$ rpki-client -vvf rpki.apnic.net/member_repository/A916763E/85795FECF90111EF9C24C812C4F9AE02/aQwWqX7kC4mmTLMfYqmaVjAILcM.mft File: aQwWqX7kC4mmTLMfYqmaVjAILcM.mft (raw, json) Hash identifier: yWQtUcPLkykRRmWlOPtv5gO1tYy00CRHoHddWqGO8QA= Subject key identifier: 5A:36:8F:92:DF:25:7E:27:C2:C2:42:FF:93:2B:67:B3:94:3B:D3:E0 Authority key identifier: 69:0C:16:A9:7E:E4:0B:89:A6:4C:B3:1F:62:A9:9A:56:30:08:2D:C3 Certificate issuer: /CN=A916763E/serialNumber=690C16A97EE40B89A64CB31F62A99A5630082DC3 Certificate serial: 30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQwWqX7kC4mmTLMfYqmaVjAILcM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916763E/85795FECF90111EF9C24C812C4F9AE02/aQwWqX7kC4mmTLMfYqmaVjAILcM.mft Manifest number: 2E Signing time: Sat 31 May 2025 07:15:10 +0000 Manifest this update: Sat 31 May 2025 07:15:10 +0000 Manifest next update: Sat 07 Jun 2025 07:15:10 +0000 Files and hashes: 1: aQwWqX7kC4mmTLMfYqmaVjAILcM.crl (hash: 5B9E/1dH5lo/hhMHdnHzQ59rxuV/PLjtvnVlSpoJiT4=) 2: 8D2816C4F90211EF99692E40C4F9AE02.roa (hash: +NqGztaEhZpUZkM4BrFHd/HmjU1Jxg/vDaPsvxdwGGQ=) 3: 8DD9218AF90211EF99692E40C4F9AE02.roa (hash: 3CWgpxVwX8rXbxNTGaUyko/Ji2jUUIx/aqwN4MmZ++Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916763E/85795FECF90111EF9C24C812C4F9AE02/aQwWqX7kC4mmTLMfYqmaVjAILcM.crl rsync://rpki.apnic.net/member_repository/A916763E/85795FECF90111EF9C24C812C4F9AE02/aQwWqX7kC4mmTLMfYqmaVjAILcM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQwWqX7kC4mmTLMfYqmaVjAILcM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:15:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48 (0x30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916763E, serialNumber=690C16A97EE40B89A64CB31F62A99A5630082DC3 Validity Not Before: May 31 07:15:10 2025 GMT Not After : Jun 7 07:15:10 2025 GMT Subject: CN=683aac7e-59cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a3:c0:ad:68:95:fd:01:6a:c9:35:87:b5:fc: f3:c6:e8:ed:37:77:53:1c:f1:00:2b:c1:9d:90:1e: 03:28:01:f0:b1:7d:b4:1b:c1:c6:ce:79:9e:02:6a: 79:6a:d4:a5:b6:aa:c1:b0:59:a9:f8:12:35:9e:7f: eb:81:c4:1b:8d:cf:5e:ae:0a:4b:24:c0:2b:36:0f: 25:17:4f:d2:e9:52:ae:8f:ab:a5:76:72:76:75:c3: 37:d3:37:6c:78:57:ab:fa:b4:6b:bd:23:3b:70:f6: 63:cb:0d:4e:e8:63:be:32:b4:10:56:2b:72:cb:d3: 43:32:d8:33:bd:79:09:83:85:44:ad:30:09:2a:15: 7a:ea:ab:95:1f:c6:49:ac:90:9d:8a:1e:66:04:fe: 2e:f5:c2:66:7a:cb:54:fa:92:db:9f:fc:0a:a2:f9: 0a:79:0b:94:8a:29:6c:2e:be:de:9f:7e:77:c1:97: ed:7f:82:7b:ea:22:8b:f5:4b:7d:d5:44:d0:c4:a1: 47:44:94:b0:96:4e:f5:3d:eb:4f:2d:dc:e2:c4:33: 15:12:10:d0:bc:c5:22:73:2e:06:94:68:aa:51:d8: a3:38:b1:71:60:57:c6:00:09:2e:61:55:fa:7c:23: 5e:66:91:37:b7:17:9c:53:6f:3a:05:6b:a5:5b:a6: 3d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:36:8F:92:DF:25:7E:27:C2:C2:42:FF:93:2B:67:B3:94:3B:D3:E0 X509v3 Authority Key Identifier: keyid:69:0C:16:A9:7E:E4:0B:89:A6:4C:B3:1F:62:A9:9A:56:30:08:2D:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916763E/85795FECF90111EF9C24C812C4F9AE02/aQwWqX7kC4mmTLMfYqmaVjAILcM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQwWqX7kC4mmTLMfYqmaVjAILcM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916763E/85795FECF90111EF9C24C812C4F9AE02/aQwWqX7kC4mmTLMfYqmaVjAILcM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:34:1b:80:ca:49:3b:1d:ef:f1:a0:5c:53:ef:d9:ba:d3:71: 9a:8a:3d:dc:de:5b:cf:0a:8c:8a:9a:8d:c3:60:54:bb:af:20: 0b:5d:25:9c:9b:f0:b7:86:dd:e7:82:99:49:fe:1e:ee:7b:4f: 26:2e:16:ac:b1:8d:fe:d4:ff:c7:c5:dc:4b:f6:ea:47:55:64: dd:72:8f:c6:4d:ec:19:c7:25:1e:8d:fd:02:a5:fe:0e:32:6d: c6:09:aa:62:02:18:42:a7:cf:09:3c:f0:67:77:52:b4:4b:ae: 20:4b:d6:66:e0:b6:1c:ef:0b:d6:a9:31:c4:d2:a1:0d:83:e9: 7c:1b:b5:2f:a7:cb:d4:c8:da:db:3f:c7:47:bf:b0:9c:76:d8: 9b:5e:f5:00:4a:f2:bf:de:90:1e:e4:57:af:19:cc:b5:a6:de: 22:a9:cb:f1:f7:ce:45:39:9b:89:9d:f9:40:b4:3a:cb:f1:34: 30:41:eb:4f:a9:cd:2c:ad:13:cb:e5:1a:09:e4:a1:7f:3c:f7: bd:3e:4d:a4:3f:90:1f:bf:20:88:b6:29:69:d1:1e:9c:00:46: 92:4f:f7:d0:17:90:d6:0a:ef:cf:a3:67:c2:f2:e7:fe:2f:8b: 3e:85:3c:47:96:a8:65:12:55:b8:01:1c:75:3d:1b:3d:55:94: 2b:42:3f:84 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NzYzRTExMC8GA1UEBRMoNjkwQzE2QTk3RUU0MEI4OUE2NENCMzFGNjJBOTlBNTYz MDA4MkRDMzAeFw0yNTA1MzEwNzE1MTBaFw0yNTA2MDcwNzE1MTBaMBgxFjAUBgNV BAMTDTY4M2FhYzdlLTU5Y2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDco8CtaJX9AWrJNYe1/PPG6O03d1Mc8QArwZ2QHgMoAfCxfbQbwcbOeZ4Canlq 1KW2qsGwWan4EjWef+uBxBuNz16uCkskwCs2DyUXT9LpUq6Pq6V2cnZ1wzfTN2x4 V6v6tGu9Iztw9mPLDU7oY74ytBBWK3LL00My2DO9eQmDhUStMAkqFXrqq5Ufxkms kJ2KHmYE/i71wmZ6y1T6ktuf/Aqi+Qp5C5SKKWwuvt6ffnfBl+1/gnvqIov1S33V RNDEoUdElLCWTvU9608t3OLEMxUSENC8xSJzLgaUaKpR2KM4sXFgV8YACS5hVfp8 I15mkTe3F5xTbzoFa6Vbpj37AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWjaPkt8l fifCwkL/kytns5Q70+AwHwYDVR0jBBgwFoAUaQwWqX7kC4mmTLMfYqmaVjAILcMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY3NjNFLzg1Nzk1RkVDRjkw MTExRUY5QzI0QzgxMkM0RjlBRTAyL2FRd1dxWDdrQzRtbVRMTWZZcW1hVmpBSUxj TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYVF3V3FYN2tDNG1tVExNZllxbWFWakFJTGNNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY3 NjNFLzg1Nzk1RkVDRjkwMTExRUY5QzI0QzgxMkM0RjlBRTAyL2FRd1dxWDdrQzRt bVRMTWZZcW1hVmpBSUxjTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACk0G4DKSTsd7/GgXFPv2brTcZqKPdzeW88KjIqajcNgVLuvIAtdJZyb 8LeG3eeCmUn+Hu57TyYuFqyxjf7U/8fF3Ev26kdVZN1yj8ZN7BnHJR6N/QKl/g4y bcYJqmICGEKnzwk88Gd3UrRLriBL1mbgthzvC9apMcTSoQ2D6XwbtS+ny9TI2ts/ x0e/sJx22Jte9QBK8r/ekB7kV68ZzLWm3iKpy/H3zkU5m4md+UC0OsvxNDBB60+p zSytE8vlGgnkoX88970+TaQ/kB+/IIi2KWnRHpwARpJP99AXkNYK78+jZ8Ly5/4v iz6FPEeWqGUSVbgBHHU9Gz1VlCtCP4Q= -----END CERTIFICATE-----Generated at Sat May 31 16:35:49 2025 by rpki-client