$ rpki-client -vvf rpki.apnic.net/member_repository/A91A236D/22E692AADCB211ECABDE3E6EC4F9AE02/AEHvq_80PMLoP86WztiQWej04sE.mft File: AEHvq_80PMLoP86WztiQWej04sE.mft (raw, json) Hash identifier: uxICjcyfzIXxEbi4PZRDXfDhv4e4nBh9ZXlXP12rbnk= Subject key identifier: A8:0E:EF:75:B4:9A:F3:91:E3:7F:DB:80:E7:3A:6E:83:48:6D:42:B9 Authority key identifier: 00:41:EF:AB:FF:34:3C:C2:E8:3F:CE:96:CE:D8:90:59:E8:F4:E2:C1 Certificate issuer: /CN=A91A236D/serialNumber=0041EFABFF343CC2E83FCE96CED89059E8F4E2C1 Certificate serial: 02F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AEHvq_80PMLoP86WztiQWej04sE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A236D/22E692AADCB211ECABDE3E6EC4F9AE02/AEHvq_80PMLoP86WztiQWej04sE.mft Manifest number: 02F3 Signing time: Sat 31 May 2025 01:29:00 +0000 Manifest this update: Sat 31 May 2025 01:28:59 +0000 Manifest next update: Sat 07 Jun 2025 01:28:59 +0000 Files and hashes: 1: AEHvq_80PMLoP86WztiQWej04sE.crl (hash: KtjWU28pupUn6CAqK9AQ1kyje8+aYx4iogOVgYlLAy4=) 2: DC072950DCB911EC8AAB8710C4F9AE02.roa (hash: yybFsJYo0u1DXgO0+Ag0eONj7o/2vIeK/qEAg2e5UXU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A236D/22E692AADCB211ECABDE3E6EC4F9AE02/AEHvq_80PMLoP86WztiQWej04sE.crl rsync://rpki.apnic.net/member_repository/A91A236D/22E692AADCB211ECABDE3E6EC4F9AE02/AEHvq_80PMLoP86WztiQWej04sE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AEHvq_80PMLoP86WztiQWej04sE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:28:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 759 (0x2f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A236D, serialNumber=0041EFABFF343CC2E83FCE96CED89059E8F4E2C1 Validity Not Before: May 31 01:28:59 2025 GMT Not After : Jun 7 01:28:59 2025 GMT Subject: CN=683a5b5b-e5ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d5:0b:18:78:85:e9:b5:71:ac:3f:44:05:39: c1:06:16:49:3e:2d:52:b7:4e:26:0b:8c:ea:53:68: 44:d7:f0:22:29:77:93:73:41:86:e6:36:6d:b9:3f: c2:3d:62:21:5f:53:b0:fe:45:63:fe:50:36:f0:02: 8e:54:1e:c4:50:96:ef:d3:6d:a5:73:de:18:10:a8: 31:64:ff:f5:ff:3c:52:36:9a:9a:d1:1d:6b:d2:23: a5:41:e9:71:4d:5a:96:fa:92:19:19:c2:08:cb:a6: 7b:3e:f3:f7:0f:0f:1b:87:f1:5e:4f:b5:b4:8c:c4: cc:a0:c3:f6:df:90:8e:d8:1b:1c:6e:f3:c3:7a:1a: 71:e5:51:cd:c3:1c:36:a1:3a:78:92:18:cf:28:a9: 7c:60:8b:3a:15:c4:3a:a7:49:5c:db:9c:04:3c:be: 5c:cc:0b:ec:43:ac:e4:8d:16:7d:13:ee:7b:93:f7: 31:34:9d:fe:60:b6:82:3f:a1:da:39:da:e9:a7:89: 50:9c:40:f3:f5:c4:54:b4:25:21:50:d4:30:e9:bc: 4d:98:bf:5a:12:a0:ec:ea:3b:f4:72:5f:db:e7:8c: 11:44:2c:db:64:0e:1a:d0:f3:ee:21:3b:ac:6e:c1: 70:1d:8c:1e:46:99:3f:e4:f5:f9:26:f2:45:be:4d: f4:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:0E:EF:75:B4:9A:F3:91:E3:7F:DB:80:E7:3A:6E:83:48:6D:42:B9 X509v3 Authority Key Identifier: keyid:00:41:EF:AB:FF:34:3C:C2:E8:3F:CE:96:CE:D8:90:59:E8:F4:E2:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A236D/22E692AADCB211ECABDE3E6EC4F9AE02/AEHvq_80PMLoP86WztiQWej04sE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AEHvq_80PMLoP86WztiQWej04sE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A236D/22E692AADCB211ECABDE3E6EC4F9AE02/AEHvq_80PMLoP86WztiQWej04sE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:81:73:79:7e:f7:44:46:8f:0c:f4:54:f0:4e:ba:65:06:4d: 98:ec:f1:b1:37:7d:fe:81:34:4c:b5:95:88:ce:f2:46:0d:15: 9d:03:1f:4d:a0:39:d7:fe:54:da:d9:9f:54:0b:5a:54:40:57: 33:0a:c6:2e:c6:7b:c6:09:a8:06:96:5f:5e:75:7a:7e:a0:73: 2b:30:ba:0d:0a:8c:7e:99:6b:51:6d:cd:cd:f4:84:d9:52:8a: 70:a8:46:60:a5:e3:44:de:d2:82:50:2a:08:f2:64:d1:c7:52: cb:3c:aa:ad:24:09:a2:bd:ec:b8:4b:d8:0b:b6:7e:04:1d:b8: 5c:49:4f:21:34:24:5c:99:1c:be:1b:82:1e:c0:28:8e:94:d5: 1d:e3:2a:8d:d8:ad:c8:35:a4:22:6b:9b:33:e9:fc:87:97:6d: a3:e5:cc:ef:ba:6b:40:f0:33:41:dc:40:a7:75:9d:0e:eb:2a: b5:4e:93:c8:1d:a6:f4:d3:a2:1f:5a:de:94:1b:ea:c4:cc:52: 04:c8:39:41:11:23:82:4f:79:73:3d:d9:9f:a4:4d:9a:de:51: e4:c9:db:1e:cf:5b:58:3e:a1:bb:cf:06:80:bb:48:54:9a:27: d0:d8:74:0a:37:58:19:98:80:53:fc:ee:c5:e1:59:bb:72:bb: 7d:18:5f:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTIzNkQxMTAvBgNVBAUTKDAwNDFFRkFCRkYzNDNDQzJFODNGQ0U5NkNFRDg5MDU5 RThGNEUyQzEwHhcNMjUwNTMxMDEyODU5WhcNMjUwNjA3MDEyODU5WjAYMRYwFAYD VQQDEw02ODNhNWI1Yi1lNWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA09ULGHiF6bVxrD9EBTnBBhZJPi1St04mC4zqU2hE1/AiKXeTc0GG5jZtuT/C PWIhX1Ow/kVj/lA28AKOVB7EUJbv022lc94YEKgxZP/1/zxSNpqa0R1r0iOlQelx TVqW+pIZGcIIy6Z7PvP3Dw8bh/FeT7W0jMTMoMP235CO2BscbvPDehpx5VHNwxw2 oTp4khjPKKl8YIs6FcQ6p0lc25wEPL5czAvsQ6zkjRZ9E+57k/cxNJ3+YLaCP6Ha Odrpp4lQnEDz9cRUtCUhUNQw6bxNmL9aEqDs6jv0cl/b54wRRCzbZA4a0PPuITus bsFwHYweRpk/5PX5JvJFvk30OwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKgO73W0 mvOR43/bgOc6boNIbUK5MB8GA1UdIwQYMBaAFABB76v/NDzC6D/Ols7YkFno9OLB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjM2RC8yMkU2OTJBQURD QjIxMUVDQUJERTNFNkVDNEY5QUUwMi9BRUh2cV84MFBNTG9QODZXenRpUVdlajA0 c0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FFSHZxXzgwUE1Mb1A4Nld6dGlRV2VqMDRzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MjM2RC8yMkU2OTJBQURDQjIxMUVDQUJERTNFNkVDNEY5QUUwMi9BRUh2cV84MFBN TG9QODZXenRpUVdlajA0c0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4gXN5fvdERo8M9FTwTrplBk2Y7PGxN33+gTRMtZWIzvJGDRWdAx9N oDnX/lTa2Z9UC1pUQFczCsYuxnvGCagGll9edXp+oHMrMLoNCox+mWtRbc3N9ITZ UopwqEZgpeNE3tKCUCoI8mTRx1LLPKqtJAmivey4S9gLtn4EHbhcSU8hNCRcmRy+ G4IewCiOlNUd4yqN2K3INaQia5sz6fyHl22j5czvumtA8DNB3ECndZ0O6yq1TpPI Hab006IfWt6UG+rEzFIEyDlBESOCT3lzPdmfpE2a3lHkydsez1tYPqG7zwaAu0hU mifQ2HQKN1gZmIBT/O7F4Vm7crt9GF/w -----END CERTIFICATE-----Generated at Sat May 31 16:29:35 2025 by rpki-client