$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft File: aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft (raw, json) Hash identifier: M1NEHDyFzrTz26kNUv9fhjcx8Z9YsWsBaMKlSh6NeHM= Subject key identifier: E0:44:77:20:35:2D:5E:40:01:27:B6:5D:0B:DB:60:02:1F:A0:6B:45 Authority key identifier: 69:23:6E:59:96:30:0A:2F:D7:85:EF:85:78:3C:5C:29:C5:B4:E8:74 Certificate issuer: /CN=A91EE5E5/serialNumber=69236E5996300A2FD785EF85783C5C29C5B4E874 Certificate serial: 70 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft Manifest number: 6E Signing time: Tue 01 Jul 2025 07:40:50 +0000 Manifest this update: Tue 01 Jul 2025 07:40:49 +0000 Manifest next update: Tue 08 Jul 2025 07:40:49 +0000 Files and hashes: 1: aSNuWZYwCi_Xhe-FeDxcKcW06HQ.crl (hash: DvCEDLaS/2bv7hDOvOv7R9pYtK+eP48RX/BWchhcmIA=) 2: 1506B298B00711EF863A582EC4F9AE02.roa (hash: PjiKcHZxo3PwYpPFYpla6KazUuXCJGnKHspIakJqo2E=) 3: 4965F84CAFC011EF82BB1055C4F9AE02.roa (hash: jpijFayg1AhLIehVWTrf1nyIqutL0nvGe/8hsMY0L/c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.crl rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 07:40:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 112 (0x70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE5E5, serialNumber=69236E5996300A2FD785EF85783C5C29C5B4E874 Validity Not Before: Jul 1 07:40:49 2025 GMT Not After : Jul 8 07:40:49 2025 GMT Subject: CN=68639102-259f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:cf:e7:bf:2f:1e:81:89:e0:5a:87:69:2d:af: 75:77:1c:9b:79:e6:2b:f2:77:8b:fa:88:d8:bc:4a: 92:d4:d0:a1:b8:88:c8:bb:01:e4:97:de:c8:e5:25: 53:dc:99:9e:63:10:93:35:7d:41:a5:5e:54:a1:df: 41:7d:28:0a:0a:82:74:27:94:4d:18:cd:f9:5a:5b: 9a:39:67:87:a6:21:b7:37:1a:73:14:37:a9:d7:27: db:0b:ad:ff:af:2d:c3:67:d8:63:73:c1:0e:7d:34: 4a:e5:98:c2:f4:98:a5:0b:04:ec:69:f6:74:11:52: 9b:bf:92:16:aa:24:c6:87:06:9f:de:46:35:b4:85: f6:56:90:fd:42:bf:f8:b2:aa:9f:f5:24:e3:5b:12: 17:42:da:e0:8a:9d:ca:3b:fc:41:38:ee:ed:e3:07: e5:46:3b:2e:a4:10:90:5a:f9:2f:8e:4a:a7:ec:1a: 39:bc:e9:8a:7b:50:05:2a:0d:e6:76:b6:3b:6f:f1: 9a:61:a6:bf:8f:c2:fd:58:7a:b3:27:06:63:57:dd: b6:fd:93:a2:cf:75:07:e4:a6:06:3d:2c:c6:3d:84: fd:02:65:36:45:2a:a3:64:88:ce:20:50:c3:d0:d2: b3:3e:66:d1:9a:d3:ed:02:4b:df:3e:52:ae:90:10: a0:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:44:77:20:35:2D:5E:40:01:27:B6:5D:0B:DB:60:02:1F:A0:6B:45 X509v3 Authority Key Identifier: keyid:69:23:6E:59:96:30:0A:2F:D7:85:EF:85:78:3C:5C:29:C5:B4:E8:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:9c:b6:3b:3c:e1:89:fe:1d:54:d4:46:d3:8c:3c:f9:6f:15: 8c:fc:cb:6b:f5:33:0b:9e:56:47:ca:26:4d:0b:c6:5b:e8:48: 13:f7:5f:21:4b:61:06:e8:a9:64:a4:97:60:c1:02:73:bb:3c: b8:8a:30:f6:49:de:65:2a:d8:fd:fa:6c:ee:fc:01:59:59:bf: 74:4a:43:47:db:bf:3b:c1:0b:16:e8:67:1f:a2:e3:6e:b9:df: 91:47:85:e4:10:f2:92:d7:f1:02:c4:1a:1e:77:0e:69:ce:fa: 19:2d:c1:c0:ab:e4:17:97:46:5b:aa:4a:d7:c7:ae:58:03:36: 3b:21:8d:60:3f:17:78:e0:f6:ae:3c:09:d1:83:d8:5d:2f:9b: 73:3f:cd:53:3d:8f:54:38:87:fa:48:5f:7f:c7:03:9b:de:22: 66:62:5d:eb:e9:89:9c:02:8e:2c:2c:31:5f:55:f2:3c:95:c9: 95:56:4c:c2:79:25:82:6f:2f:ce:17:71:14:59:f4:14:e0:22: a5:2b:b0:2d:ad:c5:e0:82:9c:44:c4:be:7d:b8:27:6d:77:93: 15:58:4a:5b:bc:91:90:9c:7e:ef:19:e1:f3:a9:13:e8:8e:fe: de:62:e0:1f:47:28:8d:4a:48:7e:7a:c8:d3:ca:29:c7:41:62: ed:ec:2d:37 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF RTVFNTExMC8GA1UEBRMoNjkyMzZFNTk5NjMwMEEyRkQ3ODVFRjg1NzgzQzVDMjlD NUI0RTg3NDAeFw0yNTA3MDEwNzQwNDlaFw0yNTA3MDgwNzQwNDlaMBgxFjAUBgNV BAMTDTY4NjM5MTAyLTI1OWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7z+e/Lx6BieBah2ktr3V3HJt55ivyd4v6iNi8SpLU0KG4iMi7AeSX3sjlJVPc mZ5jEJM1fUGlXlSh30F9KAoKgnQnlE0YzflaW5o5Z4emIbc3GnMUN6nXJ9sLrf+v LcNn2GNzwQ59NErlmML0mKULBOxp9nQRUpu/khaqJMaHBp/eRjW0hfZWkP1Cv/iy qp/1JONbEhdC2uCKnco7/EE47u3jB+VGOy6kEJBa+S+OSqfsGjm86Yp7UAUqDeZ2 tjtv8Zphpr+Pwv1YerMnBmNX3bb9k6LPdQfkpgY9LMY9hP0CZTZFKqNkiM4gUMPQ 0rM+ZtGa0+0CS98+Uq6QEKBnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4ER3IDUt XkABJ7ZdC9tgAh+ga0UwHwYDVR0jBBgwFoAUaSNuWZYwCi/Xhe+FeDxcKcW06HQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVFNUU1L0YwRTc2RTEyQUZC RjExRUZBMjhBMzY1NEM0RjlBRTAyL2FTTnVXWll3Q2lfWGhlLUZlRHhjS2NXMDZI US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvYVNOdVdaWXdDaV9YaGUtRmVEeGNLY1cwNkhRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVF NUU1L0YwRTc2RTEyQUZCRjExRUZBMjhBMzY1NEM0RjlBRTAyL2FTTnVXWll3Q2lf WGhlLUZlRHhjS2NXMDZIUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJectjs84Yn+HVTURtOMPPlvFYz8y2v1MwueVkfKJk0LxlvoSBP3XyFL YQboqWSkl2DBAnO7PLiKMPZJ3mUq2P36bO78AVlZv3RKQ0fbvzvBCxboZx+i4265 35FHheQQ8pLX8QLEGh53DmnO+hktwcCr5BeXRluqStfHrlgDNjshjWA/F3jg9q48 CdGD2F0vm3M/zVM9j1Q4h/pIX3/HA5veImZiXevpiZwCjiwsMV9V8jyVyZVWTMJ5 JYJvL84XcRRZ9BTgIqUrsC2txeCCnETEvn24J213kxVYSlu8kZCcfu8Z4fOpE+iO /t5i4B9HKI1KSH56yNPKKcdBYu3sLTc= -----END CERTIFICATE-----Generated at Wed Jul 2 11:02:59 2025 by rpki-client