$ rpki-client -vvf rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.mft File: aK5b6xu35ELO4KfgFAKf9y49tB8.mft (raw, json) Hash identifier: 3J1JoWXMSCvN4/SBbJ/W0HKrw79PI8YFpnfYTZsIyGs= Subject key identifier: B8:B4:DE:9D:80:E5:92:14:69:8E:3F:9B:2E:3A:E3:F9:6F:04:A3:76 Authority key identifier: 68:AE:5B:EB:1B:B7:E4:42:CE:E0:A7:E0:14:02:9F:F7:2E:3D:B4:1F Certificate issuer: /CN=A91104C9/serialNumber=68AE5BEB1BB7E442CEE0A7E014029FF72E3DB41F Certificate serial: 0C10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK5b6xu35ELO4KfgFAKf9y49tB8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.mft Manifest number: 0C05 Signing time: Mon 30 Jun 2025 18:54:27 +0000 Manifest this update: Mon 30 Jun 2025 18:54:26 +0000 Manifest next update: Mon 07 Jul 2025 18:54:26 +0000 Files and hashes: 1: aK5b6xu35ELO4KfgFAKf9y49tB8.crl (hash: m/MjvoRT8I506ZFcORdrBus7xpb8EItfV0iySq7IcyU=) 2: 4C1F013E5AF511EFBAB1F86CC4F9AE02.roa (hash: 5YnlbFiESO7UmvUP8KNkIgeb7OYcXBskhmx0foLpcp0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.crl rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK5b6xu35ELO4KfgFAKf9y49tB8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 18:54:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3088 (0xc10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91104C9, serialNumber=68AE5BEB1BB7E442CEE0A7E014029FF72E3DB41F Validity Not Before: Jun 30 18:54:26 2025 GMT Not After : Jul 7 18:54:26 2025 GMT Subject: CN=6862dd63-20c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e5:ce:a7:ff:5e:41:98:c4:df:11:df:c3:cb: b6:c7:c3:db:0d:84:50:80:fe:c8:62:4d:15:e3:92: 53:8e:ee:0b:28:06:5b:49:eb:13:05:7d:2b:68:03: 21:f5:ba:37:31:07:7a:eb:e8:87:f7:79:53:46:fd: fb:7d:91:0f:7f:4a:27:4a:3b:2e:71:1a:9f:b4:16: 39:cd:57:bb:a3:4b:42:5c:d2:82:67:99:4e:5e:60: 32:28:68:23:f3:a8:9e:2d:77:66:0a:0e:e3:96:d3: ee:ad:63:30:9c:b0:9e:a3:c5:a2:34:96:60:48:29: b9:24:18:6f:4e:a8:7b:1f:d8:ed:0a:b2:91:cf:f2: 74:42:a5:0f:c5:79:76:82:4b:16:68:0e:bf:11:0a: f9:48:4c:dc:9c:6d:c0:37:99:9d:72:8d:41:1d:04: 12:0c:6b:15:8f:18:3c:4e:a1:58:ce:ae:69:b4:ad: 6e:08:47:c6:fd:e0:f1:a9:5a:e9:52:ad:9b:c7:f2: eb:5e:61:4b:46:f9:bf:1b:08:57:73:97:90:26:ab: 4a:e1:0b:65:88:f0:10:41:70:90:bd:9c:94:a7:38: cc:5e:39:1a:40:ae:8c:8d:1d:00:e0:10:38:74:01: b9:7b:13:85:38:db:f4:72:06:f7:ed:b6:e2:ac:15: 50:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:B4:DE:9D:80:E5:92:14:69:8E:3F:9B:2E:3A:E3:F9:6F:04:A3:76 X509v3 Authority Key Identifier: keyid:68:AE:5B:EB:1B:B7:E4:42:CE:E0:A7:E0:14:02:9F:F7:2E:3D:B4:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK5b6xu35ELO4KfgFAKf9y49tB8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:56:d7:6c:ef:ff:3a:fb:c9:4e:ff:da:d5:45:f6:27:88:c0: f1:0b:3a:c0:16:93:b5:c0:02:93:67:5b:e1:a9:43:3d:81:ee: ec:4d:84:cd:40:73:20:95:fa:88:ee:a6:23:3c:05:59:6f:ca: 17:df:6f:5b:c6:4c:c4:d3:92:0e:1a:63:32:ea:cc:94:82:40: df:73:5c:67:8b:f8:d0:d1:47:13:5a:c6:f9:02:13:29:2f:3f: be:a7:44:8b:09:c8:f1:18:48:18:43:ce:97:f4:ba:ec:b2:ca: e3:2b:67:c2:be:84:79:a3:95:1f:51:43:a2:9a:c6:42:75:0e: 66:cc:f5:e1:00:16:8b:b3:12:1f:03:ac:c7:3a:66:8a:48:8e: bf:4b:96:03:fd:92:81:f2:8a:c0:96:1b:8f:40:02:2a:78:8a: 76:15:f2:6d:3f:bd:9a:f4:a0:28:39:72:85:43:c6:21:17:17: 88:db:68:07:bf:2a:b1:cf:2d:70:7d:5a:7a:69:6e:b9:c0:95: 71:ad:77:4c:35:59:2f:77:56:0a:21:82:f0:a8:bd:7e:60:38: 04:25:ad:c3:27:a6:2b:db:e4:ad:f0:89:71:cd:2a:1c:ae:1d: ad:fd:43:47:83:5e:a7:62:57:15:93:29:fb:5c:33:88:3e:d9: 00:4a:a3:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDBAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTA0QzkxMTAvBgNVBAUTKDY4QUU1QkVCMUJCN0U0NDJDRUUwQTdFMDE0MDI5RkY3 MkUzREI0MUYwHhcNMjUwNjMwMTg1NDI2WhcNMjUwNzA3MTg1NDI2WjAYMRYwFAYD VQQDEw02ODYyZGQ2My0yMGM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoeXOp/9eQZjE3xHfw8u2x8PbDYRQgP7IYk0V45JTju4LKAZbSesTBX0raAMh 9bo3MQd66+iH93lTRv37fZEPf0onSjsucRqftBY5zVe7o0tCXNKCZ5lOXmAyKGgj 86ieLXdmCg7jltPurWMwnLCeo8WiNJZgSCm5JBhvTqh7H9jtCrKRz/J0QqUPxXl2 gksWaA6/EQr5SEzcnG3AN5mdco1BHQQSDGsVjxg8TqFYzq5ptK1uCEfG/eDxqVrp Uq2bx/LrXmFLRvm/GwhXc5eQJqtK4QtliPAQQXCQvZyUpzjMXjkaQK6MjR0A4BA4 dAG5exOFONv0cgb37bbirBVQ1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLi03p2A 5ZIUaY4/my464/lvBKN2MB8GA1UdIwQYMBaAFGiuW+sbt+RCzuCn4BQCn/cuPbQf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDRDOS8yQUE4QjM4ODE0 QzgxMUVBODdEMTUxNkNDNEY5QUUwMi9hSzViNnh1MzVFTE80S2ZnRkFLZjl5NDl0 QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FLNWI2eHUzNUVMTzRLZmdGQUtmOXk0OXRCOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDRDOS8yQUE4QjM4ODE0QzgxMUVBODdEMTUxNkNDNEY5QUUwMi9hSzViNnh1MzVF TE80S2ZnRkFLZjl5NDl0QjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfVtds7/86+8lO/9rVRfYniMDxCzrAFpO1wAKTZ1vhqUM9ge7sTYTN QHMglfqI7qYjPAVZb8oX329bxkzE05IOGmMy6syUgkDfc1xni/jQ0UcTWsb5AhMp Lz++p0SLCcjxGEgYQ86X9LrsssrjK2fCvoR5o5UfUUOimsZCdQ5mzPXhABaLsxIf A6zHOmaKSI6/S5YD/ZKB8orAlhuPQAIqeIp2FfJtP72a9KAoOXKFQ8YhFxeI22gH vyqxzy1wfVp6aW65wJVxrXdMNVkvd1YKIYLwqL1+YDgEJa3DJ6Yr2+St8IlxzSoc rh2t/UNHg16nYlcVkyn7XDOIPtkASqN1 -----END CERTIFICATE-----Generated at Tue Jul 1 19:42:31 2025 by rpki-client