$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft File: aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft (raw, json) Hash identifier: Vz3TH/w177aD+mkILLYpgj5HYTodtXUGitCh7/33uC0= Subject key identifier: 9E:98:54:81:BB:96:06:CB:81:B1:1A:92:3E:3F:1E:50:BF:EF:FB:D0 Authority key identifier: 69:23:6E:59:96:30:0A:2F:D7:85:EF:85:78:3C:5C:29:C5:B4:E8:74 Certificate issuer: /CN=A91EE5E5/serialNumber=69236E5996300A2FD785EF85783C5C29C5B4E874 Certificate serial: 69 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft Manifest number: 67 Signing time: Tue 17 Jun 2025 05:54:30 +0000 Manifest this update: Tue 17 Jun 2025 05:54:29 +0000 Manifest next update: Tue 24 Jun 2025 05:54:29 +0000 Files and hashes: 1: aSNuWZYwCi_Xhe-FeDxcKcW06HQ.crl (hash: DXCpn24qNDPYInX2FrpsIpjsZKC4lPTf/Fc9BnSq5pw=) 2: 1506B298B00711EF863A582EC4F9AE02.roa (hash: PjiKcHZxo3PwYpPFYpla6KazUuXCJGnKHspIakJqo2E=) 3: 4965F84CAFC011EF82BB1055C4F9AE02.roa (hash: jpijFayg1AhLIehVWTrf1nyIqutL0nvGe/8hsMY0L/c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.crl rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 05:54:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 105 (0x69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE5E5, serialNumber=69236E5996300A2FD785EF85783C5C29C5B4E874 Validity Not Before: Jun 17 05:54:29 2025 GMT Not After : Jun 24 05:54:29 2025 GMT Subject: CN=68510315-525b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:68:6c:c8:cd:4a:1b:3b:41:6a:e9:88:cf:ea: 11:ea:1d:2d:47:4f:da:8b:b4:a7:97:70:09:0f:94: dd:b4:2e:1a:23:36:f9:d3:f7:9e:47:05:df:ea:0b: a8:27:c5:57:f8:59:f4:bc:07:37:38:61:b9:f9:00: d4:50:0e:17:e4:52:09:b2:d4:f9:87:f9:c6:64:b9: 79:a5:5c:49:3f:01:46:5c:24:5f:62:16:f2:2d:50: c3:a6:e8:ce:8a:50:76:da:98:a4:51:f7:ec:fd:9c: 01:d9:14:d7:86:66:ea:60:2d:7a:e6:e6:b8:d2:41: 1b:77:83:ec:00:a5:d2:b8:f1:39:6c:84:a2:d0:6b: 97:f4:7a:ed:eb:e0:fc:a1:a3:9d:46:9d:d9:af:c9: c3:9a:00:9f:47:a7:ea:3b:67:6f:52:9a:18:c6:04: 95:24:99:5b:1e:aa:17:07:c5:84:06:43:34:e8:ca: 18:d7:68:5b:0b:8e:79:9f:60:85:b5:98:ad:23:0a: d1:1c:d8:ab:a6:78:9c:52:95:28:45:c4:8e:40:24: 5f:ff:2e:98:e0:b4:f5:99:79:d0:77:c4:43:4a:d1: 67:dc:ab:a7:96:3e:b2:30:53:80:bf:e1:4f:44:a5: c3:ac:e5:11:bb:ac:87:a1:c9:6a:f9:82:f0:a6:5c: e0:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:98:54:81:BB:96:06:CB:81:B1:1A:92:3E:3F:1E:50:BF:EF:FB:D0 X509v3 Authority Key Identifier: keyid:69:23:6E:59:96:30:0A:2F:D7:85:EF:85:78:3C:5C:29:C5:B4:E8:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:04:09:dd:36:4c:13:27:75:f0:8f:63:07:e4:3f:44:9f:18: 1c:ef:58:cc:87:78:cd:5a:c3:f8:88:bf:fd:59:34:0e:39:5f: fe:82:26:bc:5a:f3:b0:e5:21:f5:c6:e9:2d:bf:cb:6c:85:8a: 71:28:1b:9f:ef:f1:ce:c0:af:f3:fa:05:cf:14:cb:eb:05:7b: 66:9b:ef:1b:90:fb:59:77:81:34:f7:08:56:64:a4:1e:f2:3f: 38:dc:d9:f5:29:97:52:2f:db:d7:e3:0c:cb:fd:77:5e:7e:ee: 50:05:a9:d1:0f:83:eb:5b:39:bd:28:91:62:a0:ed:dd:3a:b7: 56:74:78:60:f2:40:7e:e6:c7:8d:23:a5:d1:16:2b:d5:a5:51: 26:77:90:37:70:0c:f5:5d:09:b8:05:ad:1c:7e:36:50:88:5c: 09:f5:38:0e:d6:52:71:78:52:f0:8f:db:c9:c8:61:42:6d:38: 1e:af:77:18:17:c5:c3:57:30:05:5a:3c:1f:ed:8a:4b:94:50: 53:19:ef:e7:5b:79:20:14:5e:39:62:44:7f:7f:dd:c6:4a:c4: a0:c2:c2:6c:fc:66:4f:6c:da:b5:42:c1:1a:d5:dc:de:9f:70: 5a:b7:29:fa:bb:9c:ab:be:36:e0:93:75:b4:39:5b:9e:38:6c: d5:d2:07:a6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF RTVFNTExMC8GA1UEBRMoNjkyMzZFNTk5NjMwMEEyRkQ3ODVFRjg1NzgzQzVDMjlD NUI0RTg3NDAeFw0yNTA2MTcwNTU0MjlaFw0yNTA2MjQwNTU0MjlaMBgxFjAUBgNV BAMTDTY4NTEwMzE1LTUyNWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZaGzIzUobO0Fq6YjP6hHqHS1HT9qLtKeXcAkPlN20LhojNvnT955HBd/qC6gn xVf4WfS8Bzc4Ybn5ANRQDhfkUgmy1PmH+cZkuXmlXEk/AUZcJF9iFvItUMOm6M6K UHbamKRR9+z9nAHZFNeGZupgLXrm5rjSQRt3g+wApdK48TlshKLQa5f0eu3r4Pyh o51GndmvycOaAJ9Hp+o7Z29SmhjGBJUkmVseqhcHxYQGQzToyhjXaFsLjnmfYIW1 mK0jCtEc2KumeJxSlShFxI5AJF//LpjgtPWZedB3xENK0Wfcq6eWPrIwU4C/4U9E pcOs5RG7rIehyWr5gvCmXOBhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUnphUgbuW BsuBsRqSPj8eUL/v+9AwHwYDVR0jBBgwFoAUaSNuWZYwCi/Xhe+FeDxcKcW06HQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVFNUU1L0YwRTc2RTEyQUZC RjExRUZBMjhBMzY1NEM0RjlBRTAyL2FTTnVXWll3Q2lfWGhlLUZlRHhjS2NXMDZI US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvYVNOdVdaWXdDaV9YaGUtRmVEeGNLY1cwNkhRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVF NUU1L0YwRTc2RTEyQUZCRjExRUZBMjhBMzY1NEM0RjlBRTAyL2FTTnVXWll3Q2lf WGhlLUZlRHhjS2NXMDZIUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADYECd02TBMndfCPYwfkP0SfGBzvWMyHeM1aw/iIv/1ZNA45X/6CJrxa 87DlIfXG6S2/y2yFinEoG5/v8c7Ar/P6Bc8Uy+sFe2ab7xuQ+1l3gTT3CFZkpB7y Pzjc2fUpl1Iv29fjDMv9d15+7lAFqdEPg+tbOb0okWKg7d06t1Z0eGDyQH7mx40j pdEWK9WlUSZ3kDdwDPVdCbgFrRx+NlCIXAn1OA7WUnF4UvCP28nIYUJtOB6vdxgX xcNXMAVaPB/tikuUUFMZ7+dbeSAUXjliRH9/3cZKxKDCwmz8Zk9s2rVCwRrV3N6f cFq3Kfq7nKu+NuCTdbQ5W544bNXSB6Y= -----END CERTIFICATE-----Generated at Wed Jun 18 03:29:54 2025 by rpki-client