$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.mft File: apjAwIy9NBmpCCuGDSm_qXL98qc.mft (raw, json) Hash identifier: GW6jyJoZzAyKCV+00YOZwfv96PCIWQErKnM9YQK3Ch4= Subject key identifier: D7:52:AB:43:E4:57:8D:02:82:8D:7D:9D:D3:E4:AE:6C:22:66:74:04 Authority key identifier: 6A:98:C0:C0:8C:BD:34:19:A9:08:2B:86:0D:29:BF:A9:72:FD:F2:A7 Certificate issuer: /CN=A91A2BD6/serialNumber=6A98C0C08CBD3419A9082B860D29BFA972FDF2A7 Certificate serial: 0438 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/apjAwIy9NBmpCCuGDSm_qXL98qc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.mft Manifest number: 0434 Signing time: Thu 19 Jun 2025 00:10:41 +0000 Manifest this update: Thu 19 Jun 2025 00:10:41 +0000 Manifest next update: Thu 26 Jun 2025 00:10:41 +0000 Files and hashes: 1: apjAwIy9NBmpCCuGDSm_qXL98qc.crl (hash: v9BQJEKVpkOVGXAIiUy+0fz7/k8wZpEC8GqRNup1fA8=) 2: 61B3CBDC631911ECAE6AA33DC4F9AE02.roa (hash: /+PqdcGfeQGq1JSsbPZ7utBGw8SAzSRzzxhLFAim1J0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.crl rsync://rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/apjAwIy9NBmpCCuGDSm_qXL98qc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 00:10:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1080 (0x438) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2BD6, serialNumber=6A98C0C08CBD3419A9082B860D29BFA972FDF2A7 Validity Not Before: Jun 19 00:10:41 2025 GMT Not After : Jun 26 00:10:41 2025 GMT Subject: CN=68535581-8988 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a4:99:7a:b8:6d:21:01:93:35:8a:e1:ce:ce: ec:81:a2:d6:55:51:91:8d:16:bd:8d:27:fd:61:2f: 84:32:05:9f:ef:5a:16:f0:58:fe:8a:91:c1:bb:c8: f0:08:8c:fe:4a:e6:87:7c:b9:f6:79:c6:42:aa:99: a4:3f:00:41:f1:7f:4a:aa:df:e3:a7:d9:2c:7d:63: 75:b9:eb:0c:bc:13:cc:8c:cb:70:a9:c6:ce:c7:91: 87:f2:3d:e2:1f:ca:e2:a2:3d:cf:9e:de:5c:23:22: b9:2d:18:00:7b:21:4b:b6:4f:4c:d3:de:6a:a4:d1: c8:07:5a:33:4c:11:f0:6f:84:a3:76:67:4b:51:cc: ff:a2:a7:1c:8c:fa:4c:df:62:e8:43:4d:b2:60:ac: 66:36:83:67:62:23:18:f0:0a:60:5b:81:69:e8:d5: 71:b4:4c:6a:06:8c:ad:8f:5c:79:e5:14:bb:5f:c3: 18:4a:dc:84:90:5b:52:e7:68:2c:7d:c8:a2:bf:63: 16:63:11:f3:88:a3:60:c7:ab:be:02:7f:4d:9f:d5: 43:19:07:11:cd:ab:c3:b3:68:77:57:fe:5c:17:21: 87:e2:42:f9:83:20:49:77:2a:55:b0:af:eb:94:83: d8:c5:8d:36:b6:ca:ae:58:6b:a5:91:62:56:38:ef: 05:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:52:AB:43:E4:57:8D:02:82:8D:7D:9D:D3:E4:AE:6C:22:66:74:04 X509v3 Authority Key Identifier: keyid:6A:98:C0:C0:8C:BD:34:19:A9:08:2B:86:0D:29:BF:A9:72:FD:F2:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/apjAwIy9NBmpCCuGDSm_qXL98qc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d0:6e:95:af:33:a9:6b:a3:fc:1e:5b:da:09:67:47:d8:5d:ec: 98:ce:e2:f3:56:50:4d:15:6f:9e:b6:b1:b0:1d:73:5e:44:d4: 3e:0e:fd:8d:f6:28:66:9e:a6:35:a2:88:50:b4:e6:42:a4:07: a2:28:09:63:5a:09:c7:86:ce:59:e8:96:13:26:6b:90:53:dd: a8:47:08:c6:3a:24:d3:73:fd:ef:ea:4e:0a:a4:76:0a:8c:c0: d3:34:a1:82:19:79:9f:5e:38:d7:6c:ae:47:8a:82:5b:16:4d: 62:15:d3:92:18:83:a1:40:c4:f2:ad:de:92:32:b9:29:3e:5e: 6e:76:31:83:b9:f8:9a:a2:08:eb:55:f7:9c:96:55:93:a3:6a: 4c:7c:f3:fb:7a:8a:12:a9:ee:b9:c4:16:07:49:51:cc:9c:fe: 3b:2e:91:27:42:b3:96:d1:87:ab:e0:54:5e:6a:22:58:a2:a8: 19:ef:71:f2:3b:6f:49:64:f2:d1:e3:80:fe:59:39:6e:0a:a5: dd:87:62:11:43:fb:4f:0d:9b:26:c7:24:ce:58:31:28:f9:da: 26:05:a8:cf:f7:20:bc:40:5f:05:53:14:9e:a1:e5:24:2b:85: 1a:4b:83:d0:30:dc:cf:de:0d:fb:84:10:80:d8:81:cc:a0:14: 30:0b:d3:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTJCRDYxMTAvBgNVBAUTKDZBOThDMEMwOENCRDM0MTlBOTA4MkI4NjBEMjlCRkE5 NzJGREYyQTcwHhcNMjUwNjE5MDAxMDQxWhcNMjUwNjI2MDAxMDQxWjAYMRYwFAYD VQQDEw02ODUzNTU4MS04OTg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1qSZerhtIQGTNYrhzs7sgaLWVVGRjRa9jSf9YS+EMgWf71oW8Fj+ipHBu8jw CIz+SuaHfLn2ecZCqpmkPwBB8X9Kqt/jp9ksfWN1uesMvBPMjMtwqcbOx5GH8j3i H8rioj3Pnt5cIyK5LRgAeyFLtk9M095qpNHIB1ozTBHwb4SjdmdLUcz/oqccjPpM 32LoQ02yYKxmNoNnYiMY8ApgW4Fp6NVxtExqBoytj1x55RS7X8MYStyEkFtS52gs fciiv2MWYxHziKNgx6u+An9Nn9VDGQcRzavDs2h3V/5cFyGH4kL5gyBJdypVsK/r lIPYxY02tsquWGulkWJWOO8FYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNdSq0Pk V40Cgo19ndPkrmwiZnQEMB8GA1UdIwQYMBaAFGqYwMCMvTQZqQgrhg0pv6ly/fKn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMkJENi85QzU4NURCMDYz MTUxMUVDQkE1MzY5NjlDNEY5QUUwMi9hcGpBd0l5OU5CbXBDQ3VHRFNtX3FYTDk4 cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FwakF3SXk5TkJtcENDdUdEU21fcVhMOThxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MkJENi85QzU4NURCMDYzMTUxMUVDQkE1MzY5NjlDNEY5QUUwMi9hcGpBd0l5OU5C bXBDQ3VHRFNtX3FYTDk4cWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDQbpWvM6lro/weW9oJZ0fYXeyYzuLzVlBNFW+etrGwHXNeRNQ+Dv2N 9ihmnqY1oohQtOZCpAeiKAljWgnHhs5Z6JYTJmuQU92oRwjGOiTTc/3v6k4KpHYK jMDTNKGCGXmfXjjXbK5HioJbFk1iFdOSGIOhQMTyrd6SMrkpPl5udjGDufiaogjr VfecllWTo2pMfPP7eooSqe65xBYHSVHMnP47LpEnQrOW0Yer4FReaiJYoqgZ73Hy O29JZPLR44D+WTluCqXdh2IRQ/tPDZsmxyTOWDEo+domBajP9yC8QF8FUxSeoeUk K4UaS4PQMNzP3g37hBCA2IHMoBQwC9Np -----END CERTIFICATE-----Generated at Thu Jun 19 07:20:07 2025 by rpki-client