$ rpki-client -vvf rpki.apnic.net/member_repository/A91190B4/BC8C10AE573C11EAB0A4E335C4F9AE02/peado7v7jl3TlkjmpD4A-nI95lg.mft File: peado7v7jl3TlkjmpD4A-nI95lg.mft (raw, json) Hash identifier: lQodQLpm+EEjRaeWtN4xXH4yN0EBIMWASC+xXlzTDiQ= Subject key identifier: 69:4E:04:3C:27:07:E8:7B:7A:51:C5:A5:16:01:B9:36:D1:A9:4D:BA Authority key identifier: A5:E6:9D:A3:BB:FB:8E:5D:D3:96:48:E6:A4:3E:00:FA:72:3D:E6:58 Certificate issuer: /CN=A91190B4/serialNumber=A5E69DA3BBFB8E5DD39648E6A43E00FA723DE658 Certificate serial: 0AB5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/peado7v7jl3TlkjmpD4A-nI95lg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91190B4/BC8C10AE573C11EAB0A4E335C4F9AE02/peado7v7jl3TlkjmpD4A-nI95lg.mft Manifest number: 0AAD Signing time: Fri 20 Jun 2025 19:27:21 +0000 Manifest this update: Fri 20 Jun 2025 19:27:21 +0000 Manifest next update: Fri 27 Jun 2025 19:27:21 +0000 Files and hashes: 1: peado7v7jl3TlkjmpD4A-nI95lg.crl (hash: izIjxUesDkAfkWi3uOYZbxK/j6SS36Qj7H/P9vO1c0Y=) 2: 55BC5674573F11EAA8901D3EC4F9AE02.roa (hash: GpKaeFCXgLqKWUd4/mw0J3pe4Cuty7kr/IEGoWg6an0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91190B4/BC8C10AE573C11EAB0A4E335C4F9AE02/peado7v7jl3TlkjmpD4A-nI95lg.crl rsync://rpki.apnic.net/member_repository/A91190B4/BC8C10AE573C11EAB0A4E335C4F9AE02/peado7v7jl3TlkjmpD4A-nI95lg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/peado7v7jl3TlkjmpD4A-nI95lg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Jun 2025 19:27:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2741 (0xab5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91190B4, serialNumber=A5E69DA3BBFB8E5DD39648E6A43E00FA723DE658 Validity Not Before: Jun 20 19:27:21 2025 GMT Not After : Jun 27 19:27:21 2025 GMT Subject: CN=6855b619-58e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1f:1d:be:49:e6:51:b5:b8:65:fc:60:fb:da: 85:4a:08:76:0f:08:d3:c0:b7:84:65:9f:e6:2f:5a: 8f:51:01:8e:9f:9b:d8:9a:7e:3a:af:16:a6:9a:b8: bf:91:63:c6:25:13:a1:3b:c9:a0:8b:63:c8:04:61: a5:a4:a3:54:64:22:1f:a8:b6:06:86:82:5c:e0:49: 4e:28:1e:2d:04:a3:96:19:28:e4:df:08:8d:0e:ca: 3f:8c:1a:06:c3:d1:63:d4:0b:e8:73:13:99:ce:c6: 29:f8:e6:22:5b:71:85:ca:8d:34:52:1d:ec:ad:e9: 8e:8f:5e:7f:3d:b8:e5:32:63:ca:ba:24:eb:89:8a: 7f:d7:2f:4b:22:8c:33:c0:fd:03:40:37:e0:f0:e9: 5d:2d:b7:60:92:cb:66:a0:28:1a:d9:15:42:18:0f: 34:20:92:f1:59:ef:85:50:2c:f3:91:90:1d:55:b5: bd:f1:64:6e:47:69:76:a1:4d:cb:64:e3:da:45:3a: f7:f5:e4:bc:72:9e:ab:e5:9d:37:c9:6a:e1:dd:c8: 0b:6e:5e:e8:f8:02:e6:6e:36:39:ed:b5:b0:f4:d7: 38:21:c2:2e:2a:b5:e6:3d:54:7b:71:80:f1:ce:57: e9:c2:05:59:e0:4b:ca:4b:29:b2:d6:24:45:bc:9a: 8e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:4E:04:3C:27:07:E8:7B:7A:51:C5:A5:16:01:B9:36:D1:A9:4D:BA X509v3 Authority Key Identifier: keyid:A5:E6:9D:A3:BB:FB:8E:5D:D3:96:48:E6:A4:3E:00:FA:72:3D:E6:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91190B4/BC8C10AE573C11EAB0A4E335C4F9AE02/peado7v7jl3TlkjmpD4A-nI95lg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/peado7v7jl3TlkjmpD4A-nI95lg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91190B4/BC8C10AE573C11EAB0A4E335C4F9AE02/peado7v7jl3TlkjmpD4A-nI95lg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:29:2d:d3:00:a9:6c:27:1d:d6:5a:e8:4d:b5:ca:e9:7c:40: 94:42:76:99:96:25:01:90:40:54:99:b8:a4:c9:02:49:cc:bc: a1:a3:58:4c:1a:d4:f2:24:78:b3:78:45:78:93:c6:60:69:53: 93:d9:3a:65:1a:27:11:56:c5:7c:15:80:f9:73:ee:fc:50:75: 8c:8c:e9:f7:77:c0:2c:ed:20:5e:7a:fb:29:32:21:e2:93:f8: e0:fe:76:48:7a:7d:64:b6:65:31:39:fc:b6:d0:a0:61:39:bd: 39:bc:bb:8e:e8:95:10:4d:20:76:f0:ed:97:c1:56:0f:ff:b6: 70:ac:1c:65:e8:38:d5:51:a9:2e:3c:1f:a0:bd:76:ae:78:94: bd:5e:85:5e:15:cb:28:c4:5c:ef:b5:4f:e4:71:77:b7:ba:49: 99:2f:9e:3d:78:20:46:52:2c:16:89:2d:ce:89:07:08:4f:7b: bf:d8:88:41:5c:90:55:31:05:18:5c:8f:2a:14:c2:d6:ad:ec: d9:68:89:17:3b:7f:c9:99:b2:2d:b8:fe:e0:2f:53:99:10:c6: 5e:a0:c1:82:1e:61:3d:f1:1a:80:4c:e0:9c:84:23:04:d9:79: b7:35:85:4d:a6:33:c1:bf:64:3e:a3:b6:f0:bd:26:d9:86:41: 44:73:a9:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCrUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkwQjQxMTAvBgNVBAUTKEE1RTY5REEzQkJGQjhFNUREMzk2NDhFNkE0M0UwMEZB NzIzREU2NTgwHhcNMjUwNjIwMTkyNzIxWhcNMjUwNjI3MTkyNzIxWjAYMRYwFAYD VQQDEw02ODU1YjYxOS01OGUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyB8dvknmUbW4Zfxg+9qFSgh2DwjTwLeEZZ/mL1qPUQGOn5vYmn46rxammri/ kWPGJROhO8mgi2PIBGGlpKNUZCIfqLYGhoJc4ElOKB4tBKOWGSjk3wiNDso/jBoG w9Fj1AvocxOZzsYp+OYiW3GFyo00Uh3sremOj15/PbjlMmPKuiTriYp/1y9LIowz wP0DQDfg8OldLbdgkstmoCga2RVCGA80IJLxWe+FUCzzkZAdVbW98WRuR2l2oU3L ZOPaRTr39eS8cp6r5Z03yWrh3cgLbl7o+ALmbjY57bWw9Nc4IcIuKrXmPVR7cYDx zlfpwgVZ4EvKSymy1iRFvJqOSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGlOBDwn B+h7elHFpRYBuTbRqU26MB8GA1UdIwQYMBaAFKXmnaO7+45d05ZI5qQ+APpyPeZY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTBCNC9CQzhDMTBBRTU3 M0MxMUVBQjBBNEUzMzVDNEY5QUUwMi9wZWFkbzd2N2psM1Rsa2ptcEQ0QS1uSTk1 bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BlYWRvN3Y3amwzVGxram1wRDRBLW5JOTVsZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTBCNC9CQzhDMTBBRTU3M0MxMUVBQjBBNEUzMzVDNEY5QUUwMi9wZWFkbzd2N2ps M1Rsa2ptcEQ0QS1uSTk1bGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjKS3TAKlsJx3WWuhNtcrpfECUQnaZliUBkEBUmbikyQJJzLyho1hM GtTyJHizeEV4k8ZgaVOT2TplGicRVsV8FYD5c+78UHWMjOn3d8As7SBeevspMiHi k/jg/nZIen1ktmUxOfy20KBhOb05vLuO6JUQTSB28O2XwVYP/7ZwrBxl6DjVUaku PB+gvXaueJS9XoVeFcsoxFzvtU/kcXe3ukmZL549eCBGUiwWiS3OiQcIT3u/2IhB XJBVMQUYXI8qFMLWrezZaIkXO3/JmbItuP7gL1OZEMZeoMGCHmE98RqATOCchCME 2Xm3NYVNpjPBv2Q+o7bwvSbZhkFEc6lt -----END CERTIFICATE-----Generated at Sun Jun 22 01:43:16 2025 by rpki-client