$ rpki-client -vvf rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft File: aZoPjRWjT1mVbLSADGxEBNwOvV0.mft (raw, json) Hash identifier: y+trWrnujl2xmCjKss4H/hJswhIPr96Xe3vmeSTRCTw= Subject key identifier: DB:92:19:12:AA:27:1D:E5:52:FB:3D:C9:A0:23:3C:13:82:CF:25:60 Authority key identifier: 69:9A:0F:8D:15:A3:4F:59:95:6C:B4:80:0C:6C:44:04:DC:0E:BD:5D Certificate issuer: /CN=A915C1FE/serialNumber=699A0F8D15A34F59956CB4800C6C4404DC0EBD5D Certificate serial: 34AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZoPjRWjT1mVbLSADGxEBNwOvV0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft Manifest number: 3491 Signing time: Fri 30 May 2025 15:24:08 +0000 Manifest this update: Fri 30 May 2025 15:24:07 +0000 Manifest next update: Fri 06 Jun 2025 15:24:07 +0000 Files and hashes: 1: aZoPjRWjT1mVbLSADGxEBNwOvV0.crl (hash: wwm0pdyXR2ONzjME8uNhZBVU/nTJxiErEEShRdFSl5E=) 2: 6BC5DC4AB10511E591A3E484C4F9AE02.roa (hash: H9fsyURTb8qh5DVJOvXZinGpj/nUZcubrPdBUX+wonM=) 3: 6A9E6940B10511E591A3E484C4F9AE02.roa (hash: jaRSKEufT55PHq8OPoLG/qgSfjEXVPXjl00275Oa/lI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.crl rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZoPjRWjT1mVbLSADGxEBNwOvV0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 15:24:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13486 (0x34ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C1FE, serialNumber=699A0F8D15A34F59956CB4800C6C4404DC0EBD5D Validity Not Before: May 30 15:24:07 2025 GMT Not After : Jun 6 15:24:07 2025 GMT Subject: CN=6839cd98-c412 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c2:6b:87:5e:6e:00:86:24:0b:a8:8e:66:cb: 55:a9:c4:b8:f9:dc:54:62:85:69:c3:21:aa:b9:99: 53:af:4c:be:52:67:0a:b4:f0:a2:fd:2c:9e:73:de: f5:18:96:ea:e2:46:7e:a9:b0:9d:c3:59:ca:65:d2: 6c:1a:5e:13:13:71:c5:81:29:ae:7f:9e:00:7d:ff: 46:98:97:dd:9c:f9:67:e6:8a:c6:44:a6:5d:7d:52: d5:62:d0:fa:0f:88:ad:be:4f:e6:1b:53:7f:76:7f: e9:7a:60:1b:26:70:7b:6b:d0:29:3e:ba:72:81:77: 20:6b:8f:c4:ae:8f:50:9e:66:a3:ce:a0:9d:1b:12: 8c:84:c8:2f:e9:16:15:cf:56:60:20:23:ff:85:c0: 69:87:7c:60:bf:65:a9:7d:18:26:27:c8:dc:ee:83: d7:8a:a9:22:f6:7d:9e:36:5c:9f:00:1c:46:be:93: 19:6d:b1:8e:49:9b:3e:d5:25:97:96:3e:b9:87:ee: 77:8e:d6:9f:ac:1b:2f:71:0e:63:2d:d1:7c:f2:8c: 19:0b:30:08:f2:ff:f3:bf:12:5f:03:86:3c:09:5d: d0:54:ff:5f:2b:0a:f7:17:21:3d:1d:b6:71:ae:53: 4e:b4:03:41:20:dc:3c:cd:2c:b5:f1:46:83:b6:1f: cb:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:92:19:12:AA:27:1D:E5:52:FB:3D:C9:A0:23:3C:13:82:CF:25:60 X509v3 Authority Key Identifier: keyid:69:9A:0F:8D:15:A3:4F:59:95:6C:B4:80:0C:6C:44:04:DC:0E:BD:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZoPjRWjT1mVbLSADGxEBNwOvV0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:0c:ef:79:67:c5:82:ee:5f:48:40:eb:8f:2e:ba:70:70:a5: a9:8e:40:72:5c:13:ef:d2:e6:e6:40:b5:1f:90:ad:19:73:cf: 48:ce:36:c1:a3:c7:c0:74:70:eb:8a:b1:ca:5b:11:ef:cd:e1: 49:2a:06:e7:2d:d2:19:58:f2:bd:e7:47:77:9e:c9:58:11:0a: cb:3f:2a:b6:fd:74:ba:68:7d:93:19:0f:17:52:71:f9:8a:53: 3e:10:d3:89:91:66:35:4c:c5:36:c8:26:b4:fe:a3:4f:58:dd: 4c:73:31:b9:25:4f:1f:9b:44:44:5b:b1:c1:70:5f:32:34:5d: b0:d5:bc:aa:e8:6f:85:8c:ff:85:89:cc:20:7b:cf:67:cc:c8: 42:97:4e:e7:9f:84:1a:b1:f6:c1:d2:3b:f2:73:3c:8d:a6:57: ea:00:89:8d:ca:81:90:3c:fc:c6:b2:f1:69:1f:82:ea:93:8d: 09:03:1c:1c:f4:0d:96:f4:68:8c:b5:5c:71:a2:60:28:d5:00: 3d:86:33:9a:9e:4b:6e:5b:5f:39:a2:9b:83:84:36:6a:76:a6: b1:38:89:73:cb:e9:d8:f9:bf:e8:f0:7f:a9:63:92:56:7f:0c: 3f:2f:96:44:2b:00:83:9a:1b:b5:c3:58:b0:52:a0:01:d9:89: 60:c8:e8:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUMxRkUxMTAvBgNVBAUTKDY5OUEwRjhEMTVBMzRGNTk5NTZDQjQ4MDBDNkM0NDA0 REMwRUJENUQwHhcNMjUwNTMwMTUyNDA3WhcNMjUwNjA2MTUyNDA3WjAYMRYwFAYD VQQDEw02ODM5Y2Q5OC1jNDEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAucJrh15uAIYkC6iOZstVqcS4+dxUYoVpwyGquZlTr0y+UmcKtPCi/Syec971 GJbq4kZ+qbCdw1nKZdJsGl4TE3HFgSmuf54Aff9GmJfdnPln5orGRKZdfVLVYtD6 D4itvk/mG1N/dn/pemAbJnB7a9ApPrpygXcga4/Ero9QnmajzqCdGxKMhMgv6RYV z1ZgICP/hcBph3xgv2WpfRgmJ8jc7oPXiqki9n2eNlyfABxGvpMZbbGOSZs+1SWX lj65h+53jtafrBsvcQ5jLdF88owZCzAI8v/zvxJfA4Y8CV3QVP9fKwr3FyE9HbZx rlNOtANBINw8zSy18UaDth/LsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNuSGRKq Jx3lUvs9yaAjPBOCzyVgMB8GA1UdIwQYMBaAFGmaD40Vo09ZlWy0gAxsRATcDr1d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzFGRS9EMTE4QUFCQTFE QUExMUUyQTJFQ0NBQTYwOEIwMkNEMi9hWm9QalJXalQxbVZiTFNBREd4RUJOd092 VjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Fab1BqUldqVDFtVmJMU0FER3hFQk53T3ZWMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QzFGRS9EMTE4QUFCQTFEQUExMUUyQTJFQ0NBQTYwOEIwMkNEMi9hWm9QalJXalQx bVZiTFNBREd4RUJOd092VjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3DO95Z8WC7l9IQOuPLrpwcKWpjkByXBPv0ubmQLUfkK0Zc89IzjbB o8fAdHDrirHKWxHvzeFJKgbnLdIZWPK950d3nslYEQrLPyq2/XS6aH2TGQ8XUnH5 ilM+ENOJkWY1TMU2yCa0/qNPWN1MczG5JU8fm0REW7HBcF8yNF2w1byq6G+FjP+F icwge89nzMhCl07nn4QasfbB0jvyczyNplfqAImNyoGQPPzGsvFpH4Lqk40JAxwc 9A2W9GiMtVxxomAo1QA9hjOanktuW185opuDhDZqdqaxOIlzy+nY+b/o8H+pY5JW fww/L5ZEKwCDmhu1w1iwUqAB2YlgyOhz -----END CERTIFICATE-----Generated at Sat May 31 16:36:48 2025 by rpki-client