$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft File: aXYgUV57Huisfz9tE76uumLE7ak.mft (raw, json) Hash identifier: ruZj3s1I6AV3YCc4YsDsQl3rOdDSPcm47xy+Y1XVnuE= Subject key identifier: AD:4F:52:F3:7D:5E:FE:6C:70:5D:2A:B0:8B:2E:3D:10:19:5F:8A:E5 Authority key identifier: 69:76:20:51:5E:7B:1E:E8:AC:7F:3F:6D:13:BE:AE:BA:62:C4:ED:A9 Certificate issuer: /CN=A91DE2AE/serialNumber=697620515E7B1EE8AC7F3F6D13BEAEBA62C4EDA9 Certificate serial: 01EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft Manifest number: 01D8 Signing time: Fri 13 Jun 2025 01:59:08 +0000 Manifest this update: Fri 13 Jun 2025 01:59:07 +0000 Manifest next update: Fri 20 Jun 2025 01:59:07 +0000 Files and hashes: 1: aXYgUV57Huisfz9tE76uumLE7ak.crl (hash: yuivClTIeZBmi9cJvlc4ju6ABe6HxYgA7KHfyLdbo2o=) 2: 38E45CE08C2511EDB64DB410C4F9AE02.roa (hash: nGoAAcc8EiGUc2jIX6TFO/zcGFhh7Cn96wb0ZRxZplE=) 3: F3B716768F2F11EE86964D62C4F9AE02.roa (hash: ha92JVkNr7PUBbGWqelnj/HD1On/JDH9j7luLKpb+Ec=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.crl rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 01:59:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 490 (0x1ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE2AE, serialNumber=697620515E7B1EE8AC7F3F6D13BEAEBA62C4EDA9 Validity Not Before: Jun 13 01:59:07 2025 GMT Not After : Jun 20 01:59:07 2025 GMT Subject: CN=684b85ec-baba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a9:21:7a:63:3b:2a:a2:85:93:c7:57:0f:96: 13:f5:3c:95:e7:05:d9:86:fa:7a:2d:75:bd:c6:42: 9a:eb:da:7e:4f:d7:50:69:c5:9d:2a:5b:04:0a:30: f2:86:0d:8d:ca:16:26:c8:3a:13:f3:e2:a0:f9:f5: d3:a3:cf:28:57:6d:39:c1:a8:80:15:5e:a4:78:27: 7f:ae:21:dd:c6:af:da:cf:a8:83:40:24:84:07:97: ae:af:83:48:12:18:d0:f4:6a:12:9c:58:63:5e:63: d4:99:3c:75:2e:96:d9:ad:89:8b:46:d0:87:d9:7f: dc:2c:35:07:41:3f:89:50:63:a6:63:bf:5d:4f:3f: 4b:7a:79:83:04:e1:27:a6:c9:94:d5:36:60:dd:3a: 5c:5d:f9:6e:7e:f5:22:e5:80:f1:26:e6:b8:a3:b5: ac:17:0b:29:5d:46:91:df:05:1b:a7:53:29:a8:40: 1b:41:21:12:30:82:19:68:11:33:ee:2f:da:19:e7: 26:7e:26:bf:3b:be:29:9c:32:7e:b1:fc:1f:0f:11: 83:d8:3d:57:f6:41:7b:82:f1:42:28:f8:b7:59:2d: bc:18:f8:3c:e0:e5:17:28:25:e9:7f:b1:5a:6d:c5: 28:12:0a:b8:62:ce:98:9e:da:1b:90:91:11:dd:7c: 5f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:4F:52:F3:7D:5E:FE:6C:70:5D:2A:B0:8B:2E:3D:10:19:5F:8A:E5 X509v3 Authority Key Identifier: keyid:69:76:20:51:5E:7B:1E:E8:AC:7F:3F:6D:13:BE:AE:BA:62:C4:ED:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:cd:08:9a:94:5a:ba:51:2b:78:04:a1:ab:a8:a9:91:06:de: a2:99:4b:60:09:25:46:17:63:a8:57:21:46:80:12:2d:11:ce: 5d:ac:62:7a:99:cf:36:c8:33:94:4b:c3:e7:0e:e9:06:4c:0d: cc:1b:d2:14:31:b6:47:64:f8:11:a2:36:1d:6e:39:f5:e0:7d: 2f:0d:68:29:3b:3c:79:ed:cc:8b:8f:35:2a:e6:f0:88:2d:dc: b3:14:00:e3:28:de:e6:d2:f4:1c:4d:3e:7e:77:04:fb:5f:8d: a9:a0:f0:fe:9b:79:82:68:9e:3b:cb:ed:04:44:55:2d:68:24: da:37:73:7a:5c:b9:6f:04:fc:91:e9:3d:f2:51:c2:57:46:72: 05:b7:98:ac:4e:06:04:c0:58:dd:de:b5:35:78:24:2a:59:93: a5:44:2d:29:b9:d5:37:69:22:6a:c8:a2:da:8f:88:05:19:d8: 80:ee:01:08:b8:ed:66:a8:8b:4a:4a:02:38:75:a6:b7:c2:19: 16:d3:70:12:cb:30:8b:a2:3e:1b:38:f5:b1:78:44:d5:9d:0b: 7c:91:4e:d9:bd:b8:17:d3:2a:93:2b:5d:0f:71:6b:71:71:23: ef:74:bf:88:6b:5c:f1:81:6b:e4:32:c4:42:06:3e:e6:1c:d8: 41:03:16:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REUyQUUxMTAvBgNVBAUTKDY5NzYyMDUxNUU3QjFFRThBQzdGM0Y2RDEzQkVBRUJB NjJDNEVEQTkwHhcNMjUwNjEzMDE1OTA3WhcNMjUwNjIwMDE1OTA3WjAYMRYwFAYD VQQDEw02ODRiODVlYy1iYWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0KkhemM7KqKFk8dXD5YT9TyV5wXZhvp6LXW9xkKa69p+T9dQacWdKlsECjDy hg2NyhYmyDoT8+Kg+fXTo88oV205waiAFV6keCd/riHdxq/az6iDQCSEB5eur4NI EhjQ9GoSnFhjXmPUmTx1LpbZrYmLRtCH2X/cLDUHQT+JUGOmY79dTz9LenmDBOEn psmU1TZg3TpcXflufvUi5YDxJua4o7WsFwspXUaR3wUbp1MpqEAbQSESMIIZaBEz 7i/aGecmfia/O74pnDJ+sfwfDxGD2D1X9kF7gvFCKPi3WS28GPg84OUXKCXpf7Fa bcUoEgq4Ys6YntobkJER3Xxf7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK1PUvN9 Xv5scF0qsIsuPRAZX4rlMB8GA1UdIwQYMBaAFGl2IFFeex7orH8/bRO+rrpixO2p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTJBRS9DNzBGRUEyQThD MjAxMUVEQURENUM4MDlDNEY5QUUwMi9hWFlnVVY1N0h1aXNmejl0RTc2dXVtTEU3 YWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FYWWdVVjU3SHVpc2Z6OXRFNzZ1dW1MRTdhay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTJBRS9DNzBGRUEyQThDMjAxMUVEQURENUM4MDlDNEY5QUUwMi9hWFlnVVY1N0h1 aXNmejl0RTc2dXVtTEU3YWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHzQialFq6USt4BKGrqKmRBt6imUtgCSVGF2OoVyFGgBItEc5drGJ6 mc82yDOUS8PnDukGTA3MG9IUMbZHZPgRojYdbjn14H0vDWgpOzx57cyLjzUq5vCI LdyzFADjKN7m0vQcTT5+dwT7X42poPD+m3mCaJ47y+0ERFUtaCTaN3N6XLlvBPyR 6T3yUcJXRnIFt5isTgYEwFjd3rU1eCQqWZOlRC0pudU3aSJqyKLaj4gFGdiA7gEI uO1mqItKSgI4daa3whkW03ASyzCLoj4bOPWxeETVnQt8kU7ZvbgX0yqTK10PcWtx cSPvdL+Ia1zxgWvkMsRCBj7mHNhBAxbx -----END CERTIFICATE-----Generated at Sat Jun 14 18:46:25 2025 by rpki-client