$ rpki-client -vvf rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft File: aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft (raw, json) Hash identifier: 3oFl6z/cEOw9AlT5bIIdWIoc3VFROwjJjplENhL6ViI= Subject key identifier: 2B:1B:97:28:1C:E2:5E:95:0B:87:1F:20:8C:84:45:5D:59:64:DB:04 Authority key identifier: 69:2E:BD:3D:03:F2:58:74:6E:68:43:B6:12:8D:D2:09:C5:12:22:E6 Certificate issuer: /CN=A917BED0/serialNumber=692EBD3D03F258746E6843B6128DD209C51222E6 Certificate serial: 01EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aS69PQPyWHRuaEO2Eo3SCcUSIuY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft Manifest number: 01E3 Signing time: Sat 19 Jul 2025 02:51:45 +0000 Manifest this update: Sat 19 Jul 2025 02:51:45 +0000 Manifest next update: Sat 26 Jul 2025 02:51:45 +0000 Files and hashes: 1: aS69PQPyWHRuaEO2Eo3SCcUSIuY.crl (hash: LMceegTpbtJScCTuiUsLdJvDwvttVHSba1B0NVQmcj4=) 2: 24AC43889DE011EDA182F455C4F9AE02.roa (hash: VEixjX/Xe+G6aJHNRJCpYadqa0JmMvyZd3MR6Kj/fCY=) 3: 236FAC269DE011EDA182F455C4F9AE02.roa (hash: DvFHTfUMj5djbvwopTj+xsfhSJgyhsfDlJJptgV29ak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.crl rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aS69PQPyWHRuaEO2Eo3SCcUSIuY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 02:51:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 490 (0x1ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BED0, serialNumber=692EBD3D03F258746E6843B6128DD209C51222E6 Validity Not Before: Jul 19 02:51:45 2025 GMT Not After : Jul 26 02:51:45 2025 GMT Subject: CN=687b0841-f3b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9c:64:0f:3a:21:59:cc:fd:b3:7c:be:64:bc: f7:96:60:d1:52:0a:d5:6b:a8:4e:32:a9:2e:7d:0a: d7:f8:d2:30:5e:d0:93:11:55:69:20:67:51:fb:20: cd:8e:30:38:70:37:17:c5:3f:f0:62:b2:b3:5b:01: ee:92:6d:0e:e3:2a:c8:86:f1:24:db:da:60:c5:d5: 02:a3:69:53:49:ea:c3:b2:0b:f3:d1:ed:4a:4e:0f: d6:73:21:54:0b:e5:55:7a:31:a1:3c:e6:ed:5d:7b: 17:02:96:8e:d5:6a:a9:4b:b8:3d:70:38:d6:63:d9: d8:ed:0c:6f:4d:d6:27:6b:c4:9d:ad:5e:ca:81:4f: f0:50:13:94:98:57:c5:a2:cb:e0:42:66:87:f6:2e: e2:93:87:b5:c5:47:f8:37:01:cf:72:29:5f:a3:3a: ed:6a:5e:d9:d6:ae:dd:fb:39:c9:cc:f3:d1:80:f1: 53:76:53:a5:92:f7:8f:96:2b:c4:c8:b9:bc:ab:f8: 44:63:70:a7:86:af:1e:e2:09:13:8a:b7:be:da:ff: ba:96:ae:39:da:e9:e5:2c:e2:dc:15:75:6e:68:48: c4:e7:82:71:35:db:57:1e:81:bd:d9:fd:aa:11:f8: 9b:6f:13:94:25:d1:11:a1:30:03:ea:d4:0f:f2:8d: 34:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:1B:97:28:1C:E2:5E:95:0B:87:1F:20:8C:84:45:5D:59:64:DB:04 X509v3 Authority Key Identifier: keyid:69:2E:BD:3D:03:F2:58:74:6E:68:43:B6:12:8D:D2:09:C5:12:22:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aS69PQPyWHRuaEO2Eo3SCcUSIuY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:d5:7b:8a:72:c9:4c:d4:82:60:22:f5:43:58:cb:1b:5f:ba: 2a:a9:4c:4e:cf:b6:19:e5:fa:2b:bf:4b:32:8a:63:fa:1c:a3: 95:bd:16:a2:f0:c6:64:45:8a:a2:53:a0:61:32:01:ea:20:f9: e7:57:55:ac:b3:38:0a:97:86:0d:ea:8e:66:97:70:61:65:fb: c8:2d:64:c8:cc:92:02:76:e4:22:01:00:77:71:b7:9b:fa:9d: 0d:22:1c:8d:a4:21:f8:1d:e3:ba:c8:4e:db:3c:2f:7a:a2:b0: 0c:04:10:55:54:e7:30:3a:76:70:0d:36:cc:54:c4:41:13:23: 96:82:37:42:1e:e7:64:b5:c5:11:9e:4e:de:17:57:ec:93:a6: a4:18:8e:2a:79:55:e6:92:d0:83:ad:8b:c7:63:c0:b7:b6:3c: 4c:bf:05:36:a2:41:af:d3:e5:04:9a:bb:74:9e:95:63:31:ea: 3f:8c:04:0f:bf:b6:4e:4a:07:6b:d8:c7:93:d7:02:72:e7:52: 65:d3:53:17:35:f3:48:c0:64:0b:b5:a2:46:c0:67:07:2c:7e: 4e:9f:4f:0e:6e:67:0f:24:7a:79:44:05:56:6e:40:ab:3b:1e: 94:b0:68:c3:a5:22:b6:72:c3:ba:81:4d:57:e2:25:64:e5:0f: e0:62:0c:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JFRDAxMTAvBgNVBAUTKDY5MkVCRDNEMDNGMjU4NzQ2RTY4NDNCNjEyOEREMjA5 QzUxMjIyRTYwHhcNMjUwNzE5MDI1MTQ1WhcNMjUwNzI2MDI1MTQ1WjAYMRYwFAYD VQQDEw02ODdiMDg0MS1mM2IwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAspxkDzohWcz9s3y+ZLz3lmDRUgrVa6hOMqkufQrX+NIwXtCTEVVpIGdR+yDN jjA4cDcXxT/wYrKzWwHukm0O4yrIhvEk29pgxdUCo2lTSerDsgvz0e1KTg/WcyFU C+VVejGhPObtXXsXApaO1WqpS7g9cDjWY9nY7QxvTdYna8SdrV7KgU/wUBOUmFfF osvgQmaH9i7ik4e1xUf4NwHPcilfozrtal7Z1q7d+znJzPPRgPFTdlOlkvePlivE yLm8q/hEY3Cnhq8e4gkTire+2v+6lq452unlLOLcFXVuaEjE54JxNdtXHoG92f2q EfibbxOUJdERoTAD6tQP8o00SwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCsblygc 4l6VC4cfIIyERV1ZZNsEMB8GA1UdIwQYMBaAFGkuvT0D8lh0bmhDthKN0gnFEiLm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkVEMC9EREI1ODlBMDgw MTkxMUVEQkJCRTMwNkVDNEY5QUUwMi9hUzY5UFFQeVdIUnVhRU8yRW8zU0NjVVNJ dVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FTNjlQUVB5V0hSdWFFTzJFbzNTQ2NVU0l1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkVEMC9EREI1ODlBMDgwMTkxMUVEQkJCRTMwNkVDNEY5QUUwMi9hUzY5UFFQeVdI UnVhRU8yRW8zU0NjVVNJdVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA11XuKcslM1IJgIvVDWMsbX7oqqUxOz7YZ5forv0syimP6HKOVvRai 8MZkRYqiU6BhMgHqIPnnV1WsszgKl4YN6o5ml3BhZfvILWTIzJICduQiAQB3cbeb +p0NIhyNpCH4HeO6yE7bPC96orAMBBBVVOcwOnZwDTbMVMRBEyOWgjdCHudktcUR nk7eF1fsk6akGI4qeVXmktCDrYvHY8C3tjxMvwU2okGv0+UEmrt0npVjMeo/jAQP v7ZOSgdr2MeT1wJy51Jl01MXNfNIwGQLtaJGwGcHLH5On08ObmcPJHp5RAVWbkCr Ox6UsGjDpSK2csO6gU1X4iVk5Q/gYgyt -----END CERTIFICATE-----Generated at Sun Jul 20 13:27:31 2025 by rpki-client