$ rpki-client -vvf rpki.apnic.net/member_repository/A91A236D/22E692AADCB211ECABDE3E6EC4F9AE02/AEHvq_80PMLoP86WztiQWej04sE.mft File: AEHvq_80PMLoP86WztiQWej04sE.mft (raw, json) Hash identifier: glgYwrIfFK62RpvJ6keT1KUvC9yQtv3Cez/tmTVgN84= Subject key identifier: 6B:02:3A:7C:8A:75:C1:20:70:97:FA:0F:56:A8:83:B9:E6:94:70:2A Authority key identifier: 00:41:EF:AB:FF:34:3C:C2:E8:3F:CE:96:CE:D8:90:59:E8:F4:E2:C1 Certificate issuer: /CN=A91A236D/serialNumber=0041EFABFF343CC2E83FCE96CED89059E8F4E2C1 Certificate serial: 02FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AEHvq_80PMLoP86WztiQWej04sE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A236D/22E692AADCB211ECABDE3E6EC4F9AE02/AEHvq_80PMLoP86WztiQWej04sE.mft Manifest number: 02FA Signing time: Fri 13 Jun 2025 00:48:02 +0000 Manifest this update: Fri 13 Jun 2025 00:48:01 +0000 Manifest next update: Fri 20 Jun 2025 00:48:01 +0000 Files and hashes: 1: AEHvq_80PMLoP86WztiQWej04sE.crl (hash: aRFMZ7kUI9eX5+jX3s3FLxgq1hjNXE1ZM4VJW0Bltjw=) 2: DC072950DCB911EC8AAB8710C4F9AE02.roa (hash: yybFsJYo0u1DXgO0+Ag0eONj7o/2vIeK/qEAg2e5UXU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A236D/22E692AADCB211ECABDE3E6EC4F9AE02/AEHvq_80PMLoP86WztiQWej04sE.crl rsync://rpki.apnic.net/member_repository/A91A236D/22E692AADCB211ECABDE3E6EC4F9AE02/AEHvq_80PMLoP86WztiQWej04sE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AEHvq_80PMLoP86WztiQWej04sE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 00:48:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 766 (0x2fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A236D, serialNumber=0041EFABFF343CC2E83FCE96CED89059E8F4E2C1 Validity Not Before: Jun 13 00:48:01 2025 GMT Not After : Jun 20 00:48:01 2025 GMT Subject: CN=684b7542-9f44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:5e:f5:b8:71:f3:75:21:e6:99:5a:c1:44:5e: 9d:85:54:e3:d7:51:59:c1:b7:89:4a:09:dd:67:ac: 95:4e:10:b1:43:83:0b:88:78:cf:e1:49:3a:60:cf: 81:08:8a:73:e5:e8:ac:2e:59:d4:d1:d7:ea:d3:15: 7f:d9:47:49:e0:d5:c4:ad:54:23:db:dd:5c:65:d4: 68:0d:7b:7a:84:86:66:2c:47:c6:2c:33:fc:15:32: 8d:1b:09:90:86:a8:b2:fc:c5:8c:29:f1:1b:25:b4: c4:95:05:d4:08:76:4e:00:69:37:d7:6e:22:30:31: a1:15:cc:2d:2b:9a:f6:65:4a:0b:8b:49:fd:c9:12: f6:d4:fa:7c:e8:85:0c:f8:d5:d4:50:08:af:d6:bf: ee:06:b8:5a:0a:89:b2:f3:a5:fb:15:fc:89:d0:5f: 57:b9:51:e8:d8:79:23:88:d9:83:e8:7d:f1:6a:7b: 5d:31:d5:30:80:e0:f9:4b:d1:56:ec:2c:4c:26:ee: d4:4c:7c:66:a0:a3:d8:27:b7:e5:fa:0f:29:6a:59: 9c:a0:89:bb:1e:70:c2:50:52:58:68:07:fd:16:b6: b7:cd:c7:d5:09:2f:5e:d6:cb:46:fb:1b:8a:b9:1a: e6:24:24:8f:7e:f8:b6:fb:df:1a:42:85:83:6d:fe: be:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:02:3A:7C:8A:75:C1:20:70:97:FA:0F:56:A8:83:B9:E6:94:70:2A X509v3 Authority Key Identifier: keyid:00:41:EF:AB:FF:34:3C:C2:E8:3F:CE:96:CE:D8:90:59:E8:F4:E2:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A236D/22E692AADCB211ECABDE3E6EC4F9AE02/AEHvq_80PMLoP86WztiQWej04sE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AEHvq_80PMLoP86WztiQWej04sE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A236D/22E692AADCB211ECABDE3E6EC4F9AE02/AEHvq_80PMLoP86WztiQWej04sE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:a3:9d:4d:47:9f:fa:0b:fb:02:90:bb:b9:3a:c4:05:02:19: dd:31:11:7a:4f:20:15:9b:36:94:c9:f5:6a:ae:6b:f2:2d:bd: f7:89:ce:e4:c4:f8:ea:66:64:59:92:2c:54:0c:44:a6:18:54: 03:8e:e4:ad:5f:47:b4:f8:5f:47:7a:0e:84:94:31:c9:bb:00: ff:2a:bd:ca:f5:f1:c8:ee:da:f5:98:99:94:8f:5c:6e:7c:3f: eb:80:bc:82:e1:ea:fe:f2:9c:69:2c:bd:77:ba:87:c6:ca:15: 31:33:cf:c5:31:4c:33:c9:4e:4e:63:cc:fe:95:97:8a:61:6c: b8:04:05:6a:bb:5a:03:44:be:55:01:aa:57:5d:1b:de:1f:79: 69:41:7c:63:b4:d5:5f:32:4a:2e:53:c2:84:2c:1f:90:d2:fd: 06:8f:ec:9e:7e:32:bf:f8:12:31:b3:73:db:8c:fe:1a:2f:bf: 27:fd:08:26:58:cf:a9:ea:ab:c8:07:e4:7d:f5:8c:1b:0e:3d: 3b:c8:83:6a:4f:7e:55:d4:03:cd:1d:25:06:10:59:36:1b:79: d0:ca:3a:4e:2a:63:30:92:96:57:7c:c6:30:65:8b:b3:e1:71: 1b:7a:11:52:33:33:a5:80:f2:a9:9b:0b:bf:2e:71:9e:b3:78: 71:c0:88:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAv4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTIzNkQxMTAvBgNVBAUTKDAwNDFFRkFCRkYzNDNDQzJFODNGQ0U5NkNFRDg5MDU5 RThGNEUyQzEwHhcNMjUwNjEzMDA0ODAxWhcNMjUwNjIwMDA0ODAxWjAYMRYwFAYD VQQDEw02ODRiNzU0Mi05ZjQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz171uHHzdSHmmVrBRF6dhVTj11FZwbeJSgndZ6yVThCxQ4MLiHjP4Uk6YM+B CIpz5eisLlnU0dfq0xV/2UdJ4NXErVQj291cZdRoDXt6hIZmLEfGLDP8FTKNGwmQ hqiy/MWMKfEbJbTElQXUCHZOAGk3124iMDGhFcwtK5r2ZUoLi0n9yRL21Pp86IUM +NXUUAiv1r/uBrhaComy86X7FfyJ0F9XuVHo2HkjiNmD6H3xantdMdUwgOD5S9FW 7CxMJu7UTHxmoKPYJ7fl+g8palmcoIm7HnDCUFJYaAf9Fra3zcfVCS9e1stG+xuK uRrmJCSPfvi2+98aQoWDbf6+owIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGsCOnyK dcEgcJf6D1aog7nmlHAqMB8GA1UdIwQYMBaAFABB76v/NDzC6D/Ols7YkFno9OLB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjM2RC8yMkU2OTJBQURD QjIxMUVDQUJERTNFNkVDNEY5QUUwMi9BRUh2cV84MFBNTG9QODZXenRpUVdlajA0 c0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FFSHZxXzgwUE1Mb1A4Nld6dGlRV2VqMDRzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MjM2RC8yMkU2OTJBQURDQjIxMUVDQUJERTNFNkVDNEY5QUUwMi9BRUh2cV84MFBN TG9QODZXenRpUVdlajA0c0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdo51NR5/6C/sCkLu5OsQFAhndMRF6TyAVmzaUyfVqrmvyLb33ic7k xPjqZmRZkixUDESmGFQDjuStX0e0+F9Heg6ElDHJuwD/Kr3K9fHI7tr1mJmUj1xu fD/rgLyC4er+8pxpLL13uofGyhUxM8/FMUwzyU5OY8z+lZeKYWy4BAVqu1oDRL5V AapXXRveH3lpQXxjtNVfMkouU8KELB+Q0v0Gj+yefjK/+BIxs3PbjP4aL78n/Qgm WM+p6qvIB+R99YwbDj07yINqT35V1APNHSUGEFk2G3nQyjpOKmMwkpZXfMYwZYuz 4XEbehFSMzOlgPKpmwu/LnGes3hxwIhK -----END CERTIFICATE-----Generated at Sat Jun 14 17:23:27 2025 by rpki-client