$ rpki-client -vvf rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.mft File: aMW6vfwSOWbQX4DD-kI3lELEIgw.mft (raw, json) Hash identifier: j0UikQawxzfvTjig05wnygBsc1Ycsw7rINJ89IwB/v4= Subject key identifier: 20:FE:1F:5D:71:18:F5:4F:9E:F3:92:82:8D:82:2C:16:A9:B8:12:33 Authority key identifier: 68:C5:BA:BD:FC:12:39:66:D0:5F:80:C3:FA:42:37:94:42:C4:22:0C Certificate issuer: /CN=A917201D/serialNumber=68C5BABDFC123966D05F80C3FA42379442C4220C Certificate serial: 34BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMW6vfwSOWbQX4DD-kI3lELEIgw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.mft Manifest number: 34A1 Signing time: Wed 18 Jun 2025 14:43:17 +0000 Manifest this update: Wed 18 Jun 2025 14:43:17 +0000 Manifest next update: Wed 25 Jun 2025 14:43:17 +0000 Files and hashes: 1: aMW6vfwSOWbQX4DD-kI3lELEIgw.crl (hash: ao2m/e2gINDfcNoq2nPMNJlA0sOSNGUuLDi9aUqrcCM=) 2: E05FE99AB0D511E5B4F68B09C4F9AE02.roa (hash: /edqiqL2miGSNr0uoaTjo4btCNWXItXesGyoq/gND/E=) 3: 73438FF06DED11E9A21D1341C4F9AE02.roa (hash: C4bWHi41cN0y8JVNPFitYHiPYUVvz8I3upa7uMSFTP0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.crl rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMW6vfwSOWbQX4DD-kI3lELEIgw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 14:43:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13501 (0x34bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917201D, serialNumber=68C5BABDFC123966D05F80C3FA42379442C4220C Validity Not Before: Jun 18 14:43:17 2025 GMT Not After : Jun 25 14:43:17 2025 GMT Subject: CN=6852d085-18f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:1a:49:b4:5a:af:1a:8d:34:c9:39:9a:93:53: 26:b4:06:f5:5d:94:a5:d3:f0:6a:98:c7:08:4a:d3: 79:25:5a:8f:d1:29:c8:0b:37:f8:f2:4a:63:b3:14: f5:e3:2a:b2:dd:2f:ce:bf:39:7b:3c:91:94:90:40: 9b:09:54:b5:1c:bd:84:86:f3:9c:74:ae:6f:a5:9f: ab:c0:de:10:8d:55:60:79:fa:03:73:f7:d5:e5:da: da:ab:3f:b6:72:71:73:18:bc:4b:fe:a8:33:a5:c7: 3c:51:5c:ba:1c:33:99:f7:d3:f1:76:76:73:b6:a0: 90:9e:a7:d9:f8:a6:4e:5e:be:e0:e7:8a:af:6c:59: 23:79:e1:16:81:84:85:79:b0:ad:a3:6e:de:10:c9: 29:bd:6a:77:18:d8:eb:7f:17:74:4b:13:9f:18:da: 04:ec:04:15:2a:6c:1f:58:fe:95:c3:0b:36:e9:f4: 72:49:89:bb:15:e1:d7:84:25:c3:7e:ec:0d:83:75: 82:d2:fb:db:0a:7a:33:cc:40:4b:da:0e:e2:05:7f: 70:e7:0e:65:1c:e7:17:1d:83:db:36:95:52:2f:50: a5:95:30:d9:35:f5:6d:62:da:6b:f6:69:f3:cb:f4: a0:ea:47:50:b2:05:0f:4e:6a:ac:f4:fb:62:08:70: 66:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:FE:1F:5D:71:18:F5:4F:9E:F3:92:82:8D:82:2C:16:A9:B8:12:33 X509v3 Authority Key Identifier: keyid:68:C5:BA:BD:FC:12:39:66:D0:5F:80:C3:FA:42:37:94:42:C4:22:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMW6vfwSOWbQX4DD-kI3lELEIgw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:b8:d1:a9:d0:f5:9d:64:56:4b:e9:c8:1b:c6:91:99:fd:4e: f1:76:21:55:a3:83:9a:36:f3:9a:8c:1f:6c:34:b4:11:99:c6: 5e:87:4f:be:8b:f8:cd:a1:ac:ba:9b:50:5d:99:ba:2a:e9:b9: 5e:43:f0:82:cd:85:b0:6b:36:f0:96:2d:2a:e7:da:6f:54:21: df:70:4b:38:6c:aa:47:e7:64:44:d0:bf:42:9a:c4:cd:2b:4c: 0f:24:41:a6:6d:18:d7:9e:ef:c1:bd:1d:3e:2b:f1:84:52:7c: f7:87:98:fb:23:64:2f:6b:26:f7:9e:4e:46:eb:e6:08:8f:97: c4:3c:72:51:fb:47:14:04:d2:79:65:3f:b6:2e:92:61:8a:ff: de:8a:2d:b6:1a:83:dd:c6:9f:70:da:88:b8:20:36:4e:d7:5d: 95:1e:6b:83:2c:79:f8:cd:78:e4:75:67:9e:1b:eb:02:51:9e: 2d:f2:1a:f4:51:70:05:b0:9a:46:01:04:b3:6c:5d:24:02:2a: 7b:f0:a2:7c:dd:04:06:47:23:65:df:cd:8d:13:48:ba:43:38: 07:61:a5:0c:e0:05:34:ed:da:54:21:55:a3:3f:56:66:2a:33: 15:d2:38:25:ec:a5:6a:56:ce:0c:aa:01:4d:79:d0:72:cf:ef: d2:40:c6:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzIwMUQxMTAvBgNVBAUTKDY4QzVCQUJERkMxMjM5NjZEMDVGODBDM0ZBNDIzNzk0 NDJDNDIyMEMwHhcNMjUwNjE4MTQ0MzE3WhcNMjUwNjI1MTQ0MzE3WjAYMRYwFAYD VQQDEw02ODUyZDA4NS0xOGY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyxpJtFqvGo00yTmak1MmtAb1XZSl0/BqmMcIStN5JVqP0SnICzf48kpjsxT1 4yqy3S/Ovzl7PJGUkECbCVS1HL2EhvOcdK5vpZ+rwN4QjVVgefoDc/fV5draqz+2 cnFzGLxL/qgzpcc8UVy6HDOZ99PxdnZztqCQnqfZ+KZOXr7g54qvbFkjeeEWgYSF ebCto27eEMkpvWp3GNjrfxd0SxOfGNoE7AQVKmwfWP6Vwws26fRySYm7FeHXhCXD fuwNg3WC0vvbCnozzEBL2g7iBX9w5w5lHOcXHYPbNpVSL1CllTDZNfVtYtpr9mnz y/Sg6kdQsgUPTmqs9PtiCHBmiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCD+H11x GPVPnvOSgo2CLBapuBIzMB8GA1UdIwQYMBaAFGjFur38Ejlm0F+Aw/pCN5RCxCIM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MjAxRC9DRDFFMjk0ODFE OTIxMUUyQTNCMUY0RjUwOEIwMkNEMi9hTVc2dmZ3U09XYlFYNERELWtJM2xFTEVJ Z3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FNVzZ2ZndTT1diUVg0REQta0kzbEVMRUlndy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MjAxRC9DRDFFMjk0ODFEOTIxMUUyQTNCMUY0RjUwOEIwMkNEMi9hTVc2dmZ3U09X YlFYNERELWtJM2xFTEVJZ3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeuNGp0PWdZFZL6cgbxpGZ/U7xdiFVo4OaNvOajB9sNLQRmcZeh0++ i/jNoay6m1Bdmboq6bleQ/CCzYWwazbwli0q59pvVCHfcEs4bKpH52RE0L9CmsTN K0wPJEGmbRjXnu/BvR0+K/GEUnz3h5j7I2Qvayb3nk5G6+YIj5fEPHJR+0cUBNJ5 ZT+2LpJhiv/eii22GoPdxp9w2oi4IDZO112VHmuDLHn4zXjkdWeeG+sCUZ4t8hr0 UXAFsJpGAQSzbF0kAip78KJ83QQGRyNl382NE0i6QzgHYaUM4AU07dpUIVWjP1Zm KjMV0jgl7KVqVs4MqgFNedByz+/SQMYT -----END CERTIFICATE-----Generated at Thu Jun 19 03:39:53 2025 by rpki-client