$ rpki-client -vvf rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.mft File: aWr0_gNmE9ZRteKaCdT-cbVVpEk.mft (raw, json) Hash identifier: CGqlESObuHx2AHOoNweF41xe89X6nPejkorOKtZerfI= Subject key identifier: 2F:A6:38:93:CA:FC:50:38:EC:71:1C:06:2D:CA:2C:AD:30:51:63:FA Authority key identifier: 69:6A:F4:FE:03:66:13:D6:51:B5:E2:9A:09:D4:FE:71:B5:55:A4:49 Certificate issuer: /CN=A91A80F9/serialNumber=696AF4FE036613D651B5E29A09D4FE71B555A449 Certificate serial: 0CAB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWr0_gNmE9ZRteKaCdT-cbVVpEk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.mft Manifest number: 0CA3 Signing time: Sat 14 Jun 2025 18:03:52 +0000 Manifest this update: Sat 14 Jun 2025 18:03:51 +0000 Manifest next update: Sat 21 Jun 2025 18:03:51 +0000 Files and hashes: 1: aWr0_gNmE9ZRteKaCdT-cbVVpEk.crl (hash: bpYdpx6goFHUt8Egts55j1dEHKDNx2wzIkbE6X85BA4=) 2: 3EF3C6EEF8B511EAAD434755C4F9AE02.roa (hash: 2oxrZykX6FImkgj0+sEn3YTkG/5Ks+ROCEDtHP8d+xs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.crl rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWr0_gNmE9ZRteKaCdT-cbVVpEk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 18:03:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3243 (0xcab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A80F9, serialNumber=696AF4FE036613D651B5E29A09D4FE71B555A449 Validity Not Before: Jun 14 18:03:51 2025 GMT Not After : Jun 21 18:03:51 2025 GMT Subject: CN=684db987-4d53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:17:88:b2:81:26:e9:52:ef:46:9b:41:ea:61: 4d:f5:08:b4:2e:f7:78:9f:66:fd:93:15:fa:b6:11: a7:e7:40:d4:8d:7c:3b:6e:cb:44:91:28:a1:64:85: 09:24:94:b1:ef:a8:75:00:4b:15:95:e6:2a:a5:9d: dc:ed:c2:3b:34:6b:23:d2:f3:03:34:21:c0:b4:cf: e2:cc:6d:e1:0d:38:89:0f:40:ef:1a:32:f3:50:48: 2d:5c:4c:3d:a9:23:6a:ab:5a:6b:bc:b2:c4:5e:8b: 0c:1c:ab:0b:22:f3:c3:72:bd:60:22:d2:6f:96:27: 7a:08:b2:07:4f:1f:a1:e7:42:7b:ec:8e:b8:ca:66: 9a:0f:35:bf:5a:d0:7a:24:c6:85:55:85:57:ea:d2: e2:f8:2e:33:f1:20:f2:3a:7a:9c:ac:97:c8:0d:3e: 0b:d5:85:98:7a:22:c6:3f:66:c7:02:97:8d:14:16: b7:5f:0c:9a:5c:36:69:80:bc:bd:04:70:3d:02:9a: aa:6f:9a:90:13:e9:0c:8a:e9:51:20:99:e0:f7:41: d2:5a:55:bd:7f:14:87:b2:a7:d3:57:22:6f:0b:a8: f7:91:b6:62:3f:83:9f:cc:9a:f5:01:6e:a7:87:5c: 23:0d:52:f1:78:72:6a:3d:8e:7e:07:1f:92:5d:6c: 83:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:A6:38:93:CA:FC:50:38:EC:71:1C:06:2D:CA:2C:AD:30:51:63:FA X509v3 Authority Key Identifier: keyid:69:6A:F4:FE:03:66:13:D6:51:B5:E2:9A:09:D4:FE:71:B5:55:A4:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWr0_gNmE9ZRteKaCdT-cbVVpEk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:ae:ab:44:9f:e2:eb:f3:0c:bb:46:bb:be:d1:c0:71:12:df: 90:b5:7c:3c:a2:ea:ef:1f:a9:ef:65:2d:96:bb:20:d4:92:ce: e4:ab:c7:fc:47:44:32:5e:04:35:71:1b:08:71:a6:b0:d7:04: b0:ea:f2:07:4b:2f:c7:c1:d6:d9:88:eb:96:6b:25:9a:74:71: d3:53:f4:c2:1f:f3:a1:a3:59:7f:e4:0f:df:a7:66:5d:58:05: 12:c5:93:8e:3a:72:fb:b8:23:e0:41:99:b0:4f:25:cf:e8:2e: 51:6a:24:54:8b:b2:2a:e9:0f:14:a0:3b:7b:1c:4e:52:cf:58: b1:e3:d5:bd:0f:56:98:e3:5c:16:f2:47:c6:2c:be:a8:a9:66: d1:c4:d7:e4:42:fd:c0:8d:26:ac:bb:5c:95:75:b0:05:81:87: 23:17:6e:dd:d0:45:03:e6:0d:a4:67:d1:02:5a:ba:70:af:56: 94:7d:92:15:40:d5:32:fd:0f:0d:00:fa:38:0e:56:4d:59:10: c7:bc:3b:05:7f:0e:53:95:88:92:6f:dd:91:5a:3f:8f:75:ec: 8e:b3:bb:51:3a:ab:3c:3f:e0:b1:2d:cb:86:84:30:67:68:be: 70:b2:e7:62:fc:33:0f:f6:30:25:ac:dc:15:78:4c:bd:78:98: 81:08:ed:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTgwRjkxMTAvBgNVBAUTKDY5NkFGNEZFMDM2NjEzRDY1MUI1RTI5QTA5RDRGRTcx QjU1NUE0NDkwHhcNMjUwNjE0MTgwMzUxWhcNMjUwNjIxMTgwMzUxWjAYMRYwFAYD VQQDEw02ODRkYjk4Ny00ZDUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsxeIsoEm6VLvRptB6mFN9Qi0Lvd4n2b9kxX6thGn50DUjXw7bstEkSihZIUJ JJSx76h1AEsVleYqpZ3c7cI7NGsj0vMDNCHAtM/izG3hDTiJD0DvGjLzUEgtXEw9 qSNqq1prvLLEXosMHKsLIvPDcr1gItJvlid6CLIHTx+h50J77I64ymaaDzW/WtB6 JMaFVYVX6tLi+C4z8SDyOnqcrJfIDT4L1YWYeiLGP2bHApeNFBa3XwyaXDZpgLy9 BHA9Apqqb5qQE+kMiulRIJng90HSWlW9fxSHsqfTVyJvC6j3kbZiP4OfzJr1AW6n h1wjDVLxeHJqPY5+Bx+SXWyDWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC+mOJPK /FA47HEcBi3KLK0wUWP6MB8GA1UdIwQYMBaAFGlq9P4DZhPWUbXimgnU/nG1VaRJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODBGOS80OTc3M0FEMEY0 QTQxMUU5OENDNzVFMzdDNEY5QUUwMi9hV3IwX2dObUU5WlJ0ZUthQ2RULWNiVlZw RWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FXcjBfZ05tRTlaUnRlS2FDZFQtY2JWVnBFay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODBGOS80OTc3M0FEMEY0QTQxMUU5OENDNzVFMzdDNEY5QUUwMi9hV3IwX2dObUU5 WlJ0ZUthQ2RULWNiVlZwRWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5rqtEn+Lr8wy7Rru+0cBxEt+QtXw8ourvH6nvZS2WuyDUks7kq8f8 R0QyXgQ1cRsIcaaw1wSw6vIHSy/HwdbZiOuWayWadHHTU/TCH/Oho1l/5A/fp2Zd WAUSxZOOOnL7uCPgQZmwTyXP6C5RaiRUi7Iq6Q8UoDt7HE5Sz1ix49W9D1aY41wW 8kfGLL6oqWbRxNfkQv3AjSasu1yVdbAFgYcjF27d0EUD5g2kZ9ECWrpwr1aUfZIV QNUy/Q8NAPo4DlZNWRDHvDsFfw5TlYiSb92RWj+PdeyOs7tROqs8P+CxLcuGhDBn aL5wsudi/DMP9jAlrNwVeEy9eJiBCO0e -----END CERTIFICATE-----Generated at Sun Jun 15 09:49:21 2025 by rpki-client