$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.mft File: Aqo6dsRZSXsbRfJukESsxvLoBE8.mft (raw, json) Hash identifier: GlkqtDdhbexuOGmDnYsQRRenHCGZKDNljjwsebWCbhA= Subject key identifier: 9C:42:7A:E7:95:A4:7F:44:F3:05:4C:3D:EE:DC:1B:8C:37:DE:56:6E Authority key identifier: 02:AA:3A:76:C4:59:49:7B:1B:45:F2:6E:90:44:AC:C6:F2:E8:04:4F Certificate issuer: /CN=A91BA5BA/serialNumber=02AA3A76C459497B1B45F26E9044ACC6F2E8044F Certificate serial: 0379 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aqo6dsRZSXsbRfJukESsxvLoBE8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.mft Manifest number: 0368 Signing time: Sun 15 Jun 2025 00:40:52 +0000 Manifest this update: Sun 15 Jun 2025 00:40:52 +0000 Manifest next update: Sun 22 Jun 2025 00:40:52 +0000 Files and hashes: 1: Aqo6dsRZSXsbRfJukESsxvLoBE8.crl (hash: 3wgOZxUau96YhvKf7Tn+9C3Wz1HGrx8umPO42xSqI4I=) 2: 87F2D334F2D811EC8F663D52C4F9AE02.roa (hash: /NuTqSUBTeFJ9CyVzXuBIUWT5gpveEGDRyxNvLNEQIM=) 3: 5FFA5548B5A311EEA95C5732C4F9AE02.roa (hash: GQNcpw13U6rTwcbD2+x10d2Oo9BkdgjUG3Bpk2yiXDc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.crl rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aqo6dsRZSXsbRfJukESsxvLoBE8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 00:40:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 889 (0x379) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA5BA, serialNumber=02AA3A76C459497B1B45F26E9044ACC6F2E8044F Validity Not Before: Jun 15 00:40:52 2025 GMT Not After : Jun 22 00:40:52 2025 GMT Subject: CN=684e1694-63c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5e:34:9a:e1:c8:d1:5c:07:4d:a8:87:79:76: 2d:03:0e:86:4e:3a:64:70:4a:47:8a:99:d9:ef:14: 0d:c4:9f:21:dd:99:72:35:b7:52:10:30:ba:f9:0b: 3d:1c:34:6b:48:73:37:c0:c8:20:52:4e:9a:0e:e9: d6:4e:88:0d:54:a3:94:23:87:cb:5f:96:36:00:d8: ea:0a:b9:fb:8e:38:0e:1f:a9:14:10:69:e6:fa:05: 22:50:79:a2:9c:32:28:74:65:6d:2d:2b:96:11:93: 9e:1b:aa:5e:47:85:8e:06:28:9c:00:a8:7c:c6:6d: fb:84:f7:94:05:59:b4:25:43:7b:12:ef:c3:10:aa: cc:fd:bd:bb:40:41:1f:63:c0:ff:56:69:f0:b7:9d: 2a:22:bf:91:a6:b1:5f:08:d1:2a:93:90:9f:59:3c: f8:a0:56:4a:a0:d1:08:1f:36:e0:fe:64:cc:5a:20: ff:a3:1c:94:f1:40:c1:ef:07:ed:ca:5b:14:bc:52: 5d:b8:0c:d3:b9:b3:b0:18:a6:ad:6c:d4:9e:91:8c: 50:62:70:65:a5:2b:c9:f5:cc:ce:89:f7:ec:19:b7: af:e4:60:28:e7:ce:61:65:53:2c:e3:b3:2c:5e:d3: 2d:a2:ff:32:67:8b:67:48:c5:f4:c2:2b:1c:c7:f5: c0:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:42:7A:E7:95:A4:7F:44:F3:05:4C:3D:EE:DC:1B:8C:37:DE:56:6E X509v3 Authority Key Identifier: keyid:02:AA:3A:76:C4:59:49:7B:1B:45:F2:6E:90:44:AC:C6:F2:E8:04:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aqo6dsRZSXsbRfJukESsxvLoBE8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:08:44:85:54:e2:43:c3:b8:df:d4:a0:88:a5:51:92:57:d9: fb:a7:9d:ae:6f:4f:7d:6d:31:dd:74:4b:ce:cd:a3:f8:f3:78: 46:34:c0:64:9d:2a:e9:b0:6d:25:29:08:14:bf:24:c3:66:62: 30:3f:57:8e:28:44:e4:16:f1:09:fc:f5:31:13:b6:ba:4f:bb: aa:44:fb:44:93:89:83:85:cb:c7:55:6d:de:09:10:f5:17:5c: 37:d5:22:8f:27:7b:27:52:f8:58:be:76:ac:4e:81:58:43:87: 31:0a:17:3a:8c:d3:2f:d0:9d:1b:97:c0:00:e3:13:b0:e3:0a: ab:62:f7:03:8b:7a:32:b1:68:79:3b:c3:be:be:b6:e6:ae:03: 1e:16:52:24:58:ae:92:52:10:60:0d:3e:30:6b:4a:a0:6f:f4: 84:b9:ee:b7:60:e9:52:0b:2f:31:cf:da:b4:8f:77:3d:09:c7: 64:ff:21:1a:1f:48:d2:5e:18:06:92:80:fa:9f:60:3b:5c:6b: 8f:2c:2f:79:2a:ce:43:cd:3a:47:b7:0d:26:a0:60:7e:da:bb: e2:87:b9:a3:91:25:6e:7a:d3:28:df:74:0a:4f:17:0f:e4:0b: 31:2f:4f:a5:63:c2:a7:26:99:0c:6e:42:53:0d:69:a6:fb:0a: 2d:fb:ae:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkE1QkExMTAvBgNVBAUTKDAyQUEzQTc2QzQ1OTQ5N0IxQjQ1RjI2RTkwNDRBQ0M2 RjJFODA0NEYwHhcNMjUwNjE1MDA0MDUyWhcNMjUwNjIyMDA0MDUyWjAYMRYwFAYD VQQDEw02ODRlMTY5NC02M2M5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwl40muHI0VwHTaiHeXYtAw6GTjpkcEpHipnZ7xQNxJ8h3ZlyNbdSEDC6+Qs9 HDRrSHM3wMggUk6aDunWTogNVKOUI4fLX5Y2ANjqCrn7jjgOH6kUEGnm+gUiUHmi nDIodGVtLSuWEZOeG6peR4WOBiicAKh8xm37hPeUBVm0JUN7Eu/DEKrM/b27QEEf Y8D/Vmnwt50qIr+RprFfCNEqk5CfWTz4oFZKoNEIHzbg/mTMWiD/oxyU8UDB7wft ylsUvFJduAzTubOwGKatbNSekYxQYnBlpSvJ9czOiffsGbev5GAo585hZVMs47Ms XtMtov8yZ4tnSMX0wiscx/XAvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJxCeueV pH9E8wVMPe7cG4w33lZuMB8GA1UdIwQYMBaAFAKqOnbEWUl7G0XybpBErMby6ARP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTVCQS80MzI2Q0JDMEI3 Q0QxMUVDQUY2ODEzMzVDNEY5QUUwMi9BcW82ZHNSWlNYc2JSZkp1a0VTc3h2TG9C RTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FxbzZkc1JaU1hzYlJmSnVrRVNzeHZMb0JFOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTVCQS80MzI2Q0JDMEI3Q0QxMUVDQUY2ODEzMzVDNEY5QUUwMi9BcW82ZHNSWlNY c2JSZkp1a0VTc3h2TG9CRTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfCESFVOJDw7jf1KCIpVGSV9n7p52ub099bTHddEvOzaP483hGNMBk nSrpsG0lKQgUvyTDZmIwP1eOKETkFvEJ/PUxE7a6T7uqRPtEk4mDhcvHVW3eCRD1 F1w31SKPJ3snUvhYvnasToFYQ4cxChc6jNMv0J0bl8AA4xOw4wqrYvcDi3oysWh5 O8O+vrbmrgMeFlIkWK6SUhBgDT4wa0qgb/SEue63YOlSCy8xz9q0j3c9Ccdk/yEa H0jSXhgGkoD6n2A7XGuPLC95Ks5DzTpHtw0moGB+2rvih7mjkSVuetMo33QKTxcP 5AsxL0+lY8KnJpkMbkJTDWmm+wot+64T -----END CERTIFICATE-----Generated at Sun Jun 15 08:39:04 2025 by rpki-client