$ rpki-client -vvf rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.mft File: AfHtCM3icTbzl9BzSvKjXl1SfdQ.mft (raw, json) Hash identifier: noGWiDrW8dW8yQGOLj8oECYHoPS6xGJ2IG+cCelaX4c= Subject key identifier: 74:2F:41:9C:0C:2F:17:8F:3B:2C:3D:2B:A6:AD:5D:C9:58:C3:DB:56 Authority key identifier: 01:F1:ED:08:CD:E2:71:36:F3:97:D0:73:4A:F2:A3:5E:5D:52:7D:D4 Certificate issuer: /CN=A91788FF/serialNumber=01F1ED08CDE27136F397D0734AF2A35E5D527DD4 Certificate serial: B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfHtCM3icTbzl9BzSvKjXl1SfdQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.mft Manifest number: AD Signing time: Fri 13 Jun 2025 05:04:56 +0000 Manifest this update: Fri 13 Jun 2025 05:04:55 +0000 Manifest next update: Fri 20 Jun 2025 05:04:55 +0000 Files and hashes: 1: AfHtCM3icTbzl9BzSvKjXl1SfdQ.crl (hash: bkizxOI30I7q0DrJfkxHLqMUSn4J+K3UdhJ6vVlQGVE=) 2: 726BD5E645CF11EF854E2262C4F9AE02.roa (hash: NhOdHEmUoQd5YvUf9TabAJ2MpFyvN1YFKpx5g77iQO8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.crl rsync://rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfHtCM3icTbzl9BzSvKjXl1SfdQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 04:22:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 176 (0xb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91788FF, serialNumber=01F1ED08CDE27136F397D0734AF2A35E5D527DD4 Validity Not Before: Jun 13 05:04:55 2025 GMT Not After : Jun 20 05:04:55 2025 GMT Subject: CN=684bb178-d787 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:72:7b:51:98:96:1d:5f:28:5d:a7:fa:42:e3: 27:a2:e6:d4:b8:05:e4:4c:ed:01:db:90:d9:b6:da: 56:fa:6d:f5:75:41:e7:0a:c6:65:49:49:4a:da:09: 68:55:dc:59:0b:f2:7e:21:c5:b0:8b:66:70:a3:e4: 08:99:43:9b:76:89:e9:9f:8a:38:47:5e:6b:8f:0a: f6:53:9a:f8:54:04:e5:c9:06:78:0c:7f:d5:57:62: f7:60:d5:8a:6a:88:b8:ad:91:e7:28:56:8a:ad:22: 3f:c2:9e:3d:ca:ba:73:73:aa:0f:84:8d:13:0a:c5: 9a:5a:9f:f2:24:f3:27:c8:95:55:61:c6:29:9d:d0: 67:9c:39:cc:87:02:46:0d:31:2f:59:1a:f6:6c:ef: fb:1d:61:a1:3f:41:7a:d7:92:e4:55:30:3e:a1:ba: e6:7f:1f:30:aa:40:98:6d:65:b5:f6:93:e1:79:c4: aa:98:86:37:24:42:0f:f0:11:12:f9:e3:c5:0e:2d: cc:c0:b0:90:3d:99:c1:bb:2a:8e:77:5e:98:87:1a: d9:12:40:be:ec:44:dc:13:99:a4:21:f2:07:05:29: 74:6c:40:e9:f5:ff:8f:fb:e7:a7:2b:20:f4:b4:f5: 82:19:d6:80:b5:70:5d:b0:08:82:ff:dc:cd:89:d5: 6c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:2F:41:9C:0C:2F:17:8F:3B:2C:3D:2B:A6:AD:5D:C9:58:C3:DB:56 X509v3 Authority Key Identifier: keyid:01:F1:ED:08:CD:E2:71:36:F3:97:D0:73:4A:F2:A3:5E:5D:52:7D:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfHtCM3icTbzl9BzSvKjXl1SfdQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:20:a5:31:74:19:79:f1:62:2c:f2:50:0e:14:e9:2d:dd:ac: 2a:cb:27:5b:54:ce:51:57:f9:e3:25:9f:6c:2d:bc:b5:0f:92: 0d:cf:0b:9b:c9:f9:aa:eb:b6:e5:38:d1:dc:24:91:fe:03:f8: f5:d2:e3:3b:ea:96:3a:06:07:91:79:ed:2f:c9:fe:bf:5b:9c: e9:0c:3f:7b:df:9f:a0:fc:e5:ea:6f:55:f6:ac:8a:d4:3b:f8: 86:da:c7:af:ba:ff:9a:b0:98:5f:ab:21:90:46:0c:6b:b4:d1: 9d:a0:37:fa:42:25:35:f5:38:ac:87:bd:c2:fa:1b:fb:54:68: 6d:ad:fb:dc:65:f1:57:10:65:61:38:54:ef:98:72:df:7f:bc: c4:9e:1f:d2:d6:b2:39:9f:02:fa:3d:d9:f7:7f:c8:3f:98:69: f3:c1:1a:41:ca:02:af:53:d3:92:6a:28:3d:7d:60:ca:af:91: 36:03:73:65:0c:c2:5c:6d:57:58:24:79:50:6b:c8:06:c3:40: 58:82:23:5c:6a:53:ea:94:5c:8b:b3:55:05:b0:8d:44:59:a7: 94:16:49:3b:0a:bf:d9:3d:47:60:0b:63:45:54:01:d9:5f:cd: cf:f0:21:e7:3e:29:a9:8f:23:e9:89:67:e9:7b:d7:51:70:17: 90:de:90:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzg4RkYxMTAvBgNVBAUTKDAxRjFFRDA4Q0RFMjcxMzZGMzk3RDA3MzRBRjJBMzVF NUQ1MjdERDQwHhcNMjUwNjEzMDUwNDU1WhcNMjUwNjIwMDUwNDU1WjAYMRYwFAYD VQQDEw02ODRiYjE3OC1kNzg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3nJ7UZiWHV8oXaf6QuMnoubUuAXkTO0B25DZttpW+m31dUHnCsZlSUlK2glo VdxZC/J+IcWwi2Zwo+QImUObdonpn4o4R15rjwr2U5r4VATlyQZ4DH/VV2L3YNWK aoi4rZHnKFaKrSI/wp49yrpzc6oPhI0TCsWaWp/yJPMnyJVVYcYpndBnnDnMhwJG DTEvWRr2bO/7HWGhP0F615LkVTA+obrmfx8wqkCYbWW19pPhecSqmIY3JEIP8BES +ePFDi3MwLCQPZnBuyqOd16YhxrZEkC+7ETcE5mkIfIHBSl0bEDp9f+P++enKyD0 tPWCGdaAtXBdsAiC/9zNidVs9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHQvQZwM LxePOyw9K6atXclYw9tWMB8GA1UdIwQYMBaAFAHx7QjN4nE285fQc0ryo15dUn3U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3ODhGRi9CREVCMjk3NDQ1 Q0QxMUVGOEU4MjY0NEVDNEY5QUUwMi9BZkh0Q00zaWNUYnpsOUJ6U3ZLalhsMVNm ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FmSHRDTTNpY1Riemw5QnpTdktqWGwxU2ZkUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 ODhGRi9CREVCMjk3NDQ1Q0QxMUVGOEU4MjY0NEVDNEY5QUUwMi9BZkh0Q00zaWNU YnpsOUJ6U3ZLalhsMVNmZFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPIKUxdBl58WIs8lAOFOkt3awqyydbVM5RV/njJZ9sLby1D5INzwub yfmq67blONHcJJH+A/j10uM76pY6BgeRee0vyf6/W5zpDD9735+g/OXqb1X2rIrU O/iG2sevuv+asJhfqyGQRgxrtNGdoDf6QiU19Tish73C+hv7VGhtrfvcZfFXEGVh OFTvmHLff7zEnh/S1rI5nwL6Pdn3f8g/mGnzwRpBygKvU9OSaig9fWDKr5E2A3Nl DMJcbVdYJHlQa8gGw0BYgiNcalPqlFyLs1UFsI1EWaeUFkk7Cr/ZPUdgC2NFVAHZ X83P8CHnPimpjyPpiWfpe9dRcBeQ3pAJ -----END CERTIFICATE-----Generated at Fri Jun 13 06:37:50 2025 by rpki-client