$ rpki-client -vvf rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.mft File: aNpOhaeYSz_RCu80x9HQDxtGRTE.mft (raw, json) Hash identifier: Kw3IzBnI5Bb7TYD5h0BGXRJQRIZc38rjQPbOSvvYuXY= Subject key identifier: 27:46:4C:72:F8:9C:9D:28:5A:18:C2:55:61:7C:4E:EC:72:6B:ED:05 Authority key identifier: 68:DA:4E:85:A7:98:4B:3F:D1:0A:EF:34:C7:D1:D0:0F:1B:46:45:31 Certificate issuer: /CN=A918D931/serialNumber=68DA4E85A7984B3FD10AEF34C7D1D00F1B464531 Certificate serial: 079F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNpOhaeYSz_RCu80x9HQDxtGRTE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.mft Manifest number: 0799 Signing time: Sat 31 May 2025 21:22:42 +0000 Manifest this update: Sat 31 May 2025 21:22:41 +0000 Manifest next update: Sat 07 Jun 2025 21:22:41 +0000 Files and hashes: 1: aNpOhaeYSz_RCu80x9HQDxtGRTE.crl (hash: 8WUcUQFn1/2bQqDWCFNreKsHoKNGgDUVvPzATTBOn20=) 2: F575D65A085A11EBA6864D71C4F9AE02.roa (hash: MoYCzKz4ghJi1D1zSWKy/H/ig794mxo8w546loZw0HA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.crl rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNpOhaeYSz_RCu80x9HQDxtGRTE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 21:22:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1951 (0x79f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D931, serialNumber=68DA4E85A7984B3FD10AEF34C7D1D00F1B464531 Validity Not Before: May 31 21:22:41 2025 GMT Not After : Jun 7 21:22:41 2025 GMT Subject: CN=683b7321-fbb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:21:bb:a7:aa:10:c1:22:3c:ab:4f:28:e9:56: a0:b4:ef:1b:93:ca:f5:18:20:0a:d9:ec:d8:5a:1e: ca:f3:8c:cf:48:33:9b:98:8f:ff:cc:aa:69:26:80: 76:86:99:cd:a3:f2:9f:d4:66:34:6f:78:8b:c4:42: 52:53:02:a4:e7:bf:9f:a4:8e:b8:d4:66:d3:a1:81: 25:0f:99:2f:66:ad:cb:d2:9d:98:51:53:56:c1:aa: 46:fe:90:65:46:21:f1:db:5c:d4:39:07:d1:52:4c: 4d:58:dd:2a:fc:d9:4a:78:01:f3:a7:3d:9a:dc:0c: 0f:e1:01:4b:5e:a8:fe:49:d4:26:cd:12:dc:6d:f3: 8d:2d:a5:ba:20:2a:a9:70:8f:0f:05:39:07:e4:03: b0:82:d6:70:38:2e:63:27:39:15:7b:bd:03:fb:1b: 45:40:0f:32:c0:4e:e5:49:40:22:f2:33:5a:6b:8c: 22:05:6f:d9:09:5d:c7:5e:8b:88:d7:e4:d0:f3:10: 4d:86:22:5b:9a:dc:ba:a2:91:bc:9c:d9:da:57:cc: 5a:6f:8f:85:80:5f:a5:41:ae:56:64:38:7b:8b:d5: 87:4d:cc:95:c4:92:49:38:dd:d2:71:1a:34:6e:4e: 5a:b6:5e:59:41:34:40:10:12:10:e2:e0:70:1d:88: de:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:46:4C:72:F8:9C:9D:28:5A:18:C2:55:61:7C:4E:EC:72:6B:ED:05 X509v3 Authority Key Identifier: keyid:68:DA:4E:85:A7:98:4B:3F:D1:0A:EF:34:C7:D1:D0:0F:1B:46:45:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNpOhaeYSz_RCu80x9HQDxtGRTE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:1a:0c:af:3f:b2:03:8b:55:91:e7:18:bf:6d:d7:60:44:a1: ce:31:35:ea:00:59:e7:19:60:df:e8:6e:3a:5f:a0:37:c4:b6: 82:11:30:7d:25:b8:47:3a:a9:d1:03:70:45:24:34:cb:07:dc: 74:f8:38:51:82:3e:8d:c9:cf:2e:f5:a4:93:8a:aa:99:13:c6: 27:7f:53:33:74:ce:c4:4a:83:b7:95:a5:c5:e0:70:3c:03:53: 87:d9:89:4f:49:86:21:eb:67:e6:23:06:12:b1:22:ec:40:8f: c4:0d:e0:53:65:6c:8e:87:40:02:1c:a9:48:cb:0e:8a:75:a1: 9e:5d:60:c7:69:7d:26:5a:e4:38:64:08:cd:84:f9:3a:54:41: e2:7b:29:16:6b:22:e0:5b:8f:b8:5e:3d:de:34:f1:88:74:05: af:97:5c:f1:b2:dd:4b:d0:ac:d2:84:e1:f0:38:40:03:16:9c: 98:00:53:11:a5:c3:08:5a:ed:4f:3a:57:14:cb:0e:a5:c2:86: 31:14:e2:1b:1a:97:67:8f:35:ee:ab:d8:db:7d:4f:36:bf:c1: 02:ec:93:0e:bf:1a:2e:1c:00:a2:3c:91:6a:51:72:3f:9b:55: 44:04:a1:e0:29:41:ef:e9:f6:10:94:62:81:59:89:2d:4e:6d: 48:99:eb:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB58wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ5MzExMTAvBgNVBAUTKDY4REE0RTg1QTc5ODRCM0ZEMTBBRUYzNEM3RDFEMDBG MUI0NjQ1MzEwHhcNMjUwNTMxMjEyMjQxWhcNMjUwNjA3MjEyMjQxWjAYMRYwFAYD VQQDEw02ODNiNzMyMS1mYmIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3iG7p6oQwSI8q08o6VagtO8bk8r1GCAK2ezYWh7K84zPSDObmI//zKppJoB2 hpnNo/Kf1GY0b3iLxEJSUwKk57+fpI641GbToYElD5kvZq3L0p2YUVNWwapG/pBl RiHx21zUOQfRUkxNWN0q/NlKeAHzpz2a3AwP4QFLXqj+SdQmzRLcbfONLaW6ICqp cI8PBTkH5AOwgtZwOC5jJzkVe70D+xtFQA8ywE7lSUAi8jNaa4wiBW/ZCV3HXouI 1+TQ8xBNhiJbmty6opG8nNnaV8xab4+FgF+lQa5WZDh7i9WHTcyVxJJJON3ScRo0 bk5atl5ZQTRAEBIQ4uBwHYjeKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCdGTHL4 nJ0oWhjCVWF8Tuxya+0FMB8GA1UdIwQYMBaAFGjaToWnmEs/0QrvNMfR0A8bRkUx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDkzMS9GQjVBNTA4NDA4 NTgxMUVCOTNCN0E2NkJDNEY5QUUwMi9hTnBPaGFlWVN6X1JDdTgweDlIUUR4dEdS VEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FOcE9oYWVZU3pfUkN1ODB4OUhRRHh0R1JURS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDkzMS9GQjVBNTA4NDA4NTgxMUVCOTNCN0E2NkJDNEY5QUUwMi9hTnBPaGFlWVN6 X1JDdTgweDlIUUR4dEdSVEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxGgyvP7IDi1WR5xi/bddgRKHOMTXqAFnnGWDf6G46X6A3xLaCETB9 JbhHOqnRA3BFJDTLB9x0+DhRgj6Nyc8u9aSTiqqZE8Ynf1MzdM7ESoO3laXF4HA8 A1OH2YlPSYYh62fmIwYSsSLsQI/EDeBTZWyOh0ACHKlIyw6KdaGeXWDHaX0mWuQ4 ZAjNhPk6VEHieykWayLgW4+4Xj3eNPGIdAWvl1zxst1L0KzShOHwOEADFpyYAFMR pcMIWu1POlcUyw6lwoYxFOIbGpdnjzXuq9jbfU82v8EC7JMOvxouHACiPJFqUXI/ m1VEBKHgKUHv6fYQlGKBWYktTm1ImevU -----END CERTIFICATE-----Generated at Mon Jun 2 05:05:22 2025 by rpki-client