$ rpki-client -vvf rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/Aonh4IK22hq6VVKEDAyrAsKjt04.mft File: Aonh4IK22hq6VVKEDAyrAsKjt04.mft (raw, json) Hash identifier: gvIdfCLnTgaQm7GjNCFInulWOFHDRl8QU+zTSQxpMlA= Subject key identifier: CD:F6:0E:78:61:18:5E:65:2C:E2:D9:21:98:11:ED:F9:4E:70:1E:C0 Authority key identifier: 02:89:E1:E0:82:B6:DA:1A:BA:55:52:84:0C:0C:AB:02:C2:A3:B7:4E Certificate issuer: /CN=A9144C70/serialNumber=0289E1E082B6DA1ABA5552840C0CAB02C2A3B74E Certificate serial: 79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aonh4IK22hq6VVKEDAyrAsKjt04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/Aonh4IK22hq6VVKEDAyrAsKjt04.mft Manifest number: 03F7 Signing time: Sun 15 Jun 2025 00:36:30 +0000 Manifest this update: Sun 15 Jun 2025 00:36:29 +0000 Manifest next update: Sun 22 Jun 2025 00:36:29 +0000 Files and hashes: 1: Aonh4IK22hq6VVKEDAyrAsKjt04.crl (hash: u/tEScs+qcKlItOKBWISoTPEf6iYwFqnrJ87r1a74rk=) 2: F23B6474DCCB11EFA04C156DC4F9AE02.roa (hash: g65ejbm+l69Ptue1On4uxEa8cqbfVm8kgqBG4BRL7rA=) 3: B250F522DCCB11EFB54CD16CC4F9AE02.roa (hash: 9O93tqLrMpLEnAApshkrc2rnOUZiNN8MfYKvWhlISq8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/Aonh4IK22hq6VVKEDAyrAsKjt04.crl rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/Aonh4IK22hq6VVKEDAyrAsKjt04.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aonh4IK22hq6VVKEDAyrAsKjt04.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 00:36:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 121 (0x79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144C70, serialNumber=0289E1E082B6DA1ABA5552840C0CAB02C2A3B74E Validity Not Before: Jun 15 00:36:29 2025 GMT Not After : Jun 22 00:36:29 2025 GMT Subject: CN=684e158e-723b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:5d:62:69:91:66:40:fb:b3:89:c8:c9:e0:5d: 8c:cf:59:0f:aa:95:7c:9b:c9:15:7a:51:41:5b:03: 0a:62:b6:dc:d5:8b:d4:0e:b0:e5:f0:68:97:12:f8: 0c:0f:b3:9d:0f:ae:fc:d5:be:d4:b9:f8:f1:56:97: 34:ea:36:66:7b:cd:f3:84:3d:cb:e4:f7:ea:b0:5f: 5f:85:d8:90:b5:33:5c:73:23:d5:0d:94:09:db:c5: d7:6e:6a:82:2a:ac:2b:ec:20:cc:ae:21:82:97:39: 00:d7:c9:c1:09:82:f3:62:e7:09:f8:f7:1f:eb:5c: 85:93:78:d6:3d:d0:d0:cf:c3:ec:56:07:f8:86:04: e8:a5:92:be:67:7f:0b:2e:18:e4:67:77:27:7e:d3: 14:89:39:76:9a:32:01:35:14:a5:0f:fb:10:b4:ef: 7d:57:0b:b7:32:ff:1f:30:63:b4:c9:38:5e:d1:e0: d5:ce:eb:00:8b:f3:ce:b2:84:d8:34:92:c6:cd:c3: 0c:86:7c:00:24:91:c9:b1:1b:f1:63:4a:8e:6d:f8: 78:7a:08:77:af:ac:d7:25:e7:fd:90:fe:4d:f7:0f: ab:87:72:ef:b2:5f:2b:65:2a:44:54:8a:ce:71:96: b3:9d:eb:2a:45:a7:11:a5:f9:15:c3:9f:29:65:0b: cc:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:F6:0E:78:61:18:5E:65:2C:E2:D9:21:98:11:ED:F9:4E:70:1E:C0 X509v3 Authority Key Identifier: keyid:02:89:E1:E0:82:B6:DA:1A:BA:55:52:84:0C:0C:AB:02:C2:A3:B7:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/Aonh4IK22hq6VVKEDAyrAsKjt04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aonh4IK22hq6VVKEDAyrAsKjt04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/Aonh4IK22hq6VVKEDAyrAsKjt04.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:f3:af:c9:bb:c7:b2:e7:0c:11:5b:0d:c9:e6:06:ec:b0:2f: 6a:d6:16:19:8b:59:e5:fb:86:96:1f:f0:f8:77:f1:22:94:2c: 2a:5d:a8:0c:ae:0d:e7:fb:f3:1c:0b:f2:ef:db:ed:3c:b7:06: d1:e7:4f:b7:26:c9:48:75:2f:07:40:ce:d0:d8:c9:cb:b1:89: 3c:97:01:19:e8:18:4d:f8:73:d1:cb:fd:63:0e:ce:a1:0a:c6: 3d:8e:1d:dd:d9:33:b3:53:13:93:27:aa:e5:93:65:cc:89:b5: ec:48:ca:cd:bf:4e:33:a8:74:a7:d0:47:d5:9e:b2:c3:5e:55: 95:e4:35:c3:94:92:8a:de:ae:82:44:69:68:1e:95:ac:76:b5: 71:4d:9c:f7:61:cd:3d:e9:7c:44:17:3e:16:bd:10:27:34:5d: 09:75:0d:9c:99:54:0f:36:8f:49:11:48:3e:59:8a:2c:f8:ec: c9:b5:c6:09:bf:cf:c3:96:16:11:29:9e:5d:23:31:58:1b:83: a9:e9:6b:30:cb:ee:33:a7:7b:b0:09:b8:24:38:ad:e2:7f:de: ae:a2:31:78:db:67:38:55:05:f9:9d:7b:1c:64:2e:ac:c5:df: b4:0a:c5:5b:0b:9a:e8:ad:41:b1:6e:ed:e9:03:d6:af:58:90: 62:76:86:3c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NEM3MDExMC8GA1UEBRMoMDI4OUUxRTA4MkI2REExQUJBNTU1Mjg0MEMwQ0FCMDJD MkEzQjc0RTAeFw0yNTA2MTUwMDM2MjlaFw0yNTA2MjIwMDM2MjlaMBgxFjAUBgNV BAMTDTY4NGUxNThlLTcyM2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDcXWJpkWZA+7OJyMngXYzPWQ+qlXybyRV6UUFbAwpittzVi9QOsOXwaJcS+AwP s50PrvzVvtS5+PFWlzTqNmZ7zfOEPcvk9+qwX1+F2JC1M1xzI9UNlAnbxdduaoIq rCvsIMyuIYKXOQDXycEJgvNi5wn49x/rXIWTeNY90NDPw+xWB/iGBOilkr5nfwsu GORndyd+0xSJOXaaMgE1FKUP+xC0731XC7cy/x8wY7TJOF7R4NXO6wCL886yhNg0 ksbNwwyGfAAkkcmxG/FjSo5t+Hh6CHevrNcl5/2Q/k33D6uHcu+yXytlKkRUis5x lrOd6ypFpxGl+RXDnyllC8wnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzfYOeGEY XmUs4tkhmBHt+U5wHsAwHwYDVR0jBBgwFoAUAonh4IK22hq6VVKEDAyrAsKjt04w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0QzcwLzgyQkM4NEVFQUM2 NzExRUNCNzVDREEyNEM0RjlBRTAyL0Fvbmg0SUsyMmhxNlZWS0VEQXlyQXNLanQw NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQW9uaDRJSzIyaHE2VlZLRURBeXJBc0tqdDA0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0 QzcwLzgyQkM4NEVFQUM2NzExRUNCNzVDREEyNEM0RjlBRTAyL0Fvbmg0SUsyMmhx NlZWS0VEQXlyQXNLanQwNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA3zr8m7x7LnDBFbDcnmBuywL2rWFhmLWeX7hpYf8Ph38SKULCpdqAyu Def78xwL8u/b7Ty3BtHnT7cmyUh1LwdAztDYycuxiTyXARnoGE34c9HL/WMOzqEK xj2OHd3ZM7NTE5MnquWTZcyJtexIys2/TjOodKfQR9WessNeVZXkNcOUkoreroJE aWgelax2tXFNnPdhzT3pfEQXPha9ECc0XQl1DZyZVA82j0kRSD5Ziiz47Mm1xgm/ z8OWFhEpnl0jMVgbg6npazDL7jOne7AJuCQ4reJ/3q6iMXjbZzhVBfmdexxkLqzF 37QKxVsLmuitQbFu7ekD1q9YkGJ2hjw= -----END CERTIFICATE-----Generated at Sun Jun 15 09:32:53 2025 by rpki-client