$ rpki-client -vvf rpki.apnic.net/member_repository/A9122B85/90E97D7089BE11EEBCF29A55C4F9AE02/aepi4_A-R8A3Gb7bFrTKJzuLMQM.mft File: aepi4_A-R8A3Gb7bFrTKJzuLMQM.mft (raw, json) Hash identifier: aFpksqhO4+QkBJIXewh2q8GfyWCk17atvQS+uChsTMM= Subject key identifier: 3E:E2:71:DA:51:C3:B5:9A:2E:22:E1:76:15:D8:0F:E8:91:50:38:F4 Authority key identifier: 69:EA:62:E3:F0:3E:47:C0:37:19:BE:DB:16:B4:CA:27:3B:8B:31:03 Certificate issuer: /CN=A9122B85/serialNumber=69EA62E3F03E47C03719BEDB16B4CA273B8B3103 Certificate serial: 012C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aepi4_A-R8A3Gb7bFrTKJzuLMQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122B85/90E97D7089BE11EEBCF29A55C4F9AE02/aepi4_A-R8A3Gb7bFrTKJzuLMQM.mft Manifest number: 0129 Signing time: Thu 19 Jun 2025 04:03:09 +0000 Manifest this update: Thu 19 Jun 2025 04:03:08 +0000 Manifest next update: Thu 26 Jun 2025 04:03:08 +0000 Files and hashes: 1: aepi4_A-R8A3Gb7bFrTKJzuLMQM.crl (hash: YCPQvpRdUQTXw5ui6C8md1IZjfqQeDNFNfCOzcfmAk4=) 2: 0287BD068A3D11EEADFABF09C4F9AE02.roa (hash: zthvVJ0xeL5J9gMyWu/Onbxvo/kp68K5vsS8CZ3Wqh8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122B85/90E97D7089BE11EEBCF29A55C4F9AE02/aepi4_A-R8A3Gb7bFrTKJzuLMQM.crl rsync://rpki.apnic.net/member_repository/A9122B85/90E97D7089BE11EEBCF29A55C4F9AE02/aepi4_A-R8A3Gb7bFrTKJzuLMQM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aepi4_A-R8A3Gb7bFrTKJzuLMQM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 04:03:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 300 (0x12c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122B85, serialNumber=69EA62E3F03E47C03719BEDB16B4CA273B8B3103 Validity Not Before: Jun 19 04:03:08 2025 GMT Not After : Jun 26 04:03:08 2025 GMT Subject: CN=68538bfc-f32a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:17:19:4b:c2:6e:ba:12:c4:8f:f1:32:e6:f4: 4c:d9:0e:bd:d3:ba:15:e1:cc:76:f6:77:54:b0:5f: 41:ec:25:d0:b1:3c:b5:c1:14:7f:61:bb:45:72:e1: fa:54:d4:9c:83:1b:12:a3:1e:16:aa:15:24:38:da: ac:e8:9b:c3:eb:90:76:7d:a2:97:cf:0e:9c:64:50: 8d:14:bc:0d:6f:50:07:33:08:a7:d3:90:1a:a6:12: d0:bd:6e:da:5c:17:f4:c0:e9:54:98:b1:c1:19:1d: 40:db:1a:2f:ed:ce:57:eb:b3:75:22:12:7f:f9:8f: ec:7f:ad:5d:fb:a4:f9:97:4e:e8:4b:dc:52:50:d4: bd:71:40:84:0f:e5:1f:78:8a:28:0b:fd:76:1e:7b: 8d:df:5c:d3:b7:89:b7:0f:b7:8e:03:aa:84:f1:7e: e0:1d:0b:a6:e8:c7:6c:e6:2c:85:84:88:af:82:6c: 8b:f2:16:a0:27:bd:02:90:34:28:6e:33:c3:56:2c: 16:76:43:21:c9:be:c6:37:d0:27:54:ec:32:69:b7: e5:6e:e9:e3:da:25:5b:27:f3:8c:8f:c0:9d:10:5f: 28:a3:44:0f:3b:6c:06:e1:02:d3:2b:b0:a3:57:3c: 87:30:4c:78:26:33:28:d1:13:ba:08:2e:8e:4b:e0: f2:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:E2:71:DA:51:C3:B5:9A:2E:22:E1:76:15:D8:0F:E8:91:50:38:F4 X509v3 Authority Key Identifier: keyid:69:EA:62:E3:F0:3E:47:C0:37:19:BE:DB:16:B4:CA:27:3B:8B:31:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122B85/90E97D7089BE11EEBCF29A55C4F9AE02/aepi4_A-R8A3Gb7bFrTKJzuLMQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aepi4_A-R8A3Gb7bFrTKJzuLMQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122B85/90E97D7089BE11EEBCF29A55C4F9AE02/aepi4_A-R8A3Gb7bFrTKJzuLMQM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:1b:0a:4c:24:a5:07:57:5c:33:df:d6:43:b8:3b:ef:95:5f: b3:e1:a2:8d:47:bb:31:50:e2:f3:79:10:6e:9a:de:36:f4:7b: 66:c9:ca:ac:9f:56:ca:dd:b9:0c:a4:bc:40:83:d9:39:b6:bc: 62:4f:ce:2d:b4:6c:f4:08:02:25:a9:70:56:86:c7:9b:09:37: 6f:0f:64:e1:8f:bd:3c:ca:c4:9f:3a:ba:a9:a2:b9:01:85:03: 2b:97:d5:d1:51:e2:47:3c:b7:5f:2e:d5:de:6d:ba:40:0c:e7: bb:25:a0:db:1e:89:83:1e:c6:68:1e:98:80:b1:90:2b:9a:6f: 74:ea:0a:1e:06:ac:92:88:ba:7f:f4:45:cf:0c:75:c7:88:38: 47:9a:96:96:3c:64:ac:32:0b:f3:dd:8c:ed:55:60:3d:6e:a9: b6:48:d4:ef:06:67:29:7c:5a:0f:f1:cb:b7:36:e0:28:cd:d0: 29:da:9d:41:5a:66:2d:9a:82:8e:79:15:16:80:eb:18:10:32: 75:58:8c:5c:ba:1b:c1:e6:72:4f:1f:7e:11:0f:7e:7d:9a:1c: b0:b9:92:f7:40:8c:01:db:fc:11:77:c0:dd:09:67:c6:ff:52: dd:50:24:0e:0e:90:74:17:d3:bc:b8:27:79:7b:68:64:4c:e1: 1d:13:f7:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJCODUxMTAvBgNVBAUTKDY5RUE2MkUzRjAzRTQ3QzAzNzE5QkVEQjE2QjRDQTI3 M0I4QjMxMDMwHhcNMjUwNjE5MDQwMzA4WhcNMjUwNjI2MDQwMzA4WjAYMRYwFAYD VQQDEw02ODUzOGJmYy1mMzJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxxcZS8JuuhLEj/Ey5vRM2Q6907oV4cx29ndUsF9B7CXQsTy1wRR/YbtFcuH6 VNScgxsSox4WqhUkONqs6JvD65B2faKXzw6cZFCNFLwNb1AHMwin05AaphLQvW7a XBf0wOlUmLHBGR1A2xov7c5X67N1IhJ/+Y/sf61d+6T5l07oS9xSUNS9cUCED+Uf eIooC/12HnuN31zTt4m3D7eOA6qE8X7gHQum6Mds5iyFhIivgmyL8hagJ70CkDQo bjPDViwWdkMhyb7GN9AnVOwyabflbunj2iVbJ/OMj8CdEF8oo0QPO2wG4QLTK7Cj VzyHMEx4JjMo0RO6CC6OS+DyJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD7icdpR w7WaLiLhdhXYD+iRUDj0MB8GA1UdIwQYMBaAFGnqYuPwPkfANxm+2xa0yic7izED MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkI4NS85MEU5N0Q3MDg5 QkUxMUVFQkNGMjlBNTVDNEY5QUUwMi9hZXBpNF9BLVI4QTNHYjdiRnJUS0p6dUxN UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FlcGk0X0EtUjhBM0diN2JGclRLSnp1TE1RTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkI4NS85MEU5N0Q3MDg5QkUxMUVFQkNGMjlBNTVDNEY5QUUwMi9hZXBpNF9BLVI4 QTNHYjdiRnJUS0p6dUxNUU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPGwpMJKUHV1wz39ZDuDvvlV+z4aKNR7sxUOLzeRBumt429Htmycqs n1bK3bkMpLxAg9k5trxiT84ttGz0CAIlqXBWhsebCTdvD2Thj708ysSfOrqporkB hQMrl9XRUeJHPLdfLtXebbpADOe7JaDbHomDHsZoHpiAsZArmm906goeBqySiLp/ 9EXPDHXHiDhHmpaWPGSsMgvz3YztVWA9bqm2SNTvBmcpfFoP8cu3NuAozdAp2p1B WmYtmoKOeRUWgOsYEDJ1WIxcuhvB5nJPH34RD359mhywuZL3QIwB2/wRd8DdCWfG /1LdUCQODpB0F9O8uCd5e2hkTOEdE/fL -----END CERTIFICATE-----Generated at Fri Jun 20 12:10:29 2025 by rpki-client