$ rpki-client -vvf rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.mft File: aAYK77v8wH1z211yeLyPJJxX9RU.mft (raw, json) Hash identifier: PKWsE+0WPNEV0zZJ8SEtivn5b/cKAW/Mo0x0esR9TKs= Subject key identifier: 54:C1:4B:3B:2D:1A:56:07:28:35:BD:55:8B:2F:3B:FD:50:AF:30:F7 Authority key identifier: 68:06:0A:EF:BB:FC:C0:7D:73:DB:5D:72:78:BC:8F:24:9C:57:F5:15 Certificate issuer: /CN=A912859A/serialNumber=68060AEFBBFCC07D73DB5D7278BC8F249C57F515 Certificate serial: 03BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aAYK77v8wH1z211yeLyPJJxX9RU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.mft Manifest number: 03B1 Signing time: Mon 21 Jul 2025 00:58:02 +0000 Manifest this update: Mon 21 Jul 2025 00:58:01 +0000 Manifest next update: Mon 28 Jul 2025 00:58:01 +0000 Files and hashes: 1: aAYK77v8wH1z211yeLyPJJxX9RU.crl (hash: D9/lj9kNbJcoNuINYIKYjwqTkDXtSJEsszxICzbN/fY=) 2: 5B639C667CEB11EDA3D10364C4F9AE02.roa (hash: /k7UGLxYpMRjSXOkhilDp1PbyHK35jDBnjLpEab1SqY=) 3: ADBB651E043411ED9F02B325C4F9AE02.roa (hash: nXP2TkV2xaQf8NtZFSYlzBkdLiCf/hTO1Pti6MrwpUU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.crl rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aAYK77v8wH1z211yeLyPJJxX9RU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 00:58:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 956 (0x3bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912859A, serialNumber=68060AEFBBFCC07D73DB5D7278BC8F249C57F515 Validity Not Before: Jul 21 00:58:01 2025 GMT Not After : Jul 28 00:58:01 2025 GMT Subject: CN=687d9099-5314 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:6e:79:14:28:a5:fe:b5:28:5f:c6:da:ac:c3: 70:a2:63:c9:b5:21:7a:ea:a3:23:c0:82:09:77:b5: 35:4e:89:a1:f8:40:16:de:93:04:75:db:2a:39:c0: 0b:4e:5c:f6:98:40:34:3c:24:92:f7:c2:fc:ff:33: f1:f7:1d:c6:0e:26:85:ab:23:6b:80:ca:be:53:23: be:fe:7e:a5:9e:a3:f7:57:94:7e:e2:0b:e3:da:e7: e7:81:6e:0a:69:b2:b6:6f:f9:2e:fe:42:0c:59:7d: 27:23:a4:4c:d3:f3:13:6f:b3:04:af:10:db:cd:5c: b2:6e:a8:b2:45:f8:40:dd:6d:1a:69:d9:9b:4c:06: f3:3c:54:2d:54:8b:ad:8f:be:e3:2f:2a:1d:39:58: 6f:d1:90:34:76:42:6b:2f:e7:b2:41:f1:66:70:28: 9d:fa:d4:89:94:f7:34:e7:41:39:d7:36:b7:9e:2d: 0f:82:40:74:fa:74:47:ca:aa:2d:65:8f:52:96:79: b1:b2:41:98:a4:87:26:bc:d2:16:63:1c:72:b4:4b: 24:e9:b9:17:74:c8:7c:ab:b4:ce:8c:73:81:23:53: 35:b1:5f:b8:7f:70:27:8f:f3:00:14:38:ad:cf:54: 61:8a:26:30:0f:d7:0b:5e:e3:e6:b0:55:11:32:5e: 88:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:C1:4B:3B:2D:1A:56:07:28:35:BD:55:8B:2F:3B:FD:50:AF:30:F7 X509v3 Authority Key Identifier: keyid:68:06:0A:EF:BB:FC:C0:7D:73:DB:5D:72:78:BC:8F:24:9C:57:F5:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aAYK77v8wH1z211yeLyPJJxX9RU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:11:34:67:7a:5a:4b:28:43:a0:c2:03:6f:6d:21:41:27:0d: e3:15:19:e7:44:87:75:ff:cc:35:4d:70:71:05:68:51:97:b7: 9d:5c:0a:4b:f1:c1:a0:a0:eb:db:76:1f:79:ef:23:1c:a1:72: 26:06:72:67:3d:c5:58:df:64:d5:cf:d7:a5:8d:58:fe:c1:ae: b2:85:80:02:97:28:54:0c:46:de:9e:58:5c:c1:dc:ff:1d:f1: 0a:cc:3a:2f:7e:6d:12:92:2c:8e:3a:11:af:92:15:69:45:4b: e8:dc:17:58:51:93:cd:e3:8c:58:c4:87:51:2f:46:8a:a5:17: a2:58:59:e3:ce:b5:b0:65:54:7d:d6:bd:84:4d:58:bd:50:a5: df:cf:e8:a0:dd:e6:53:f0:91:fa:24:23:51:d9:68:d1:a5:9c: 8e:a9:3d:46:fb:37:50:9b:13:16:29:78:53:7e:41:25:02:10: a5:7a:d7:0c:6e:5b:50:6d:be:21:70:29:4e:0d:35:35:3d:41: 33:b8:d2:8b:23:51:d1:f0:26:34:54:25:3d:f2:e1:11:9b:91: 96:2c:82:73:14:5f:f7:fe:4f:cf:ae:94:2d:c6:6c:de:af:c4: f8:83:4a:88:26:c0:ea:de:c1:60:32:ee:6b:31:86:c9:af:f7: ea:62:d1:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg1OUExMTAvBgNVBAUTKDY4MDYwQUVGQkJGQ0MwN0Q3M0RCNUQ3Mjc4QkM4RjI0 OUM1N0Y1MTUwHhcNMjUwNzIxMDA1ODAxWhcNMjUwNzI4MDA1ODAxWjAYMRYwFAYD VQQDEw02ODdkOTA5OS01MzE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4m55FCil/rUoX8barMNwomPJtSF66qMjwIIJd7U1Tomh+EAW3pMEddsqOcAL Tlz2mEA0PCSS98L8/zPx9x3GDiaFqyNrgMq+UyO+/n6lnqP3V5R+4gvj2ufngW4K abK2b/ku/kIMWX0nI6RM0/MTb7MErxDbzVyybqiyRfhA3W0aadmbTAbzPFQtVIut j77jLyodOVhv0ZA0dkJrL+eyQfFmcCid+tSJlPc050E51za3ni0PgkB0+nRHyqot ZY9SlnmxskGYpIcmvNIWYxxytEsk6bkXdMh8q7TOjHOBI1M1sV+4f3Anj/MAFDit z1RhiiYwD9cLXuPmsFURMl6ITQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFTBSzst GlYHKDW9VYsvO/1QrzD3MB8GA1UdIwQYMBaAFGgGCu+7/MB9c9tdcni8jyScV/UV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODU5QS9CQUNBQjdFQzlE RkUxMUVDQjg3RjUxNDdDNEY5QUUwMi9hQVlLNzd2OHdIMXoyMTF5ZUx5UEpKeFg5 UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FBWUs3N3Y4d0gxejIxMXllTHlQSkp4WDlSVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODU5QS9CQUNBQjdFQzlERkUxMUVDQjg3RjUxNDdDNEY5QUUwMi9hQVlLNzd2OHdI MXoyMTF5ZUx5UEpKeFg5UlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTETRnelpLKEOgwgNvbSFBJw3jFRnnRId1/8w1TXBxBWhRl7edXApL 8cGgoOvbdh957yMcoXImBnJnPcVY32TVz9eljVj+wa6yhYAClyhUDEbenlhcwdz/ HfEKzDovfm0SkiyOOhGvkhVpRUvo3BdYUZPN44xYxIdRL0aKpReiWFnjzrWwZVR9 1r2ETVi9UKXfz+ig3eZT8JH6JCNR2WjRpZyOqT1G+zdQmxMWKXhTfkElAhCletcM bltQbb4hcClODTU1PUEzuNKLI1HR8CY0VCU98uERm5GWLIJzFF/3/k/PrpQtxmze r8T4g0qIJsDq3sFgMu5rMYbJr/fqYtEQ -----END CERTIFICATE-----Generated at Wed Jul 23 02:26:05 2025 by rpki-client