$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.mft File: aVxF2kJFO04LBivxfb9Eclx4g4c.mft (raw, json) Hash identifier: Q11hpEmIe3EakRX5UAsDRULQX14D1PkRRy1AJ6mPgBk= Subject key identifier: B4:21:5A:5B:1A:15:93:F3:8E:C2:88:CF:7A:FB:D3:34:3D:FB:97:C1 Authority key identifier: 69:5C:45:DA:42:45:3B:4E:0B:06:2B:F1:7D:BF:44:72:5C:78:83:87 Certificate issuer: /CN=A91DF26F/serialNumber=695C45DA42453B4E0B062BF17DBF44725C788387 Certificate serial: 228B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aVxF2kJFO04LBivxfb9Eclx4g4c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.mft Manifest number: 228B Signing time: Wed 18 Jun 2025 14:37:48 +0000 Manifest this update: Wed 18 Jun 2025 14:37:47 +0000 Manifest next update: Wed 25 Jun 2025 14:37:47 +0000 Files and hashes: 1: aVxF2kJFO04LBivxfb9Eclx4g4c.crl (hash: cLN6Qr/qYyGLgKX+2NhjtKypdvqe5T9XBeuY+Js4SZA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.crl rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aVxF2kJFO04LBivxfb9Eclx4g4c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 14:37:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8843 (0x228b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF26F, serialNumber=695C45DA42453B4E0B062BF17DBF44725C788387 Validity Not Before: Jun 18 14:37:47 2025 GMT Not After : Jun 25 14:37:47 2025 GMT Subject: CN=6852cf3b-d3df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5f:7b:0a:cf:3f:78:be:84:7b:e5:3b:ee:e9: d3:47:9f:cd:33:0c:c7:6e:c0:9e:62:5d:70:ed:e6: c9:d3:a4:a5:fc:1b:6e:f7:4b:a7:7f:99:4d:20:e2: fd:6c:67:64:99:cc:a7:85:e2:d6:3d:fb:22:7c:f8: 54:23:09:77:19:d5:2d:1c:09:13:95:25:0d:fe:2e: b9:c4:74:ed:4a:41:37:65:5e:0f:c1:f7:4c:c9:1c: 59:3a:b9:1b:34:39:a3:64:8f:c5:01:75:08:18:a0: 67:4d:ed:05:e4:32:55:8a:86:7f:57:6c:73:a5:6a: 31:74:b3:22:a2:32:fe:81:62:81:aa:0d:4f:29:4f: 31:0a:9e:f8:f2:7d:04:b7:8b:2a:63:a0:c2:13:aa: f1:ba:d5:e9:3e:8b:80:52:7f:86:35:2e:9c:a2:47: f1:e9:e8:78:86:e4:79:e7:67:b4:c0:d9:33:51:67: a3:ed:07:ef:58:d9:12:84:c3:1c:b8:0d:8e:d4:c6: 9e:bf:a6:39:43:15:2c:99:a9:1d:2b:3c:a6:9d:00: b9:f3:ed:53:74:47:69:fd:ef:92:db:c9:64:8a:33: 5b:1e:c6:32:e4:c0:ba:49:48:d5:59:9e:6f:cd:dc: 31:0b:5c:af:06:62:c2:a2:f3:f6:a0:2d:b1:97:03: 2e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:21:5A:5B:1A:15:93:F3:8E:C2:88:CF:7A:FB:D3:34:3D:FB:97:C1 X509v3 Authority Key Identifier: keyid:69:5C:45:DA:42:45:3B:4E:0B:06:2B:F1:7D:BF:44:72:5C:78:83:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aVxF2kJFO04LBivxfb9Eclx4g4c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:8e:3a:a2:b7:77:e2:0a:99:e0:45:bf:03:43:1b:92:a0:02: 8e:5f:57:5a:c0:86:ca:61:ba:20:79:53:17:41:98:f9:73:59: fb:e0:f0:00:d3:3d:2b:08:e0:7e:5f:a1:c2:68:1c:ca:1d:60: 7b:1b:b4:bb:c0:fd:8f:72:2b:0f:c6:74:51:f1:58:67:82:19: 78:a6:4b:85:05:14:bb:19:ff:98:54:33:0c:4c:c3:63:69:da: ad:71:df:e4:1c:a6:0a:41:60:dd:6d:d9:1d:4c:24:f9:42:82: aa:12:ef:6b:a5:77:30:0c:f0:89:1b:31:32:7a:72:62:75:73: 7c:88:40:99:4a:9b:4b:f2:00:ee:66:4c:68:c6:dd:bc:0e:3c: 1e:39:46:90:b6:86:42:28:bc:3d:ac:36:b7:57:ff:c0:c5:96: 33:a7:95:4b:40:9e:b4:92:12:1d:2d:58:52:7e:cd:46:26:99: bd:fb:f2:b6:87:1f:ad:d9:55:3b:4f:6b:cd:9e:77:ef:2a:03: 25:bf:87:34:ec:3e:ca:97:0a:e6:dd:94:1c:8b:56:6e:4f:99: 8f:07:6b:c7:10:36:66:81:3b:41:02:64:cf:f5:02:2b:c9:04: ac:cf:15:07:6a:a9:76:5b:f5:0b:81:a4:7d:07:51:ff:87:62: b8:c5:01:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIoswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REYyNkYxMTAvBgNVBAUTKDY5NUM0NURBNDI0NTNCNEUwQjA2MkJGMTdEQkY0NDcy NUM3ODgzODcwHhcNMjUwNjE4MTQzNzQ3WhcNMjUwNjI1MTQzNzQ3WjAYMRYwFAYD VQQDEw02ODUyY2YzYi1kM2RmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwF97Cs8/eL6Ee+U77unTR5/NMwzHbsCeYl1w7ebJ06Sl/Btu90unf5lNIOL9 bGdkmcynheLWPfsifPhUIwl3GdUtHAkTlSUN/i65xHTtSkE3ZV4PwfdMyRxZOrkb NDmjZI/FAXUIGKBnTe0F5DJVioZ/V2xzpWoxdLMiojL+gWKBqg1PKU8xCp748n0E t4sqY6DCE6rxutXpPouAUn+GNS6cokfx6eh4huR552e0wNkzUWej7QfvWNkShMMc uA2O1Maev6Y5QxUsmakdKzymnQC58+1TdEdp/e+S28lkijNbHsYy5MC6SUjVWZ5v zdwxC1yvBmLCovP2oC2xlwMuxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLQhWlsa FZPzjsKIz3r70zQ9+5fBMB8GA1UdIwQYMBaAFGlcRdpCRTtOCwYr8X2/RHJceIOH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjI2Ri84NDZFQzYyRUE3 OEUxMUU1ODAyNDFCNjJDNEY5QUUwMi9hVnhGMmtKRk8wNExCaXZ4ZmI5RWNseDRn NGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2FWeEYya0pGTzA0TEJpdnhmYjlFY2x4NGc0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjI2Ri84NDZFQzYyRUE3OEUxMUU1ODAyNDFCNjJDNEY5QUUwMi9hVnhGMmtKRk8w NExCaXZ4ZmI5RWNseDRnNGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdjjqit3fiCpngRb8DQxuSoAKOX1dawIbKYbogeVMXQZj5c1n74PAA 0z0rCOB+X6HCaBzKHWB7G7S7wP2PcisPxnRR8Vhnghl4pkuFBRS7Gf+YVDMMTMNj adqtcd/kHKYKQWDdbdkdTCT5QoKqEu9rpXcwDPCJGzEyenJidXN8iECZSptL8gDu Zkxoxt28DjweOUaQtoZCKLw9rDa3V//AxZYzp5VLQJ60khIdLVhSfs1GJpm9+/K2 hx+t2VU7T2vNnnfvKgMlv4c07D7Klwrm3ZQci1ZuT5mPB2vHEDZmgTtBAmTP9QIr yQSszxUHaql2W/ULgaR9B1H/h2K4xQFH -----END CERTIFICATE-----Generated at Fri Jun 20 05:06:36 2025 by rpki-client