$ rpki-client -vvf rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft File: aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft (raw, json) Hash identifier: 3uz2duBTiB9VJ9NL1f3tzucJpImqkFk3Fft4GpU1jjE= Subject key identifier: 28:9A:E4:DF:AA:D0:C1:44:D3:1D:A1:42:3E:C2:80:C8:F9:81:15:C1 Authority key identifier: 69:2E:BD:3D:03:F2:58:74:6E:68:43:B6:12:8D:D2:09:C5:12:22:E6 Certificate issuer: /CN=A917BED0/serialNumber=692EBD3D03F258746E6843B6128DD209C51222E6 Certificate serial: 01D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aS69PQPyWHRuaEO2Eo3SCcUSIuY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft Manifest number: 01CA Signing time: Sat 31 May 2025 02:39:48 +0000 Manifest this update: Sat 31 May 2025 02:39:48 +0000 Manifest next update: Sat 07 Jun 2025 02:39:48 +0000 Files and hashes: 1: aS69PQPyWHRuaEO2Eo3SCcUSIuY.crl (hash: TgefrL1LhA3Of0fmbZXTJdSkcKJDq9umeyCHLidriBU=) 2: 24AC43889DE011EDA182F455C4F9AE02.roa (hash: VEixjX/Xe+G6aJHNRJCpYadqa0JmMvyZd3MR6Kj/fCY=) 3: 236FAC269DE011EDA182F455C4F9AE02.roa (hash: DvFHTfUMj5djbvwopTj+xsfhSJgyhsfDlJJptgV29ak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.crl rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aS69PQPyWHRuaEO2Eo3SCcUSIuY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:39:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 465 (0x1d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BED0, serialNumber=692EBD3D03F258746E6843B6128DD209C51222E6 Validity Not Before: May 31 02:39:48 2025 GMT Not After : Jun 7 02:39:48 2025 GMT Subject: CN=683a6bf4-7351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:cf:87:00:0a:22:e0:8d:73:36:f9:2f:ee:c0: 4a:b9:15:2c:92:8e:06:44:08:b6:0e:c8:b7:e4:93: 69:a7:36:83:ec:71:c6:0d:59:10:b4:dc:12:81:74: de:e9:77:93:4d:49:1c:01:8c:e4:2e:87:24:9f:a6: 5f:74:9c:a9:e9:7b:88:91:d1:11:ce:58:aa:75:1e: 67:91:06:6b:4b:13:6e:c7:e7:76:ad:ca:f6:ab:38: 3b:2f:5d:41:d6:03:64:d8:a4:9b:b5:64:01:ab:ad: 3e:2c:35:90:29:98:5d:1c:e5:90:e4:87:48:83:6c: 85:a8:21:cc:c1:ac:a4:40:70:eb:b1:ba:29:b7:7e: 73:ee:53:33:b6:8a:0c:a6:94:e4:8f:58:d1:17:38: bb:78:0d:d7:e0:f9:89:5e:37:24:cd:a5:46:fd:05: 4c:37:12:06:c4:17:de:eb:0b:03:c4:7a:99:ad:3d: 14:01:f1:99:9e:a0:74:5e:03:0e:a5:e1:58:c9:6e: 2c:0f:97:16:60:b0:c4:a9:d2:b3:51:16:87:a7:6d: 3d:41:4d:1c:a7:84:b8:c3:d5:1b:5c:e8:64:11:bc: bf:c6:de:71:13:3c:32:7a:0d:61:77:1b:1b:09:5e: b2:bf:0f:bf:bb:50:fc:2a:92:67:8a:be:b7:1a:6d: d7:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:9A:E4:DF:AA:D0:C1:44:D3:1D:A1:42:3E:C2:80:C8:F9:81:15:C1 X509v3 Authority Key Identifier: keyid:69:2E:BD:3D:03:F2:58:74:6E:68:43:B6:12:8D:D2:09:C5:12:22:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aS69PQPyWHRuaEO2Eo3SCcUSIuY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:f6:e8:a4:80:32:b0:d9:05:34:64:27:fc:b3:dc:c0:ac:8d: 3c:0f:5d:51:52:53:98:72:02:f5:db:fd:66:a4:8d:85:ec:30: b3:e8:78:c3:f5:2d:c4:94:5b:e3:67:6e:9e:d6:0f:dc:7a:eb: fb:6f:0b:06:fc:9b:a6:0e:60:62:db:4d:71:e1:b3:26:7d:59: 86:cd:3c:e8:48:ec:6c:fb:7e:25:1b:7a:c0:cc:fd:f6:23:78: 52:6c:08:7d:ce:cc:35:78:65:3b:8d:35:d7:4c:6d:c8:71:2c: a4:eb:c9:b9:01:62:70:07:49:8e:55:60:9a:e6:9c:35:6d:c3: b1:0e:5e:4e:07:f4:2d:20:17:b9:7c:50:03:a7:04:c9:5d:c9: c7:3b:ed:98:32:78:66:18:82:f0:82:85:ba:28:be:23:20:d6: ec:3b:54:45:1e:af:e5:20:7e:72:70:1e:8c:b9:b8:89:0a:b0: 38:c4:bc:fe:e0:11:c4:99:1b:eb:79:ca:1e:a3:ab:a3:5a:e0: 25:ba:f4:c8:3d:1e:fb:1b:67:53:31:b4:2c:95:fb:74:ec:b8: af:3a:41:38:31:9f:12:6c:41:87:bd:a3:81:ef:6c:6f:84:42: 82:80:c6:07:b9:63:1c:48:ef:d2:aa:e9:c8:ed:c4:60:ef:ef: df:74:ce:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JFRDAxMTAvBgNVBAUTKDY5MkVCRDNEMDNGMjU4NzQ2RTY4NDNCNjEyOEREMjA5 QzUxMjIyRTYwHhcNMjUwNTMxMDIzOTQ4WhcNMjUwNjA3MDIzOTQ4WjAYMRYwFAYD VQQDEw02ODNhNmJmNC03MzUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsM+HAAoi4I1zNvkv7sBKuRUsko4GRAi2Dsi35JNppzaD7HHGDVkQtNwSgXTe 6XeTTUkcAYzkLockn6ZfdJyp6XuIkdERzliqdR5nkQZrSxNux+d2rcr2qzg7L11B 1gNk2KSbtWQBq60+LDWQKZhdHOWQ5IdIg2yFqCHMwaykQHDrsbopt35z7lMztooM ppTkj1jRFzi7eA3X4PmJXjckzaVG/QVMNxIGxBfe6wsDxHqZrT0UAfGZnqB0XgMO peFYyW4sD5cWYLDEqdKzURaHp209QU0cp4S4w9UbXOhkEby/xt5xEzwyeg1hdxsb CV6yvw+/u1D8KpJnir63Gm3XnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCia5N+q 0MFE0x2hQj7CgMj5gRXBMB8GA1UdIwQYMBaAFGkuvT0D8lh0bmhDthKN0gnFEiLm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkVEMC9EREI1ODlBMDgw MTkxMUVEQkJCRTMwNkVDNEY5QUUwMi9hUzY5UFFQeVdIUnVhRU8yRW8zU0NjVVNJ dVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FTNjlQUVB5V0hSdWFFTzJFbzNTQ2NVU0l1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkVEMC9EREI1ODlBMDgwMTkxMUVEQkJCRTMwNkVDNEY5QUUwMi9hUzY5UFFQeVdI UnVhRU8yRW8zU0NjVVNJdVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAC9uikgDKw2QU0ZCf8s9zArI08D11RUlOYcgL12/1mpI2F7DCz6HjD 9S3ElFvjZ26e1g/ceuv7bwsG/JumDmBi201x4bMmfVmGzTzoSOxs+34lG3rAzP32 I3hSbAh9zsw1eGU7jTXXTG3IcSyk68m5AWJwB0mOVWCa5pw1bcOxDl5OB/QtIBe5 fFADpwTJXcnHO+2YMnhmGILwgoW6KL4jINbsO1RFHq/lIH5ycB6MubiJCrA4xLz+ 4BHEmRvrecoeo6ujWuAluvTIPR77G2dTMbQslft07LivOkE4MZ8SbEGHvaOB72xv hEKCgMYHuWMcSO/SqunI7cRg7+/fdM7g -----END CERTIFICATE-----Generated at Sat May 31 14:44:55 2025 by rpki-client