$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.mft File: Aqo6dsRZSXsbRfJukESsxvLoBE8.mft (raw, json) Hash identifier: R77+r8qU4EX+OtMLTzFXuxaA+05R1j/Z2pYnwZ42mi0= Subject key identifier: DF:DC:96:BE:7E:C2:08:20:15:C8:2C:69:03:3F:41:B5:FF:C8:46:67 Authority key identifier: 02:AA:3A:76:C4:59:49:7B:1B:45:F2:6E:90:44:AC:C6:F2:E8:04:4F Certificate issuer: /CN=A91BA5BA/serialNumber=02AA3A76C459497B1B45F26E9044ACC6F2E8044F Certificate serial: 0371 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aqo6dsRZSXsbRfJukESsxvLoBE8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.mft Manifest number: 0360 Signing time: Sat 31 May 2025 01:11:21 +0000 Manifest this update: Sat 31 May 2025 01:11:21 +0000 Manifest next update: Sat 07 Jun 2025 01:11:21 +0000 Files and hashes: 1: Aqo6dsRZSXsbRfJukESsxvLoBE8.crl (hash: CeYmmnuCaTUENNMv7w/4yL7Q12ObgVQtG7Y97uMzxj0=) 2: 87F2D334F2D811EC8F663D52C4F9AE02.roa (hash: /NuTqSUBTeFJ9CyVzXuBIUWT5gpveEGDRyxNvLNEQIM=) 3: 5FFA5548B5A311EEA95C5732C4F9AE02.roa (hash: GQNcpw13U6rTwcbD2+x10d2Oo9BkdgjUG3Bpk2yiXDc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.crl rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aqo6dsRZSXsbRfJukESsxvLoBE8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:11:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 881 (0x371) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA5BA, serialNumber=02AA3A76C459497B1B45F26E9044ACC6F2E8044F Validity Not Before: May 31 01:11:21 2025 GMT Not After : Jun 7 01:11:21 2025 GMT Subject: CN=683a5739-06bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b2:2f:f9:7f:09:0e:2c:00:a5:84:46:ae:e7: 02:b3:ff:fa:97:1e:89:a2:87:a5:ae:2f:40:b8:47: f4:3f:fa:2d:aa:44:0f:3b:53:96:6d:39:a8:38:29: d3:dc:2f:ee:30:f2:ba:1f:e3:c6:07:8f:3c:d8:f8: 47:6c:30:99:a9:9e:3b:65:6d:b2:40:12:27:86:c0: c8:ad:35:2a:b3:98:b7:8d:4f:78:c5:14:3a:10:49: 55:f2:03:79:a3:d3:17:f3:a1:95:31:76:55:11:9e: 35:a1:5c:79:58:ce:f5:44:77:9f:e6:c9:b1:1d:8e: 92:9a:bf:74:10:62:8e:5c:71:9f:a5:19:58:3d:4f: cc:9e:11:ac:d3:4f:11:9e:69:f6:1b:ac:65:90:d0: 84:3f:97:61:fe:13:07:89:b3:a5:3f:c7:22:1a:52: 68:56:e4:88:b5:97:4c:82:90:bf:1c:89:a9:70:20: ca:bf:7d:3c:ba:a3:6a:e6:c6:a8:67:06:a4:74:f7: 80:94:aa:2d:72:e1:f8:62:84:e2:fb:6a:8c:ef:18: eb:80:88:b9:df:8b:f7:5a:a9:3b:e7:be:f5:03:cc: 99:45:2d:bf:61:d1:34:ac:8e:af:8d:bd:bc:48:77: 4b:27:11:72:19:f2:6d:ba:61:fa:7e:5e:2d:b3:a4: ce:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:DC:96:BE:7E:C2:08:20:15:C8:2C:69:03:3F:41:B5:FF:C8:46:67 X509v3 Authority Key Identifier: keyid:02:AA:3A:76:C4:59:49:7B:1B:45:F2:6E:90:44:AC:C6:F2:E8:04:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aqo6dsRZSXsbRfJukESsxvLoBE8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:26:f8:dd:c1:aa:dd:d6:ae:20:e3:a4:ed:c0:2d:98:05:4f: 13:e4:13:21:ea:74:d2:49:5f:41:99:a7:8f:98:94:8c:4b:6c: 35:a0:8d:8d:02:18:f2:ca:1b:4c:5d:24:8e:2b:9f:34:4b:e4: 9b:26:07:9e:32:aa:29:3c:89:31:2d:be:ff:ab:e5:eb:7b:4c: 40:62:f0:c8:74:07:d3:4b:62:a0:c1:18:74:c2:07:38:19:71: a1:8c:9d:5f:69:a0:d9:02:43:e3:de:91:40:1d:b3:59:69:19: 34:b7:25:5e:2f:e0:62:99:54:a7:5f:01:c5:01:88:50:7d:d4: 4c:45:29:4a:73:c0:8c:a4:83:be:3a:29:6e:db:83:1a:63:1a: 61:41:51:8e:e2:6c:2a:bc:98:69:29:9e:2d:15:b9:fb:56:00: ed:7a:a3:d6:83:16:db:9d:02:58:cf:e5:f8:d5:b3:17:ae:01: 98:86:59:ff:1f:24:be:5f:d1:e9:af:80:ab:46:18:78:15:91: 02:db:41:d5:cc:21:53:48:9c:5a:e1:49:7d:5f:c4:bd:03:a5: 6f:89:eb:a6:ce:83:31:0f:2c:41:f3:9a:9d:1e:3f:e8:02:1f: 2a:88:3c:ff:4f:e5:a4:dc:97:3d:a8:d1:3b:9c:83:53:95:50: e8:bf:cc:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkE1QkExMTAvBgNVBAUTKDAyQUEzQTc2QzQ1OTQ5N0IxQjQ1RjI2RTkwNDRBQ0M2 RjJFODA0NEYwHhcNMjUwNTMxMDExMTIxWhcNMjUwNjA3MDExMTIxWjAYMRYwFAYD VQQDEw02ODNhNTczOS0wNmJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr7Iv+X8JDiwApYRGrucCs//6lx6Jooelri9AuEf0P/otqkQPO1OWbTmoOCnT 3C/uMPK6H+PGB4882PhHbDCZqZ47ZW2yQBInhsDIrTUqs5i3jU94xRQ6EElV8gN5 o9MX86GVMXZVEZ41oVx5WM71RHef5smxHY6Smr90EGKOXHGfpRlYPU/MnhGs008R nmn2G6xlkNCEP5dh/hMHibOlP8ciGlJoVuSItZdMgpC/HImpcCDKv308uqNq5sao ZwakdPeAlKotcuH4YoTi+2qM7xjrgIi534v3Wqk75771A8yZRS2/YdE0rI6vjb28 SHdLJxFyGfJtumH6fl4ts6TOGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN/clr5+ wgggFcgsaQM/QbX/yEZnMB8GA1UdIwQYMBaAFAKqOnbEWUl7G0XybpBErMby6ARP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTVCQS80MzI2Q0JDMEI3 Q0QxMUVDQUY2ODEzMzVDNEY5QUUwMi9BcW82ZHNSWlNYc2JSZkp1a0VTc3h2TG9C RTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FxbzZkc1JaU1hzYlJmSnVrRVNzeHZMb0JFOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTVCQS80MzI2Q0JDMEI3Q0QxMUVDQUY2ODEzMzVDNEY5QUUwMi9BcW82ZHNSWlNY c2JSZkp1a0VTc3h2TG9CRTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEJvjdward1q4g46TtwC2YBU8T5BMh6nTSSV9BmaePmJSMS2w1oI2N AhjyyhtMXSSOK580S+SbJgeeMqopPIkxLb7/q+Xre0xAYvDIdAfTS2KgwRh0wgc4 GXGhjJ1faaDZAkPj3pFAHbNZaRk0tyVeL+BimVSnXwHFAYhQfdRMRSlKc8CMpIO+ Oilu24MaYxphQVGO4mwqvJhpKZ4tFbn7VgDteqPWgxbbnQJYz+X41bMXrgGYhln/ HyS+X9Hpr4CrRhh4FZEC20HVzCFTSJxa4Ul9X8S9A6VvieumzoMxDyxB85qdHj/o Ah8qiDz/T+Wk3Jc9qNE7nINTlVDov8wG -----END CERTIFICATE-----Generated at Sat May 31 17:04:49 2025 by rpki-client