$ rpki-client -vvf rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft File: aIUqt_JxT89U118KrjBorcOLNcw.mft (raw, json) Hash identifier: sO1H8IZY87oi2vD8kDweC01c2WWmLcqucLwgJYJ2e4g= Subject key identifier: 3A:BD:E3:23:3D:EE:E3:BE:EE:D9:4F:AF:49:3F:BE:06:60:04:FE:8E Authority key identifier: 68:85:2A:B7:F2:71:4F:CF:54:D7:5F:0A:AE:30:68:AD:C3:8B:35:CC Certificate issuer: /CN=A91187FD/serialNumber=68852AB7F2714FCF54D75F0AAE3068ADC38B35CC Certificate serial: 01D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft Manifest number: 01AB Signing time: Sun 15 Jun 2025 02:59:35 +0000 Manifest this update: Sun 15 Jun 2025 02:59:35 +0000 Manifest next update: Sun 22 Jun 2025 02:59:35 +0000 Files and hashes: 1: aIUqt_JxT89U118KrjBorcOLNcw.crl (hash: oX6pCF8KtaUGZXxdeOJQrR2uufnuS1pVfLpGvhepp0g=) 2: 50F934AEFFCE11EEAF1CA783C4F9AE02.roa (hash: sVvAJAto5nS+PJW2xudvaNZimEOtDLNCZ3HK4HpuOtY=) 3: 41BE8C60BF7211EE8D281E83C4F9AE02.roa (hash: EFlPTIDh/flAQJr1anznK2j9MXoucgVjlIwMhZopTcg=) 4: F8D5DC60BF7111EE806CB182C4F9AE02.roa (hash: dnFPJnob0iVhfZy+h628YHTmIBu/2rM+XDutXFD80e0=) 5: F95B12AEBF7111EE806CB182C4F9AE02.roa (hash: LVpmryw+uYS24nJeG/+qspxNYBu9ZoQZ5h3e0ahfWXo=) 6: 8692D090BF7111EE95DFE981C4F9AE02.roa (hash: Wpe5PworCum/nFcap1/E1+zKePOZQIpIAtfCfOVXg7s=) 7: 0EE376F8BF7111EEA53E4981C4F9AE02.roa (hash: KHuTzz/kFiU3cRoYtOMYxj6wU6aR+DEFWLsHndFiGX4=) 8: 20127C7C120411EF91CB6459C4F9AE02.roa (hash: EGjFAKrOA7ymJav4jaslQmpl/cbPT+voPNs5hCTYUM4=) 9: F9CB1E5ABF7111EE806CB182C4F9AE02.roa (hash: pS29Ljdr6W25s2Hduyo4rCqyFsm2/2KQ7prNwHso1r0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.crl rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 467 (0x1d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91187FD, serialNumber=68852AB7F2714FCF54D75F0AAE3068ADC38B35CC Validity Not Before: Jun 15 02:59:35 2025 GMT Not After : Jun 22 02:59:35 2025 GMT Subject: CN=684e3717-3130 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:00:c5:88:5e:00:85:02:2f:3d:63:71:64:71: e8:76:1c:25:12:94:ea:16:5c:2f:2d:38:52:69:cb: a9:19:0d:34:95:49:e9:9e:c2:0c:0b:26:d1:3f:75: 59:cf:8d:62:49:6a:de:57:b6:55:92:9a:cf:3c:8e: 28:12:5e:d9:4b:b7:2b:e5:11:3e:be:07:f9:92:b7: ec:c4:57:3b:3a:92:de:95:dc:bb:2a:4e:25:29:fc: aa:ad:65:e1:91:ba:62:ed:2b:d2:56:de:6c:a9:b1: 78:2d:8b:32:5e:52:a4:a9:02:64:b8:3b:5d:ec:8b: 37:0c:0f:dc:a5:a5:4c:67:54:83:d4:80:5e:e4:2e: 21:5d:ae:86:d5:1b:c7:c5:ce:64:9c:f6:d9:bd:68: 6c:f8:a5:f7:0a:4f:36:16:b7:fa:1a:c7:b8:5b:12: 4b:7e:97:99:0c:14:73:12:43:fb:b1:e9:9a:ab:76: a5:55:d3:36:db:a0:b1:bb:4f:36:78:50:83:6a:2f: f4:73:05:10:86:42:be:d0:70:4d:de:8e:73:02:b0: da:91:92:1a:ea:31:f1:5b:e2:92:a2:f2:61:73:23: 00:7b:dd:0e:bc:22:f9:6d:47:66:8d:b3:80:d2:11: c1:44:2a:46:8f:ea:d6:94:d5:26:f4:ec:72:72:e3: 03:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:BD:E3:23:3D:EE:E3:BE:EE:D9:4F:AF:49:3F:BE:06:60:04:FE:8E X509v3 Authority Key Identifier: keyid:68:85:2A:B7:F2:71:4F:CF:54:D7:5F:0A:AE:30:68:AD:C3:8B:35:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:c3:fd:f2:97:43:c4:0d:3e:e9:38:dc:f1:aa:48:36:06:4c: 19:8f:34:81:1d:02:ae:ed:71:38:04:f2:92:79:b9:92:65:35: 9d:45:d9:b9:7c:39:30:5a:f3:dd:cc:05:45:14:74:aa:f9:98: aa:fa:37:86:29:f2:d9:da:e6:97:3a:08:70:ae:92:d9:95:3d: d1:5d:e1:b2:19:0b:18:cf:6a:2f:fb:1e:98:51:45:6d:93:a5: c7:18:46:76:d5:ff:bc:ae:e6:2c:ee:de:32:c8:6b:e0:ea:26: 38:e5:be:b6:86:48:7f:17:fb:2c:2d:1a:71:c5:29:7a:7a:41: 60:24:39:c1:41:62:52:95:1e:be:8a:97:db:64:66:8c:80:79: 66:db:83:e7:29:dd:8e:33:01:e8:a7:d1:f0:4b:f3:4e:7e:dd: a1:54:05:df:83:31:0d:db:f0:6d:7a:01:f4:bd:6c:45:e4:eb: 8a:d8:e6:f8:ac:a7:4f:89:d4:c8:0d:d4:ac:4a:28:c3:51:29: 4a:5a:be:44:a3:63:a0:7f:78:a7:9c:8f:6c:4b:82:67:e1:7d: 58:6d:aa:e5:b1:c5:21:03:97:ce:6f:6b:1f:36:ff:ec:ef:9c: 63:3a:29:f4:e2:a1:59:a0:ee:88:36:e4:25:4f:5c:9c:66:8a: a0:73:c1:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg3RkQxMTAvBgNVBAUTKDY4ODUyQUI3RjI3MTRGQ0Y1NEQ3NUYwQUFFMzA2OEFE QzM4QjM1Q0MwHhcNMjUwNjE1MDI1OTM1WhcNMjUwNjIyMDI1OTM1WjAYMRYwFAYD VQQDEw02ODRlMzcxNy0zMTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4gDFiF4AhQIvPWNxZHHodhwlEpTqFlwvLThSacupGQ00lUnpnsIMCybRP3VZ z41iSWreV7ZVkprPPI4oEl7ZS7cr5RE+vgf5krfsxFc7OpLeldy7Kk4lKfyqrWXh kbpi7SvSVt5sqbF4LYsyXlKkqQJkuDtd7Is3DA/cpaVMZ1SD1IBe5C4hXa6G1RvH xc5knPbZvWhs+KX3Ck82Frf6Gse4WxJLfpeZDBRzEkP7semaq3alVdM226Cxu082 eFCDai/0cwUQhkK+0HBN3o5zArDakZIa6jHxW+KSovJhcyMAe90OvCL5bUdmjbOA 0hHBRCpGj+rWlNUm9OxycuMDewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDq94yM9 7uO+7tlPr0k/vgZgBP6OMB8GA1UdIwQYMBaAFGiFKrfycU/PVNdfCq4waK3DizXM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODdGRC81NUVENkExNjEw QTAxMUVFOTM0OTNDNTJDNEY5QUUwMi9hSVVxdF9KeFQ4OVUxMThLcmpCb3JjT0xO Y3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FJVXF0X0p4VDg5VTExOEtyakJvcmNPTE5jdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODdGRC81NUVENkExNjEwQTAxMUVFOTM0OTNDNTJDNEY5QUUwMi9hSVVxdF9KeFQ4 OVUxMThLcmpCb3JjT0xOY3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmw/3yl0PEDT7pONzxqkg2BkwZjzSBHQKu7XE4BPKSebmSZTWdRdm5 fDkwWvPdzAVFFHSq+Ziq+jeGKfLZ2uaXOghwrpLZlT3RXeGyGQsYz2ov+x6YUUVt k6XHGEZ21f+8ruYs7t4yyGvg6iY45b62hkh/F/ssLRpxxSl6ekFgJDnBQWJSlR6+ ipfbZGaMgHlm24PnKd2OMwHop9HwS/NOft2hVAXfgzEN2/BtegH0vWxF5OuK2Ob4 rKdPidTIDdSsSijDUSlKWr5Eo2Ogf3innI9sS4Jn4X1YbarlscUhA5fOb2sfNv/s 75xjOin04qFZoO6INuQlT1ycZoqgc8Ek -----END CERTIFICATE-----Generated at Sun Jun 15 08:51:37 2025 by rpki-client