$ rpki-client -vvf rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.mft File: aIDTI6o_LVFGBQZA8yGmEpAA3wM.mft (raw, json) Hash identifier: ln8no3S98YuBSd+8sCCFDUcnEQSzlCSl+4uG6P/Sw2o= Subject key identifier: 08:16:6E:EE:D2:3A:57:55:4E:37:C8:CF:82:D8:35:57:56:2C:46:BD Authority key identifier: 68:80:D3:23:AA:3F:2D:51:46:05:06:40:F3:21:A6:12:90:00:DF:03 Certificate issuer: /CN=A915AF7A/serialNumber=6880D323AA3F2D5146050640F321A6129000DF03 Certificate serial: 060E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIDTI6o_LVFGBQZA8yGmEpAA3wM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.mft Manifest number: 0731 Signing time: Fri 30 May 2025 23:13:57 +0000 Manifest this update: Fri 30 May 2025 23:13:56 +0000 Manifest next update: Fri 06 Jun 2025 23:13:56 +0000 Files and hashes: 1: aIDTI6o_LVFGBQZA8yGmEpAA3wM.crl (hash: +T+TY4EZ270Kid8PFXUC9u7bN7fga0HXgMXT3NLfnH8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.crl rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIDTI6o_LVFGBQZA8yGmEpAA3wM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:13:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1550 (0x60e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915AF7A, serialNumber=6880D323AA3F2D5146050640F321A6129000DF03 Validity Not Before: May 30 23:13:56 2025 GMT Not After : Jun 6 23:13:56 2025 GMT Subject: CN=683a3bb4-a1ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:4c:42:20:c0:d8:48:2e:56:94:6f:c4:ab:31: 34:12:da:2e:e9:84:10:a7:5a:b3:8e:dd:0a:21:50: 91:00:a3:83:08:f8:0c:6f:bd:1f:4e:3b:3e:20:5c: 05:00:8b:99:0d:7b:95:44:dc:b1:c3:f5:d7:c8:45: c0:b8:3e:ce:2a:a7:b9:58:61:ef:07:31:71:f6:47: 8b:16:41:d0:9c:be:18:06:71:2f:c9:eb:95:f7:d3: 73:57:27:28:18:71:bf:01:90:35:a3:f9:03:de:e6: 7e:13:22:39:87:42:da:11:5c:d6:39:cd:5a:d5:db: 2d:26:06:e5:a4:f5:a5:38:4e:b0:a9:d1:c2:4e:91: f1:ad:fa:b9:d6:27:ab:df:30:14:dd:0a:64:0b:47: 60:be:58:74:6f:6d:b9:91:e1:1e:58:bc:a8:05:8d: 25:f1:0d:b5:3e:80:6e:a2:dd:c2:3b:9d:29:4a:05: 67:e1:e1:9c:af:e8:0a:77:70:71:75:65:67:31:5b: 54:8b:27:8f:d7:0c:33:67:a2:30:26:2e:18:69:ed: fd:eb:c9:b7:b8:0e:d6:d9:4e:21:6b:30:66:5e:60: 83:b3:2f:77:75:4e:fb:06:9c:9f:b0:61:9c:d6:59: f5:23:06:72:35:2e:42:f4:7c:96:64:f0:79:44:bf: ee:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:16:6E:EE:D2:3A:57:55:4E:37:C8:CF:82:D8:35:57:56:2C:46:BD X509v3 Authority Key Identifier: keyid:68:80:D3:23:AA:3F:2D:51:46:05:06:40:F3:21:A6:12:90:00:DF:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIDTI6o_LVFGBQZA8yGmEpAA3wM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:5e:20:ed:56:9e:12:8d:2e:bf:67:23:e8:70:ab:32:70:6c: fa:d1:fa:15:62:6a:87:62:e6:63:71:68:3d:82:0f:9d:e9:b2: 0c:18:59:49:40:d2:ad:14:14:f0:f1:de:55:b6:6b:61:c4:bd: 7f:a4:87:bc:11:80:55:b4:e5:b5:23:55:4e:18:f1:51:c2:dc: e9:67:ef:31:e1:4b:2b:4e:7b:ff:f4:d0:50:41:70:04:c2:3c: 61:7e:4e:3a:32:ba:5b:fb:94:02:5e:84:7c:69:6d:7a:8e:45: f9:a5:3f:62:8e:10:8e:c1:0c:1c:54:6b:2e:70:d3:17:f3:17: bd:60:58:3e:87:2a:03:3d:30:31:e7:3e:b7:95:91:42:3e:1b: 67:56:35:a5:6c:5a:0f:b0:ed:b2:3d:51:37:95:8e:3f:2f:81: ad:06:af:38:30:6d:27:5a:af:e0:e2:1c:8c:b4:4c:96:3d:15: b7:0c:d0:62:45:61:74:a6:64:c1:dc:b3:51:96:5e:15:0e:25: 72:af:ff:93:6d:bb:1e:b4:1c:1f:0f:ef:be:85:7b:84:d2:d9: 9c:ac:a0:f7:dc:bd:1c:b7:ee:72:c7:7f:8a:ef:d3:b6:64:f3: 9a:dc:68:fc:10:91:e3:99:3a:dd:95:3e:79:38:75:7a:8a:d8: 7c:22:fd:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBg4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUFGN0ExMTAvBgNVBAUTKDY4ODBEMzIzQUEzRjJENTE0NjA1MDY0MEYzMjFBNjEy OTAwMERGMDMwHhcNMjUwNTMwMjMxMzU2WhcNMjUwNjA2MjMxMzU2WjAYMRYwFAYD VQQDEw02ODNhM2JiNC1hMWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnUxCIMDYSC5WlG/EqzE0Etou6YQQp1qzjt0KIVCRAKODCPgMb70fTjs+IFwF AIuZDXuVRNyxw/XXyEXAuD7OKqe5WGHvBzFx9keLFkHQnL4YBnEvyeuV99NzVyco GHG/AZA1o/kD3uZ+EyI5h0LaEVzWOc1a1dstJgblpPWlOE6wqdHCTpHxrfq51ier 3zAU3QpkC0dgvlh0b225keEeWLyoBY0l8Q21PoBuot3CO50pSgVn4eGcr+gKd3Bx dWVnMVtUiyeP1wwzZ6IwJi4Yae3968m3uA7W2U4hazBmXmCDsy93dU77BpyfsGGc 1ln1IwZyNS5C9HyWZPB5RL/uswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAgWbu7S OldVTjfIz4LYNVdWLEa9MB8GA1UdIwQYMBaAFGiA0yOqPy1RRgUGQPMhphKQAN8D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QUY3QS9FMDUzMzMzNkJB QzkxMUVCQjgwN0Q1MUNDNEY5QUUwMi9hSURUSTZvX0xWRkdCUVpBOHlHbUVwQUEz d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FJRFRJNm9fTFZGR0JRWkE4eUdtRXBBQTN3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QUY3QS9FMDUzMzMzNkJBQzkxMUVCQjgwN0Q1MUNDNEY5QUUwMi9hSURUSTZvX0xW RkdCUVpBOHlHbUVwQUEzd00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwXiDtVp4SjS6/ZyPocKsycGz60foVYmqHYuZjcWg9gg+d6bIMGFlJ QNKtFBTw8d5VtmthxL1/pIe8EYBVtOW1I1VOGPFRwtzpZ+8x4UsrTnv/9NBQQXAE wjxhfk46Mrpb+5QCXoR8aW16jkX5pT9ijhCOwQwcVGsucNMX8xe9YFg+hyoDPTAx 5z63lZFCPhtnVjWlbFoPsO2yPVE3lY4/L4GtBq84MG0nWq/g4hyMtEyWPRW3DNBi RWF0pmTB3LNRll4VDiVyr/+TbbsetBwfD+++hXuE0tmcrKD33L0ct+5yx3+K79O2 ZPOa3Gj8EJHjmTrdlT55OHV6ith8Iv3x -----END CERTIFICATE-----Generated at Sat May 31 17:47:25 2025 by rpki-client