$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.mft File: AAs7T4iVfN1tN9_2ExONb1SoW3k.mft (raw, json) Hash identifier: F3BHdpmLdiOviwhZNybIjR90OnMvNKeoPRHUtvfDtZQ= Subject key identifier: A1:9E:74:36:85:69:27:67:5E:1B:20:A4:5E:B7:71:8D:17:08:60:C7 Authority key identifier: 00:0B:3B:4F:88:95:7C:DD:6D:37:DF:F6:13:13:8D:6F:54:A8:5B:79 Certificate issuer: /CN=A9149F48/serialNumber=000B3B4F88957CDD6D37DFF613138D6F54A85B79 Certificate serial: 06B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAs7T4iVfN1tN9_2ExONb1SoW3k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.mft Manifest number: 06A9 Signing time: Thu 12 Jun 2025 21:51:08 +0000 Manifest this update: Thu 12 Jun 2025 21:51:08 +0000 Manifest next update: Thu 19 Jun 2025 21:51:08 +0000 Files and hashes: 1: AAs7T4iVfN1tN9_2ExONb1SoW3k.crl (hash: 1I8hGNOqlr+5Ww8RAi3yAH/x4GYg+CkUodmBeEUXXkg=) 2: A1F2E73A19D511EF85D48428C4F9AE02.roa (hash: ZX1QzTNwDgtR4R7k4FRyRV5Z8jQyiy5Ky4ynHhk2quU=) 3: 9BCBA2EA6D6511EB80F7684BC4F9AE02.roa (hash: hdIhzh8K12opQ1D1WK4zXsMffrmcGa0gdrGINvycqaM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.crl rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAs7T4iVfN1tN9_2ExONb1SoW3k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 21:51:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1719 (0x6b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F48, serialNumber=000B3B4F88957CDD6D37DFF613138D6F54A85B79 Validity Not Before: Jun 12 21:51:08 2025 GMT Not After : Jun 19 21:51:08 2025 GMT Subject: CN=684b4bcc-a2d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:86:8a:60:db:88:86:ee:3c:1f:d3:4f:8d:4d: 1f:ac:58:13:6c:6b:bb:c7:27:07:d7:d4:2b:aa:f0: 65:b5:80:76:c0:0a:c3:bf:ae:bf:13:d5:6c:02:97: 68:ec:41:aa:ea:00:c8:10:23:c1:f2:0c:2f:7f:71: 58:1e:c8:17:96:51:f6:a4:6f:ad:fe:ec:a6:4e:04: d8:85:fc:6c:d2:09:4e:c7:aa:20:f7:ac:44:04:6e: 3a:f5:7f:d3:6c:1c:31:33:64:18:e1:03:63:32:be: 42:f8:fd:ec:57:26:23:8d:d4:af:95:b9:db:03:d9: 18:11:b9:79:4f:85:7f:d4:0e:f6:bb:5a:ff:72:b5: 56:7b:fd:3f:eb:cc:73:48:80:66:eb:6d:d5:fa:22: df:08:70:52:22:f5:ee:ec:19:b7:82:fe:61:55:ed: ec:49:45:67:15:1e:4b:b1:fc:78:55:b9:db:c9:3d: e1:64:75:18:99:b3:49:9f:88:3e:34:33:49:84:85: 89:bc:d4:02:40:46:c1:fd:61:8d:83:b0:84:50:bc: 93:e1:6c:56:03:68:b5:e3:45:b4:58:9f:a1:2a:43: 89:11:21:5d:ad:26:42:6a:40:02:11:60:b8:80:7c: 82:1c:b2:69:06:d9:aa:f6:9c:a0:f1:26:52:e6:27: 52:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:9E:74:36:85:69:27:67:5E:1B:20:A4:5E:B7:71:8D:17:08:60:C7 X509v3 Authority Key Identifier: keyid:00:0B:3B:4F:88:95:7C:DD:6D:37:DF:F6:13:13:8D:6F:54:A8:5B:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAs7T4iVfN1tN9_2ExONb1SoW3k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:4c:d9:40:1c:7b:12:0b:c9:2e:19:a4:5f:4c:f1:02:15:b7: ef:5d:64:14:7b:7f:6d:4d:b2:09:f0:7b:49:16:1c:ec:b4:f9: d5:b3:e0:bd:4d:39:99:36:c3:9b:14:32:e8:5f:f0:b7:93:04: 06:64:d8:32:67:6a:ba:4f:8e:83:92:90:63:f2:ec:9e:65:7d: 62:9c:f9:24:99:f1:26:7d:13:69:db:76:47:1a:60:27:4b:2a: e6:48:a1:b2:50:87:88:e0:ea:d4:b7:46:e6:be:ed:34:0c:d6: b2:3f:a8:51:90:2f:19:3b:fc:55:c0:08:1d:16:9b:a0:a7:3a: 82:83:c6:9e:25:e6:9f:c5:77:dd:b4:16:8f:e0:5e:59:cf:e8: 03:91:ef:b4:5c:b1:a0:fa:f1:d3:c5:48:62:a5:14:59:f8:e8: e4:92:7c:63:c9:d2:e2:4f:d6:2e:16:86:f8:2d:01:e4:d9:de: 0c:1f:14:d5:f7:39:07:0b:71:9b:52:7d:90:f3:a5:0e:ad:94: c5:08:5d:ce:e9:bf:cb:36:fe:f5:08:a8:28:01:25:e1:b9:e0: fc:4b:c9:a6:6b:57:a0:82:42:e4:d0:46:9e:f9:f4:72:8d:53: a9:93:97:8b:2d:41:47:41:77:c5:68:62:50:d1:cc:6b:70:33: 7f:c5:61:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGNDgxMTAvBgNVBAUTKDAwMEIzQjRGODg5NTdDREQ2RDM3REZGNjEzMTM4RDZG NTRBODVCNzkwHhcNMjUwNjEyMjE1MTA4WhcNMjUwNjE5MjE1MTA4WjAYMRYwFAYD VQQDEw02ODRiNGJjYy1hMmQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8oaKYNuIhu48H9NPjU0frFgTbGu7xycH19QrqvBltYB2wArDv66/E9VsApdo 7EGq6gDIECPB8gwvf3FYHsgXllH2pG+t/uymTgTYhfxs0glOx6og96xEBG469X/T bBwxM2QY4QNjMr5C+P3sVyYjjdSvlbnbA9kYEbl5T4V/1A72u1r/crVWe/0/68xz SIBm623V+iLfCHBSIvXu7Bm3gv5hVe3sSUVnFR5Lsfx4VbnbyT3hZHUYmbNJn4g+ NDNJhIWJvNQCQEbB/WGNg7CEULyT4WxWA2i140W0WJ+hKkOJESFdrSZCakACEWC4 gHyCHLJpBtmq9pyg8SZS5idSxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKGedDaF aSdnXhsgpF63cY0XCGDHMB8GA1UdIwQYMBaAFAALO0+IlXzdbTff9hMTjW9UqFt5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUY0OC9EOUVGOTlDMDZE NjMxMUVCOURGODE5NDlDNEY5QUUwMi9BQXM3VDRpVmZOMXROOV8yRXhPTmIxU29X M2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FBczdUNGlWZk4xdE45XzJFeE9OYjFTb1czay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUY0OC9EOUVGOTlDMDZENjMxMUVCOURGODE5NDlDNEY5QUUwMi9BQXM3VDRpVmZO MXROOV8yRXhPTmIxU29XM2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4TNlAHHsSC8kuGaRfTPECFbfvXWQUe39tTbIJ8HtJFhzstPnVs+C9 TTmZNsObFDLoX/C3kwQGZNgyZ2q6T46DkpBj8uyeZX1inPkkmfEmfRNp23ZHGmAn SyrmSKGyUIeI4OrUt0bmvu00DNayP6hRkC8ZO/xVwAgdFpugpzqCg8aeJeafxXfd tBaP4F5Zz+gDke+0XLGg+vHTxUhipRRZ+OjkknxjydLiT9YuFob4LQHk2d4MHxTV 9zkHC3GbUn2Q86UOrZTFCF3O6b/LNv71CKgoASXhueD8S8mma1eggkLk0Eae+fRy jVOpk5eLLUFHQXfFaGJQ0cxrcDN/xWEb -----END CERTIFICATE-----Generated at Sat Jun 14 19:23:05 2025 by rpki-client