$ rpki-client -vvf rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/AEu7wBxXH6cPIOpEBQBX2dyeutI.mft File: AEu7wBxXH6cPIOpEBQBX2dyeutI.mft (raw, json) Hash identifier: Rd8QNIyo2nnVTEbFTXEg6oOKbwiqp0bMeBYAexxqXaE= Subject key identifier: 8F:02:F5:03:37:AF:53:6F:AB:D5:A6:8C:7A:07:EE:49:9D:F2:3B:01 Authority key identifier: 00:4B:BB:C0:1C:57:1F:A7:0F:20:EA:44:05:00:57:D9:DC:9E:BA:D2 Certificate issuer: /CN=A91326B3/serialNumber=004BBBC01C571FA70F20EA44050057D9DC9EBAD2 Certificate serial: F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AEu7wBxXH6cPIOpEBQBX2dyeutI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/AEu7wBxXH6cPIOpEBQBX2dyeutI.mft Manifest number: F0 Signing time: Tue 01 Jul 2025 05:49:06 +0000 Manifest this update: Tue 01 Jul 2025 05:49:05 +0000 Manifest next update: Tue 08 Jul 2025 05:49:05 +0000 Files and hashes: 1: AEu7wBxXH6cPIOpEBQBX2dyeutI.crl (hash: 4f7M/swWFePMvRvrC9I4Yr6iOD/FuGEEDNXxNM4wSbE=) 2: C4BA1CE6E69211EE99E71B6AC4F9AE02.roa (hash: y3j/TCNZc4+9GUOHxfPGcXJYdNwoHrgSAKMjnwhnAHY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/AEu7wBxXH6cPIOpEBQBX2dyeutI.crl rsync://rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/AEu7wBxXH6cPIOpEBQBX2dyeutI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AEu7wBxXH6cPIOpEBQBX2dyeutI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 05:49:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 242 (0xf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91326B3, serialNumber=004BBBC01C571FA70F20EA44050057D9DC9EBAD2 Validity Not Before: Jul 1 05:49:05 2025 GMT Not After : Jul 8 05:49:05 2025 GMT Subject: CN=686376d1-639b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:2b:c7:e8:cb:8b:db:e9:37:56:d2:49:57:15: be:b9:af:67:91:81:0e:b5:99:5e:13:e1:54:14:d4: db:49:08:8d:4e:af:d9:b4:82:0d:9a:6d:86:9d:22: 53:7a:78:b5:1e:31:c2:23:da:f9:d2:69:51:18:6c: 47:bf:a0:ed:c0:5b:b4:53:df:89:73:06:ec:84:78: c9:ba:31:77:c9:69:89:ab:3d:e0:f2:b2:56:64:53: 05:ad:c1:86:db:0e:f3:97:1f:08:32:8b:bf:07:29: c8:e9:1f:0e:e5:ca:08:1d:a7:b5:66:45:21:67:47: 4e:17:4b:14:ba:f7:90:87:3e:26:51:ad:d7:84:2b: db:0f:92:1a:8c:ad:c5:1d:2e:5c:87:dd:c6:eb:d9: 0a:85:dc:93:78:62:71:67:72:65:e4:37:00:89:36: dd:ad:59:60:d6:e5:61:58:39:a1:a2:90:94:b7:71: c5:15:fb:e1:2c:db:cc:10:36:90:6b:8a:e0:10:10: 5a:3d:3c:89:09:1c:3f:be:0c:8e:18:ab:4a:02:da: 9b:f5:b7:b8:5c:88:3a:e6:c7:31:e8:49:cf:b7:13: a7:7f:f7:d0:c0:64:6d:f0:18:df:e2:f1:29:a9:01: 3c:84:d9:e3:e2:77:ee:38:4d:e5:0a:5f:51:ca:ea: cb:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:02:F5:03:37:AF:53:6F:AB:D5:A6:8C:7A:07:EE:49:9D:F2:3B:01 X509v3 Authority Key Identifier: keyid:00:4B:BB:C0:1C:57:1F:A7:0F:20:EA:44:05:00:57:D9:DC:9E:BA:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/AEu7wBxXH6cPIOpEBQBX2dyeutI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AEu7wBxXH6cPIOpEBQBX2dyeutI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/AEu7wBxXH6cPIOpEBQBX2dyeutI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:ca:91:b6:8e:b0:1d:50:4b:0f:10:ee:fd:d1:83:4c:5c:42: d6:ba:24:c5:bd:d3:91:f5:fa:94:96:0a:0c:d3:f3:f2:c6:af: 94:b2:a4:85:11:df:1e:ca:ba:bc:3b:a6:46:7a:b4:37:a9:e7: 96:14:6d:31:57:a4:e1:f4:fd:ca:58:70:04:8d:5e:7e:c7:9b: 50:eb:0e:32:d2:6e:fe:89:1b:09:4f:6d:7c:b9:87:f9:fd:a1: e2:12:4f:75:22:36:94:aa:6e:a0:ae:03:dd:03:7b:ac:ca:33: d7:a7:09:3a:6a:73:31:17:7c:10:a0:1e:5f:a5:d6:04:ff:d5: 02:1e:90:f0:00:ce:9b:6c:32:bf:6c:1d:ce:8e:d3:7c:54:61: 26:16:88:58:ce:9a:45:ca:77:72:69:c3:5f:e1:16:99:09:b0: 85:2e:8b:0c:cb:6b:db:e8:e9:22:d4:f0:65:87:06:15:86:f7: 4b:72:7a:b0:b4:d3:25:68:b5:48:af:62:2d:43:af:9b:17:6f: 4f:2a:25:e0:d5:c8:3c:dc:f4:91:82:6d:9f:b7:6c:d8:9b:4b: 8a:0b:d8:f8:bf:6c:e4:7f:56:ff:77:a4:0d:3f:7d:8c:90:03: 3a:87:67:b0:c2:55:cc:a4:f1:35:71:85:e6:74:9a:31:4b:fc: d9:97:83:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI2QjMxMTAvBgNVBAUTKDAwNEJCQkMwMUM1NzFGQTcwRjIwRUE0NDA1MDA1N0Q5 REM5RUJBRDIwHhcNMjUwNzAxMDU0OTA1WhcNMjUwNzA4MDU0OTA1WjAYMRYwFAYD VQQDEw02ODYzNzZkMS02MzliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2yvH6MuL2+k3VtJJVxW+ua9nkYEOtZleE+FUFNTbSQiNTq/ZtIINmm2GnSJT eni1HjHCI9r50mlRGGxHv6DtwFu0U9+JcwbshHjJujF3yWmJqz3g8rJWZFMFrcGG 2w7zlx8IMou/BynI6R8O5coIHae1ZkUhZ0dOF0sUuveQhz4mUa3XhCvbD5IajK3F HS5ch93G69kKhdyTeGJxZ3Jl5DcAiTbdrVlg1uVhWDmhopCUt3HFFfvhLNvMEDaQ a4rgEBBaPTyJCRw/vgyOGKtKAtqb9be4XIg65scx6EnPtxOnf/fQwGRt8Bjf4vEp qQE8hNnj4nfuOE3lCl9RyurLAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI8C9QM3 r1Nvq9WmjHoH7kmd8jsBMB8GA1UdIwQYMBaAFABLu8AcVx+nDyDqRAUAV9ncnrrS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjZCMy9DRTlGMTZGRUU2 OTExMUVFQkYwNTg5MzJDNEY5QUUwMi9BRXU3d0J4WEg2Y1BJT3BFQlFCWDJkeWV1 dEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FFdTd3QnhYSDZjUElPcEVCUUJYMmR5ZXV0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjZCMy9DRTlGMTZGRUU2OTExMUVFQkYwNTg5MzJDNEY5QUUwMi9BRXU3d0J4WEg2 Y1BJT3BFQlFCWDJkeWV1dEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoypG2jrAdUEsPEO790YNMXELWuiTFvdOR9fqUlgoM0/Pyxq+UsqSF Ed8eyrq8O6ZGerQ3qeeWFG0xV6Th9P3KWHAEjV5+x5tQ6w4y0m7+iRsJT218uYf5 /aHiEk91IjaUqm6grgPdA3usyjPXpwk6anMxF3wQoB5fpdYE/9UCHpDwAM6bbDK/ bB3OjtN8VGEmFohYzppFyndyacNf4RaZCbCFLosMy2vb6Oki1PBlhwYVhvdLcnqw tNMlaLVIr2ItQ6+bF29PKiXg1cg83PSRgm2ft2zYm0uKC9j4v2zkf1b/d6QNP32M kAM6h2ewwlXMpPE1cYXmdJoxS/zZl4P1 -----END CERTIFICATE-----Generated at Wed Jul 2 06:14:26 2025 by rpki-client