$ rpki-client -vvf rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.mft File: aWkfVRZJUvL08f7oBKoVg1_-htU.mft (raw, json) Hash identifier: WMzPV7PpUMZ+V4w455jaLQcNaIb/f5r95uO0egqW/a8= Subject key identifier: 34:31:4D:5A:A6:1D:A6:6B:CE:D1:44:59:E4:6B:F3:FE:88:42:1A:8A Authority key identifier: 69:69:1F:55:16:49:52:F2:F4:F1:FE:E8:04:AA:15:83:5F:FE:86:D5 Certificate issuer: /CN=A91A618B/serialNumber=69691F55164952F2F4F1FEE804AA15835FFE86D5 Certificate serial: 09CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWkfVRZJUvL08f7oBKoVg1_-htU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.mft Manifest number: 09C8 Signing time: Fri 30 May 2025 20:08:42 +0000 Manifest this update: Fri 30 May 2025 20:08:42 +0000 Manifest next update: Fri 06 Jun 2025 20:08:42 +0000 Files and hashes: 1: aWkfVRZJUvL08f7oBKoVg1_-htU.crl (hash: EoEkC6179BwMAhdMiRvHCWiVFHcUSP5jyAJ+JYY10gg=) 2: 594ECE96804011EA9B73BC62C4F9AE02.roa (hash: EKd9VQ360ebUJ8WlZXHE7k1r87p0QtlOPC8jxoN1cJc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.crl rsync://rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWkfVRZJUvL08f7oBKoVg1_-htU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:08:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2510 (0x9ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A618B, serialNumber=69691F55164952F2F4F1FEE804AA15835FFE86D5 Validity Not Before: May 30 20:08:42 2025 GMT Not After : Jun 6 20:08:42 2025 GMT Subject: CN=683a104a-a622 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:3d:a3:06:d4:2f:ab:94:49:94:61:c5:e8:be: 8a:ff:35:44:25:d3:27:87:a7:40:e9:15:86:18:38: 09:5d:4c:8f:c6:6b:a9:c7:eb:88:c8:de:f9:33:11: bb:5e:9b:9b:9d:19:eb:24:f8:25:1b:bb:21:e6:49: dd:7c:b5:e6:1f:e9:52:d0:ce:49:4c:11:32:7f:d0: 78:4e:68:f2:dc:d2:42:8b:a4:33:bd:28:23:8f:1a: cf:09:29:e1:fe:eb:91:fb:4b:90:09:e9:88:9d:75: 4a:7a:41:fd:6a:66:10:3d:7b:b0:5a:56:0f:39:77: 2d:ba:27:89:ee:1b:80:00:51:9d:e0:16:35:e9:66: 84:47:ff:98:fe:5d:3b:9f:35:4a:cb:f3:9d:9e:28: 34:d2:e9:2c:c0:55:a4:d4:53:51:31:61:9a:8d:99: ab:bd:49:f0:dd:02:a9:31:d2:f7:44:b5:69:40:6a: ad:bb:79:2a:18:6a:f3:18:f2:9f:63:9a:3d:69:ca: 7a:f0:ff:a7:13:3a:03:19:3e:f8:50:2e:54:53:c0: d9:9b:9f:01:14:0f:a8:df:fb:90:89:cf:8c:cf:8e: 24:2e:3d:90:04:b8:04:db:45:96:a0:35:f3:db:61: ef:61:c6:01:e3:af:3a:87:58:08:75:80:90:32:1e: a3:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:31:4D:5A:A6:1D:A6:6B:CE:D1:44:59:E4:6B:F3:FE:88:42:1A:8A X509v3 Authority Key Identifier: keyid:69:69:1F:55:16:49:52:F2:F4:F1:FE:E8:04:AA:15:83:5F:FE:86:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWkfVRZJUvL08f7oBKoVg1_-htU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:a2:1a:76:31:66:a1:f8:ca:87:94:fe:72:13:29:04:73:dd: 42:0c:93:2e:7f:e5:ee:77:c6:23:92:ae:46:3a:f0:c1:fb:34: a3:73:d4:a1:fa:43:3b:86:80:0b:83:b0:d0:20:94:a3:49:9c: 67:8c:17:be:53:8a:90:ec:ac:ef:24:e0:6e:ea:d8:09:c8:fe: 58:92:f4:e3:47:77:cb:38:0b:cf:94:bc:57:0e:d7:68:82:a5: 57:ad:1f:f0:72:63:4f:e5:88:ce:1b:18:e7:64:9f:3f:cb:c0: 9c:6b:6d:50:33:4a:f6:7f:05:22:51:a1:9f:33:a4:9e:ba:20: ca:16:ec:91:b9:a6:f8:0b:ce:25:de:b7:08:c5:c7:1c:36:c5: b6:39:f5:2e:ac:bf:88:17:ba:f7:e4:bb:58:66:43:c0:5b:f2: 1e:93:74:d5:21:90:c8:16:4a:da:fa:27:dc:34:85:9c:64:8e: f1:f4:3a:72:f2:3f:7b:f1:2c:be:32:64:86:72:cb:91:d5:b5: 02:37:d2:51:e8:43:52:50:2f:a0:49:7d:19:36:e0:7b:51:27: 58:fd:5d:c5:3f:b1:bb:3e:82:3b:4f:a4:51:35:a0:bf:2a:99: 3e:5d:c3:b5:9e:29:05:a9:3a:55:4b:25:f3:59:46:2e:6b:31: c0:51:dc:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCc4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTYxOEIxMTAvBgNVBAUTKDY5NjkxRjU1MTY0OTUyRjJGNEYxRkVFODA0QUExNTgz NUZGRTg2RDUwHhcNMjUwNTMwMjAwODQyWhcNMjUwNjA2MjAwODQyWjAYMRYwFAYD VQQDEw02ODNhMTA0YS1hNjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0T2jBtQvq5RJlGHF6L6K/zVEJdMnh6dA6RWGGDgJXUyPxmupx+uIyN75MxG7 XpubnRnrJPglG7sh5kndfLXmH+lS0M5JTBEyf9B4Tmjy3NJCi6QzvSgjjxrPCSnh /uuR+0uQCemInXVKekH9amYQPXuwWlYPOXctuieJ7huAAFGd4BY16WaER/+Y/l07 nzVKy/Odnig00ukswFWk1FNRMWGajZmrvUnw3QKpMdL3RLVpQGqtu3kqGGrzGPKf Y5o9acp68P+nEzoDGT74UC5UU8DZm58BFA+o3/uQic+Mz44kLj2QBLgE20WWoDXz 22HvYcYB4686h1gIdYCQMh6jXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDQxTVqm HaZrztFEWeRr8/6IQhqKMB8GA1UdIwQYMBaAFGlpH1UWSVLy9PH+6ASqFYNf/obV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjE4Qi85QkEyQjI1NDgw M0YxMUVBOTdCNDNENjJDNEY5QUUwMi9hV2tmVlJaSlV2TDA4ZjdvQktvVmcxXy1o dFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FXa2ZWUlpKVXZMMDhmN29CS29WZzFfLWh0VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NjE4Qi85QkEyQjI1NDgwM0YxMUVBOTdCNDNENjJDNEY5QUUwMi9hV2tmVlJaSlV2 TDA4ZjdvQktvVmcxXy1odFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlohp2MWah+MqHlP5yEykEc91CDJMuf+Xud8Yjkq5GOvDB+zSjc9Sh +kM7hoALg7DQIJSjSZxnjBe+U4qQ7KzvJOBu6tgJyP5YkvTjR3fLOAvPlLxXDtdo gqVXrR/wcmNP5YjOGxjnZJ8/y8Cca21QM0r2fwUiUaGfM6SeuiDKFuyRuab4C84l 3rcIxcccNsW2OfUurL+IF7r35LtYZkPAW/Iek3TVIZDIFkra+ifcNIWcZI7x9Dpy 8j978Sy+MmSGcsuR1bUCN9JR6ENSUC+gSX0ZNuB7USdY/V3FP7G7PoI7T6RRNaC/ Kpk+XcO1nikFqTpVSyXzWUYuazHAUdwy -----END CERTIFICATE-----Generated at Sat May 31 15:19:47 2025 by rpki-client