$ rpki-client -vvf rpki.apnic.net/member_repository/A911750B/5B1C1FAE468C11F084B6A539C4F9AE02/aMIYjATCDkkjq7YttIckmDVLSv0.mft File: aMIYjATCDkkjq7YttIckmDVLSv0.mft (raw, json) Hash identifier: kt7jqcFke085Qdrf/zBXc94gwTtTG8ImJVwdo4ilxic= Subject key identifier: 44:68:03:90:4A:4A:6D:B9:6A:8A:98:08:56:1F:C5:C8:6B:1D:1D:71 Authority key identifier: 68:C2:18:8C:04:C2:0E:49:23:AB:B6:2D:B4:87:24:98:35:4B:4A:FD Certificate issuer: /CN=A911750B/serialNumber=68C2188C04C20E4923ABB62DB4872498354B4AFD Certificate serial: 07 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aMIYjATCDkkjq7YttIckmDVLSv0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911750B/5B1C1FAE468C11F084B6A539C4F9AE02/aMIYjATCDkkjq7YttIckmDVLSv0.mft Manifest number: 06 Signing time: Thu 19 Jun 2025 07:33:04 +0000 Manifest this update: Thu 19 Jun 2025 07:33:04 +0000 Manifest next update: Thu 26 Jun 2025 07:33:04 +0000 Files and hashes: 1: aMIYjATCDkkjq7YttIckmDVLSv0.crl (hash: 4cZ87T1L9knENsQejjc4jul+J+wncyuDoWKi+0bpLUc=) 2: CC9D872A468D11F0A82C5E5EC4F9AE02.roa (hash: WRJujiiFl5+2lSEzqzn6bhm3g2H9MHSY7ug8yl3Oc8g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911750B/5B1C1FAE468C11F084B6A539C4F9AE02/aMIYjATCDkkjq7YttIckmDVLSv0.crl rsync://rpki.apnic.net/member_repository/A911750B/5B1C1FAE468C11F084B6A539C4F9AE02/aMIYjATCDkkjq7YttIckmDVLSv0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aMIYjATCDkkjq7YttIckmDVLSv0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 07:33:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911750B, serialNumber=68C2188C04C20E4923ABB62DB4872498354B4AFD Validity Not Before: Jun 19 07:33:04 2025 GMT Not After : Jun 26 07:33:04 2025 GMT Subject: CN=6853bd30-9a8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:70:89:95:14:3f:cd:99:87:59:5d:b1:31:c6: 60:5d:c6:0d:c0:44:2b:00:ce:f8:28:b8:41:6d:23: c6:ae:51:d0:2e:55:ef:0e:ce:a2:2b:5b:88:53:3f: 68:2b:80:5b:5f:5c:4b:cd:c1:dc:94:d0:eb:a4:a4: 52:21:72:59:b2:46:24:c7:8c:77:66:29:fd:2f:fd: 05:cb:0f:78:22:28:18:1f:be:bf:e1:bb:ab:14:48: ee:c7:ee:c7:62:c3:90:0e:14:13:c3:76:3a:78:69: 0e:9b:a6:1a:6b:96:bf:6d:ee:00:95:90:e1:7c:d5: ed:19:be:8e:16:a8:0b:3e:67:41:ea:87:83:5a:49: 58:23:af:76:67:69:8e:a7:de:19:0b:43:7e:4f:e3: de:e9:1c:b6:4c:ae:18:08:3e:60:44:db:a9:d5:5c: 87:43:ae:9c:38:f4:c4:98:02:ee:d1:d8:5e:47:9f: 48:43:e3:ae:04:be:6f:09:93:1e:b2:f9:36:a6:c7: b1:f4:af:f7:fe:f5:b5:d1:7c:92:e0:e1:97:cf:b7: cd:6a:9f:10:a6:51:55:c5:8a:4b:0a:77:70:aa:dd: e7:88:7f:72:3e:c8:95:04:c9:76:4c:bc:ab:8f:e3: dc:3a:7b:2e:9d:a1:b6:13:f6:4d:89:15:0b:32:6a: 64:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:68:03:90:4A:4A:6D:B9:6A:8A:98:08:56:1F:C5:C8:6B:1D:1D:71 X509v3 Authority Key Identifier: keyid:68:C2:18:8C:04:C2:0E:49:23:AB:B6:2D:B4:87:24:98:35:4B:4A:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911750B/5B1C1FAE468C11F084B6A539C4F9AE02/aMIYjATCDkkjq7YttIckmDVLSv0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aMIYjATCDkkjq7YttIckmDVLSv0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911750B/5B1C1FAE468C11F084B6A539C4F9AE02/aMIYjATCDkkjq7YttIckmDVLSv0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:3a:79:dd:54:ca:03:4d:14:10:f9:74:be:10:3f:ce:eb:c9: b4:b9:60:01:3b:2e:e1:ef:15:aa:9b:a3:16:3b:88:9d:30:eb: 21:9d:89:4c:69:b0:99:57:58:dd:7b:f8:2a:61:ce:e7:1d:b1: 60:a6:80:a6:9e:c1:36:72:0b:41:fa:c7:e4:d8:50:04:82:a7: b2:ce:fa:02:f0:36:a9:98:25:23:50:c2:73:6f:28:f3:26:32: 9a:36:2a:93:b2:e4:7b:80:70:f7:5d:58:b6:38:85:fc:95:3f: ee:50:bf:88:50:82:5a:b6:a6:be:81:ed:47:01:8d:04:e1:01: 22:82:5d:db:3e:86:14:6d:8c:64:5d:f1:eb:f6:3c:76:c0:16: 6a:c8:ce:cc:86:02:b1:f7:13:56:07:10:43:0f:f8:19:b0:d8: b9:2a:d3:2d:e2:b0:49:03:f4:84:ad:d8:d2:92:70:e0:d8:5a: f9:c1:de:4d:1d:b6:05:30:e1:7a:98:63:00:b5:47:e1:c7:63: 13:a8:29:ee:6c:bf:e1:d2:09:a6:d8:62:9d:8c:af:ee:8e:ca: 52:ce:42:77:cb:42:ac:2f:e7:7a:3e:11:7c:ec:c8:0a:07:26: 1d:53:54:be:63:19:73:08:d9:14:a3:93:fb:7c:54:c4:99:9d: 0a:d2:0b:2d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NzUwQjExMC8GA1UEBRMoNjhDMjE4OEMwNEMyMEU0OTIzQUJCNjJEQjQ4NzI0OTgz NTRCNEFGRDAeFw0yNTA2MTkwNzMzMDRaFw0yNTA2MjYwNzMzMDRaMBgxFjAUBgNV BAMTDTY4NTNiZDMwLTlhOGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7cImVFD/NmYdZXbExxmBdxg3ARCsAzvgouEFtI8auUdAuVe8OzqIrW4hTP2gr gFtfXEvNwdyU0OukpFIhclmyRiTHjHdmKf0v/QXLD3giKBgfvr/hu6sUSO7H7sdi w5AOFBPDdjp4aQ6bphprlr9t7gCVkOF81e0Zvo4WqAs+Z0Hqh4NaSVgjr3ZnaY6n 3hkLQ35P497pHLZMrhgIPmBE26nVXIdDrpw49MSYAu7R2F5Hn0hD464Evm8Jkx6y +Tamx7H0r/f+9bXRfJLg4ZfPt81qnxCmUVXFiksKd3Cq3eeIf3I+yJUEyXZMvKuP 49w6ey6dobYT9k2JFQsyamQjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURGgDkEpK bblqipgIVh/FyGsdHXEwHwYDVR0jBBgwFoAUaMIYjATCDkkjq7YttIckmDVLSv0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3NTBCLzVCMUMxRkFFNDY4 QzExRjA4NEI2QTUzOUM0RjlBRTAyL2FNSVlqQVRDRGtranE3WXR0SWNrbURWTFN2 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvYU1JWWpBVENEa2tqcTdZdHRJY2ttRFZMU3YwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3 NTBCLzVCMUMxRkFFNDY4QzExRjA4NEI2QTUzOUM0RjlBRTAyL2FNSVlqQVRDRGtr anE3WXR0SWNrbURWTFN2MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKQ6ed1UygNNFBD5dL4QP87rybS5YAE7LuHvFaqboxY7iJ0w6yGdiUxp sJlXWN17+CphzucdsWCmgKaewTZyC0H6x+TYUASCp7LO+gLwNqmYJSNQwnNvKPMm Mpo2KpOy5HuAcPddWLY4hfyVP+5Qv4hQglq2pr6B7UcBjQThASKCXds+hhRtjGRd 8ev2PHbAFmrIzsyGArH3E1YHEEMP+Bmw2Lkq0y3isEkD9ISt2NKScODYWvnB3k0d tgUw4XqYYwC1R+HHYxOoKe5sv+HSCabYYp2Mr+6OylLOQnfLQqwv53o+EXzsyAoH Jh1TVL5jGXMI2RSjk/t8VMSZnQrSCy0= -----END CERTIFICATE-----Generated at Thu Jun 19 16:58:10 2025 by rpki-client