$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4750/90D5EC5ADABD11EA8FC62387C4F9AE02/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.mft File: aHY-kqLBeFMWdXZlEQP4H1ms3Bo.mft (raw, json) Hash identifier: 0ipKTaNvvFzY4XiphjSh4HpKbX7JJoG1THZI5T0t6DA= Subject key identifier: F5:90:42:5A:7D:EB:1C:03:24:F9:A4:86:5F:C8:F0:72:9D:13:97:1B Authority key identifier: 68:76:3E:92:A2:C1:78:53:16:75:76:65:11:03:F8:1F:59:AC:DC:1A Certificate issuer: /CN=A91C4750/serialNumber=68763E92A2C17853167576651103F81F59ACDC1A Certificate serial: 081A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4750/90D5EC5ADABD11EA8FC62387C4F9AE02/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.mft Manifest number: 0813 Signing time: Sun 08 Jun 2025 20:31:25 +0000 Manifest this update: Sun 08 Jun 2025 20:31:25 +0000 Manifest next update: Sun 15 Jun 2025 20:31:25 +0000 Files and hashes: 1: aHY-kqLBeFMWdXZlEQP4H1ms3Bo.crl (hash: IAxYaCq1IALdqTIFZqOmSCAOMWClR7rcjP0jxNA0Td0=) 2: DA1A98C4DABE11EAB12A5209C4F9AE02.roa (hash: Uilk1jJBfDMGY2sckuokao9InqlSOEodf+Dfn/tc4QA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4750/90D5EC5ADABD11EA8FC62387C4F9AE02/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.crl rsync://rpki.apnic.net/member_repository/A91C4750/90D5EC5ADABD11EA8FC62387C4F9AE02/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Jun 2025 20:31:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2074 (0x81a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4750, serialNumber=68763E92A2C17853167576651103F81F59ACDC1A Validity Not Before: Jun 8 20:31:25 2025 GMT Not After : Jun 15 20:31:25 2025 GMT Subject: CN=6845f31d-8f57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:03:dc:42:ee:82:4e:76:29:cc:20:b8:0a:bd: 09:58:4a:b1:8d:b6:c4:a3:98:98:dc:7b:0e:1a:8d: ae:35:5d:1f:69:f5:97:d9:ec:74:db:af:ef:95:df: df:56:4e:74:cb:c1:4e:d3:8b:df:32:6a:02:0d:af: 47:bd:d0:3a:1d:ce:0d:39:c5:33:74:08:e4:9e:83: 45:1e:b5:7b:48:0d:c3:9d:5f:19:54:27:f7:54:60: 06:91:39:91:77:4b:d3:18:27:6a:11:b9:8c:21:5b: 09:6d:6d:e9:b7:90:7d:e2:80:39:9e:8c:9a:3e:6a: 92:fd:e7:d0:7c:a5:31:e3:89:91:30:16:f5:3c:ec: 5d:2b:49:b0:69:09:81:1d:d9:4f:a0:48:1b:c0:76: d5:0c:f3:d2:d1:1e:2b:43:81:6e:3f:3b:d9:27:cb: 4f:0e:6c:9e:69:8c:12:dc:4d:52:65:9d:17:9c:a4: 26:74:5d:83:37:c2:d9:2d:0a:98:c2:40:98:b5:ab: 3d:f3:30:c2:cc:90:98:ce:db:52:e8:f2:c8:9a:32: a7:c7:d8:f3:68:44:1c:7f:f2:82:7d:93:88:e0:65: 88:c7:5c:5a:e3:b8:e6:49:3c:d1:be:cd:fe:b4:95: ed:b7:f8:32:c2:59:c1:46:ed:80:1f:08:60:f2:24: 69:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:90:42:5A:7D:EB:1C:03:24:F9:A4:86:5F:C8:F0:72:9D:13:97:1B X509v3 Authority Key Identifier: keyid:68:76:3E:92:A2:C1:78:53:16:75:76:65:11:03:F8:1F:59:AC:DC:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4750/90D5EC5ADABD11EA8FC62387C4F9AE02/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4750/90D5EC5ADABD11EA8FC62387C4F9AE02/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:85:2a:8a:60:cf:28:70:c8:e7:93:1c:1c:bb:54:f6:62:87: b9:99:81:a9:9b:23:10:a0:fb:24:00:0b:52:79:4e:36:99:28: f6:38:38:15:cf:5c:73:0e:89:ef:a8:e4:ba:b2:0e:78:7f:73: 46:81:e5:25:5e:85:54:a9:b0:31:f2:17:26:ca:8b:d6:50:75: f5:a8:30:c6:58:75:a9:73:30:81:5a:d8:15:ab:2d:4f:98:ab: 32:ba:02:eb:81:5d:e2:9a:43:70:f5:a0:07:3c:f8:b1:97:e3: ba:9c:6f:8e:7c:ef:db:ee:27:54:d5:39:c3:3c:24:db:b1:f0: ce:11:a1:fc:2f:f8:88:d7:ba:49:28:8d:e1:6a:37:8d:ac:ac: 52:13:ea:7b:90:c5:2d:51:7e:51:3f:fe:93:45:cb:0b:ca:85: 1e:47:5f:88:83:cb:f6:cd:a2:ed:d3:49:45:22:bb:2b:a2:75: e3:2b:1f:4a:c8:e2:df:58:46:54:8c:24:7b:d6:76:c0:2e:6c: e7:bb:cf:90:4c:31:b5:77:c6:ac:bf:f7:14:03:f5:ee:36:4f: 3e:de:39:fb:ae:09:5d:35:34:28:ee:45:2d:79:0d:cb:c0:05: 62:41:c7:e1:59:2a:5b:f5:21:ae:35:5f:82:fc:5e:2c:30:fe: ca:91:a3:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ3NTAxMTAvBgNVBAUTKDY4NzYzRTkyQTJDMTc4NTMxNjc1NzY2NTExMDNGODFG NTlBQ0RDMUEwHhcNMjUwNjA4MjAzMTI1WhcNMjUwNjE1MjAzMTI1WjAYMRYwFAYD VQQDEw02ODQ1ZjMxZC04ZjU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1wPcQu6CTnYpzCC4Cr0JWEqxjbbEo5iY3HsOGo2uNV0fafWX2ex026/vld/f Vk50y8FO04vfMmoCDa9HvdA6Hc4NOcUzdAjknoNFHrV7SA3DnV8ZVCf3VGAGkTmR d0vTGCdqEbmMIVsJbW3pt5B94oA5noyaPmqS/efQfKUx44mRMBb1POxdK0mwaQmB HdlPoEgbwHbVDPPS0R4rQ4FuPzvZJ8tPDmyeaYwS3E1SZZ0XnKQmdF2DN8LZLQqY wkCYtas98zDCzJCYzttS6PLImjKnx9jzaEQcf/KCfZOI4GWIx1xa47jmSTzRvs3+ tJXtt/gywlnBRu2AHwhg8iRpuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPWQQlp9 6xwDJPmkhl/I8HKdE5cbMB8GA1UdIwQYMBaAFGh2PpKiwXhTFnV2ZRED+B9ZrNwa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDc1MC85MEQ1RUM1QURB QkQxMUVBOEZDNjIzODdDNEY5QUUwMi9hSFkta3FMQmVGTVdkWFpsRVFQNEgxbXMz Qm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FIWS1rcUxCZUZNV2RYWmxFUVA0SDFtczNCby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDc1MC85MEQ1RUM1QURBQkQxMUVBOEZDNjIzODdDNEY5QUUwMi9hSFkta3FMQmVG TVdkWFpsRVFQNEgxbXMzQm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhhSqKYM8ocMjnkxwcu1T2Yoe5mYGpmyMQoPskAAtSeU42mSj2ODgV z1xzDonvqOS6sg54f3NGgeUlXoVUqbAx8hcmyovWUHX1qDDGWHWpczCBWtgVqy1P mKsyugLrgV3imkNw9aAHPPixl+O6nG+OfO/b7idU1TnDPCTbsfDOEaH8L/iI17pJ KI3hajeNrKxSE+p7kMUtUX5RP/6TRcsLyoUeR1+Ig8v2zaLt00lFIrsronXjKx9K yOLfWEZUjCR71nbALmznu8+QTDG1d8asv/cUA/XuNk8+3jn7rgldNTQo7kUteQ3L wAViQcfhWSpb9SGuNV+C/F4sMP7KkaOv -----END CERTIFICATE-----Generated at Mon Jun 9 07:18:36 2025 by rpki-client