$ rpki-client -vvf rpki.apnic.net/member_repository/A911750B/5B1C1FAE468C11F084B6A539C4F9AE02/aMIYjATCDkkjq7YttIckmDVLSv0.mft File: aMIYjATCDkkjq7YttIckmDVLSv0.mft (raw, json) Hash identifier: uUoi1AudZwNkhfC6szYiknZfc2ZtTj2jJJ+7H+XPFF0= Subject key identifier: DA:BC:A7:04:BD:D7:F0:CE:B9:3A:FA:46:18:49:BE:85:D8:BA:6C:EF Authority key identifier: 68:C2:18:8C:04:C2:0E:49:23:AB:B6:2D:B4:87:24:98:35:4B:4A:FD Certificate issuer: /CN=A911750B/serialNumber=68C2188C04C20E4923ABB62DB4872498354B4AFD Certificate serial: 0E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aMIYjATCDkkjq7YttIckmDVLSv0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911750B/5B1C1FAE468C11F084B6A539C4F9AE02/aMIYjATCDkkjq7YttIckmDVLSv0.mft Manifest number: 0D Signing time: Thu 03 Jul 2025 08:22:42 +0000 Manifest this update: Thu 03 Jul 2025 08:22:41 +0000 Manifest next update: Thu 10 Jul 2025 08:22:41 +0000 Files and hashes: 1: aMIYjATCDkkjq7YttIckmDVLSv0.crl (hash: ZAIO8L2KXCrbSbF2LJPEWLTI5nh0vlVx82RTqO+hwu0=) 2: CC9D872A468D11F0A82C5E5EC4F9AE02.roa (hash: WRJujiiFl5+2lSEzqzn6bhm3g2H9MHSY7ug8yl3Oc8g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911750B/5B1C1FAE468C11F084B6A539C4F9AE02/aMIYjATCDkkjq7YttIckmDVLSv0.crl rsync://rpki.apnic.net/member_repository/A911750B/5B1C1FAE468C11F084B6A539C4F9AE02/aMIYjATCDkkjq7YttIckmDVLSv0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aMIYjATCDkkjq7YttIckmDVLSv0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14 (0xe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911750B, serialNumber=68C2188C04C20E4923ABB62DB4872498354B4AFD Validity Not Before: Jul 3 08:22:41 2025 GMT Not After : Jul 10 08:22:41 2025 GMT Subject: CN=68663dd1-9ae9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2c:e3:47:35:07:ec:31:f3:a6:13:f2:25:ab: 8f:82:32:ae:4f:21:e9:6d:d2:9d:cd:e6:7c:2f:0b: 9f:8e:88:db:76:ec:a9:8d:17:9c:9c:7a:ce:26:ef: f5:a1:ef:ed:a7:38:24:fb:ac:a7:01:ff:e4:1d:d2: 41:17:05:aa:8a:a4:bc:a8:4d:de:96:95:bd:19:b6: b9:ed:26:3b:81:ea:a4:41:fd:36:00:24:4c:28:cd: 42:4e:13:e2:c8:2c:ef:ac:6e:12:96:a7:13:ad:9d: 6c:4a:94:e8:5d:ee:10:79:b4:ea:87:a1:a9:5f:84: 80:fd:fc:b4:0f:58:5c:34:83:3f:d3:5c:ba:18:77: 74:2f:32:c9:06:99:30:d0:87:1d:8b:33:24:7a:19: 17:8f:0a:25:f0:91:8f:7d:5b:77:e3:9d:d2:f7:47: d7:3e:69:db:77:db:8b:47:07:18:cb:92:ab:1d:ec: e2:f6:b5:b3:5a:ec:c7:28:e8:e9:24:11:bd:e0:e6: 8f:1a:5e:e3:1b:4a:67:69:7c:e9:dc:3c:24:1c:66: ad:5c:e5:15:34:71:79:14:5a:8d:9f:75:29:31:d0: 71:8f:b0:96:44:f9:12:4c:12:c4:a5:f6:6e:85:d7: 96:d9:fb:c1:67:3b:6f:54:3f:d4:4d:db:fc:36:1d: 3c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:BC:A7:04:BD:D7:F0:CE:B9:3A:FA:46:18:49:BE:85:D8:BA:6C:EF X509v3 Authority Key Identifier: keyid:68:C2:18:8C:04:C2:0E:49:23:AB:B6:2D:B4:87:24:98:35:4B:4A:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911750B/5B1C1FAE468C11F084B6A539C4F9AE02/aMIYjATCDkkjq7YttIckmDVLSv0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aMIYjATCDkkjq7YttIckmDVLSv0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911750B/5B1C1FAE468C11F084B6A539C4F9AE02/aMIYjATCDkkjq7YttIckmDVLSv0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:85:fd:df:51:38:e9:a3:a7:d1:7f:eb:59:3e:0e:c7:56:dd: 6d:ae:8c:4c:98:0a:b5:45:d6:f7:f3:2a:04:5d:55:20:80:9b: e3:0e:6e:d5:59:e7:b3:36:e2:2c:7f:47:13:c8:18:c3:ef:48: c2:18:d9:56:5b:32:d0:8f:ff:28:16:b1:f5:d3:f5:c6:8b:32: ae:0b:ee:af:b2:5c:a9:e5:70:bd:5e:45:56:bc:56:19:0f:02: 02:14:22:de:53:b0:f9:23:44:3d:15:5a:aa:1b:9c:55:ac:5c: 05:b5:dd:9d:b4:bb:3d:d2:9b:fa:9a:38:cb:b8:e2:12:dd:21: 20:e9:90:95:26:f1:56:8e:eb:2d:8d:3a:36:95:e8:1c:5b:18: a1:79:97:81:89:38:3c:62:8d:1d:08:16:90:ca:64:cc:ae:cb: 3a:6e:2e:cd:21:8c:10:de:fc:3e:b9:6d:17:a1:49:a4:bd:9d: f7:ac:a9:74:e7:2a:b3:b6:2d:0e:de:f5:0d:ba:88:49:85:c5: d0:b8:6e:6c:e5:e1:73:ad:b2:e0:d9:6a:2b:c2:12:63:eb:ee: 3d:05:1b:85:6e:c9:02:c2:ab:3d:d2:dd:a4:b5:ae:a7:66:e4: 56:c7:f9:ce:90:7b:40:85:8b:f9:19:3d:8f:8f:40:57:c0:ab: c6:85:88:0d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NzUwQjExMC8GA1UEBRMoNjhDMjE4OEMwNEMyMEU0OTIzQUJCNjJEQjQ4NzI0OTgz NTRCNEFGRDAeFw0yNTA3MDMwODIyNDFaFw0yNTA3MTAwODIyNDFaMBgxFjAUBgNV BAMTDTY4NjYzZGQxLTlhZTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6LONHNQfsMfOmE/Ilq4+CMq5PIelt0p3N5nwvC5+OiNt27KmNF5yces4m7/Wh 7+2nOCT7rKcB/+Qd0kEXBaqKpLyoTd6Wlb0ZtrntJjuB6qRB/TYAJEwozUJOE+LI LO+sbhKWpxOtnWxKlOhd7hB5tOqHoalfhID9/LQPWFw0gz/TXLoYd3QvMskGmTDQ hx2LMyR6GRePCiXwkY99W3fjndL3R9c+adt324tHBxjLkqsd7OL2tbNa7Mco6Okk Eb3g5o8aXuMbSmdpfOncPCQcZq1c5RU0cXkUWo2fdSkx0HGPsJZE+RJMEsSl9m6F 15bZ+8FnO29UP9RN2/w2HTxXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2rynBL3X 8M65OvpGGEm+hdi6bO8wHwYDVR0jBBgwFoAUaMIYjATCDkkjq7YttIckmDVLSv0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3NTBCLzVCMUMxRkFFNDY4 QzExRjA4NEI2QTUzOUM0RjlBRTAyL2FNSVlqQVRDRGtranE3WXR0SWNrbURWTFN2 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvYU1JWWpBVENEa2tqcTdZdHRJY2ttRFZMU3YwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3 NTBCLzVCMUMxRkFFNDY4QzExRjA4NEI2QTUzOUM0RjlBRTAyL2FNSVlqQVRDRGtr anE3WXR0SWNrbURWTFN2MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJWF/d9ROOmjp9F/61k+DsdW3W2ujEyYCrVF1vfzKgRdVSCAm+MObtVZ 57M24ix/RxPIGMPvSMIY2VZbMtCP/ygWsfXT9caLMq4L7q+yXKnlcL1eRVa8VhkP AgIUIt5TsPkjRD0VWqobnFWsXAW13Z20uz3Sm/qaOMu44hLdISDpkJUm8VaO6y2N OjaV6BxbGKF5l4GJODxijR0IFpDKZMyuyzpuLs0hjBDe/D65bRehSaS9nfesqXTn KrO2LQ7e9Q26iEmFxdC4bmzl4XOtsuDZaivCEmPr7j0FG4VuyQLCqz3S3aS1rqdm 5FbH+c6Qe0CFi/kZPY+PQFfAq8aFiA0= -----END CERTIFICATE-----Generated at Thu Jul 3 23:35:53 2025 by rpki-client