$ rpki-client -vvf rpki.apnic.net/member_repository/A91431A6/44D890CA8EC511EB97B12074C4F9AE02/aWYanwY1V84rVDewGIk9fZ_dvtA.mft File: aWYanwY1V84rVDewGIk9fZ_dvtA.mft (raw, json) Hash identifier: UzfAPz1gDbNYtKmNVfzLajd9NnFKkUwoxj9jSgGgchI= Subject key identifier: FD:15:44:BD:42:8F:FD:F5:6C:23:DD:4E:48:C7:CD:F7:A1:83:DE:1B Authority key identifier: 69:66:1A:9F:06:35:57:CE:2B:54:37:B0:18:89:3D:7D:9F:DD:BE:D0 Certificate issuer: /CN=A91431A6/serialNumber=69661A9F063557CE2B5437B018893D7D9FDDBED0 Certificate serial: 0653 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWYanwY1V84rVDewGIk9fZ_dvtA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91431A6/44D890CA8EC511EB97B12074C4F9AE02/aWYanwY1V84rVDewGIk9fZ_dvtA.mft Manifest number: 064C Signing time: Sat 14 Jun 2025 22:18:55 +0000 Manifest this update: Sat 14 Jun 2025 22:18:55 +0000 Manifest next update: Sat 21 Jun 2025 22:18:55 +0000 Files and hashes: 1: aWYanwY1V84rVDewGIk9fZ_dvtA.crl (hash: /9/j6Ud0sRC2d7MB1lYxZtzms62/5eRSn5fF34k+Ymw=) 2: DDCD4C168EC611EBAB7F3476C4F9AE02.roa (hash: vYh53kbQx56u84oKA/xd3ROknCRDM7pHTjRvm9U4uGU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91431A6/44D890CA8EC511EB97B12074C4F9AE02/aWYanwY1V84rVDewGIk9fZ_dvtA.crl rsync://rpki.apnic.net/member_repository/A91431A6/44D890CA8EC511EB97B12074C4F9AE02/aWYanwY1V84rVDewGIk9fZ_dvtA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWYanwY1V84rVDewGIk9fZ_dvtA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 22:18:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1619 (0x653) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91431A6, serialNumber=69661A9F063557CE2B5437B018893D7D9FDDBED0 Validity Not Before: Jun 14 22:18:55 2025 GMT Not After : Jun 21 22:18:55 2025 GMT Subject: CN=684df54f-8162 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a5:2d:48:b6:41:63:2d:9c:61:0e:76:4a:ec: 9a:b6:f3:00:eb:7f:4e:ff:62:da:82:8d:c8:c1:cd: 96:31:de:8c:8d:dd:63:99:a8:26:73:cc:b1:f1:f6: 7a:7d:f3:b8:94:d8:b0:38:ed:a9:76:ee:95:73:c9: 29:57:b9:e2:42:a3:e3:76:04:90:74:48:10:42:99: c4:6a:9c:2a:84:be:84:61:03:a5:1c:47:0d:26:9d: 41:96:69:4d:21:6a:8f:d6:42:20:7d:2d:35:35:4a: 05:49:0d:ee:d5:20:0d:c0:b7:05:b5:75:4a:71:8d: 3b:8c:1f:ac:f1:23:d5:01:49:37:26:bb:35:9c:0b: 86:66:6f:9c:52:6d:ce:b4:b3:05:7d:37:4a:f1:8d: bc:63:07:6d:c5:bd:66:b6:73:d8:e7:4a:25:59:43: 84:bb:b8:47:36:66:66:9f:f1:30:46:f5:19:af:b3: db:37:45:af:a6:64:32:b7:26:55:50:ce:68:cf:fb: 94:12:67:6a:98:d2:c2:e1:f2:ae:33:ac:25:81:45: a8:db:ac:a4:35:70:30:fd:d4:49:84:f7:5c:3c:f6: 2f:50:36:1d:b4:49:84:07:d5:77:80:da:2e:e5:99: 10:6f:4c:70:e9:b9:00:0c:e1:38:7e:88:e1:68:c6: c9:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:15:44:BD:42:8F:FD:F5:6C:23:DD:4E:48:C7:CD:F7:A1:83:DE:1B X509v3 Authority Key Identifier: keyid:69:66:1A:9F:06:35:57:CE:2B:54:37:B0:18:89:3D:7D:9F:DD:BE:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91431A6/44D890CA8EC511EB97B12074C4F9AE02/aWYanwY1V84rVDewGIk9fZ_dvtA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWYanwY1V84rVDewGIk9fZ_dvtA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91431A6/44D890CA8EC511EB97B12074C4F9AE02/aWYanwY1V84rVDewGIk9fZ_dvtA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:bd:56:10:6a:65:6f:b6:cd:ac:ea:cc:2b:5d:ae:06:d2:0a: 1e:43:c9:38:94:b9:55:32:48:d7:72:ec:4e:c1:40:09:3e:d3: 96:c5:e4:40:f3:92:a1:25:cc:d8:ea:8b:e7:91:0b:10:ff:6c: 6d:fe:46:40:b3:52:ef:98:87:f6:30:da:84:c7:20:a4:d6:0d: 3a:38:74:3e:36:01:81:b9:25:04:0c:0b:c9:de:a6:f0:65:77: 1b:96:f5:c9:45:8c:89:d4:0c:0d:b9:7b:44:ad:02:fe:44:0b: bd:6a:89:8b:eb:6c:3a:47:e0:e4:2f:3d:de:f7:5a:14:e1:a5: a8:7d:c6:c2:c6:f6:98:f7:55:53:a1:2e:3e:0c:fd:9a:1e:d5: d0:b9:a5:04:9d:48:e0:88:bd:44:d4:a1:96:a5:d7:6c:4e:e0: 20:90:1e:c4:50:01:50:7c:3a:48:48:41:a3:fc:ca:92:6b:ce: 3b:bb:c8:c9:36:aa:ca:1c:a5:67:45:ce:47:76:e4:dd:e7:0d: aa:41:6c:72:b4:3d:57:f3:2b:bc:a5:12:3c:a8:21:de:ef:d9: 6a:dd:ba:62:07:7c:7f:20:ad:5f:4f:dd:db:81:0e:0c:98:d2: 3c:37:da:e9:64:4a:d0:29:ed:ea:29:6d:6c:18:4a:c3:44:4b: 03:31:74:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDMxQTYxMTAvBgNVBAUTKDY5NjYxQTlGMDYzNTU3Q0UyQjU0MzdCMDE4ODkzRDdE OUZEREJFRDAwHhcNMjUwNjE0MjIxODU1WhcNMjUwNjIxMjIxODU1WjAYMRYwFAYD VQQDEw02ODRkZjU0Zi04MTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt6UtSLZBYy2cYQ52SuyatvMA639O/2Lago3Iwc2WMd6Mjd1jmagmc8yx8fZ6 ffO4lNiwOO2pdu6Vc8kpV7niQqPjdgSQdEgQQpnEapwqhL6EYQOlHEcNJp1BlmlN IWqP1kIgfS01NUoFSQ3u1SANwLcFtXVKcY07jB+s8SPVAUk3Jrs1nAuGZm+cUm3O tLMFfTdK8Y28Ywdtxb1mtnPY50olWUOEu7hHNmZmn/EwRvUZr7PbN0WvpmQytyZV UM5oz/uUEmdqmNLC4fKuM6wlgUWo26ykNXAw/dRJhPdcPPYvUDYdtEmEB9V3gNou 5ZkQb0xw6bkADOE4fojhaMbJWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP0VRL1C j/31bCPdTkjHzfehg94bMB8GA1UdIwQYMBaAFGlmGp8GNVfOK1Q3sBiJPX2f3b7Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzFBNi80NEQ4OTBDQThF QzUxMUVCOTdCMTIwNzRDNEY5QUUwMi9hV1lhbndZMVY4NHJWRGV3R0lrOWZaX2R2 dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FXWWFud1kxVjg0clZEZXdHSWs5ZlpfZHZ0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MzFBNi80NEQ4OTBDQThFQzUxMUVCOTdCMTIwNzRDNEY5QUUwMi9hV1lhbndZMVY4 NHJWRGV3R0lrOWZaX2R2dEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxvVYQamVvts2s6swrXa4G0goeQ8k4lLlVMkjXcuxOwUAJPtOWxeRA 85KhJczY6ovnkQsQ/2xt/kZAs1LvmIf2MNqExyCk1g06OHQ+NgGBuSUEDAvJ3qbw ZXcblvXJRYyJ1AwNuXtErQL+RAu9aomL62w6R+DkLz3e91oU4aWofcbCxvaY91VT oS4+DP2aHtXQuaUEnUjgiL1E1KGWpddsTuAgkB7EUAFQfDpISEGj/MqSa847u8jJ NqrKHKVnRc5HduTd5w2qQWxytD1X8yu8pRI8qCHe79lq3bpiB3x/IK1fT93bgQ4M mNI8N9rpZErQKe3qKW1sGErDREsDMXTv -----END CERTIFICATE-----Generated at Sun Jun 15 09:29:21 2025 by rpki-client