$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4713/FE1BD97C892A11EEB614826AC4F9AE02/aaSG-_IUhPFBL7ioCieKJIzvvrI.mft File: aaSG-_IUhPFBL7ioCieKJIzvvrI.mft (raw, json) Hash identifier: xBTtreevbMr4aSjd9Vdd/+t2mf5mmbszL1dzon57tUE= Subject key identifier: 78:A9:92:C7:C6:B1:02:C3:1D:AB:4D:30:79:E2:84:ED:74:47:1A:89 Authority key identifier: 69:A4:86:FB:F2:14:84:F1:41:2F:B8:A8:0A:27:8A:24:8C:EF:BE:B2 Certificate issuer: /CN=A91B4713/serialNumber=69A486FBF21484F1412FB8A80A278A248CEFBEB2 Certificate serial: 012D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaSG-_IUhPFBL7ioCieKJIzvvrI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4713/FE1BD97C892A11EEB614826AC4F9AE02/aaSG-_IUhPFBL7ioCieKJIzvvrI.mft Manifest number: 0128 Signing time: Fri 13 Jun 2025 03:38:49 +0000 Manifest this update: Fri 13 Jun 2025 03:38:49 +0000 Manifest next update: Fri 20 Jun 2025 03:38:49 +0000 Files and hashes: 1: aaSG-_IUhPFBL7ioCieKJIzvvrI.crl (hash: cvgTo6Z/5bD1srz7sXEX2+OId9KIGI8NkQdsMbptDnM=) 2: A5656D2E892B11EE94747D6BC4F9AE02.roa (hash: 01zpHNpEXp5bla5wzGX7psaD7zJbZ+wyzWYL5eybWGY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4713/FE1BD97C892A11EEB614826AC4F9AE02/aaSG-_IUhPFBL7ioCieKJIzvvrI.crl rsync://rpki.apnic.net/member_repository/A91B4713/FE1BD97C892A11EEB614826AC4F9AE02/aaSG-_IUhPFBL7ioCieKJIzvvrI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaSG-_IUhPFBL7ioCieKJIzvvrI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 03:38:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 301 (0x12d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4713, serialNumber=69A486FBF21484F1412FB8A80A278A248CEFBEB2 Validity Not Before: Jun 13 03:38:49 2025 GMT Not After : Jun 20 03:38:49 2025 GMT Subject: CN=684b9d49-5326 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ac:49:04:8f:13:b2:12:28:79:4e:a3:72:b0: 45:77:c2:ee:ff:13:f4:6b:12:3b:90:61:49:c0:20: ec:c5:13:6b:a2:75:e6:3b:ea:86:89:22:4c:38:82: 19:11:73:3b:83:64:db:92:f8:cd:ef:42:0a:a7:d4: 05:ee:32:31:b0:ea:4c:7e:91:24:e8:1a:24:91:f6: b1:47:ea:17:0f:08:a1:bc:9f:ae:dc:e2:87:5a:c7: 47:47:7f:b6:60:a8:45:81:b1:1a:53:69:4e:18:c0: 97:6c:22:0a:d1:ec:83:f7:36:54:03:78:99:7b:f8: ab:e7:6c:d5:b1:dc:64:d0:fe:b6:78:8d:d7:d1:98: ca:e3:51:f4:61:41:e9:e0:9b:fe:57:32:86:a8:1c: 9d:cb:db:4c:85:f0:53:3e:64:0b:b1:56:9e:0d:15: ee:74:9b:5c:ed:03:a9:04:67:25:e3:37:8b:d9:63: 63:d0:87:6f:dd:e7:90:e9:3e:d3:07:32:30:62:d2: 0e:e8:83:55:e9:7e:63:91:e1:c9:1c:0d:7c:4f:fa: e7:38:93:7b:8e:95:7b:d7:15:72:9a:7d:d0:4f:b1: 25:86:66:d7:6e:c5:c1:46:9c:bc:7b:b0:95:8c:90: 8e:ce:8a:41:8a:77:d8:5d:6d:19:12:86:17:85:79: c3:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:A9:92:C7:C6:B1:02:C3:1D:AB:4D:30:79:E2:84:ED:74:47:1A:89 X509v3 Authority Key Identifier: keyid:69:A4:86:FB:F2:14:84:F1:41:2F:B8:A8:0A:27:8A:24:8C:EF:BE:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4713/FE1BD97C892A11EEB614826AC4F9AE02/aaSG-_IUhPFBL7ioCieKJIzvvrI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaSG-_IUhPFBL7ioCieKJIzvvrI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4713/FE1BD97C892A11EEB614826AC4F9AE02/aaSG-_IUhPFBL7ioCieKJIzvvrI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:2d:8e:05:a0:af:6b:2c:4f:dd:45:69:52:fd:21:ab:91:5b: 05:fb:e2:9b:ec:36:1d:aa:ba:5a:51:49:95:dc:f9:cd:9c:c3: df:f9:fa:f8:c3:8c:9c:6b:03:ca:a2:4a:c4:80:ea:fd:87:12: 19:6a:df:98:6f:79:55:15:6a:bc:ca:21:fc:b2:7c:ca:e2:e0: 45:da:be:33:4b:09:52:4a:0a:d2:5d:3d:33:b3:bc:d9:b2:2f: d4:1a:ee:8b:8c:28:ef:2c:2e:81:36:21:3c:2a:18:6d:cb:6a: 4b:77:3c:74:33:95:46:2c:c7:94:4a:45:c9:4d:62:7a:c1:23: 91:83:5f:a0:ba:63:5d:c3:87:84:d8:4b:a5:9d:a7:2c:d9:f2: 1c:eb:84:f0:1b:84:a4:d8:98:ec:9a:63:14:f7:14:1d:e9:44: 68:7e:77:ce:4d:98:69:98:66:14:75:49:94:03:86:3b:cc:1e: c5:af:54:60:03:76:ca:47:b5:3c:c2:4a:72:05:16:90:76:91: 00:b5:22:72:a4:d2:59:a6:0d:7f:02:22:69:6c:f8:65:e9:73: c9:4f:c0:68:9e:f7:be:73:11:bd:ea:f4:38:a0:36:1f:cd:73: 34:85:0e:6c:5a:fb:70:40:a2:a6:07:37:f5:30:18:55:d7:0e: 7b:c8:ab:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQ3MTMxMTAvBgNVBAUTKDY5QTQ4NkZCRjIxNDg0RjE0MTJGQjhBODBBMjc4QTI0 OENFRkJFQjIwHhcNMjUwNjEzMDMzODQ5WhcNMjUwNjIwMDMzODQ5WjAYMRYwFAYD VQQDEw02ODRiOWQ0OS01MzI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApKxJBI8TshIoeU6jcrBFd8Lu/xP0axI7kGFJwCDsxRNronXmO+qGiSJMOIIZ EXM7g2TbkvjN70IKp9QF7jIxsOpMfpEk6BokkfaxR+oXDwihvJ+u3OKHWsdHR3+2 YKhFgbEaU2lOGMCXbCIK0eyD9zZUA3iZe/ir52zVsdxk0P62eI3X0ZjK41H0YUHp 4Jv+VzKGqBydy9tMhfBTPmQLsVaeDRXudJtc7QOpBGcl4zeL2WNj0Idv3eeQ6T7T BzIwYtIO6INV6X5jkeHJHA18T/rnOJN7jpV71xVymn3QT7ElhmbXbsXBRpy8e7CV jJCOzopBinfYXW0ZEoYXhXnD5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHipksfG sQLDHatNMHnihO10RxqJMB8GA1UdIwQYMBaAFGmkhvvyFITxQS+4qAoniiSM776y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDcxMy9GRTFCRDk3Qzg5 MkExMUVFQjYxNDgyNkFDNEY5QUUwMi9hYVNHLV9JVWhQRkJMN2lvQ2llS0pJenZ2 ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FhU0ctX0lVaFBGQkw3aW9DaWVLSkl6dnZySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDcxMy9GRTFCRDk3Qzg5MkExMUVFQjYxNDgyNkFDNEY5QUUwMi9hYVNHLV9JVWhQ RkJMN2lvQ2llS0pJenZ2ckkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCILY4FoK9rLE/dRWlS/SGrkVsF++Kb7DYdqrpaUUmV3PnNnMPf+fr4 w4ycawPKokrEgOr9hxIZat+Yb3lVFWq8yiH8snzK4uBF2r4zSwlSSgrSXT0zs7zZ si/UGu6LjCjvLC6BNiE8Khhty2pLdzx0M5VGLMeUSkXJTWJ6wSORg1+gumNdw4eE 2Eulnacs2fIc64TwG4Sk2JjsmmMU9xQd6URofnfOTZhpmGYUdUmUA4Y7zB7Fr1Rg A3bKR7U8wkpyBRaQdpEAtSJypNJZpg1/AiJpbPhl6XPJT8Bonve+cxG96vQ4oDYf zXM0hQ5sWvtwQKKmBzf1MBhV1w57yKtX -----END CERTIFICATE-----Generated at Sat Jun 14 19:28:57 2025 by rpki-client