$ rpki-client -vvf rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.mft File: aq89m8Pfo6ElCCll2P8zuBKPKR8.mft (raw, json) Hash identifier: hVNSBYoUy/cdK1J9vg//x7bRljl9Fyei3tVaXK/zsrk= Subject key identifier: 6B:94:EA:68:27:CC:3A:9E:FE:10:7F:F2:6D:7C:D8:21:27:C5:25:7B Authority key identifier: 6A:AF:3D:9B:C3:DF:A3:A1:25:08:29:65:D8:FF:33:B8:12:8F:29:1F Certificate issuer: /CN=A91476E2/serialNumber=6AAF3D9BC3DFA3A125082965D8FF33B8128F291F Certificate serial: 60 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aq89m8Pfo6ElCCll2P8zuBKPKR8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.mft Manifest number: 5B Signing time: Thu 19 Jun 2025 06:33:12 +0000 Manifest this update: Thu 19 Jun 2025 06:33:12 +0000 Manifest next update: Thu 26 Jun 2025 06:33:12 +0000 Files and hashes: 1: aq89m8Pfo6ElCCll2P8zuBKPKR8.crl (hash: D0zkjOSwseMARnRwcDT2UvBekPmKZLg6CT/RlZapmHk=) 2: 79E40530CB5A11EFA1C64B62C4F9AE02.roa (hash: mbcELb6wZjeLG0BTxotv3DMO41EhI/vPgN4q1POwi8s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.crl rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aq89m8Pfo6ElCCll2P8zuBKPKR8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 06:33:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 96 (0x60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91476E2, serialNumber=6AAF3D9BC3DFA3A125082965D8FF33B8128F291F Validity Not Before: Jun 19 06:33:12 2025 GMT Not After : Jun 26 06:33:12 2025 GMT Subject: CN=6853af28-4da7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:74:1b:ac:b6:61:75:9a:f9:bc:e2:bd:b5:e2: b2:0e:42:fb:cb:f9:39:cd:dd:61:e9:22:30:df:c7: 6c:76:3a:98:dd:b8:af:f9:10:ee:ca:f2:2b:94:31: 4c:75:3c:5c:24:90:33:15:6e:64:16:86:8f:28:ec: 2e:d8:72:26:82:83:90:c0:cc:60:9f:01:e2:35:69: 95:6b:ea:ff:ec:dc:01:ad:c3:01:4a:75:c8:fd:d4: 5f:f5:ee:22:16:ef:85:b3:2d:e3:56:ee:3c:5e:e8: 47:f6:ec:2f:7c:e1:9c:e0:4e:ef:38:93:fd:f1:02: 15:2a:15:be:6d:9c:34:b7:7a:0c:26:f4:c8:47:e2: 71:13:76:88:af:a2:72:19:e6:a2:ab:25:5d:52:7f: 21:39:a5:c4:02:e2:00:e7:ef:ec:20:d9:90:59:da: ea:42:d9:26:1e:3a:d6:3e:ef:c6:c0:62:9e:ca:72: af:ec:99:23:3e:c1:aa:47:2a:34:a8:4b:e5:cd:73: f9:a6:a1:9f:9b:35:21:c5:d3:2f:ce:9f:60:fa:b0: 68:92:44:7b:f1:d4:49:66:6c:32:2f:6d:14:9e:f9: 48:96:93:23:8e:27:8f:68:bb:c4:45:4e:22:46:84: 87:97:97:f2:a2:51:42:f5:0c:22:42:ed:78:99:ae: 83:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:94:EA:68:27:CC:3A:9E:FE:10:7F:F2:6D:7C:D8:21:27:C5:25:7B X509v3 Authority Key Identifier: keyid:6A:AF:3D:9B:C3:DF:A3:A1:25:08:29:65:D8:FF:33:B8:12:8F:29:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aq89m8Pfo6ElCCll2P8zuBKPKR8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:ed:56:10:03:7e:68:97:dd:f2:98:f9:5a:02:45:5e:d8:06: 09:4b:c5:b5:24:82:99:b2:21:d9:01:83:00:87:22:84:5c:aa: 29:1f:cd:0e:5c:17:f7:ee:bf:83:b2:42:c0:04:b8:b9:04:67: 36:18:4f:a7:aa:e4:72:00:3f:2e:50:01:41:b0:c1:89:38:1f: 62:2d:c2:b5:0f:0e:7f:18:77:db:a5:90:b5:26:d5:4c:9f:1f: 29:96:28:0d:f7:9c:1d:a8:f3:38:d2:4f:a4:d5:e4:cd:dd:b5: c1:40:f5:0c:f4:92:f8:69:ae:f0:c4:0b:b3:c5:20:1b:f7:ed: cf:91:d8:ce:35:c8:3d:16:4e:d7:f0:45:91:db:f5:24:7d:b5: c4:57:ca:bd:11:4a:77:72:be:3c:93:f6:91:36:33:9e:4f:06: f6:73:83:d0:ab:ba:e5:4e:36:06:9e:31:37:9e:21:03:02:1b: a7:98:2a:10:df:01:86:2d:c9:6e:33:83:e1:0c:d2:50:27:d1: 4d:64:bc:ad:58:da:89:92:0a:2b:21:37:bc:81:e3:a5:20:34: 7a:ac:43:fe:65:90:10:68:54:30:db:5b:80:43:19:34:eb:e8: f4:dc:7d:19:ad:9a:ed:2a:45:52:14:2e:31:ad:87:31:b3:e9: bb:80:35:e6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NzZFMjExMC8GA1UEBRMoNkFBRjNEOUJDM0RGQTNBMTI1MDgyOTY1RDhGRjMzQjgx MjhGMjkxRjAeFw0yNTA2MTkwNjMzMTJaFw0yNTA2MjYwNjMzMTJaMBgxFjAUBgNV BAMTDTY4NTNhZjI4LTRkYTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRdBustmF1mvm84r214rIOQvvL+TnN3WHpIjDfx2x2OpjduK/5EO7K8iuUMUx1 PFwkkDMVbmQWho8o7C7YciaCg5DAzGCfAeI1aZVr6v/s3AGtwwFKdcj91F/17iIW 74WzLeNW7jxe6Ef27C984ZzgTu84k/3xAhUqFb5tnDS3egwm9MhH4nETdoivonIZ 5qKrJV1SfyE5pcQC4gDn7+wg2ZBZ2upC2SYeOtY+78bAYp7Kcq/smSM+wapHKjSo S+XNc/mmoZ+bNSHF0y/On2D6sGiSRHvx1ElmbDIvbRSe+UiWkyOOJ49ou8RFTiJG hIeXl/KiUUL1DCJC7XiZroPnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUa5TqaCfM Op7+EH/ybXzYISfFJXswHwYDVR0jBBgwFoAUaq89m8Pfo6ElCCll2P8zuBKPKR8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3NkUyLzNCNTQxRjIwQ0Iz RDExRUY4NzAzRjc1QUM0RjlBRTAyL2FxODltOFBmbzZFbENDbGwyUDh6dUJLUEtS OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvYXE4OW04UGZvNkVsQ0NsbDJQOHp1QktQS1I4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3 NkUyLzNCNTQxRjIwQ0IzRDExRUY4NzAzRjc1QUM0RjlBRTAyL2FxODltOFBmbzZF bENDbGwyUDh6dUJLUEtSOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEPtVhADfmiX3fKY+VoCRV7YBglLxbUkgpmyIdkBgwCHIoRcqikfzQ5c F/fuv4OyQsAEuLkEZzYYT6eq5HIAPy5QAUGwwYk4H2ItwrUPDn8Yd9ulkLUm1Uyf HymWKA33nB2o8zjST6TV5M3dtcFA9Qz0kvhprvDEC7PFIBv37c+R2M41yD0WTtfw RZHb9SR9tcRXyr0RSndyvjyT9pE2M55PBvZzg9CruuVONgaeMTeeIQMCG6eYKhDf AYYtyW4zg+EM0lAn0U1kvK1Y2omSCishN7yB46UgNHqsQ/5lkBBoVDDbW4BDGTTr 6PTcfRmtmu0qRVIULjGthzGz6buANeY= -----END CERTIFICATE-----Generated at Fri Jun 20 06:11:02 2025 by rpki-client