$ rpki-client -vvf rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft File: Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft (raw, json) Hash identifier: J2FxPC/f2a6pDxBW3qp6gTfoTRfvcTX2TKXYchBaiVU= Subject key identifier: 61:4B:DA:2F:70:5E:2F:14:62:29:9D:E4:C7:1A:8B:5A:96:AC:44:2A Authority key identifier: 02:AE:84:F6:11:B7:E8:2F:D7:D6:FF:8F:45:2D:87:25:EF:48:90:88 Certificate issuer: /CN=A91642A0/serialNumber=02AE84F611B7E82FD7D6FF8F452D8725EF489088 Certificate serial: 0CDD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aq6E9hG36C_X1v-PRS2HJe9IkIg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft Manifest number: 0CB5 Signing time: Mon 16 Jun 2025 18:09:46 +0000 Manifest this update: Mon 16 Jun 2025 18:09:45 +0000 Manifest next update: Mon 23 Jun 2025 18:09:45 +0000 Files and hashes: 1: Aq6E9hG36C_X1v-PRS2HJe9IkIg.crl (hash: sTHAQkOzLLUjjox/OlliAX2NhOgSSt1WlGTzX7TZz04=) 2: B0B70006B19211EC9EAAD44EC4F9AE02.roa (hash: iAcBe9JsIgejkunApnFizR8kcd9hvKFDEaA+fu50sDE=) 3: AFB0FFCCB19211EC9EAAD44EC4F9AE02.roa (hash: I0QziAIo3oazYojvFNhbt9C/zSWf1Md92KB9f4lH27c=) 4: 0EF0E842839E11EEA1892A12C4F9AE02.roa (hash: CTDwhtj/lvv2X5UcpQAPIBaNmpDgoQygeS9l2k6Fjz0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.crl rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aq6E9hG36C_X1v-PRS2HJe9IkIg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 18:09:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3293 (0xcdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91642A0, serialNumber=02AE84F611B7E82FD7D6FF8F452D8725EF489088 Validity Not Before: Jun 16 18:09:45 2025 GMT Not After : Jun 23 18:09:45 2025 GMT Subject: CN=68505dea-102e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:80:03:76:40:28:54:17:16:31:44:a6:0a:af: bd:04:05:5e:e7:b3:0a:a4:14:d7:8d:fd:80:2a:21: 63:f8:45:37:86:b6:30:79:fe:b7:47:d7:7b:8d:ed: 30:29:58:b2:a8:ac:f3:3a:11:d3:7a:f4:46:77:35: bb:29:c6:d8:8d:db:a1:e5:43:07:e7:3b:dc:b5:5e: c1:0d:cb:41:4d:ee:c2:31:07:ae:ef:a9:9a:d6:fb: 9b:41:ff:e8:bd:1a:f5:62:2e:3e:f0:17:67:23:ea: 53:8f:32:08:3b:9f:2a:33:e2:0a:da:62:be:12:09: 0f:cb:9c:24:cd:6e:53:00:a9:e8:33:57:2c:20:85: 05:fe:e2:78:d7:4e:b6:40:4c:81:fe:a7:61:d0:02: 18:a7:80:b7:e1:39:64:56:ea:c3:9c:5e:f8:fa:94: 01:c7:27:ea:1f:c6:45:7e:1f:53:fa:d3:39:9c:51: 0c:b8:d0:b9:f7:df:98:f8:d7:bb:c2:e7:49:cb:95: 49:b0:5b:81:ef:00:e5:e9:d4:a6:ce:f1:f1:f3:7e: f4:dc:0b:21:66:07:7e:36:8d:0e:b0:32:12:e4:24: 41:68:ba:e6:ab:1c:6d:3b:96:75:ae:d8:2c:ef:1f: 23:3e:46:55:f5:73:8d:56:49:a6:df:c2:11:d4:73: d3:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:4B:DA:2F:70:5E:2F:14:62:29:9D:E4:C7:1A:8B:5A:96:AC:44:2A X509v3 Authority Key Identifier: keyid:02:AE:84:F6:11:B7:E8:2F:D7:D6:FF:8F:45:2D:87:25:EF:48:90:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aq6E9hG36C_X1v-PRS2HJe9IkIg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:0f:c6:0f:a7:c9:3d:31:28:98:4c:c3:f1:b5:16:73:77:5e: 5a:f2:72:08:62:ef:43:a3:5c:01:2e:6b:bf:08:d9:d2:e0:57: 4a:e2:d8:3e:be:f9:c8:b4:cd:12:78:aa:25:4c:4f:d3:89:2f: 9d:e6:78:d8:2e:31:9f:ef:cb:08:1d:96:d5:80:a9:0c:4d:5c: c3:1d:11:e7:e9:83:40:d1:bb:4d:07:37:ad:1c:62:a8:0d:55: 01:b7:bd:69:7e:61:f9:55:a4:e3:c6:d1:bd:60:77:be:2f:3b: ee:b5:9d:3f:b6:3e:94:17:c2:cf:d6:ea:3c:ac:df:a4:b5:45: 56:2d:d4:01:54:1b:1c:eb:21:1d:f1:ed:d4:18:e1:31:67:43: a6:7f:a1:5d:d3:9c:71:cf:c6:c4:54:c6:f1:92:28:dc:8f:7a: 49:ff:20:e7:ba:da:83:35:ff:28:fa:cb:b0:f8:75:fe:47:cd: 0b:87:93:cb:c6:15:ef:8d:0e:cd:b6:c8:27:81:21:c8:d8:e9: 8b:25:d2:b0:5b:f9:12:15:d5:3a:f1:2e:77:6f:e9:f8:b0:52: 3c:d1:91:7d:8c:51:0b:47:8e:1c:4d:c3:2b:ab:c2:30:e5:5a: c1:c9:c5:bd:9b:24:76:57:7d:00:06:91:ae:6b:f8:cc:26:05: 99:4d:fe:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQyQTAxMTAvBgNVBAUTKDAyQUU4NEY2MTFCN0U4MkZEN0Q2RkY4RjQ1MkQ4NzI1 RUY0ODkwODgwHhcNMjUwNjE2MTgwOTQ1WhcNMjUwNjIzMTgwOTQ1WjAYMRYwFAYD VQQDEw02ODUwNWRlYS0xMDJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxoADdkAoVBcWMUSmCq+9BAVe57MKpBTXjf2AKiFj+EU3hrYwef63R9d7je0w KViyqKzzOhHTevRGdzW7KcbYjduh5UMH5zvctV7BDctBTe7CMQeu76ma1vubQf/o vRr1Yi4+8BdnI+pTjzIIO58qM+IK2mK+EgkPy5wkzW5TAKnoM1csIIUF/uJ41062 QEyB/qdh0AIYp4C34TlkVurDnF74+pQBxyfqH8ZFfh9T+tM5nFEMuNC599+Y+Ne7 wudJy5VJsFuB7wDl6dSmzvHx83703AshZgd+No0OsDIS5CRBaLrmqxxtO5Z1rtgs 7x8jPkZV9XONVkmm38IR1HPTMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGFL2i9w Xi8UYimd5Mcai1qWrEQqMB8GA1UdIwQYMBaAFAKuhPYRt+gv19b/j0UthyXvSJCI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDJBMC9DQTdEMTE2MkY2 NzYxMUU5OTBCQUEyMjJDNEY5QUUwMi9BcTZFOWhHMzZDX1gxdi1QUlMySEplOUlr SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FxNkU5aEczNkNfWDF2LVBSUzJISmU5SWtJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDJBMC9DQTdEMTE2MkY2NzYxMUU5OTBCQUEyMjJDNEY5QUUwMi9BcTZFOWhHMzZD X1gxdi1QUlMySEplOUlrSWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTD8YPp8k9MSiYTMPxtRZzd15a8nIIYu9Do1wBLmu/CNnS4FdK4tg+ vvnItM0SeKolTE/TiS+d5njYLjGf78sIHZbVgKkMTVzDHRHn6YNA0btNBzetHGKo DVUBt71pfmH5VaTjxtG9YHe+LzvutZ0/tj6UF8LP1uo8rN+ktUVWLdQBVBsc6yEd 8e3UGOExZ0Omf6Fd05xxz8bEVMbxkijcj3pJ/yDnutqDNf8o+suw+HX+R80Lh5PL xhXvjQ7NtsgngSHI2OmLJdKwW/kSFdU68S53b+n4sFI80ZF9jFELR44cTcMrq8Iw 5VrBycW9myR2V30ABpGua/jMJgWZTf5H -----END CERTIFICATE-----Generated at Wed Jun 18 01:44:44 2025 by rpki-client