$ rpki-client -vvf rpki.apnic.net/member_repository/A912216A/FC51C9E8310B11E9BB82FE72C4F9AE02/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.mft File: AJYbj2Ot6dGfOs9CgzrF2cnHJ48.mft (raw, json) Hash identifier: DSjf/5VCoadWbNFc/wKj0hMUSelr4s7WsbzY+/pGi3o= Subject key identifier: 3D:71:38:16:A4:E0:44:D7:99:7C:56:A5:CC:A6:5E:10:5B:FA:05:7B Authority key identifier: 00:96:1B:8F:63:AD:E9:D1:9F:3A:CF:42:83:3A:C5:D9:C9:C7:27:8F Certificate issuer: /CN=A912216A/serialNumber=00961B8F63ADE9D19F3ACF42833AC5D9C9C7278F Certificate serial: 1091 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912216A/FC51C9E8310B11E9BB82FE72C4F9AE02/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.mft Manifest number: 1089 Signing time: Mon 30 Jun 2025 17:32:42 +0000 Manifest this update: Mon 30 Jun 2025 17:32:42 +0000 Manifest next update: Mon 07 Jul 2025 17:32:42 +0000 Files and hashes: 1: AJYbj2Ot6dGfOs9CgzrF2cnHJ48.crl (hash: NkJw4T5cKkGFIH8zih0VAzfpXzSZ77pseGvC5YUYXI0=) 2: 2A44CEFE311111E98C69B181C4F9AE02.roa (hash: 0SVk2cOfikrAvRDDJgb5TANBAXNNynzVUWZgXY+3hcc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912216A/FC51C9E8310B11E9BB82FE72C4F9AE02/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.crl rsync://rpki.apnic.net/member_repository/A912216A/FC51C9E8310B11E9BB82FE72C4F9AE02/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 17:32:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4241 (0x1091) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912216A, serialNumber=00961B8F63ADE9D19F3ACF42833AC5D9C9C7278F Validity Not Before: Jun 30 17:32:42 2025 GMT Not After : Jul 7 17:32:42 2025 GMT Subject: CN=6862ca3a-8be2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:65:ba:fd:e3:fb:24:4b:00:d4:a4:39:70:6e: ce:19:89:75:42:4f:80:f5:f5:b0:6b:b6:3b:a3:b5: cf:65:74:f1:19:e9:40:1e:50:99:b4:ae:e2:26:e0: b0:d1:ac:d7:e8:89:23:cb:31:29:9c:0b:e9:68:3c: 1d:31:84:65:d2:4b:0b:df:d4:eb:8d:05:37:0a:6c: a6:93:eb:8a:a9:4f:79:b8:db:9e:70:68:f3:44:a2: ea:21:70:c0:a6:a6:cd:90:79:e7:a6:66:35:1a:3c: 17:3e:b5:ce:7e:a0:bf:51:cc:35:75:09:c9:ba:14: a4:27:cd:ac:52:4b:e7:e5:3f:8e:d3:d9:c5:af:5b: a0:a5:72:d5:49:8d:18:f9:7e:c7:c9:43:f2:a5:0b: 26:f4:c6:eb:40:ad:bf:18:af:48:6a:8b:b8:9e:f5: 45:38:3d:42:c9:44:f3:6e:51:45:3f:0b:93:cb:1d: 43:98:b9:cb:e6:2d:3b:53:c8:c9:ab:7f:8b:e1:a1: e4:db:52:4f:09:c5:52:df:6f:5c:ce:27:55:59:52: db:ec:ac:70:21:5a:ce:a1:67:3f:47:ab:2f:2d:e2: 1e:3d:a1:89:b5:23:33:b8:32:c5:39:15:eb:f7:44: 3f:41:e7:24:71:b3:48:b8:8a:3e:0d:52:c0:9f:a7: 2c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:71:38:16:A4:E0:44:D7:99:7C:56:A5:CC:A6:5E:10:5B:FA:05:7B X509v3 Authority Key Identifier: keyid:00:96:1B:8F:63:AD:E9:D1:9F:3A:CF:42:83:3A:C5:D9:C9:C7:27:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912216A/FC51C9E8310B11E9BB82FE72C4F9AE02/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912216A/FC51C9E8310B11E9BB82FE72C4F9AE02/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:8c:b2:e3:d4:c4:48:bb:8c:5c:5a:09:5d:cb:a3:79:ba:db: 82:44:d2:ff:27:31:74:20:c4:9c:e2:68:06:6f:b0:22:e8:2b: 40:19:fe:21:11:39:df:95:17:c6:71:9f:ae:ca:94:d2:86:c4: 2d:c6:0d:ff:8b:11:c7:a8:b2:4d:f7:0f:d3:47:56:8f:e7:76: a3:83:a9:17:c4:38:33:24:3a:db:bb:6b:fc:48:5a:e7:16:2e: b6:1d:08:81:32:0d:ca:cf:f7:68:d5:73:83:e3:51:fd:ff:d4: cd:58:a3:80:f2:35:53:4a:3d:ce:52:95:30:ca:c5:ad:93:d3: 96:01:52:a5:0e:5d:fc:97:1f:8f:52:7c:02:5a:68:3f:86:c7: 2c:1a:e2:2d:bc:4c:3f:ef:bf:2b:98:8f:90:e3:8e:22:d5:b2: 37:f1:8f:fa:c4:9c:f9:0c:4b:a3:fd:3d:05:95:df:84:fb:60: 49:90:0e:24:43:0e:ca:f7:b5:a6:8a:0c:95:f5:b9:3c:3f:54: b1:fb:20:39:55:fb:6b:65:73:77:f5:e6:a5:59:d8:0e:cc:bb: 2b:2c:45:80:15:09:1b:fc:d6:c2:94:9f:ef:ea:d1:aa:03:ce: 52:90:a6:41:ed:af:4e:7a:56:11:3c:0b:2c:1d:4f:d0:c0:7a: 00:f0:61:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIxNkExMTAvBgNVBAUTKDAwOTYxQjhGNjNBREU5RDE5RjNBQ0Y0MjgzM0FDNUQ5 QzlDNzI3OEYwHhcNMjUwNjMwMTczMjQyWhcNMjUwNzA3MTczMjQyWjAYMRYwFAYD VQQDEw02ODYyY2EzYS04YmUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvGW6/eP7JEsA1KQ5cG7OGYl1Qk+A9fWwa7Y7o7XPZXTxGelAHlCZtK7iJuCw 0azX6IkjyzEpnAvpaDwdMYRl0ksL39TrjQU3Cmymk+uKqU95uNuecGjzRKLqIXDA pqbNkHnnpmY1GjwXPrXOfqC/Ucw1dQnJuhSkJ82sUkvn5T+O09nFr1ugpXLVSY0Y +X7HyUPypQsm9MbrQK2/GK9Iaou4nvVFOD1CyUTzblFFPwuTyx1DmLnL5i07U8jJ q3+L4aHk21JPCcVS329czidVWVLb7KxwIVrOoWc/R6svLeIePaGJtSMzuDLFORXr 90Q/QeckcbNIuIo+DVLAn6csqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD1xOBak 4ETXmXxWpcymXhBb+gV7MB8GA1UdIwQYMBaAFACWG49jrenRnzrPQoM6xdnJxyeP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjE2QS9GQzUxQzlFODMx MEIxMUU5QkI4MkZFNzJDNEY5QUUwMi9BSlliajJPdDZkR2ZPczlDZ3pyRjJjbkhK NDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FKWWJqMk90NmRHZk9zOUNnenJGMmNuSEo0OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjE2QS9GQzUxQzlFODMxMEIxMUU5QkI4MkZFNzJDNEY5QUUwMi9BSlliajJPdDZk R2ZPczlDZ3pyRjJjbkhKNDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8jLLj1MRIu4xcWgldy6N5utuCRNL/JzF0IMSc4mgGb7Ai6CtAGf4h ETnflRfGcZ+uypTShsQtxg3/ixHHqLJN9w/TR1aP53ajg6kXxDgzJDrbu2v8SFrn Fi62HQiBMg3Kz/do1XOD41H9/9TNWKOA8jVTSj3OUpUwysWtk9OWAVKlDl38lx+P UnwCWmg/hscsGuItvEw/778rmI+Q444i1bI38Y/6xJz5DEuj/T0Fld+E+2BJkA4k Qw7K97WmigyV9bk8P1Sx+yA5VftrZXN39ealWdgOzLsrLEWAFQkb/NbClJ/v6tGq A85SkKZB7a9OelYRPAssHU/QwHoA8GHk -----END CERTIFICATE-----Generated at Wed Jul 2 15:56:29 2025 by rpki-client