$ rpki-client -vvf rpki.apnic.net/member_repository/A916763E/85795FECF90111EF9C24C812C4F9AE02/aQwWqX7kC4mmTLMfYqmaVjAILcM.mft File: aQwWqX7kC4mmTLMfYqmaVjAILcM.mft (raw, json) Hash identifier: IsJn6n+pUbur2DYSUS692lphLPCcFLxOvbgW5pB+p6w= Subject key identifier: 2D:D6:5C:EB:67:6F:47:F8:C2:18:23:D4:A5:40:75:2F:15:E0:5D:7D Authority key identifier: 69:0C:16:A9:7E:E4:0B:89:A6:4C:B3:1F:62:A9:9A:56:30:08:2D:C3 Certificate issuer: /CN=A916763E/serialNumber=690C16A97EE40B89A64CB31F62A99A5630082DC3 Certificate serial: 38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQwWqX7kC4mmTLMfYqmaVjAILcM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916763E/85795FECF90111EF9C24C812C4F9AE02/aQwWqX7kC4mmTLMfYqmaVjAILcM.mft Manifest number: 36 Signing time: Sun 15 Jun 2025 06:40:41 +0000 Manifest this update: Sun 15 Jun 2025 06:40:41 +0000 Manifest next update: Sun 22 Jun 2025 06:40:41 +0000 Files and hashes: 1: aQwWqX7kC4mmTLMfYqmaVjAILcM.crl (hash: g1D8Hgr/yRX+sJQCbBf3S/e+MPvN6B5Vd/NAGmHAtQg=) 2: 8D2816C4F90211EF99692E40C4F9AE02.roa (hash: +NqGztaEhZpUZkM4BrFHd/HmjU1Jxg/vDaPsvxdwGGQ=) 3: 8DD9218AF90211EF99692E40C4F9AE02.roa (hash: 3CWgpxVwX8rXbxNTGaUyko/Ji2jUUIx/aqwN4MmZ++Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916763E/85795FECF90111EF9C24C812C4F9AE02/aQwWqX7kC4mmTLMfYqmaVjAILcM.crl rsync://rpki.apnic.net/member_repository/A916763E/85795FECF90111EF9C24C812C4F9AE02/aQwWqX7kC4mmTLMfYqmaVjAILcM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQwWqX7kC4mmTLMfYqmaVjAILcM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 06:40:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56 (0x38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916763E, serialNumber=690C16A97EE40B89A64CB31F62A99A5630082DC3 Validity Not Before: Jun 15 06:40:41 2025 GMT Not After : Jun 22 06:40:41 2025 GMT Subject: CN=684e6ae9-e16a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:91:0e:61:f3:d8:bb:01:ef:b3:5d:58:c0:d6: 96:e3:b1:5d:82:71:e1:a6:50:29:0d:0f:e7:a7:b5: ea:43:a4:9f:9d:1d:42:c1:e0:2e:5f:56:56:55:03: 1b:b6:48:a1:98:84:3c:f4:d4:35:8f:f1:70:30:56: 9a:1e:d9:9c:2e:d4:ed:4a:7a:72:3e:cd:6a:26:68: c4:c3:01:82:46:7b:29:40:f9:60:f7:98:70:e5:2f: ee:07:a8:45:f9:48:cf:13:d9:06:3c:d4:8d:9d:d3: 6a:9c:e4:ef:19:c7:b5:a9:c0:27:bd:b1:37:b3:3e: 81:87:3e:bd:a6:06:ed:68:2c:a7:74:e5:4b:6c:fe: 8d:3b:af:da:28:61:c5:4b:1e:92:2d:48:b8:32:5b: b4:0f:97:a7:97:24:79:6e:09:af:bb:b2:e2:f3:43: bf:3b:df:80:9c:cd:39:5f:83:5d:c2:17:b1:39:2b: 40:91:55:56:f9:b9:d0:fc:f8:92:7e:cb:c2:63:7b: b3:49:91:23:37:09:09:6a:84:66:d9:df:ae:ce:f2: 6b:d9:2b:19:31:42:4e:0b:f9:c0:f0:d0:b0:a9:ee: 43:ae:7d:b1:da:bb:5a:1f:01:c1:e5:bd:87:28:4f: 60:f2:70:ff:a1:b9:24:75:4e:08:a7:a8:ea:8a:98: 92:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:D6:5C:EB:67:6F:47:F8:C2:18:23:D4:A5:40:75:2F:15:E0:5D:7D X509v3 Authority Key Identifier: keyid:69:0C:16:A9:7E:E4:0B:89:A6:4C:B3:1F:62:A9:9A:56:30:08:2D:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916763E/85795FECF90111EF9C24C812C4F9AE02/aQwWqX7kC4mmTLMfYqmaVjAILcM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQwWqX7kC4mmTLMfYqmaVjAILcM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916763E/85795FECF90111EF9C24C812C4F9AE02/aQwWqX7kC4mmTLMfYqmaVjAILcM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:71:27:04:5a:51:e9:0f:2b:39:e7:91:ec:cb:5a:21:23:8b: 2b:93:29:a8:a2:bd:5b:b3:78:9a:39:c7:76:22:f4:b8:05:f1: 8e:31:0f:da:0e:95:0f:cb:e0:83:bc:eb:df:8f:17:6f:92:8f: be:aa:88:5f:47:d9:b8:c2:c4:c8:79:35:24:11:e5:ec:7d:0f: cb:a7:02:1d:5b:1b:6e:e9:f1:11:e3:0a:09:0c:85:03:2d:ec: c2:b2:58:ed:4f:80:35:85:9b:8b:de:1b:cd:1a:7c:cd:20:98: f1:40:5d:11:3b:81:ce:ab:46:7f:cf:c3:73:32:df:e5:e8:a0: b5:16:34:82:06:10:48:f4:3d:35:a2:42:f8:e3:60:94:47:67: 52:4c:b9:25:e6:cc:f6:e8:44:8b:94:0b:f7:df:ed:88:c5:6a: 9e:82:ff:28:68:a1:b5:82:d6:61:3c:03:20:24:35:68:aa:5e: 78:3a:ad:42:8c:09:b3:47:5d:ea:1a:01:80:b6:31:1f:2c:e0: 3b:6f:11:2a:57:0b:1d:c2:06:9a:10:14:51:41:3b:94:e3:ff: f6:c6:5a:1f:82:88:e3:af:6a:b3:c5:c0:82:0d:e0:b9:06:ba: be:d6:a7:5b:a9:84:29:0d:37:c6:36:f0:0d:d8:bc:0e:b3:13: ed:01:49:93 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBODANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NzYzRTExMC8GA1UEBRMoNjkwQzE2QTk3RUU0MEI4OUE2NENCMzFGNjJBOTlBNTYz MDA4MkRDMzAeFw0yNTA2MTUwNjQwNDFaFw0yNTA2MjIwNjQwNDFaMBgxFjAUBgNV BAMTDTY4NGU2YWU5LWUxNmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCykQ5h89i7Ae+zXVjA1pbjsV2CceGmUCkND+entepDpJ+dHULB4C5fVlZVAxu2 SKGYhDz01DWP8XAwVpoe2Zwu1O1KenI+zWomaMTDAYJGeylA+WD3mHDlL+4HqEX5 SM8T2QY81I2d02qc5O8Zx7WpwCe9sTezPoGHPr2mBu1oLKd05Uts/o07r9ooYcVL HpItSLgyW7QPl6eXJHluCa+7suLzQ78734CczTlfg13CF7E5K0CRVVb5udD8+JJ+ y8Jje7NJkSM3CQlqhGbZ367O8mvZKxkxQk4L+cDw0LCp7kOufbHau1ofAcHlvYco T2DycP+huSR1TginqOqKmJIxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULdZc62dv R/jCGCPUpUB1LxXgXX0wHwYDVR0jBBgwFoAUaQwWqX7kC4mmTLMfYqmaVjAILcMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY3NjNFLzg1Nzk1RkVDRjkw MTExRUY5QzI0QzgxMkM0RjlBRTAyL2FRd1dxWDdrQzRtbVRMTWZZcW1hVmpBSUxj TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYVF3V3FYN2tDNG1tVExNZllxbWFWakFJTGNNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY3 NjNFLzg1Nzk1RkVDRjkwMTExRUY5QzI0QzgxMkM0RjlBRTAyL2FRd1dxWDdrQzRt bVRMTWZZcW1hVmpBSUxjTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADhxJwRaUekPKznnkezLWiEjiyuTKaiivVuzeJo5x3Yi9LgF8Y4xD9oO lQ/L4IO869+PF2+Sj76qiF9H2bjCxMh5NSQR5ex9D8unAh1bG27p8RHjCgkMhQMt 7MKyWO1PgDWFm4veG80afM0gmPFAXRE7gc6rRn/Pw3My3+XooLUWNIIGEEj0PTWi QvjjYJRHZ1JMuSXmzPboRIuUC/ff7YjFap6C/yhoobWC1mE8AyAkNWiqXng6rUKM CbNHXeoaAYC2MR8s4DtvESpXCx3CBpoQFFFBO5Tj//bGWh+CiOOvarPFwIIN4LkG ur7Wp1uphCkNN8Y28A3YvA6zE+0BSZM= -----END CERTIFICATE-----Generated at Tue Jun 17 07:20:48 2025 by rpki-client