$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.mft File: ByRKmUzcS5OAdHEcQkjUn51Q2Cc.mft (raw, json) Hash identifier: CDmMce1H71Qo8LjfI1yThBJd3YMkeEFhx5wuo4BoHWQ= Subject key identifier: 03:EA:C4:DD:E3:4B:53:55:D9:10:2C:F2:E7:1D:DE:86:C6:F2:65:7E Authority key identifier: 07:24:4A:99:4C:DC:4B:93:80:74:71:1C:42:48:D4:9F:9D:50:D8:27 Certificate issuer: /CN=A91CEE85/serialNumber=07244A994CDC4B938074711C4248D49F9D50D827 Certificate serial: AF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.mft Manifest number: AD Signing time: Tue 17 Jun 2025 05:01:58 +0000 Manifest this update: Tue 17 Jun 2025 05:01:57 +0000 Manifest next update: Tue 24 Jun 2025 05:01:57 +0000 Files and hashes: 1: ByRKmUzcS5OAdHEcQkjUn51Q2Cc.crl (hash: fDeeH8mF2PAF/n4nEiJQKnlzf5reOo5TpJqG9OINizM=) 2: C2838C8245B011EFAE60CC76C4F9AE02.roa (hash: dwidYpMLAJTM9jddkunL1qdnHKOnW/Pf1EZaeXyq6Fk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.crl rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 05:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 175 (0xaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEE85, serialNumber=07244A994CDC4B938074711C4248D49F9D50D827 Validity Not Before: Jun 17 05:01:57 2025 GMT Not After : Jun 24 05:01:57 2025 GMT Subject: CN=6850f6c6-2cc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ab:fa:d3:80:73:bf:78:e3:16:db:64:44:22: c3:bc:30:22:1f:49:c3:d2:bc:dd:ba:0b:8b:ae:1c: 43:e9:9d:a2:66:65:de:91:27:dd:02:cd:0a:b5:9a: 61:d5:a3:aa:55:02:f3:26:3c:c9:e6:44:1e:0a:0c: a2:89:ec:dd:9a:b2:2c:52:0f:91:d3:3f:43:c7:0c: b8:cc:cb:b1:ca:66:68:1d:65:8d:47:c1:fb:82:72: 46:e1:b8:62:bf:0a:65:1b:a6:60:38:57:b4:ce:15: d0:f7:7b:90:2a:9e:3e:d3:80:bb:b7:55:03:6d:f1: e7:27:27:33:28:01:28:8a:f0:84:97:8f:37:0a:c8: 78:10:10:fd:e4:b0:05:4a:7b:e8:d0:5b:c9:f2:ad: af:ba:5f:3f:d4:06:eb:d6:20:8a:4b:bd:9c:3d:0c: ab:09:05:aa:15:de:d1:25:56:76:f7:45:a7:c9:42: 97:94:8f:07:0a:c9:26:bb:bc:32:7d:42:44:77:6c: e0:ea:51:dd:97:db:2b:d6:38:7a:99:45:59:8e:dd: 35:0a:32:67:09:8d:4f:90:aa:ed:16:18:93:bb:d5: 52:43:7c:30:01:17:c9:24:e2:ac:43:6e:3e:6e:8c: d5:66:b0:d6:91:58:79:3b:57:fc:18:aa:95:18:a9: 04:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:EA:C4:DD:E3:4B:53:55:D9:10:2C:F2:E7:1D:DE:86:C6:F2:65:7E X509v3 Authority Key Identifier: keyid:07:24:4A:99:4C:DC:4B:93:80:74:71:1C:42:48:D4:9F:9D:50:D8:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:0c:9c:6d:9f:f7:1e:f5:0c:41:99:d0:e1:1a:63:c0:cd:b6: 7b:15:a8:d1:6f:ce:93:9c:33:9f:db:70:05:73:84:3e:66:d7: 4b:7e:a0:8c:00:86:35:b0:18:f6:01:8c:ad:72:c1:55:b9:a2: 9b:2f:a8:fb:dc:5f:56:dd:9f:04:fc:ea:07:17:bb:7a:c1:b1: 9c:b2:02:bb:2f:2f:1a:b2:c4:34:9f:88:91:ab:03:42:03:2d: 57:88:b3:46:9a:fe:4f:e3:fd:d5:c4:09:f9:46:6d:5c:8e:d9: cf:6e:0b:43:47:a0:3e:d6:e6:fd:c2:56:3d:18:04:bb:96:f2: 16:e1:d0:6e:88:2a:76:ba:e9:d6:93:f6:5d:88:28:88:51:dd: 20:50:6a:72:ec:cf:f7:c2:6b:c2:a0:4d:c9:9f:10:04:bb:84: df:cc:cc:03:b9:81:02:c5:9f:b8:c2:68:67:5e:6d:4e:6b:a3: c2:72:8f:95:52:22:bb:cc:52:d5:87:ac:cf:18:20:10:26:01: 45:d1:07:01:6c:fb:ae:48:83:8d:49:7f:57:f6:8d:69:89:9a: 25:27:da:5e:43:67:cc:6f:01:2c:de:8a:44:db:63:f1:76:09: e1:04:33:01:07:6a:76:93:d7:56:62:78:ff:77:ac:03:25:24: d3:99:9f:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VFODUxMTAvBgNVBAUTKDA3MjQ0QTk5NENEQzRCOTM4MDc0NzExQzQyNDhENDlG OUQ1MEQ4MjcwHhcNMjUwNjE3MDUwMTU3WhcNMjUwNjI0MDUwMTU3WjAYMRYwFAYD VQQDEw02ODUwZjZjNi0yY2M4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApKv604Bzv3jjFttkRCLDvDAiH0nD0rzduguLrhxD6Z2iZmXekSfdAs0KtZph 1aOqVQLzJjzJ5kQeCgyiiezdmrIsUg+R0z9Dxwy4zMuxymZoHWWNR8H7gnJG4bhi vwplG6ZgOFe0zhXQ93uQKp4+04C7t1UDbfHnJyczKAEoivCEl483Csh4EBD95LAF Snvo0FvJ8q2vul8/1Abr1iCKS72cPQyrCQWqFd7RJVZ290WnyUKXlI8HCskmu7wy fUJEd2zg6lHdl9sr1jh6mUVZjt01CjJnCY1PkKrtFhiTu9VSQ3wwARfJJOKsQ24+ bozVZrDWkVh5O1f8GKqVGKkEdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAPqxN3j S1NV2RAs8ucd3obG8mV+MB8GA1UdIwQYMBaAFAckSplM3EuTgHRxHEJI1J+dUNgn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUU4NS9GQzY2RjVBRTQ1 QUQxMUVGQjQzNUVCNkZDNEY5QUUwMi9CeVJLbVV6Y1M1T0FkSEVjUWtqVW41MVEy Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0J5UkttVXpjUzVPQWRIRWNRa2pVbjUxUTJDYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUU4NS9GQzY2RjVBRTQ1QUQxMUVGQjQzNUVCNkZDNEY5QUUwMi9CeVJLbVV6Y1M1 T0FkSEVjUWtqVW41MVEyQ2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTDJxtn/ce9QxBmdDhGmPAzbZ7FajRb86TnDOf23AFc4Q+ZtdLfqCM AIY1sBj2AYytcsFVuaKbL6j73F9W3Z8E/OoHF7t6wbGcsgK7Ly8assQ0n4iRqwNC Ay1XiLNGmv5P4/3VxAn5Rm1cjtnPbgtDR6A+1ub9wlY9GAS7lvIW4dBuiCp2uunW k/ZdiCiIUd0gUGpy7M/3wmvCoE3JnxAEu4TfzMwDuYECxZ+4wmhnXm1Oa6PCco+V UiK7zFLVh6zPGCAQJgFF0QcBbPuuSIONSX9X9o1piZolJ9peQ2fMbwEs3opE22Px dgnhBDMBB2p2k9dWYnj/d6wDJSTTmZ+x -----END CERTIFICATE-----Generated at Tue Jun 17 22:31:22 2025 by rpki-client