$ rpki-client -vvf rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.mft File: aAYK77v8wH1z211yeLyPJJxX9RU.mft (raw, json) Hash identifier: mcPEB9LtrSROtLzJzaknLeJGykQuK8eN0x4hmqLeuVw= Subject key identifier: E1:E9:1E:CC:96:04:55:CB:48:7A:49:EB:0B:55:DA:EE:DF:9C:A9:6F Authority key identifier: 68:06:0A:EF:BB:FC:C0:7D:73:DB:5D:72:78:BC:8F:24:9C:57:F5:15 Certificate issuer: /CN=A912859A/serialNumber=68060AEFBBFCC07D73DB5D7278BC8F249C57F515 Certificate serial: 03B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aAYK77v8wH1z211yeLyPJJxX9RU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.mft Manifest number: 03A8 Signing time: Thu 03 Jul 2025 01:05:57 +0000 Manifest this update: Thu 03 Jul 2025 01:05:56 +0000 Manifest next update: Thu 10 Jul 2025 01:05:56 +0000 Files and hashes: 1: aAYK77v8wH1z211yeLyPJJxX9RU.crl (hash: UyNxqMrDGiqB0gr+dlwNF1RJwVgBoxkAM2EE8xMNn/Y=) 2: 5B639C667CEB11EDA3D10364C4F9AE02.roa (hash: /k7UGLxYpMRjSXOkhilDp1PbyHK35jDBnjLpEab1SqY=) 3: ADBB651E043411ED9F02B325C4F9AE02.roa (hash: nXP2TkV2xaQf8NtZFSYlzBkdLiCf/hTO1Pti6MrwpUU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.crl rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aAYK77v8wH1z211yeLyPJJxX9RU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 01:05:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 947 (0x3b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912859A, serialNumber=68060AEFBBFCC07D73DB5D7278BC8F249C57F515 Validity Not Before: Jul 3 01:05:56 2025 GMT Not After : Jul 10 01:05:56 2025 GMT Subject: CN=6865d774-b73c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ef:e1:b5:73:39:da:48:24:c4:74:2a:00:53: aa:52:07:00:b0:cf:57:7f:57:b1:9b:9c:ed:0c:d6: 07:80:b6:85:42:fe:95:21:99:01:4b:1c:6d:af:33: 70:35:6c:17:26:3b:f5:be:52:ef:c7:cc:49:22:71: 99:79:0f:10:ae:68:16:59:45:d2:eb:0a:a5:19:da: 33:c9:a1:65:85:68:ef:17:22:89:78:49:a1:2b:64: 4f:36:ed:cd:9b:8e:c7:d9:a4:8d:eb:af:58:8f:d3: 80:83:96:84:e1:69:ed:79:58:69:d2:af:a1:d6:26: 8d:19:f5:b8:34:0f:1a:67:c7:f0:ab:e4:72:73:bb: 2e:39:63:19:55:4b:99:bc:99:7e:0c:84:28:36:a0: 1a:26:ea:04:7d:5f:cc:67:09:69:c1:9d:6d:1f:32: fa:8b:15:c3:64:19:1e:c9:77:21:f7:31:fe:62:a4: 70:03:b1:e7:90:3b:9f:b8:0c:db:2f:a0:07:6a:9b: 22:db:4b:6f:9b:a8:fe:b3:76:5a:9b:4d:50:a9:10: 7f:15:cf:eb:b9:5f:3a:55:7b:fe:16:b1:22:f4:ca: 98:fb:75:45:1b:05:02:06:c4:c2:55:1e:54:4e:06: d3:da:7c:7a:50:53:3c:87:83:7e:8a:58:84:cb:19: b7:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:E9:1E:CC:96:04:55:CB:48:7A:49:EB:0B:55:DA:EE:DF:9C:A9:6F X509v3 Authority Key Identifier: keyid:68:06:0A:EF:BB:FC:C0:7D:73:DB:5D:72:78:BC:8F:24:9C:57:F5:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aAYK77v8wH1z211yeLyPJJxX9RU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:fb:bb:d1:ad:77:a4:04:ee:cf:9f:c1:10:6f:44:6e:07:ed: 49:ab:9b:21:17:4a:13:1e:09:8b:8e:67:b7:88:d8:9e:64:58: 4e:ea:34:d8:18:47:b4:20:48:45:19:76:a2:5a:6c:cf:53:97: 04:37:ea:ef:73:e7:ce:b6:be:fa:2e:95:a9:82:8b:9d:c9:06: 97:05:9d:1d:52:54:55:32:54:d5:0e:1d:af:b1:3b:d5:e5:56: 96:f0:7e:6a:28:54:ce:ae:24:b2:c9:0c:60:2c:27:20:f5:4c: 66:e7:b3:99:7c:04:df:a7:e1:1d:bc:8a:b0:a0:45:b6:38:2d: ed:20:ec:fd:61:6f:8a:86:35:e8:6a:57:44:10:28:e0:62:44: e2:84:ef:ae:36:1c:fe:3f:ce:7d:bd:16:60:75:ad:8b:7a:88: 99:01:ca:e2:f5:0b:ec:fb:87:4e:4e:e0:cd:bb:62:6f:61:33: 2f:99:f8:8b:b0:9d:f3:09:be:29:2f:1a:fd:fa:41:7a:a5:ea: 64:2d:c3:4b:1e:40:67:51:40:e2:a5:53:25:57:d9:b9:38:79: be:2a:75:cc:57:85:74:0a:a5:4a:74:7e:f9:40:e1:82:06:3e: 72:dd:9d:48:09:30:e0:cc:de:f2:e0:86:8b:35:1e:54:24:46: 84:1a:55:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg1OUExMTAvBgNVBAUTKDY4MDYwQUVGQkJGQ0MwN0Q3M0RCNUQ3Mjc4QkM4RjI0 OUM1N0Y1MTUwHhcNMjUwNzAzMDEwNTU2WhcNMjUwNzEwMDEwNTU2WjAYMRYwFAYD VQQDEw02ODY1ZDc3NC1iNzNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAze/htXM52kgkxHQqAFOqUgcAsM9Xf1exm5ztDNYHgLaFQv6VIZkBSxxtrzNw NWwXJjv1vlLvx8xJInGZeQ8QrmgWWUXS6wqlGdozyaFlhWjvFyKJeEmhK2RPNu3N m47H2aSN669Yj9OAg5aE4WnteVhp0q+h1iaNGfW4NA8aZ8fwq+Ryc7suOWMZVUuZ vJl+DIQoNqAaJuoEfV/MZwlpwZ1tHzL6ixXDZBkeyXch9zH+YqRwA7HnkDufuAzb L6AHapsi20tvm6j+s3Zam01QqRB/Fc/ruV86VXv+FrEi9MqY+3VFGwUCBsTCVR5U TgbT2nx6UFM8h4N+iliEyxm3tQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOHpHsyW BFXLSHpJ6wtV2u7fnKlvMB8GA1UdIwQYMBaAFGgGCu+7/MB9c9tdcni8jyScV/UV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODU5QS9CQUNBQjdFQzlE RkUxMUVDQjg3RjUxNDdDNEY5QUUwMi9hQVlLNzd2OHdIMXoyMTF5ZUx5UEpKeFg5 UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FBWUs3N3Y4d0gxejIxMXllTHlQSkp4WDlSVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODU5QS9CQUNBQjdFQzlERkUxMUVDQjg3RjUxNDdDNEY5QUUwMi9hQVlLNzd2OHdI MXoyMTF5ZUx5UEpKeFg5UlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6+7vRrXekBO7Pn8EQb0RuB+1Jq5shF0oTHgmLjme3iNieZFhO6jTY GEe0IEhFGXaiWmzPU5cEN+rvc+fOtr76LpWpgoudyQaXBZ0dUlRVMlTVDh2vsTvV 5VaW8H5qKFTOriSyyQxgLCcg9Uxm57OZfATfp+EdvIqwoEW2OC3tIOz9YW+KhjXo aldEECjgYkTihO+uNhz+P859vRZgda2LeoiZAcri9Qvs+4dOTuDNu2JvYTMvmfiL sJ3zCb4pLxr9+kF6pepkLcNLHkBnUUDipVMlV9m5OHm+KnXMV4V0CqVKdH75QOGC Bj5y3Z1ICTDgzN7y4IaLNR5UJEaEGlXM -----END CERTIFICATE-----Generated at Fri Jul 4 08:27:14 2025 by rpki-client