvBgNVBAUTKDAwOTkyOEYwQjhDRDMwRURBMDU2MzBBOEJBNjc0RTc2 MkE5RDI4MzMwHhcNMjUwNTMxMDQwMzE1WhcNMjUwNjA3MDQwMzE1WjAYMRYwFAYD VQQDEw02ODNhN2Y4My1kYjRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6XZMmABVAgSinSc1u8GsYZCKI24eKZz00ZUd6ila9mni5UPCxigGZvGs+U1e ntl6ffTLcvKbOq06lh7CSD1ru9C6ntdWCEfxpH8ZxD8dZXPgDS8Ya8eRmwRJyiwS sOb8vHUI3tAkqxvgxUBEANfRsVsaUdsZsdIXcYISNGhpZKwKKjf+pmh4QS2WWjaH PbhUWosYWcaO+vp6Cex1HUNZfo8UT4xGnx5axKDhXjipPTT6wUTJn/QFPkahP7Oo 47GhJJOlU2PcQu13wlNMEhfQoupEo+22I7Ptrp6sSyZCycSYX+LMr7CTlujAL0Sp ghb+F6FtUToj7e+x+jpNhLJSSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIE2yraW Q8HeOFH8f8UHJsbx6HNwMB8GA1UdIwQYMBaAFACZKPC4zTDtoFYwqLpnTnYqnSgz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTVBNi9CMzc0OTcxMDVC M0YxMUVFOEYxRDNENkVDNEY5QUUwMi9BSmtvOExqTk1PMmdWakNvdW1kT2RpcWRL RE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FKa284TGpOTU8yZ1ZqQ291bWRPZGlxZEtETS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTVBNi9CMzc0OTcxMDVCM0YxMUVFOEYxRDNENkVDNEY5QUUwMi9BSmtvOExqTk1P MmdWakNvdW1kT2RpcWRLRE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFdd469YX0Rdnt4CSYR+yjoOe785FJ/tgIAXaedakfKcUDt7xb1Hu1 ilIkGjKDn4O0zjDQIHwghAnhaB7T0xYP1m308ExLLXVUGax1XwLxx5WRGaA+Aho4 NiPzifQlN04P3vmhonls2w5iigoqPO8tspz9jAqbPVMGQl14gS8owJTpVp7U/GKR U/PuH/ZoTDCJpZ2BnfL1xPXZTRDC57mpBjzIoJqgIdVeOrGsUsCBgqhN4n5LBfMr T9TORr6ws+fmSgG2zxhVO7XwJ46lTRyNusFRqlDa82WH6Jom+PRDABEPZrjpj5SP T0WNpbNSH2LMe/L1Tg62QV84r7i2GcOF -----END CERTIFICATE-----Generated at Sat May 31 16:44:48 2025 by rpki-client