$ rpki-client -vvf rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft File: awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft (raw, json) Hash identifier: t0zOxsEUOUWDFEJuD72g7tTtDsCJd+ab/atTgTI1Ok0= Subject key identifier: 3F:C1:7D:50:A5:C6:58:0B:80:B1:67:9E:13:A3:ED:42:36:FD:7A:95 Authority key identifier: 6B:0C:B5:95:03:DA:89:5F:F9:42:69:D7:A9:BC:20:26:17:04:DC:E9 Certificate issuer: /CN=A91A45E0/serialNumber=6B0CB59503DA895FF94269D7A9BC20261704DCE9 Certificate serial: 0C41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/awy1lQPaiV_5QmnXqbwgJhcE3Ok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft Manifest number: 0C1F Signing time: Thu 12 Jun 2025 18:31:43 +0000 Manifest this update: Thu 12 Jun 2025 18:31:42 +0000 Manifest next update: Thu 19 Jun 2025 18:31:42 +0000 Files and hashes: 1: awy1lQPaiV_5QmnXqbwgJhcE3Ok.crl (hash: dQhqNCkSiLSIrT6O/9HWbxfFxqSNKTvrLWhcW5NJXaw=) 2: 1ECA8050696211EC8A05D115C4F9AE02.roa (hash: TDJGQsW2NIk73+noi3yai+lnEcUS65iyjDduaFF8MsU=) 3: 7A0359125C0E11ECA36CBF0FC4F9AE02.roa (hash: o+CZ7fn0neERiRGT74H4pMCJhxb2efrn1ZqyAv5eZQ0=) 4: DF1E2FEA97D611EB8BEF8223C4F9AE02.roa (hash: +Z1f48sI1Kz7JI6qJ55JG0SRXt9VC0MvWpOU7eCKqS8=) 5: 884C5FB8E60411EFBF5A7957C4F9AE02.roa (hash: lJpIF/DoFI3JvxRyvCQySFIPNE83lEmMNZBRdgQLMfI=) 6: 84CFF0D6D2F311EEAFCF3273C4F9AE02.roa (hash: lwAwrTafRErL3moVwMNPzUjYlQsMQhM9S9kLt9SAVBg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.crl rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/awy1lQPaiV_5QmnXqbwgJhcE3Ok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 18:31:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3137 (0xc41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A45E0, serialNumber=6B0CB59503DA895FF94269D7A9BC20261704DCE9 Validity Not Before: Jun 12 18:31:42 2025 GMT Not After : Jun 19 18:31:42 2025 GMT Subject: CN=684b1d0e-9b9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:30:81:41:61:90:ef:22:05:5d:14:de:e2:62: 9a:e8:c4:b3:d8:c2:67:2b:bb:f9:92:e8:7c:c3:af: 0e:ff:58:fc:54:f7:d0:75:31:eb:ce:c9:fa:27:6a: a8:8d:fb:64:c0:48:2b:b9:e1:3b:9a:52:c0:93:db: 43:90:11:39:3f:df:aa:7e:5c:40:ac:f3:29:76:58: 2b:df:5f:72:ec:9c:67:48:82:20:1e:cf:0c:42:8c: b4:11:c9:b6:1d:b0:42:37:8b:01:7b:35:a0:76:51: 09:92:45:e6:f5:5a:79:4b:15:29:94:29:61:42:b5: 26:9c:36:d7:16:8a:70:fb:1e:98:c6:db:6e:aa:97: ef:b4:8c:54:83:0b:57:a8:ea:c0:82:57:e4:eb:2e: e4:c3:83:69:d1:e3:74:72:18:83:df:39:11:9e:ab: 5f:74:95:c1:11:ca:b2:31:aa:23:86:20:ef:d2:de: 04:eb:d5:e0:74:c3:34:5b:72:4a:de:7d:0d:02:70: 5a:cd:24:ce:c9:3c:1e:96:25:26:ef:e2:18:eb:f7: dc:1c:27:60:02:df:79:5c:11:b3:dc:65:e5:1e:d9: 46:96:64:0f:50:38:fb:17:2f:e7:83:67:86:b2:64: d0:30:af:b9:aa:d1:6a:36:7f:a1:4f:9c:e6:91:ad: 7e:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:C1:7D:50:A5:C6:58:0B:80:B1:67:9E:13:A3:ED:42:36:FD:7A:95 X509v3 Authority Key Identifier: keyid:6B:0C:B5:95:03:DA:89:5F:F9:42:69:D7:A9:BC:20:26:17:04:DC:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/awy1lQPaiV_5QmnXqbwgJhcE3Ok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:85:a3:05:de:05:be:f1:7c:39:dd:af:0b:37:f4:5a:f0:f6: ae:9d:37:b2:0b:e1:74:37:97:92:95:1c:d9:8f:a4:88:89:a8: 69:46:70:ff:5a:7a:0c:17:81:01:80:a3:b4:21:b6:f6:9e:21: b5:e3:68:90:30:87:45:5d:bb:61:3b:76:12:f4:6a:fc:58:78: b2:e2:16:9a:f7:d9:4c:2c:6a:53:16:51:0a:09:97:e5:da:74: 5b:37:64:7d:6b:55:18:78:ea:44:0c:c2:2c:b4:88:dd:92:59: 87:f3:ed:69:37:8e:07:d3:7b:7a:06:4b:13:ce:14:64:a0:7d: 3e:dc:8b:37:da:ec:36:71:15:73:d4:cd:d8:71:70:92:7e:5d: d4:d6:d0:95:06:77:4c:5a:78:9f:ac:23:51:db:27:5d:5d:5f: 1a:93:23:45:08:47:07:ef:a7:1b:40:be:bd:44:5c:f7:5d:a5: 86:8b:50:0a:3b:4d:7c:c0:94:dc:c7:11:11:60:7b:7a:1a:bf: 2d:4c:62:78:8a:ca:b0:63:3f:44:0b:df:f4:58:75:fb:8d:57: 71:80:47:d4:e7:93:a1:46:31:3a:eb:7a:01:b7:7b:6a:60:42: c0:11:a6:49:fc:e9:44:d8:58:1e:f6:88:a8:5d:f5:0d:f9:7f: 07:a3:ff:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ1RTAxMTAvBgNVBAUTKDZCMENCNTk1MDNEQTg5NUZGOTQyNjlEN0E5QkMyMDI2 MTcwNERDRTkwHhcNMjUwNjEyMTgzMTQyWhcNMjUwNjE5MTgzMTQyWjAYMRYwFAYD VQQDEw02ODRiMWQwZS05YjlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxjCBQWGQ7yIFXRTe4mKa6MSz2MJnK7v5kuh8w68O/1j8VPfQdTHrzsn6J2qo jftkwEgrueE7mlLAk9tDkBE5P9+qflxArPMpdlgr319y7JxnSIIgHs8MQoy0Ecm2 HbBCN4sBezWgdlEJkkXm9Vp5SxUplClhQrUmnDbXFopw+x6YxttuqpfvtIxUgwtX qOrAglfk6y7kw4Np0eN0chiD3zkRnqtfdJXBEcqyMaojhiDv0t4E69XgdMM0W3JK 3n0NAnBazSTOyTweliUm7+IY6/fcHCdgAt95XBGz3GXlHtlGlmQPUDj7Fy/ng2eG smTQMK+5qtFqNn+hT5zmka1+iQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD/BfVCl xlgLgLFnnhOj7UI2/XqVMB8GA1UdIwQYMBaAFGsMtZUD2olf+UJp16m8ICYXBNzp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDVFMC8yM0JGMkYyNjEx M0UxMUVBODhFODc4NzZDNEY5QUUwMi9hd3kxbFFQYWlWXzVRbW5YcWJ3Z0poY0Uz T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2F3eTFsUVBhaVZfNVFtblhxYndnSmhjRTNPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDVFMC8yM0JGMkYyNjExM0UxMUVBODhFODc4NzZDNEY5QUUwMi9hd3kxbFFQYWlW XzVRbW5YcWJ3Z0poY0UzT2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBohaMF3gW+8Xw53a8LN/Ra8PaunTeyC+F0N5eSlRzZj6SIiahpRnD/ WnoMF4EBgKO0Ibb2niG142iQMIdFXbthO3YS9Gr8WHiy4haa99lMLGpTFlEKCZfl 2nRbN2R9a1UYeOpEDMIstIjdklmH8+1pN44H03t6BksTzhRkoH0+3Is32uw2cRVz 1M3YcXCSfl3U1tCVBndMWnifrCNR2yddXV8akyNFCEcH76cbQL69RFz3XaWGi1AK O018wJTcxxERYHt6Gr8tTGJ4isqwYz9EC9/0WHX7jVdxgEfU55OhRjE663oBt3tq YELAEaZJ/OlE2Fge9oioXfUN+X8Ho/8G -----END CERTIFICATE-----Generated at Sat Jun 14 19:36:43 2025 by rpki-client