$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft File: AkIpyBrDU1oh1g4twyqbiL1q2B8.mft (raw, json) Hash identifier: 1DNAqRJVnM29EOlDE/kMl0eEdxXQFIPJJvLYhK0Pxio= Subject key identifier: 4A:4C:56:4D:08:66:55:C8:40:57:2F:6F:E0:6F:04:E8:C7:F7:E4:01 Authority key identifier: 02:42:29:C8:1A:C3:53:5A:21:D6:0E:2D:C3:2A:9B:88:BD:6A:D8:1F Certificate issuer: /CN=A91A0848/serialNumber=024229C81AC3535A21D60E2DC32A9B88BD6AD81F Certificate serial: 01F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AkIpyBrDU1oh1g4twyqbiL1q2B8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft Manifest number: 01E2 Signing time: Fri 13 Jun 2025 01:52:35 +0000 Manifest this update: Fri 13 Jun 2025 01:52:34 +0000 Manifest next update: Fri 20 Jun 2025 01:52:34 +0000 Files and hashes: 1: AkIpyBrDU1oh1g4twyqbiL1q2B8.crl (hash: pUdHx2R9/2PINgtuA0SUvHyS/Bd0Qksg86wJk5GdIlg=) 2: 0FBB769A5DDB11EEAEEA437DC4F9AE02.roa (hash: uKjzis/CrgsSg2LUM/lsbZTCdaGZHhh4O1b0+pc2P3M=) 3: B9D00D3C195A11EE83248835C4F9AE02.roa (hash: wCL8taH4LIUOWXKWcvReDaNZ3+NnYlOsUT+x4rsuWPo=) 4: DE56B490143611EEAB1A5D73C4F9AE02.roa (hash: 3IVp9MXxKURZzAWVcJ2+aQ10UWSD+/QnsDWHqJYEcQI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.crl rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AkIpyBrDU1oh1g4twyqbiL1q2B8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 01:52:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 501 (0x1f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0848, serialNumber=024229C81AC3535A21D60E2DC32A9B88BD6AD81F Validity Not Before: Jun 13 01:52:34 2025 GMT Not After : Jun 20 01:52:34 2025 GMT Subject: CN=684b8463-35e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:07:72:37:50:2e:79:c0:b6:fc:9e:75:f5:34: 7f:c9:c9:b8:2c:34:b8:fa:b1:f1:c7:64:38:b4:7f: c6:4e:d0:9c:42:ef:5f:b0:a8:29:e5:56:ea:1e:f0: 9e:cd:3c:60:9b:3f:54:a2:47:9b:67:8f:59:5b:c4: 8a:d2:ef:32:9b:5c:3a:f6:04:a2:43:5d:d7:6e:ba: f0:b8:b4:85:b8:59:25:42:15:0d:bb:ee:e2:96:a9: 37:6d:52:29:10:84:c9:cb:59:bb:08:5e:06:d7:18: 11:93:a4:0e:4d:f1:af:0c:3e:27:2f:9c:70:1f:9e: b4:a0:e0:b5:cf:b4:05:03:a6:9a:3c:87:38:a3:b7: f4:7e:84:e9:75:88:e5:e9:6f:c7:ca:73:d4:ad:dc: c0:88:36:87:3c:bd:24:38:19:59:42:4e:15:7a:aa: 99:eb:5f:88:0f:92:81:2d:09:fd:3e:c6:14:67:f7: 0a:6e:67:e7:05:cd:a9:0e:7e:20:27:af:f3:91:37: 6d:c5:d9:c7:54:0c:2c:3c:c7:25:24:08:e6:21:d7: ae:a4:ba:17:6d:98:a0:83:fc:c1:30:4d:cb:49:a8: f5:da:01:a6:5a:09:45:30:6c:df:0f:2e:67:ab:53: f0:30:89:4d:2b:99:53:d4:24:47:84:0a:a5:5a:a9: 1d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:4C:56:4D:08:66:55:C8:40:57:2F:6F:E0:6F:04:E8:C7:F7:E4:01 X509v3 Authority Key Identifier: keyid:02:42:29:C8:1A:C3:53:5A:21:D6:0E:2D:C3:2A:9B:88:BD:6A:D8:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AkIpyBrDU1oh1g4twyqbiL1q2B8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:ad:e6:ea:e5:59:1f:d8:8b:87:95:f1:53:af:54:e1:4a:1a: 0a:79:3f:20:52:96:4f:f2:95:8d:b2:3e:56:cd:0c:0a:df:32: 32:4b:3e:11:fb:5b:9b:60:4b:1c:32:d9:76:26:15:c1:1c:6d: 6a:30:93:94:e2:a0:47:18:0f:bf:7e:bf:d0:d2:7b:cc:51:dd: 20:90:f2:3d:54:c8:ea:e9:07:86:46:72:6e:75:d5:e2:66:fc: dc:75:f5:d5:ed:5f:65:f3:99:68:2b:76:a9:4c:48:cd:c8:07: 03:77:bc:ef:fc:d8:6a:1c:32:cb:4e:19:d0:92:5d:77:54:d2: 71:51:80:c6:50:14:39:27:0c:9c:36:cb:7d:f7:d9:c2:b7:29: 21:0a:5b:d0:93:c1:f0:1b:5f:13:ef:66:f2:64:48:8b:14:e0: bf:d3:76:f5:d3:d3:a8:a4:d7:8f:00:ac:89:92:3c:81:4f:01: fa:35:5a:83:b2:17:36:43:31:db:8a:35:a7:a3:9b:1d:4f:93: 8d:44:67:6f:1e:0d:2d:4e:a8:60:02:41:7e:c3:cc:41:f4:ed: ab:63:ab:68:c2:ff:93:32:b7:98:eb:2e:d0:7b:8e:73:6c:22: d3:1c:69:20:d1:0d:c4:0f:b0:d4:68:f5:1e:78:51:64:6c:4d: ab:02:b7:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA4NDgxMTAvBgNVBAUTKDAyNDIyOUM4MUFDMzUzNUEyMUQ2MEUyREMzMkE5Qjg4 QkQ2QUQ4MUYwHhcNMjUwNjEzMDE1MjM0WhcNMjUwNjIwMDE1MjM0WjAYMRYwFAYD VQQDEw02ODRiODQ2My0zNWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlQdyN1AuecC2/J519TR/ycm4LDS4+rHxx2Q4tH/GTtCcQu9fsKgp5VbqHvCe zTxgmz9UokebZ49ZW8SK0u8ym1w69gSiQ13XbrrwuLSFuFklQhUNu+7ilqk3bVIp EITJy1m7CF4G1xgRk6QOTfGvDD4nL5xwH560oOC1z7QFA6aaPIc4o7f0foTpdYjl 6W/HynPUrdzAiDaHPL0kOBlZQk4VeqqZ61+ID5KBLQn9PsYUZ/cKbmfnBc2pDn4g J6/zkTdtxdnHVAwsPMclJAjmIdeupLoXbZigg/zBME3LSaj12gGmWglFMGzfDy5n q1PwMIlNK5lT1CRHhAqlWqkdkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEpMVk0I ZlXIQFcvb+BvBOjH9+QBMB8GA1UdIwQYMBaAFAJCKcgaw1NaIdYOLcMqm4i9atgf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDg0OC82NEQ4QjFERTc3 RTQxMUVEOTdGNTkzNERDNEY5QUUwMi9Ba0lweUJyRFUxb2gxZzR0d3lxYmlMMXEy QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FrSXB5QnJEVTFvaDFnNHR3eXFiaUwxcTJCOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDg0OC82NEQ4QjFERTc3RTQxMUVEOTdGNTkzNERDNEY5QUUwMi9Ba0lweUJyRFUx b2gxZzR0d3lxYmlMMXEyQjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDKrebq5Vkf2IuHlfFTr1ThShoKeT8gUpZP8pWNsj5WzQwK3zIySz4R +1ubYEscMtl2JhXBHG1qMJOU4qBHGA+/fr/Q0nvMUd0gkPI9VMjq6QeGRnJuddXi ZvzcdfXV7V9l85loK3apTEjNyAcDd7zv/NhqHDLLThnQkl13VNJxUYDGUBQ5Jwyc Nst999nCtykhClvQk8HwG18T72byZEiLFOC/03b109OopNePAKyJkjyBTwH6NVqD shc2QzHbijWno5sdT5ONRGdvHg0tTqhgAkF+w8xB9O2rY6towv+TMreY6y7Qe45z bCLTHGkg0Q3ED7DUaPUeeFFkbE2rArcw -----END CERTIFICATE-----Generated at Sat Jun 14 19:33:08 2025 by rpki-client