$ rpki-client -vvf rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft File: baE3ApweGgauD6j3W7iPLKV4-Fo.mft (raw, json) Hash identifier: S+xEodoPdSu1R2cTyec1HMpGXuc+grzzwyhiOeKVZeM= Subject key identifier: E0:19:D6:3D:EA:5D:37:45:18:95:62:00:0C:AF:BF:0A:5D:1D:99:D2 Authority key identifier: 6D:A1:37:02:9C:1E:1A:06:AE:0F:A8:F7:5B:B8:8F:2C:A5:78:F8:5A Certificate issuer: /CN=A91C46FC/serialNumber=6DA137029C1E1A06AE0FA8F75BB88F2CA578F85A Certificate serial: 0A86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baE3ApweGgauD6j3W7iPLKV4-Fo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft Manifest number: 0A71 Signing time: Thu 12 Jun 2025 19:25:47 +0000 Manifest this update: Thu 12 Jun 2025 19:25:46 +0000 Manifest next update: Thu 19 Jun 2025 19:25:46 +0000 Files and hashes: 1: baE3ApweGgauD6j3W7iPLKV4-Fo.crl (hash: MgkzWR59wcpLT19QHmnRyktOOM75EluGCAqxctwaghI=) 2: F450F110AAFE11EAAF572C5EC4F9AE02.roa (hash: z5ES9QnxCtUmMGb5rTePskEShI6wqlkuHRSuLJa+HEo=) 3: FB648B80F9DD11EC85C44880C4F9AE02.roa (hash: Sq5YLnrI6niWLMeWLjro3RFtUrBz6mhWVJH2BrDvMPI=) 4: 04D48448620C11EA9F85A781C4F9AE02.roa (hash: QgJRfFH6YN7lRNZNVoON5AcD6zI0xlKC/pPKsOyjCXg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.crl rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baE3ApweGgauD6j3W7iPLKV4-Fo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 19:25:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2694 (0xa86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C46FC, serialNumber=6DA137029C1E1A06AE0FA8F75BB88F2CA578F85A Validity Not Before: Jun 12 19:25:46 2025 GMT Not After : Jun 19 19:25:46 2025 GMT Subject: CN=684b29bb-a74a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d5:f4:da:32:75:9c:86:aa:5e:1c:5a:46:ac: bf:48:6d:88:30:fc:4c:88:7e:22:d4:c9:08:2b:ed: 43:c2:b6:66:97:c8:bb:68:98:d3:bf:00:6d:e9:34: 86:74:25:50:b0:4d:a1:0a:b6:d0:cb:88:fd:df:f5: 69:db:75:0a:61:c7:8f:e9:6e:80:fc:34:2f:53:77: ed:fe:d2:aa:c9:81:80:3f:4e:13:76:f4:95:6e:cb: b3:86:fd:0c:bd:ea:34:4d:4b:21:c1:da:35:c1:66: 9e:52:53:99:9d:31:18:f4:a1:11:83:56:03:e7:93: 3e:66:21:7b:f7:88:99:32:35:ef:97:40:c3:0d:d9: 2a:07:96:63:41:75:90:46:df:d3:a7:a3:f0:68:54: 23:8b:7b:d9:2e:cb:88:bc:a4:f0:ff:05:c5:d8:d5: bb:b2:f8:88:2a:29:9a:31:b2:5d:53:27:81:63:d7: c0:4b:4a:99:b6:90:eb:ef:27:1f:22:8e:bf:8b:f6: 52:c1:55:1b:7c:f7:d4:5e:ce:02:06:e7:8d:1f:2e: 7c:02:a3:a1:dc:80:86:c7:de:ed:ed:25:5c:4c:fc: a9:70:97:6c:38:08:0f:e0:b8:f0:c0:92:f6:69:c2: 78:eb:8e:d6:97:fd:3d:1a:39:25:7a:da:73:0e:cb: 43:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:19:D6:3D:EA:5D:37:45:18:95:62:00:0C:AF:BF:0A:5D:1D:99:D2 X509v3 Authority Key Identifier: keyid:6D:A1:37:02:9C:1E:1A:06:AE:0F:A8:F7:5B:B8:8F:2C:A5:78:F8:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baE3ApweGgauD6j3W7iPLKV4-Fo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ec:6a:e9:ce:bd:7d:3f:74:8e:af:23:04:42:61:d5:7e:6b:b1: fe:ff:81:d1:0a:a3:8b:55:0e:4d:7b:7f:08:cf:52:97:5d:c0: fc:31:12:6a:3d:f0:0d:46:72:b1:71:84:47:97:63:f2:5d:86: 7d:19:70:f7:ca:14:13:00:e7:50:a5:24:f5:61:ee:55:cf:50: 40:0a:6c:eb:d9:a0:d3:40:2a:a9:89:13:e6:11:13:8e:45:58: 89:4d:1c:58:b4:1c:da:8f:54:c8:8a:c8:a0:70:ea:f0:80:33: 32:f0:0f:58:cf:84:e7:30:18:1f:1f:c3:e2:89:f7:79:15:ba: ed:3a:e7:94:fb:8a:48:e4:9a:3a:0b:58:29:3b:ee:03:b0:07: 8c:11:da:32:c4:e5:19:ec:8b:5b:dc:67:9c:f8:fc:fd:8a:6c: cb:47:cf:0d:70:ba:27:be:54:11:a2:e0:47:ab:85:87:2b:c0: d0:9c:81:08:8b:b5:2b:97:a8:4c:1e:29:c9:d4:13:ee:d0:5e: 85:23:b1:95:00:1c:51:ed:7a:64:fd:8b:32:58:0e:cf:62:62: 22:61:76:0a:c0:af:f2:17:a1:ad:fd:d4:fe:5c:67:1c:6c:9b: b7:8f:b2:7b:15:a2:3b:4b:27:ae:88:c2:81:43:e2:d5:38:d7: 55:51:e2:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCoYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ2RkMxMTAvBgNVBAUTKDZEQTEzNzAyOUMxRTFBMDZBRTBGQThGNzVCQjg4RjJD QTU3OEY4NUEwHhcNMjUwNjEyMTkyNTQ2WhcNMjUwNjE5MTkyNTQ2WjAYMRYwFAYD VQQDEw02ODRiMjliYi1hNzRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx9X02jJ1nIaqXhxaRqy/SG2IMPxMiH4i1MkIK+1DwrZml8i7aJjTvwBt6TSG dCVQsE2hCrbQy4j93/Vp23UKYceP6W6A/DQvU3ft/tKqyYGAP04TdvSVbsuzhv0M veo0TUshwdo1wWaeUlOZnTEY9KERg1YD55M+ZiF794iZMjXvl0DDDdkqB5ZjQXWQ Rt/Tp6PwaFQji3vZLsuIvKTw/wXF2NW7sviIKimaMbJdUyeBY9fAS0qZtpDr7ycf Io6/i/ZSwVUbfPfUXs4CBueNHy58AqOh3ICGx97t7SVcTPypcJdsOAgP4LjwwJL2 acJ4647Wl/09GjkletpzDstDWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOAZ1j3q XTdFGJViAAyvvwpdHZnSMB8GA1UdIwQYMBaAFG2hNwKcHhoGrg+o91u4jyylePha MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDZGQy8wRTg1MDVGMDYy MDUxMUVBQkFGRkUxNkJDNEY5QUUwMi9iYUUzQXB3ZUdnYXVENmozVzdpUExLVjQt Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JhRTNBcHdlR2dhdUQ2ajNXN2lQTEtWNC1Gby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDZGQy8wRTg1MDVGMDYyMDUxMUVBQkFGRkUxNkJDNEY5QUUwMi9iYUUzQXB3ZUdn YXVENmozVzdpUExLVjQtRm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDsaunOvX0/dI6vIwRCYdV+a7H+/4HRCqOLVQ5Ne38Iz1KXXcD8MRJq PfANRnKxcYRHl2PyXYZ9GXD3yhQTAOdQpST1Ye5Vz1BACmzr2aDTQCqpiRPmEROO RViJTRxYtBzaj1TIisigcOrwgDMy8A9Yz4TnMBgfH8Piifd5FbrtOueU+4pI5Jo6 C1gpO+4DsAeMEdoyxOUZ7Itb3Gec+Pz9imzLR88NcLonvlQRouBHq4WHK8DQnIEI i7Url6hMHinJ1BPu0F6FI7GVABxR7Xpk/YsyWA7PYmIiYXYKwK/yF6Gt/dT+XGcc bJu3j7J7FaI7SyeuiMKBQ+LVONdVUeIP -----END CERTIFICATE-----Generated at Sat Jun 14 18:08:39 2025 by rpki-client