$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.mft File: aaMtc-A4ow1HrKzrgc1zEq91Ork.mft (raw, json) Hash identifier: pgchfNJ9Y6XS6X6V0YxbIstytWr4FxkpptrTucvdebs= Subject key identifier: 12:D9:40:9E:7D:6A:BE:4B:F4:C8:02:A2:C0:FD:28:FB:5F:C5:2A:91 Authority key identifier: 69:A3:2D:73:E0:38:A3:0D:47:AC:AC:EB:81:CD:73:12:AF:75:3A:B9 Certificate issuer: /CN=A91E1F31/serialNumber=69A32D73E038A30D47ACACEB81CD7312AF753AB9 Certificate serial: F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaMtc-A4ow1HrKzrgc1zEq91Ork.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.mft Manifest number: EA Signing time: Sat 31 May 2025 05:02:53 +0000 Manifest this update: Sat 31 May 2025 05:02:53 +0000 Manifest next update: Sat 07 Jun 2025 05:02:53 +0000 Files and hashes: 1: aaMtc-A4ow1HrKzrgc1zEq91Ork.crl (hash: /otIiRi5/UcKutKdauX+NO+8L9TByit5luYu9+uWdQg=) 2: 2F734D2E860111EFB49EB20DC4F9AE02.roa (hash: lyH5OR1VxxfoorFwC9xWARZrZEWyPMAlZT0c6Gt7rg0=) 3: 43441626860111EF8B4DF50DC4F9AE02.roa (hash: mfBAlHBLtaChfMT6zfmbBV23T4d13rPLxjMmrWBPL0E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.crl rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaMtc-A4ow1HrKzrgc1zEq91Ork.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:02:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 242 (0xf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1F31, serialNumber=69A32D73E038A30D47ACACEB81CD7312AF753AB9 Validity Not Before: May 31 05:02:53 2025 GMT Not After : Jun 7 05:02:53 2025 GMT Subject: CN=683a8d7d-2649 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e6:4c:8c:40:8b:aa:a4:10:d2:f1:d7:b4:44: 62:e9:c6:4a:d4:0a:81:f7:e6:0d:eb:98:04:2a:27: f7:60:67:7c:ce:df:c4:23:8d:c3:53:02:03:e3:4f: 23:87:a2:84:3b:bc:54:1d:9f:9a:79:a8:c2:50:28: 11:8e:b6:5a:01:01:92:b3:1a:dd:ce:78:04:b6:a5: ac:32:d5:e7:c1:8e:7e:21:b7:96:06:c8:2b:53:56: a9:2f:b0:ce:68:fd:f4:1b:57:cf:39:dd:54:bf:58: 30:17:08:fa:8c:62:9d:e7:7c:51:70:ba:a2:9c:bf: b1:47:9d:1b:75:07:76:43:8a:df:ad:02:c9:95:56: 30:a5:1c:db:04:91:cb:75:ec:b1:62:05:65:53:76: 51:0e:7f:c9:a0:14:e2:84:2b:9c:9e:34:ef:38:62: e7:64:06:4d:ac:f3:b5:0d:a4:72:8c:7c:8f:93:7c: 98:be:34:83:29:57:0f:d3:79:89:7d:67:5d:c2:db: 12:11:fe:b0:b8:17:ce:73:dd:9b:cc:e9:38:0d:ce: c8:17:dc:fa:a0:d4:96:5f:f9:52:ee:7a:f4:c2:23: 09:2b:2f:ef:f1:51:9b:ee:ff:29:73:9d:d9:cd:ca: 7b:e7:7d:7f:8d:89:ec:4a:43:a9:58:9b:24:64:4f: 8c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:D9:40:9E:7D:6A:BE:4B:F4:C8:02:A2:C0:FD:28:FB:5F:C5:2A:91 X509v3 Authority Key Identifier: keyid:69:A3:2D:73:E0:38:A3:0D:47:AC:AC:EB:81:CD:73:12:AF:75:3A:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaMtc-A4ow1HrKzrgc1zEq91Ork.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:2a:f8:9e:ca:47:a8:6e:31:4b:36:2e:3a:3d:7c:e0:fd:73: 40:87:fb:80:34:2f:c7:88:93:ab:1a:a7:ba:8c:d5:66:41:72: fc:62:1b:94:0b:48:97:49:d8:75:88:69:8a:4b:db:58:8d:d3: 5b:2a:c2:0d:9c:7c:cb:7f:5e:bd:94:24:83:a9:8e:40:7d:8f: 63:14:59:e9:ae:3f:d4:d5:f6:00:b6:d3:01:c6:5f:5e:22:e4: 91:40:30:42:0b:13:2e:bd:e2:5e:5e:52:df:3c:3e:94:ac:70: 2e:57:0e:bf:30:f6:1e:ba:12:b6:81:20:3d:c0:7d:90:29:ab: e0:93:d3:42:2a:a0:18:4b:7f:6b:ad:bd:df:d0:86:ae:29:16: d9:c2:52:6d:c8:0a:29:8b:25:58:f2:d5:20:27:c5:c6:9a:74: e1:cb:27:03:63:eb:ab:a9:d4:9e:c4:21:d1:97:f0:9f:8c:fe: e0:41:08:e0:ac:39:69:7c:88:5e:be:8d:74:ce:3d:9b:1e:2d: 54:6a:da:95:03:78:7a:fb:57:cd:97:37:4d:83:0d:e2:dd:55: d0:94:b4:8f:03:26:68:59:99:9f:de:12:49:50:89:fb:1e:cb: 4b:b7:19:34:c2:a6:7a:8c:b3:87:b3:ef:10:53:b1:85:87:2b: a5:53:38:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTFGMzExMTAvBgNVBAUTKDY5QTMyRDczRTAzOEEzMEQ0N0FDQUNFQjgxQ0Q3MzEy QUY3NTNBQjkwHhcNMjUwNTMxMDUwMjUzWhcNMjUwNjA3MDUwMjUzWjAYMRYwFAYD VQQDEw02ODNhOGQ3ZC0yNjQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArOZMjECLqqQQ0vHXtERi6cZK1AqB9+YN65gEKif3YGd8zt/EI43DUwID408j h6KEO7xUHZ+aeajCUCgRjrZaAQGSsxrdzngEtqWsMtXnwY5+IbeWBsgrU1apL7DO aP30G1fPOd1Uv1gwFwj6jGKd53xRcLqinL+xR50bdQd2Q4rfrQLJlVYwpRzbBJHL deyxYgVlU3ZRDn/JoBTihCucnjTvOGLnZAZNrPO1DaRyjHyPk3yYvjSDKVcP03mJ fWddwtsSEf6wuBfOc92bzOk4Dc7IF9z6oNSWX/lS7nr0wiMJKy/v8VGb7v8pc53Z zcp7531/jYnsSkOpWJskZE+M6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBLZQJ59 ar5L9MgCosD9KPtfxSqRMB8GA1UdIwQYMBaAFGmjLXPgOKMNR6ys64HNcxKvdTq5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUYzMS9BMEY0RTBEMEUx QkUxMUVFQjA0NUVCMjZDNEY5QUUwMi9hYU10Yy1BNG93MUhyS3pyZ2MxekVxOTFP cmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FhTXRjLUE0b3cxSHJLenJnYzF6RXE5MU9yay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MUYzMS9BMEY0RTBEMEUxQkUxMUVFQjA0NUVCMjZDNEY5QUUwMi9hYU10Yy1BNG93 MUhyS3pyZ2MxekVxOTFPcmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIKvieykeobjFLNi46PXzg/XNAh/uANC/HiJOrGqe6jNVmQXL8YhuU C0iXSdh1iGmKS9tYjdNbKsINnHzLf169lCSDqY5AfY9jFFnprj/U1fYAttMBxl9e IuSRQDBCCxMuveJeXlLfPD6UrHAuVw6/MPYeuhK2gSA9wH2QKavgk9NCKqAYS39r rb3f0IauKRbZwlJtyAopiyVY8tUgJ8XGmnThyycDY+urqdSexCHRl/CfjP7gQQjg rDlpfIhevo10zj2bHi1UatqVA3h6+1fNlzdNgw3i3VXQlLSPAyZoWZmf3hJJUIn7 HstLtxk0wqZ6jLOHs+8QU7GFhyulUzjY -----END CERTIFICATE-----Generated at Sat May 31 17:57:47 2025 by rpki-client