$ rpki-client -vvf rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft File: aRgc9FH4s_7GT8gpi1ItSIylyeY.mft (raw, json) Hash identifier: axqHLjgSGtoj/9eHAWJTYaJdpiV00ndR3RYUQKvNO/Y= Subject key identifier: AD:D0:A8:19:78:BD:DD:27:DC:A9:6E:0D:1E:5D:AD:B1:35:F5:36:FA Authority key identifier: 69:18:1C:F4:51:F8:B3:FE:C6:4F:C8:29:8B:52:2D:48:8C:A5:C9:E6 Certificate issuer: /CN=A916DE3D/serialNumber=69181CF451F8B3FEC64FC8298B522D488CA5C9E6 Certificate serial: 4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aRgc9FH4s_7GT8gpi1ItSIylyeY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft Manifest number: 47 Signing time: Sat 31 May 2025 07:02:56 +0000 Manifest this update: Sat 31 May 2025 07:02:56 +0000 Manifest next update: Sat 07 Jun 2025 07:02:56 +0000 Files and hashes: 1: aRgc9FH4s_7GT8gpi1ItSIylyeY.crl (hash: n8UHXtI13FgxBcDK/nLrBAvjBzVBrSqCUlxji+i37i0=) 2: 3AA17754FD8211EFB5BB677AC4F9AE02.roa (hash: imHJlERFiYSGRBFLnXEmas2EVRVLv/9+zOxRclw7D8g=) 3: B3266880FD8511EFA4783083C4F9AE02.roa (hash: W6yWEruXPIDPoCs6QL8pnWnNjj8hPqXcENkKFmbbFhk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.crl rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aRgc9FH4s_7GT8gpi1ItSIylyeY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:02:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78 (0x4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DE3D, serialNumber=69181CF451F8B3FEC64FC8298B522D488CA5C9E6 Validity Not Before: May 31 07:02:56 2025 GMT Not After : Jun 7 07:02:56 2025 GMT Subject: CN=683aa9a0-c53e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:82:17:d7:b0:ed:49:ab:46:91:42:13:7b:f1: 7c:97:ad:5a:89:7d:29:75:8a:bd:5e:45:d4:eb:8f: af:96:da:49:95:dc:37:b3:76:f2:cb:71:c1:13:94: 17:85:de:d7:ed:63:f2:b4:c7:f5:13:98:13:b9:e1: 22:0e:61:83:d8:33:f0:fb:7c:e0:26:d2:a1:82:39: d8:8b:f5:5a:d6:f3:c0:75:16:3e:bb:39:85:97:3b: 61:46:1a:2a:a7:a0:ea:bf:81:dc:07:af:f0:d3:df: 53:62:23:7e:d0:b9:a8:64:4b:8b:a9:b1:c5:d4:c2: a4:6f:79:4b:ed:d7:85:5e:3b:61:de:98:2c:c7:e6: 86:ce:68:11:70:f8:a6:f5:ca:de:66:ac:ab:a5:2b: df:7c:ed:f0:af:52:d3:fa:25:e8:06:fe:1c:11:0b: 9c:db:d8:0f:bb:e3:c9:31:4e:22:38:1c:f4:21:bd: da:a2:08:eb:af:b4:62:7d:23:f5:ab:2c:2a:88:0f: 2d:70:f3:4d:b7:b2:ca:43:98:5b:f5:1c:7d:1f:48: b8:c1:41:a6:cb:26:6e:cf:13:21:f7:8e:cf:81:70: 1a:17:7d:45:dd:c3:2b:4b:be:35:0d:34:60:80:91: 8b:57:42:27:ec:bd:4d:53:fe:46:4f:1f:8b:be:0f: 65:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:D0:A8:19:78:BD:DD:27:DC:A9:6E:0D:1E:5D:AD:B1:35:F5:36:FA X509v3 Authority Key Identifier: keyid:69:18:1C:F4:51:F8:B3:FE:C6:4F:C8:29:8B:52:2D:48:8C:A5:C9:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aRgc9FH4s_7GT8gpi1ItSIylyeY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:ed:5e:f7:60:96:43:36:73:18:52:f3:2d:06:19:64:89:18: e4:d6:06:e1:03:9e:36:63:53:e0:2c:c5:f0:0a:45:66:82:9c: 20:4a:bb:48:eb:59:1a:67:ae:b4:cc:9b:3d:a4:4f:78:bc:92: 20:41:82:4b:79:d6:0d:90:a6:3f:5e:ab:9d:1e:c0:be:5c:67: 95:d8:ff:d4:0e:49:bc:47:d6:00:c8:1f:9e:ae:02:77:d6:46: 37:cd:c7:7f:95:74:88:36:48:5d:bc:07:5b:ea:b0:a0:0d:9c: f5:c6:44:34:5f:e6:d8:ba:bf:b8:23:38:fe:47:76:71:ef:1d: dc:30:4f:58:ac:82:42:c1:b9:8d:1c:a5:15:4b:a0:d0:b8:45: 2a:2c:2b:2c:0d:da:b2:30:3f:33:a4:21:fa:41:b7:f0:7f:68: 9c:d5:a2:07:19:3c:2e:bf:be:34:a7:5a:2e:62:b0:aa:82:63: 90:ae:c0:ec:6f:46:9a:d1:e7:5f:b1:02:1c:2b:af:36:b0:bf: 36:0b:09:23:09:b4:02:ca:7e:3c:21:7a:84:f2:ed:d2:30:3f: 85:6e:84:44:bb:4e:e9:71:78:1d:d4:8b:d7:1d:e6:5d:21:dd: 7e:a8:7f:5f:14:1b:74:62:89:26:14:e1:78:d2:3c:9a:d9:94: 2a:fb:cc:d7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 REUzRDExMC8GA1UEBRMoNjkxODFDRjQ1MUY4QjNGRUM2NEZDODI5OEI1MjJENDg4 Q0E1QzlFNjAeFw0yNTA1MzEwNzAyNTZaFw0yNTA2MDcwNzAyNTZaMBgxFjAUBgNV BAMTDTY4M2FhOWEwLWM1M2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCmghfXsO1Jq0aRQhN78XyXrVqJfSl1ir1eRdTrj6+W2kmV3DezdvLLccETlBeF 3tftY/K0x/UTmBO54SIOYYPYM/D7fOAm0qGCOdiL9VrW88B1Fj67OYWXO2FGGiqn oOq/gdwHr/DT31NiI37QuahkS4upscXUwqRveUvt14VeO2HemCzH5obOaBFw+Kb1 yt5mrKulK9987fCvUtP6JegG/hwRC5zb2A+748kxTiI4HPQhvdqiCOuvtGJ9I/Wr LCqIDy1w8023sspDmFv1HH0fSLjBQabLJm7PEyH3js+BcBoXfUXdwytLvjUNNGCA kYtXQifsvU1T/kZPH4u+D2V9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUrdCoGXi9 3SfcqW4NHl2tsTX1NvowHwYDVR0jBBgwFoAUaRgc9FH4s/7GT8gpi1ItSIylyeYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZERTNEL0ZEMUU0NTUwREU2 NTExRUY4MjQzRUUzMEM0RjlBRTAyL2FSZ2M5Rkg0c183R1Q4Z3BpMUl0U0l5bHll WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYVJnYzlGSDRzXzdHVDhncGkxSXRTSXlseWVZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZE RTNEL0ZEMUU0NTUwREU2NTExRUY4MjQzRUUzMEM0RjlBRTAyL2FSZ2M5Rkg0c183 R1Q4Z3BpMUl0U0l5bHllWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHjtXvdglkM2cxhS8y0GGWSJGOTWBuEDnjZjU+AsxfAKRWaCnCBKu0jr WRpnrrTMmz2kT3i8kiBBgkt51g2Qpj9eq50ewL5cZ5XY/9QOSbxH1gDIH56uAnfW RjfNx3+VdIg2SF28B1vqsKANnPXGRDRf5ti6v7gjOP5HdnHvHdwwT1isgkLBuY0c pRVLoNC4RSosKywN2rIwPzOkIfpBt/B/aJzVogcZPC6/vjSnWi5isKqCY5CuwOxv RprR51+xAhwrrzawvzYLCSMJtALKfjwheoTy7dIwP4VuhES7TulxeB3Ui9cd5l0h 3X6of18UG3RiiSYU4XjSPJrZlCr7zNc= -----END CERTIFICATE-----Generated at Sat May 31 17:57:46 2025 by rpki-client