$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.mft File: AXCw4NBuMUc8rBZOSwttIb300jc.mft (raw, json) Hash identifier: gkmyJaOS+486rXdBJPBQEQPuoOaDab6cCSqO+zs1YDE= Subject key identifier: FC:B8:FA:EE:1B:C4:1F:77:18:C8:A4:94:72:31:16:E2:8F:D2:3A:D3 Authority key identifier: 01:70:B0:E0:D0:6E:31:47:3C:AC:16:4E:4B:0B:6D:21:BD:F4:D2:37 Certificate issuer: /CN=A91AE9F7/serialNumber=0170B0E0D06E31473CAC164E4B0B6D21BDF4D237 Certificate serial: 0FE5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXCw4NBuMUc8rBZOSwttIb300jc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.mft Manifest number: 0FD9 Signing time: Mon 16 Jun 2025 17:29:55 +0000 Manifest this update: Mon 16 Jun 2025 17:29:55 +0000 Manifest next update: Mon 23 Jun 2025 17:29:55 +0000 Files and hashes: 1: AXCw4NBuMUc8rBZOSwttIb300jc.crl (hash: x7UcEK9bdg65u1ywNjwosC2+OmxL+7voQ3qWfGJaYzg=) 2: 1585570A544C11E9BDFF2B2DC4F9AE02.roa (hash: jZa47LQUiVvIxoLDSyE/2t1CJaYFtRO42+/jeT3MONo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.crl rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXCw4NBuMUc8rBZOSwttIb300jc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 17:29:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4069 (0xfe5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE9F7, serialNumber=0170B0E0D06E31473CAC164E4B0B6D21BDF4D237 Validity Not Before: Jun 16 17:29:55 2025 GMT Not After : Jun 23 17:29:55 2025 GMT Subject: CN=68505493-245d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:13:19:ae:49:a8:2e:27:ea:51:47:ef:15:2a: 17:ed:8b:8c:1a:4a:3d:f4:0d:83:bb:70:b1:8f:2d: 7e:5e:67:ea:4e:1a:10:31:f2:22:ec:13:e3:5c:6f: fc:e2:0f:40:05:79:21:ef:06:e8:52:cf:96:aa:7d: 36:31:1c:3d:80:aa:2e:aa:44:3a:b6:fc:7e:04:c6: 63:2a:1c:4c:37:27:16:02:a3:c7:54:07:cf:0d:e0: 41:d7:e0:34:84:61:41:6b:46:f8:ee:dd:58:7e:36: 24:93:42:9e:13:35:30:ae:b5:0e:75:22:ef:af:05: f8:f8:0c:12:18:67:10:0b:86:20:f4:14:04:2e:83: c1:73:1c:ab:16:26:1a:e8:7f:04:70:e1:9d:a6:88: e4:71:a8:a6:bd:ac:93:9b:64:90:c3:8f:ac:de:18: de:a6:80:be:59:a2:b8:80:36:76:4c:d4:4c:f2:c7: 6e:87:26:bf:ae:7a:bd:80:65:de:3e:e1:fc:4d:b2: a8:d5:88:73:d8:ac:6b:f9:85:d6:c0:4a:47:88:70: 43:66:b0:87:d8:84:33:49:47:48:90:47:c8:a4:91: a7:14:60:08:31:96:f1:eb:6e:68:2f:f5:9d:e9:01: 95:66:05:87:d9:47:35:2f:1c:dc:5e:9b:70:32:30: 10:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:B8:FA:EE:1B:C4:1F:77:18:C8:A4:94:72:31:16:E2:8F:D2:3A:D3 X509v3 Authority Key Identifier: keyid:01:70:B0:E0:D0:6E:31:47:3C:AC:16:4E:4B:0B:6D:21:BD:F4:D2:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXCw4NBuMUc8rBZOSwttIb300jc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:e0:f2:7d:f9:d7:58:1a:9d:ac:78:8c:50:09:d8:82:46:7a: bb:88:d3:91:8f:1c:9a:db:78:23:4c:d4:85:c0:e9:37:31:a2: 60:5b:3a:02:1d:ef:0c:9f:7a:49:52:98:16:a1:78:4e:27:26: 22:57:00:1f:4b:31:cf:2c:13:3a:d3:03:ab:ee:89:68:db:09: 44:29:fe:1c:e6:a0:48:84:25:59:c9:c0:9e:c9:56:69:0a:86: 36:e3:85:3d:9f:56:ed:d0:8e:7d:16:1c:94:be:11:5d:fc:ec: 63:f5:e0:9f:c3:f0:0e:5f:46:4d:5c:f1:30:ce:6f:a0:3a:23: 3d:a9:65:ca:0f:c1:ad:17:aa:7f:76:9a:7d:e7:f3:8f:fb:75: 37:4b:91:0b:08:61:dc:b6:42:8f:ae:3d:07:3d:a7:5a:15:ba: bb:41:08:ed:93:a9:45:81:43:c1:4e:23:a6:cc:2d:f6:8a:a0: 14:d7:17:60:bb:b8:66:e4:76:52:7d:77:90:07:37:a3:5c:45: 9c:dd:f9:da:31:34:43:3c:ff:48:b1:a9:47:6a:01:d4:ee:b0: ac:46:0a:e9:d3:13:a2:e2:2f:f6:a9:7d:37:18:a8:30:46:1c: 29:d1:55:ab:79:4b:3f:be:54:69:2c:92:40:22:81:f3:22:71: 13:fc:8d:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD+UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU5RjcxMTAvBgNVBAUTKDAxNzBCMEUwRDA2RTMxNDczQ0FDMTY0RTRCMEI2RDIx QkRGNEQyMzcwHhcNMjUwNjE2MTcyOTU1WhcNMjUwNjIzMTcyOTU1WjAYMRYwFAYD VQQDEw02ODUwNTQ5My0yNDVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0RMZrkmoLifqUUfvFSoX7YuMGko99A2Du3Cxjy1+XmfqThoQMfIi7BPjXG/8 4g9ABXkh7wboUs+Wqn02MRw9gKouqkQ6tvx+BMZjKhxMNycWAqPHVAfPDeBB1+A0 hGFBa0b47t1YfjYkk0KeEzUwrrUOdSLvrwX4+AwSGGcQC4Yg9BQELoPBcxyrFiYa 6H8EcOGdpojkcaimvayTm2SQw4+s3hjepoC+WaK4gDZ2TNRM8sduhya/rnq9gGXe PuH8TbKo1Yhz2Kxr+YXWwEpHiHBDZrCH2IQzSUdIkEfIpJGnFGAIMZbx625oL/Wd 6QGVZgWH2Uc1LxzcXptwMjAQRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPy4+u4b xB93GMiklHIxFuKP0jrTMB8GA1UdIwQYMBaAFAFwsODQbjFHPKwWTksLbSG99NI3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTlGNy8zNzlFQzc0MjU0 NEExMUU5QTM1MEMxMjdDNEY5QUUwMi9BWEN3NE5CdU1VYzhyQlpPU3d0dEliMzAw amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FYQ3c0TkJ1TVVjOHJCWk9Td3R0SWIzMDBqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTlGNy8zNzlFQzc0MjU0NEExMUU5QTM1MEMxMjdDNEY5QUUwMi9BWEN3NE5CdU1V YzhyQlpPU3d0dEliMzAwamMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBL4PJ9+ddYGp2seIxQCdiCRnq7iNORjxya23gjTNSFwOk3MaJgWzoC He8Mn3pJUpgWoXhOJyYiVwAfSzHPLBM60wOr7olo2wlEKf4c5qBIhCVZycCeyVZp CoY244U9n1bt0I59FhyUvhFd/Oxj9eCfw/AOX0ZNXPEwzm+gOiM9qWXKD8GtF6p/ dpp95/OP+3U3S5ELCGHctkKPrj0HPadaFbq7QQjtk6lFgUPBTiOmzC32iqAU1xdg u7hm5HZSfXeQBzejXEWc3fnaMTRDPP9IsalHagHU7rCsRgrp0xOi4i/2qX03GKgw Rhwp0VWreUs/vlRpLJJAIoHzInET/I2T -----END CERTIFICATE-----Generated at Tue Jun 17 04:44:18 2025 by rpki-client