$ rpki-client -vvf rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.mft File: aAYK77v8wH1z211yeLyPJJxX9RU.mft (raw, json) Hash identifier: iLkvrrtAkJ8VaDF152C+k9ZV0ZUjKTFreVLGQ27aVV0= Subject key identifier: A3:B6:8E:3C:E2:83:99:84:08:C5:F2:AE:47:73:72:7E:E6:BF:0B:79 Authority key identifier: 68:06:0A:EF:BB:FC:C0:7D:73:DB:5D:72:78:BC:8F:24:9C:57:F5:15 Certificate issuer: /CN=A912859A/serialNumber=68060AEFBBFCC07D73DB5D7278BC8F249C57F515 Certificate serial: 03A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aAYK77v8wH1z211yeLyPJJxX9RU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.mft Manifest number: 039E Signing time: Fri 13 Jun 2025 00:19:31 +0000 Manifest this update: Fri 13 Jun 2025 00:19:30 +0000 Manifest next update: Fri 20 Jun 2025 00:19:30 +0000 Files and hashes: 1: aAYK77v8wH1z211yeLyPJJxX9RU.crl (hash: ve7Wi3vnseLgf0jwQk2nGLLGHg3UsvmVSAVwcUZ4YRs=) 2: 5B639C667CEB11EDA3D10364C4F9AE02.roa (hash: /k7UGLxYpMRjSXOkhilDp1PbyHK35jDBnjLpEab1SqY=) 3: ADBB651E043411ED9F02B325C4F9AE02.roa (hash: nXP2TkV2xaQf8NtZFSYlzBkdLiCf/hTO1Pti6MrwpUU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.crl rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aAYK77v8wH1z211yeLyPJJxX9RU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 00:19:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 937 (0x3a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912859A, serialNumber=68060AEFBBFCC07D73DB5D7278BC8F249C57F515 Validity Not Before: Jun 13 00:19:30 2025 GMT Not After : Jun 20 00:19:30 2025 GMT Subject: CN=684b6e93-ae5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:59:f1:42:74:d2:f5:73:3d:6f:91:17:b0:27: 96:95:ed:b4:30:11:52:be:9e:75:f5:73:0d:5c:53: 3d:25:09:ca:f9:5d:48:a7:99:57:6f:7f:64:7c:99: 1e:bc:da:d5:01:54:8f:e9:21:b3:c7:b4:44:41:73: db:e1:93:f8:dc:1e:ed:69:eb:11:04:b6:2d:01:c9: 10:87:8d:bb:08:c4:27:9e:a0:b7:39:c6:0e:e8:d0: 32:90:3c:76:8b:85:78:1e:28:98:a6:22:c7:51:32: 32:4e:06:96:db:31:bd:6b:4e:b0:7d:c9:37:cf:24: a3:12:8b:05:85:37:e2:71:0d:63:91:4f:fe:7b:f0: 63:6e:3e:0d:f1:ac:8f:cc:75:2a:fd:52:8d:ad:a4: d3:66:5c:ff:b4:1a:ce:09:aa:f1:a5:31:1f:25:e0: 8f:8d:32:26:03:75:e6:a4:64:c9:20:1f:c8:a0:66: 3a:6b:a1:98:6a:6b:bf:15:77:ec:d3:29:f7:ea:d1: 9f:11:f9:79:62:1e:68:3f:4b:88:61:40:ac:e1:db: 1a:f1:7b:49:26:de:0f:9a:15:7a:7f:00:c3:c9:10: 98:a7:9f:b6:0e:d8:59:9e:c7:c3:b4:f1:36:9c:c2: c0:79:32:a9:43:24:e3:e3:a4:ce:a6:9c:b1:27:e1: 1c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:B6:8E:3C:E2:83:99:84:08:C5:F2:AE:47:73:72:7E:E6:BF:0B:79 X509v3 Authority Key Identifier: keyid:68:06:0A:EF:BB:FC:C0:7D:73:DB:5D:72:78:BC:8F:24:9C:57:F5:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aAYK77v8wH1z211yeLyPJJxX9RU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:08:8a:87:2a:d9:5c:47:92:4c:6a:3c:d3:d4:eb:80:8b:73: 04:1e:11:59:f2:27:80:1e:07:1f:ac:b6:a7:bd:b7:0c:a4:d9: 03:44:7d:60:f0:62:d7:ed:b3:b6:73:8a:e6:a5:9f:b7:e6:5e: 32:0c:5d:c0:70:eb:2d:61:37:1e:f6:89:d5:20:2b:2d:e7:48: ef:c0:83:8d:e9:4d:22:3b:79:a0:cc:40:62:c7:03:a2:3d:1f: c1:de:93:86:31:ac:c0:a7:0c:d3:95:c3:be:ca:f1:1b:e8:0c: 45:c5:08:c6:73:7e:eb:c8:ff:fb:ee:48:83:89:25:38:e6:22: 8d:c8:34:6d:d5:ab:ff:81:4b:d4:bb:52:d1:5f:7b:4d:08:ee: 68:f4:6f:52:cf:e3:75:43:b6:c8:28:49:04:a0:35:c1:52:36: ac:42:e4:83:a1:06:d3:3b:9c:b5:6b:ef:2a:5c:c5:0b:71:ca: 6b:5c:0d:a9:6d:9d:a7:39:f7:d2:2e:52:f8:68:f4:4c:6b:e3: 59:1a:fc:0b:85:11:b5:64:d7:59:11:56:80:c1:55:f0:ab:29: 6a:12:37:4a:93:61:d0:a3:42:07:0a:bb:0b:21:b9:20:c4:73: 6f:4b:00:ab:6b:24:51:90:df:45:8e:9a:66:8b:47:a3:c9:a9: ef:7a:47:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg1OUExMTAvBgNVBAUTKDY4MDYwQUVGQkJGQ0MwN0Q3M0RCNUQ3Mjc4QkM4RjI0 OUM1N0Y1MTUwHhcNMjUwNjEzMDAxOTMwWhcNMjUwNjIwMDAxOTMwWjAYMRYwFAYD VQQDEw02ODRiNmU5My1hZTVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0VnxQnTS9XM9b5EXsCeWle20MBFSvp519XMNXFM9JQnK+V1Ip5lXb39kfJke vNrVAVSP6SGzx7REQXPb4ZP43B7taesRBLYtAckQh427CMQnnqC3OcYO6NAykDx2 i4V4HiiYpiLHUTIyTgaW2zG9a06wfck3zySjEosFhTficQ1jkU/+e/Bjbj4N8ayP zHUq/VKNraTTZlz/tBrOCarxpTEfJeCPjTImA3XmpGTJIB/IoGY6a6GYamu/FXfs 0yn36tGfEfl5Yh5oP0uIYUCs4dsa8XtJJt4PmhV6fwDDyRCYp5+2DthZnsfDtPE2 nMLAeTKpQyTj46TOppyxJ+EcDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKO2jjzi g5mECMXyrkdzcn7mvwt5MB8GA1UdIwQYMBaAFGgGCu+7/MB9c9tdcni8jyScV/UV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODU5QS9CQUNBQjdFQzlE RkUxMUVDQjg3RjUxNDdDNEY5QUUwMi9hQVlLNzd2OHdIMXoyMTF5ZUx5UEpKeFg5 UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FBWUs3N3Y4d0gxejIxMXllTHlQSkp4WDlSVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODU5QS9CQUNBQjdFQzlERkUxMUVDQjg3RjUxNDdDNEY5QUUwMi9hQVlLNzd2OHdI MXoyMTF5ZUx5UEpKeFg5UlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8CIqHKtlcR5JMajzT1OuAi3MEHhFZ8ieAHgcfrLanvbcMpNkDRH1g 8GLX7bO2c4rmpZ+35l4yDF3AcOstYTce9onVICst50jvwION6U0iO3mgzEBixwOi PR/B3pOGMazApwzTlcO+yvEb6AxFxQjGc37ryP/77kiDiSU45iKNyDRt1av/gUvU u1LRX3tNCO5o9G9Sz+N1Q7bIKEkEoDXBUjasQuSDoQbTO5y1a+8qXMULccprXA2p bZ2nOffSLlL4aPRMa+NZGvwLhRG1ZNdZEVaAwVXwqylqEjdKk2HQo0IHCrsLIbkg xHNvSwCrayRRkN9Fjppmi0ejyanvekc4 -----END CERTIFICATE-----Generated at Sat Jun 14 19:36:00 2025 by rpki-client