$ rpki-client -vvf rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/aeHOy4gdpslouq4HMjfCZglaRc0.mft File: aeHOy4gdpslouq4HMjfCZglaRc0.mft (raw, json) Hash identifier: 5OcxNft77Kxe6hogF83xy1kmExkp6zjL+AvOwmuxcAY= Subject key identifier: 21:EA:41:F3:BE:73:83:66:1C:9A:C1:AF:F3:55:26:C8:F0:B5:D2:D7 Authority key identifier: 69:E1:CE:CB:88:1D:A6:C9:68:BA:AE:07:32:37:C2:66:09:5A:45:CD Certificate issuer: /CN=A9172CB5/serialNumber=69E1CECB881DA6C968BAAE073237C266095A45CD Certificate serial: 03AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aeHOy4gdpslouq4HMjfCZglaRc0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/aeHOy4gdpslouq4HMjfCZglaRc0.mft Manifest number: 03A3 Signing time: Thu 19 Jun 2025 00:34:55 +0000 Manifest this update: Thu 19 Jun 2025 00:34:54 +0000 Manifest next update: Thu 26 Jun 2025 00:34:54 +0000 Files and hashes: 1: aeHOy4gdpslouq4HMjfCZglaRc0.crl (hash: hBxvgC1Zja9YAbfF4WRkOyOdTk9jPyJdX5neO6mAZQI=) 2: 9F2E362C9B6E11ECA489542DC4F9AE02.roa (hash: ASwdm1L9Wn+Rz2UEXw3LVXx6V8cb6bPFge6o2YPGGR8=) 3: DD2DD3489F9111ECB958FF25C4F9AE02.roa (hash: ge5i/gUk2rLl8NFshkx3QLIeml4hinyetB2nMALgvq0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/aeHOy4gdpslouq4HMjfCZglaRc0.crl rsync://rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/aeHOy4gdpslouq4HMjfCZglaRc0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aeHOy4gdpslouq4HMjfCZglaRc0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 00:34:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 940 (0x3ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172CB5, serialNumber=69E1CECB881DA6C968BAAE073237C266095A45CD Validity Not Before: Jun 19 00:34:54 2025 GMT Not After : Jun 26 00:34:54 2025 GMT Subject: CN=68535b2e-293a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9c:c2:4b:71:b1:ca:31:7d:f8:a8:52:e1:87: 6f:58:9c:fe:b6:69:65:ac:ee:f9:e3:f4:2f:23:b9: 7b:42:1d:9f:37:26:83:13:e5:f3:78:26:2b:0f:56: 01:84:1b:af:78:d1:ce:74:7e:4e:d5:11:0b:2c:d5: 75:99:22:a4:e0:83:e3:ea:ac:ba:4c:63:9f:2f:6c: 4e:08:bb:11:f7:da:03:c0:2a:69:5e:3b:39:37:e0: 1c:a4:ef:d9:2a:3d:a2:a2:e1:10:1d:7b:98:c6:09: 8a:53:23:d2:f4:97:2d:d5:50:d2:43:bf:da:e5:6e: 5e:bd:2e:02:72:93:02:a2:b2:4d:30:33:09:0f:dc: 69:43:28:18:12:ce:7a:40:25:eb:9d:77:67:8f:4c: 3b:59:72:c9:6f:29:66:3c:d2:f1:d8:2e:7e:ca:f2: db:25:5d:c5:74:a2:61:57:a0:e9:a8:90:e8:c5:a5: c6:13:da:64:c6:31:16:29:de:00:ae:31:7a:77:2e: fa:23:a3:6a:df:f3:36:ec:7e:95:09:0a:a4:b4:98: cc:18:74:59:4f:a6:3c:e0:65:a8:be:d2:42:16:a6: e2:17:10:e9:b7:a2:c1:d6:0e:9b:5e:22:aa:2f:46: 0f:af:fb:79:17:8f:a1:22:b4:e9:4d:7b:42:34:72: c2:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:EA:41:F3:BE:73:83:66:1C:9A:C1:AF:F3:55:26:C8:F0:B5:D2:D7 X509v3 Authority Key Identifier: keyid:69:E1:CE:CB:88:1D:A6:C9:68:BA:AE:07:32:37:C2:66:09:5A:45:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/aeHOy4gdpslouq4HMjfCZglaRc0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aeHOy4gdpslouq4HMjfCZglaRc0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/aeHOy4gdpslouq4HMjfCZglaRc0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:9b:97:4d:20:48:b6:ed:1c:d9:94:75:87:41:8f:fc:26:63: e1:70:f0:0b:fa:1b:c7:7c:a3:2a:91:27:ae:93:4e:45:dd:e1: 95:bd:67:39:7a:2f:39:b4:11:a2:6f:71:46:ce:20:01:7b:48: 8f:7b:f9:0f:63:5e:37:24:03:ec:c5:cb:ad:32:b6:7a:6c:13: 3e:e2:a6:44:54:f5:4a:8c:b5:61:95:0f:9c:54:71:e9:00:d3: 19:02:c3:c0:ef:34:50:af:7b:08:d8:4a:ba:5c:25:55:18:41: 0a:3b:b8:6a:e9:fa:2e:68:f4:7c:7f:bc:e0:4b:3a:7f:51:36: a8:01:e9:6d:4f:df:c0:84:1a:7b:93:b4:6f:8e:09:55:02:25: 25:d2:74:5a:83:65:fb:ed:50:bf:c6:01:27:55:66:90:d6:29: 33:07:5b:b7:77:bd:99:91:04:48:5c:1a:6f:6a:69:bf:ab:0a: 81:ff:db:92:f4:a0:92:da:8c:a4:6e:e6:3a:80:78:8a:37:be: ed:ab:1d:be:62:14:13:2c:a5:75:a4:b6:85:9a:b0:4e:a0:27: a5:be:d7:92:80:56:80:f9:17:70:aa:d8:77:83:95:61:d1:70: 19:4b:1e:05:7c:7e:df:56:8a:f3:74:0b:83:d9:3e:22:68:e9: da:41:0e:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJDQjUxMTAvBgNVBAUTKDY5RTFDRUNCODgxREE2Qzk2OEJBQUUwNzMyMzdDMjY2 MDk1QTQ1Q0QwHhcNMjUwNjE5MDAzNDU0WhcNMjUwNjI2MDAzNDU0WjAYMRYwFAYD VQQDEw02ODUzNWIyZS0yOTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuJzCS3GxyjF9+KhS4YdvWJz+tmllrO754/QvI7l7Qh2fNyaDE+XzeCYrD1YB hBuveNHOdH5O1RELLNV1mSKk4IPj6qy6TGOfL2xOCLsR99oDwCppXjs5N+AcpO/Z Kj2iouEQHXuYxgmKUyPS9Jct1VDSQ7/a5W5evS4CcpMCorJNMDMJD9xpQygYEs56 QCXrnXdnj0w7WXLJbylmPNLx2C5+yvLbJV3FdKJhV6DpqJDoxaXGE9pkxjEWKd4A rjF6dy76I6Nq3/M27H6VCQqktJjMGHRZT6Y84GWovtJCFqbiFxDpt6LB1g6bXiKq L0YPr/t5F4+hIrTpTXtCNHLCgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCHqQfO+ c4NmHJrBr/NVJsjwtdLXMB8GA1UdIwQYMBaAFGnhzsuIHabJaLquBzI3wmYJWkXN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkNCNS8zOUQ3NjcyMDlC NkExMUVDQTY4MjM1MjJDNEY5QUUwMi9hZUhPeTRnZHBzbG91cTRITWpmQ1pnbGFS YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FlSE95NGdkcHNsb3VxNEhNamZDWmdsYVJjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkNCNS8zOUQ3NjcyMDlCNkExMUVDQTY4MjM1MjJDNEY5QUUwMi9hZUhPeTRnZHBz bG91cTRITWpmQ1pnbGFSYzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2m5dNIEi27RzZlHWHQY/8JmPhcPAL+hvHfKMqkSeuk05F3eGVvWc5 ei85tBGib3FGziABe0iPe/kPY143JAPsxcutMrZ6bBM+4qZEVPVKjLVhlQ+cVHHp ANMZAsPA7zRQr3sI2Eq6XCVVGEEKO7hq6fouaPR8f7zgSzp/UTaoAeltT9/AhBp7 k7RvjglVAiUl0nRag2X77VC/xgEnVWaQ1ikzB1u3d72ZkQRIXBpvamm/qwqB/9uS 9KCS2oykbuY6gHiKN77tqx2+YhQTLKV1pLaFmrBOoCelvteSgFaA+Rdwqth3g5Vh 0XAZSx4FfH7fVorzdAuD2T4iaOnaQQ7i -----END CERTIFICATE-----Generated at Fri Jun 20 16:19:23 2025 by rpki-client