$ rpki-client -vvf rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.mft File: AfHtCM3icTbzl9BzSvKjXl1SfdQ.mft (raw, json) Hash identifier: o7hjE23nj5ttfjzloir1+jJT6Qfhgtv2zQnPIZ0/w0E= Subject key identifier: 41:03:00:D3:7F:46:81:4A:00:45:7F:5C:CB:4E:3A:F7:A3:23:8D:41 Authority key identifier: 01:F1:ED:08:CD:E2:71:36:F3:97:D0:73:4A:F2:A3:5E:5D:52:7D:D4 Certificate issuer: /CN=A91788FF/serialNumber=01F1ED08CDE27136F397D0734AF2A35E5D527DD4 Certificate serial: B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfHtCM3icTbzl9BzSvKjXl1SfdQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.mft Manifest number: B0 Signing time: Thu 19 Jun 2025 05:27:35 +0000 Manifest this update: Thu 19 Jun 2025 05:27:34 +0000 Manifest next update: Thu 26 Jun 2025 05:27:34 +0000 Files and hashes: 1: AfHtCM3icTbzl9BzSvKjXl1SfdQ.crl (hash: NL5lJeqZaJ5dY+I8H+qZGiIs/C5JPv2BnvOfLIgrLL8=) 2: 726BD5E645CF11EF854E2262C4F9AE02.roa (hash: NhOdHEmUoQd5YvUf9TabAJ2MpFyvN1YFKpx5g77iQO8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.crl rsync://rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfHtCM3icTbzl9BzSvKjXl1SfdQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 05:27:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 179 (0xb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91788FF, serialNumber=01F1ED08CDE27136F397D0734AF2A35E5D527DD4 Validity Not Before: Jun 19 05:27:34 2025 GMT Not After : Jun 26 05:27:34 2025 GMT Subject: CN=68539fc6-1241 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:07:b2:98:57:0f:1d:e9:07:ce:46:36:66:1d: e3:ab:c2:ad:d9:40:d4:ee:41:26:9f:a2:08:f3:80: 58:b1:62:60:ed:33:ae:75:4b:59:07:a6:07:82:3e: e6:53:bd:9f:80:65:45:e9:07:2b:b1:f5:ca:fb:cd: 7d:d6:80:58:cf:52:a9:9c:49:f2:23:72:da:db:e3: 95:22:4f:89:42:f5:f1:5c:b2:da:42:6b:05:cc:e6: ab:09:37:f5:81:49:f3:f8:89:cb:90:4f:f2:76:7e: 47:d0:36:82:a5:d0:ae:b3:39:f0:ed:49:04:d3:b8: ab:ff:aa:8b:98:33:26:25:b5:4d:3a:5c:f0:da:a4: 6c:ab:4b:63:6a:25:e4:42:a0:00:08:8a:98:9e:7e: 32:d4:c8:7e:80:2e:50:55:48:30:81:2e:d7:ee:c1: 93:db:0c:20:a9:c5:fa:57:17:98:e7:2e:0e:87:dd: a9:34:2d:e9:2d:d0:bc:fe:a6:d3:00:e1:61:e8:ca: 65:2e:81:d3:02:72:2c:ad:c8:2b:32:90:f5:75:cd: 60:57:af:2f:1d:0e:b2:0b:bc:85:9d:ff:40:50:2a: b0:e2:6c:a7:b5:85:3d:33:19:16:14:89:f8:c1:84: ad:9e:68:6b:2f:05:16:c5:69:c9:9b:23:49:76:05: 3c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:03:00:D3:7F:46:81:4A:00:45:7F:5C:CB:4E:3A:F7:A3:23:8D:41 X509v3 Authority Key Identifier: keyid:01:F1:ED:08:CD:E2:71:36:F3:97:D0:73:4A:F2:A3:5E:5D:52:7D:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfHtCM3icTbzl9BzSvKjXl1SfdQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:3c:59:12:ad:fe:16:da:18:21:3b:a2:1d:57:e4:76:9b:85: a7:fd:9d:56:c8:8a:71:3e:c3:3b:dd:5a:80:b4:6e:ef:7b:52: ec:00:af:67:9c:5e:96:c1:9e:82:84:a3:bd:64:91:a6:be:48: b5:bd:48:e9:d9:f1:2b:33:91:ad:e1:4f:c6:83:b0:b8:ed:b2: 30:fc:ac:4e:e3:3c:0f:6a:c6:d4:43:c4:fc:38:9b:59:ec:b7: fe:7b:ea:e8:09:c3:29:b2:5e:5d:77:24:6c:67:d7:e9:77:a3: 36:d5:70:50:07:12:94:30:ec:7e:a5:88:dc:39:43:08:ef:8b: 28:82:df:3c:f5:c3:ba:73:26:32:3c:39:08:16:37:c6:f0:29: 6e:da:ed:0b:e2:4a:bc:ef:49:13:84:94:5e:0a:29:dc:31:c1: f7:ce:07:39:3f:dd:5f:7d:98:18:73:20:bc:9e:86:1c:e0:d0: 0d:00:07:72:c8:b2:a7:dd:1b:83:87:22:bb:95:34:d8:2a:43: b7:88:b7:03:47:46:7f:b5:46:6c:b0:0c:77:b7:fc:11:5d:3e: 49:7c:ea:f3:cb:27:60:bb:f6:af:10:18:e6:ed:cd:2c:7f:f2: 68:8e:ad:93:42:38:ab:3a:c5:c4:97:15:df:ab:76:ce:d1:52: 22:da:f3:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzg4RkYxMTAvBgNVBAUTKDAxRjFFRDA4Q0RFMjcxMzZGMzk3RDA3MzRBRjJBMzVF NUQ1MjdERDQwHhcNMjUwNjE5MDUyNzM0WhcNMjUwNjI2MDUyNzM0WjAYMRYwFAYD VQQDEw02ODUzOWZjNi0xMjQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4QeymFcPHekHzkY2Zh3jq8Kt2UDU7kEmn6II84BYsWJg7TOudUtZB6YHgj7m U72fgGVF6QcrsfXK+8191oBYz1KpnEnyI3La2+OVIk+JQvXxXLLaQmsFzOarCTf1 gUnz+InLkE/ydn5H0DaCpdCusznw7UkE07ir/6qLmDMmJbVNOlzw2qRsq0tjaiXk QqAACIqYnn4y1Mh+gC5QVUgwgS7X7sGT2wwgqcX6VxeY5y4Oh92pNC3pLdC8/qbT AOFh6MplLoHTAnIsrcgrMpD1dc1gV68vHQ6yC7yFnf9AUCqw4myntYU9MxkWFIn4 wYStnmhrLwUWxWnJmyNJdgU8XwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEEDANN/ RoFKAEV/XMtOOvejI41BMB8GA1UdIwQYMBaAFAHx7QjN4nE285fQc0ryo15dUn3U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3ODhGRi9CREVCMjk3NDQ1 Q0QxMUVGOEU4MjY0NEVDNEY5QUUwMi9BZkh0Q00zaWNUYnpsOUJ6U3ZLalhsMVNm ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FmSHRDTTNpY1Riemw5QnpTdktqWGwxU2ZkUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 ODhGRi9CREVCMjk3NDQ1Q0QxMUVGOEU4MjY0NEVDNEY5QUUwMi9BZkh0Q00zaWNU YnpsOUJ6U3ZLalhsMVNmZFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxPFkSrf4W2hghO6IdV+R2m4Wn/Z1WyIpxPsM73VqAtG7ve1LsAK9n nF6WwZ6ChKO9ZJGmvki1vUjp2fErM5Gt4U/Gg7C47bIw/KxO4zwPasbUQ8T8OJtZ 7Lf+e+roCcMpsl5ddyRsZ9fpd6M21XBQBxKUMOx+pYjcOUMI74sogt889cO6cyYy PDkIFjfG8Clu2u0L4kq870kThJReCincMcH3zgc5P91ffZgYcyC8noYc4NANAAdy yLKn3RuDhyK7lTTYKkO3iLcDR0Z/tUZssAx3t/wRXT5JfOrzyydgu/avEBjm7c0s f/Jojq2TQjirOsXElxXfq3bO0VIi2vMi -----END CERTIFICATE-----Generated at Fri Jun 20 19:11:47 2025 by rpki-client