$ rpki-client -vvf rpki.apnic.net/member_repository/A9191BBF/126B909A9DBD11EB8A1F0B32C4F9AE02/v02AE9uXuO8A-M6Mbb6vsFHhlLw.mft File: v02AE9uXuO8A-M6Mbb6vsFHhlLw.mft (raw, json) Hash identifier: VfBOtJxbxws/AAlVjNRSppydOdvoNUrordEhlYdfWa4= Subject key identifier: AA:9D:FE:3B:B9:16:3B:B8:17:E5:28:98:4F:0D:85:A0:EE:06:65:63 Authority key identifier: BF:4D:80:13:DB:97:B8:EF:00:F8:CE:8C:6D:BE:AF:B0:51:E1:94:BC Certificate issuer: /CN=A9191BBF/serialNumber=BF4D8013DB97B8EF00F8CE8C6DBEAFB051E194BC Certificate serial: 0629 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v02AE9uXuO8A-M6Mbb6vsFHhlLw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191BBF/126B909A9DBD11EB8A1F0B32C4F9AE02/v02AE9uXuO8A-M6Mbb6vsFHhlLw.mft Manifest number: 0620 Signing time: Fri 30 May 2025 22:59:40 +0000 Manifest this update: Fri 30 May 2025 22:59:40 +0000 Manifest next update: Fri 06 Jun 2025 22:59:40 +0000 Files and hashes: 1: v02AE9uXuO8A-M6Mbb6vsFHhlLw.crl (hash: u2thSXGc/Whxdd+X67bagehfv7jTnhbt8K4Dqwtjoiw=) 2: 4482148613E611EE8ECA2D3CC4F9AE02.roa (hash: XTSBtrIecRC5bRQ4gGFFZQkO+lSp1UBH8SdLLnw+dpg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191BBF/126B909A9DBD11EB8A1F0B32C4F9AE02/v02AE9uXuO8A-M6Mbb6vsFHhlLw.crl rsync://rpki.apnic.net/member_repository/A9191BBF/126B909A9DBD11EB8A1F0B32C4F9AE02/v02AE9uXuO8A-M6Mbb6vsFHhlLw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v02AE9uXuO8A-M6Mbb6vsFHhlLw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:59:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1577 (0x629) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191BBF, serialNumber=BF4D8013DB97B8EF00F8CE8C6DBEAFB051E194BC Validity Not Before: May 30 22:59:40 2025 GMT Not After : Jun 6 22:59:40 2025 GMT Subject: CN=683a385c-5a59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:48:96:69:43:48:70:2c:d3:eb:61:d3:13:b8: 08:08:9f:3d:3c:94:63:6c:1c:71:6f:3c:8e:61:be: c2:52:20:d2:78:c3:5c:33:5a:6e:e2:85:15:a5:f6: 60:6e:9d:eb:1c:17:4c:67:95:32:ae:86:0b:f8:05: a0:8a:d1:db:32:e3:fc:0b:8b:bc:59:8d:5e:53:13: 5e:70:62:e9:15:8d:6f:c4:b9:a9:e8:36:d3:15:fb: ad:df:aa:75:22:ba:4a:5f:57:3b:95:27:e3:a9:56: 64:b2:b0:1c:4d:89:36:53:1f:3a:60:64:7b:e8:b9: a6:7b:47:46:bb:f9:d4:90:8f:8a:40:4e:30:c8:cc: ae:08:da:a3:75:3f:8b:55:bc:36:5d:b7:88:6d:1a: 58:58:81:36:12:90:12:12:9a:56:78:6a:ad:21:58: d9:fc:46:61:fd:1a:ef:8e:13:db:0a:ca:e5:64:49: d0:46:7d:0f:25:aa:79:44:d0:a6:3d:2c:44:6a:ad: bd:4e:10:f9:5a:78:07:5b:f4:5e:af:9c:08:4e:f9: 9a:32:b5:02:25:97:9d:18:6c:20:c4:f9:37:b4:45: 70:9c:9a:3d:d1:93:42:f6:5a:92:40:7a:82:bd:a0: 46:a6:82:16:04:35:d3:e9:2a:48:48:64:2d:4d:28: c2:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:9D:FE:3B:B9:16:3B:B8:17:E5:28:98:4F:0D:85:A0:EE:06:65:63 X509v3 Authority Key Identifier: keyid:BF:4D:80:13:DB:97:B8:EF:00:F8:CE:8C:6D:BE:AF:B0:51:E1:94:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191BBF/126B909A9DBD11EB8A1F0B32C4F9AE02/v02AE9uXuO8A-M6Mbb6vsFHhlLw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v02AE9uXuO8A-M6Mbb6vsFHhlLw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191BBF/126B909A9DBD11EB8A1F0B32C4F9AE02/v02AE9uXuO8A-M6Mbb6vsFHhlLw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:10:45:cd:43:75:de:1d:29:0e:04:4e:7b:c8:1d:0a:fe:f3: 41:08:92:fd:3b:eb:36:9e:e6:43:b8:6f:96:54:ad:27:71:15: d0:86:82:b3:f6:6b:7d:08:d4:5f:6d:b0:04:66:71:68:77:60: 23:65:c0:2c:26:06:19:f3:6f:16:e0:0f:34:fd:b8:26:a4:27: c6:e2:84:ce:eb:ea:0b:bf:23:aa:1d:46:0c:5c:7a:6b:da:2f: a3:f0:99:29:fc:f4:a6:7a:77:de:ef:ea:80:44:86:b6:fe:fe: 05:85:38:b7:90:42:36:1c:f4:52:1d:2c:b2:b9:c8:fa:11:2c: 04:36:ee:57:36:64:38:d6:55:07:84:c1:09:e3:ef:7c:a8:5d: 9d:f5:9e:86:53:fe:5a:aa:71:f4:ed:b8:fc:84:1e:d8:7a:32: 4c:44:73:5b:bd:55:96:a2:48:08:e3:9a:bb:a4:aa:93:fe:9c: 31:98:f5:90:31:5a:9e:aa:54:45:61:95:9d:dc:1b:83:fd:d0: ac:5f:99:3d:eb:7e:f4:1c:a9:6c:f4:bc:b9:18:12:8d:c8:24: 7c:a3:f5:c1:62:15:48:aa:0f:7f:6b:84:08:40:47:13:ff:d3: 7e:2b:b8:e0:12:f6:f8:6f:1f:94:1f:e6:cd:78:b3:ee:52:1c: 07:b1:96:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBikwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFCQkYxMTAvBgNVBAUTKEJGNEQ4MDEzREI5N0I4RUYwMEY4Q0U4QzZEQkVBRkIw NTFFMTk0QkMwHhcNMjUwNTMwMjI1OTQwWhcNMjUwNjA2MjI1OTQwWjAYMRYwFAYD VQQDEw02ODNhMzg1Yy01YTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApUiWaUNIcCzT62HTE7gICJ89PJRjbBxxbzyOYb7CUiDSeMNcM1pu4oUVpfZg bp3rHBdMZ5UyroYL+AWgitHbMuP8C4u8WY1eUxNecGLpFY1vxLmp6DbTFfut36p1 IrpKX1c7lSfjqVZksrAcTYk2Ux86YGR76Lmme0dGu/nUkI+KQE4wyMyuCNqjdT+L Vbw2XbeIbRpYWIE2EpASEppWeGqtIVjZ/EZh/RrvjhPbCsrlZEnQRn0PJap5RNCm PSxEaq29ThD5WngHW/Rer5wITvmaMrUCJZedGGwgxPk3tEVwnJo90ZNC9lqSQHqC vaBGpoIWBDXT6SpISGQtTSjCBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKqd/ju5 Fju4F+UomE8NhaDuBmVjMB8GA1UdIwQYMBaAFL9NgBPbl7jvAPjOjG2+r7BR4ZS8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUJCRi8xMjZCOTA5QTlE QkQxMUVCOEExRjBCMzJDNEY5QUUwMi92MDJBRTl1WHVPOEEtTTZNYmI2dnNGSGhs THcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3YwMkFFOXVYdU84QS1NNk1iYjZ2c0ZIaGxMdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUJCRi8xMjZCOTA5QTlEQkQxMUVCOEExRjBCMzJDNEY5QUUwMi92MDJBRTl1WHVP OEEtTTZNYmI2dnNGSGhsTHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1EEXNQ3XeHSkOBE57yB0K/vNBCJL9O+s2nuZDuG+WVK0ncRXQhoKz 9mt9CNRfbbAEZnFod2AjZcAsJgYZ828W4A80/bgmpCfG4oTO6+oLvyOqHUYMXHpr 2i+j8Jkp/PSmenfe7+qARIa2/v4FhTi3kEI2HPRSHSyyucj6ESwENu5XNmQ41lUH hMEJ4+98qF2d9Z6GU/5aqnH07bj8hB7YejJMRHNbvVWWokgI45q7pKqT/pwxmPWQ MVqeqlRFYZWd3BuD/dCsX5k96370HKls9Ly5GBKNyCR8o/XBYhVIqg9/a4QIQEcT /9N+K7jgEvb4bx+UH+bNeLPuUhwHsZah -----END CERTIFICATE-----Generated at Sat May 31 17:49:43 2025 by rpki-client