$ rpki-client -vvf rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.mft File: ALcq1TM86q4aWFyCgInERVmZY_I.mft (raw, json) Hash identifier: mITxSgaqWCtQ1ae3Sisu0xC8Po1KD9HUQsT4mIzT6FQ= Subject key identifier: CB:19:8A:56:77:C8:7C:72:80:B8:A1:2D:5E:E0:6B:C0:5D:82:BB:E3 Authority key identifier: 00:B7:2A:D5:33:3C:EA:AE:1A:58:5C:82:80:89:C4:45:59:99:63:F2 Certificate issuer: /CN=A91380F7/serialNumber=00B72AD5333CEAAE1A585C828089C445599963F2 Certificate serial: 6A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ALcq1TM86q4aWFyCgInERVmZY_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.mft Manifest number: 67 Signing time: Tue 03 Jun 2025 06:50:27 +0000 Manifest this update: Tue 03 Jun 2025 06:50:26 +0000 Manifest next update: Tue 10 Jun 2025 06:50:26 +0000 Files and hashes: 1: ALcq1TM86q4aWFyCgInERVmZY_I.crl (hash: /UgFIX40wITrKjSnkfKDqK0XNVh715G6Yfm1SjfuySE=) 2: 5D117282A7F911EF8E7B1773C4F9AE02.roa (hash: J45sLiwW4UVC5sdSS+IxX3cBMgJ0HE+7WdnowtCp0yk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.crl rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ALcq1TM86q4aWFyCgInERVmZY_I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 06:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 106 (0x6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91380F7, serialNumber=00B72AD5333CEAAE1A585C828089C445599963F2 Validity Not Before: Jun 3 06:50:26 2025 GMT Not After : Jun 10 06:50:26 2025 GMT Subject: CN=683e9b32-9e6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:dd:d0:db:c9:f4:64:bf:89:49:fa:f0:be:8b: 97:26:d7:0c:8e:0d:02:2f:8e:86:cc:5f:8f:4b:77: 6c:5c:19:ab:4f:8e:9f:54:bb:61:c7:c3:6f:fc:98: 60:0b:f4:03:da:53:22:34:24:db:a1:4c:bf:0c:e4: 04:3c:16:1b:79:66:52:83:b5:5e:20:8b:24:55:4c: 22:74:bc:c3:fd:e9:8c:b3:da:93:8e:a2:30:85:ef: 37:bd:0f:03:8d:88:19:c0:2e:de:04:13:cb:13:e3: 89:e1:33:92:0f:d0:38:bc:2a:1e:f9:2e:d7:1d:4a: 4d:f3:5f:d1:14:9a:9d:e0:b2:8c:4a:2c:7f:bf:b5: ad:62:46:be:00:8b:d3:74:6a:ce:4c:fd:c1:f1:8a: 79:2b:c2:2c:92:e3:af:77:c8:cd:cb:be:33:e4:bd: 94:6d:47:50:dd:86:c1:40:f8:34:2a:6f:85:2b:85: 06:44:b6:ff:c9:51:c0:5f:83:b0:29:7a:22:25:15: 36:fb:1f:d4:6a:f8:63:4e:e6:34:ec:ad:3e:2b:5d: 3c:b6:db:96:2a:9d:19:69:a1:a6:f7:7e:47:ed:2a: 61:e6:3e:a9:2b:67:82:61:02:64:07:ef:4f:48:fc: 88:98:2b:2c:1e:92:b7:77:e1:da:81:75:6a:56:90: ab:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:19:8A:56:77:C8:7C:72:80:B8:A1:2D:5E:E0:6B:C0:5D:82:BB:E3 X509v3 Authority Key Identifier: keyid:00:B7:2A:D5:33:3C:EA:AE:1A:58:5C:82:80:89:C4:45:59:99:63:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ALcq1TM86q4aWFyCgInERVmZY_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:2c:8e:b1:3f:9d:4c:b5:83:be:71:c4:87:f8:28:07:a1:47: 2a:99:83:2e:0f:a2:6b:14:60:7b:02:47:be:34:fd:0e:1b:14: 85:b1:ed:5c:9b:fb:13:69:1d:22:00:39:8c:af:a7:0f:4c:d0: 2a:0d:b8:d8:0d:a0:32:d1:26:7b:9c:49:f8:de:69:a3:63:24: 10:3d:a6:eb:2a:f4:63:21:e0:56:c0:20:42:65:e2:d8:cd:30: 2b:20:68:15:52:08:4e:f5:37:3b:be:59:0f:60:d1:ac:b3:45: 3c:3c:b3:f6:18:70:ac:84:43:0b:ee:93:99:03:d8:f1:02:27: be:62:b0:55:eb:eb:75:54:22:73:aa:82:71:9d:5a:ef:44:e1: 9f:da:ef:00:ea:6a:79:ce:ee:5c:1b:2a:c9:4d:b7:ad:52:54: 53:76:5f:74:05:ef:10:1b:2d:3d:56:36:58:45:33:fd:11:01: 80:4b:4f:2b:1f:32:0f:63:78:c8:93:24:b9:eb:c8:42:37:90: 06:69:7c:74:f5:4b:91:8e:35:4b:ad:fd:e1:bd:da:6a:2a:30: b1:bc:a1:0f:8c:39:9d:ad:c0:c1:d6:00:14:95:59:fe:c8:75: a2:39:74:ff:23:28:26:87:12:e5:25:68:a8:73:bd:a0:c2:47: ec:85:ed:04 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBajANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz ODBGNzExMC8GA1UEBRMoMDBCNzJBRDUzMzNDRUFBRTFBNTg1QzgyODA4OUM0NDU1 OTk5NjNGMjAeFw0yNTA2MDMwNjUwMjZaFw0yNTA2MTAwNjUwMjZaMBgxFjAUBgNV BAMTDTY4M2U5YjMyLTllNmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDU3dDbyfRkv4lJ+vC+i5cm1wyODQIvjobMX49Ld2xcGatPjp9Uu2HHw2/8mGAL 9APaUyI0JNuhTL8M5AQ8Fht5ZlKDtV4giyRVTCJ0vMP96Yyz2pOOojCF7ze9DwON iBnALt4EE8sT44nhM5IP0Di8Kh75LtcdSk3zX9EUmp3gsoxKLH+/ta1iRr4Ai9N0 as5M/cHxinkrwiyS4693yM3LvjPkvZRtR1DdhsFA+DQqb4UrhQZEtv/JUcBfg7Ap eiIlFTb7H9Rq+GNO5jTsrT4rXTy225YqnRlpoab3fkftKmHmPqkrZ4JhAmQH709I /IiYKywekrd34dqBdWpWkKuLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUyxmKVnfI fHKAuKEtXuBrwF2Cu+MwHwYDVR0jBBgwFoAUALcq1TM86q4aWFyCgInERVmZY/Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4MEY3LzlGNzY4QUZBQTdG ODExRUZCQjQ0RjM3MUM0RjlBRTAyL0FMY3ExVE04NnE0YVdGeUNnSW5FUlZtWllf SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQUxjcTFUTTg2cTRhV0Z5Q2dJbkVSVm1aWV9JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4 MEY3LzlGNzY4QUZBQTdGODExRUZCQjQ0RjM3MUM0RjlBRTAyL0FMY3ExVE04NnE0 YVdGeUNnSW5FUlZtWllfSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFIsjrE/nUy1g75xxIf4KAehRyqZgy4PomsUYHsCR740/Q4bFIWx7Vyb +xNpHSIAOYyvpw9M0CoNuNgNoDLRJnucSfjeaaNjJBA9pusq9GMh4FbAIEJl4tjN MCsgaBVSCE71Nzu+WQ9g0ayzRTw8s/YYcKyEQwvuk5kD2PECJ75isFXr63VUInOq gnGdWu9E4Z/a7wDqannO7lwbKslNt61SVFN2X3QF7xAbLT1WNlhFM/0RAYBLTysf Mg9jeMiTJLnryEI3kAZpfHT1S5GONUut/eG92moqMLG8oQ+MOZ2twMHWABSVWf7I daI5dP8jKCaHEuUlaKhzvaDCR+yF7QQ= -----END CERTIFICATE-----Generated at Wed Jun 4 11:44:28 2025 by rpki-client