$ rpki-client -vvf rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft File: aRgc9FH4s_7GT8gpi1ItSIylyeY.mft (raw, json) Hash identifier: 5Bb35G8mTgUrXgA0ZUEkuTd2HI4B4NZScw0I9ssj4e8= Subject key identifier: F6:4D:3B:25:09:E8:0E:D0:25:F9:30:C8:7B:7F:BD:ED:8F:D7:F6:DD Authority key identifier: 69:18:1C:F4:51:F8:B3:FE:C6:4F:C8:29:8B:52:2D:48:8C:A5:C9:E6 Certificate issuer: /CN=A916DE3D/serialNumber=69181CF451F8B3FEC64FC8298B522D488CA5C9E6 Certificate serial: 55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aRgc9FH4s_7GT8gpi1ItSIylyeY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft Manifest number: 4E Signing time: Fri 13 Jun 2025 06:17:18 +0000 Manifest this update: Fri 13 Jun 2025 06:17:18 +0000 Manifest next update: Fri 20 Jun 2025 06:17:18 +0000 Files and hashes: 1: aRgc9FH4s_7GT8gpi1ItSIylyeY.crl (hash: KVFiZyVh5gytE5P94XBWWRPGlWCWSu6zgGA+pXBTE+4=) 2: 3AA17754FD8211EFB5BB677AC4F9AE02.roa (hash: imHJlERFiYSGRBFLnXEmas2EVRVLv/9+zOxRclw7D8g=) 3: B3266880FD8511EFA4783083C4F9AE02.roa (hash: W6yWEruXPIDPoCs6QL8pnWnNjj8hPqXcENkKFmbbFhk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.crl rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aRgc9FH4s_7GT8gpi1ItSIylyeY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 06:17:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 85 (0x55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DE3D, serialNumber=69181CF451F8B3FEC64FC8298B522D488CA5C9E6 Validity Not Before: Jun 13 06:17:18 2025 GMT Not After : Jun 20 06:17:18 2025 GMT Subject: CN=684bc26e-858c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ab:87:7b:95:56:73:2c:57:71:34:96:3a:0a: ba:1f:41:31:ab:f7:9b:79:32:8d:1b:b0:93:43:65: 45:c6:53:d2:09:b7:81:2d:96:aa:75:4a:25:d8:3f: 41:dc:8c:b4:bc:57:68:49:fd:85:e5:f5:15:74:3d: 34:08:1e:9a:8c:9a:94:c5:9d:b4:1d:a3:56:86:d8: 54:69:c9:41:3b:7c:4b:2b:46:29:da:a7:17:70:8d: 35:1b:91:d4:c3:13:07:3d:55:d0:cf:bf:1c:11:1c: c0:48:53:ca:50:6d:72:c8:a1:0a:9a:1f:16:d8:22: 3c:93:52:46:f1:c7:51:82:e9:27:4a:f5:56:27:7d: cd:f8:4c:49:82:73:f7:b7:c4:db:f0:a8:ee:e2:02: aa:db:2d:dc:a1:07:d6:44:09:3b:f6:4e:10:16:b6: 26:a2:e1:33:c5:0b:ed:3e:05:be:be:4e:75:eb:be: eb:09:37:32:f0:7b:e9:e4:f2:f2:ed:7a:a6:f8:95: 31:38:45:d0:ee:47:47:a3:e1:07:77:ab:20:8a:54: 4f:4a:9d:17:35:22:91:0d:b0:ff:b3:69:bc:52:79: bd:2f:a3:01:7a:5e:c8:66:df:fb:88:40:cb:ec:de: 3d:9b:dd:a8:77:13:ee:f8:94:2d:6b:b0:e1:2a:91: 68:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:4D:3B:25:09:E8:0E:D0:25:F9:30:C8:7B:7F:BD:ED:8F:D7:F6:DD X509v3 Authority Key Identifier: keyid:69:18:1C:F4:51:F8:B3:FE:C6:4F:C8:29:8B:52:2D:48:8C:A5:C9:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aRgc9FH4s_7GT8gpi1ItSIylyeY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:62:85:23:73:c0:2a:2e:3f:4b:52:37:e6:27:39:d2:22:11: 20:b2:18:22:87:bc:e7:59:f4:51:62:36:11:c7:25:5f:8a:c1: 55:bd:53:94:9a:39:03:c2:95:4f:1b:cd:80:d7:57:1e:5f:0b: 81:7b:ad:75:69:ef:a3:ae:21:dc:86:d2:fd:44:a4:cb:1d:a7: d1:b1:96:8f:0d:c9:fd:a7:80:53:c3:ac:7f:9d:dd:66:c8:85: 22:61:ed:f5:79:fd:c5:cd:a5:ef:44:3a:9f:84:9a:66:18:ac: f6:38:20:8c:e5:be:fb:0a:1e:23:04:5d:7c:16:df:6b:cb:db: d7:a1:57:92:cf:0c:5a:11:0e:1d:b4:ec:f6:ef:7d:9a:f5:5e: e1:29:8b:9f:61:d8:4b:f6:b2:88:31:46:5c:3c:70:a4:6d:eb: f6:ee:a0:0c:ce:95:ae:30:cc:0c:eb:41:7d:77:a4:86:03:49: a3:1e:da:78:38:7e:6b:37:44:81:85:11:7f:e7:f7:66:39:69: ec:ec:60:e7:b3:f7:8a:93:4d:ad:66:e6:ab:e7:d2:d8:96:c1: d4:5c:87:74:f4:c8:ad:b1:fe:28:64:a3:b2:45:d3:8d:aa:fe: b1:66:bd:de:bb:aa:87:7b:da:ee:1f:17:a8:90:22:ff:1a:45: 4c:29:a0:56 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 REUzRDExMC8GA1UEBRMoNjkxODFDRjQ1MUY4QjNGRUM2NEZDODI5OEI1MjJENDg4 Q0E1QzlFNjAeFw0yNTA2MTMwNjE3MThaFw0yNTA2MjAwNjE3MThaMBgxFjAUBgNV BAMTDTY4NGJjMjZlLTg1OGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEq4d7lVZzLFdxNJY6CrofQTGr95t5Mo0bsJNDZUXGU9IJt4Etlqp1SiXYP0Hc jLS8V2hJ/YXl9RV0PTQIHpqMmpTFnbQdo1aG2FRpyUE7fEsrRinapxdwjTUbkdTD Ewc9VdDPvxwRHMBIU8pQbXLIoQqaHxbYIjyTUkbxx1GC6SdK9VYnfc34TEmCc/e3 xNvwqO7iAqrbLdyhB9ZECTv2ThAWtiai4TPFC+0+Bb6+TnXrvusJNzLwe+nk8vLt eqb4lTE4RdDuR0ej4Qd3qyCKVE9KnRc1IpENsP+zabxSeb0vowF6Xshm3/uIQMvs 3j2b3ah3E+74lC1rsOEqkWi5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9k07JQno DtAl+TDIe3+97Y/X9t0wHwYDVR0jBBgwFoAUaRgc9FH4s/7GT8gpi1ItSIylyeYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZERTNEL0ZEMUU0NTUwREU2 NTExRUY4MjQzRUUzMEM0RjlBRTAyL2FSZ2M5Rkg0c183R1Q4Z3BpMUl0U0l5bHll WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYVJnYzlGSDRzXzdHVDhncGkxSXRTSXlseWVZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZE RTNEL0ZEMUU0NTUwREU2NTExRUY4MjQzRUUzMEM0RjlBRTAyL2FSZ2M5Rkg0c183 R1Q4Z3BpMUl0U0l5bHllWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADZihSNzwCouP0tSN+YnOdIiESCyGCKHvOdZ9FFiNhHHJV+KwVW9U5Sa OQPClU8bzYDXVx5fC4F7rXVp76OuIdyG0v1EpMsdp9Gxlo8Nyf2ngFPDrH+d3WbI hSJh7fV5/cXNpe9EOp+EmmYYrPY4IIzlvvsKHiMEXXwW32vL29ehV5LPDFoRDh20 7PbvfZr1XuEpi59h2Ev2sogxRlw8cKRt6/buoAzOla4wzAzrQX13pIYDSaMe2ng4 fms3RIGFEX/n92Y5aezsYOez94qTTa1m5qvn0tiWwdRch3T0yK2x/ihko7JF042q /rFmvd67qod72u4fF6iQIv8aRUwpoFY= -----END CERTIFICATE-----Generated at Sat Jun 14 19:40:48 2025 by rpki-client