$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.mft File: AAs7T4iVfN1tN9_2ExONb1SoW3k.mft (raw, json) Hash identifier: DnvruWZvhJuNNwCnAZG4xaIaq4iiZ0fMG5HKQz8sBZ4= Subject key identifier: 5A:EC:7C:80:68:9F:CE:CD:E0:FD:4C:C9:F0:AD:53:F9:62:24:C5:30 Authority key identifier: 00:0B:3B:4F:88:95:7C:DD:6D:37:DF:F6:13:13:8D:6F:54:A8:5B:79 Certificate issuer: /CN=A9149F48/serialNumber=000B3B4F88957CDD6D37DFF613138D6F54A85B79 Certificate serial: 06C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAs7T4iVfN1tN9_2ExONb1SoW3k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.mft Manifest number: 06B3 Signing time: Wed 02 Jul 2025 22:27:28 +0000 Manifest this update: Wed 02 Jul 2025 22:27:27 +0000 Manifest next update: Wed 09 Jul 2025 22:27:27 +0000 Files and hashes: 1: AAs7T4iVfN1tN9_2ExONb1SoW3k.crl (hash: 8rik5Ef5WceAZhZvsXuU6VFhKgSeGu4FL1YCJSEQdiw=) 2: A1F2E73A19D511EF85D48428C4F9AE02.roa (hash: ZX1QzTNwDgtR4R7k4FRyRV5Z8jQyiy5Ky4ynHhk2quU=) 3: 9BCBA2EA6D6511EB80F7684BC4F9AE02.roa (hash: hdIhzh8K12opQ1D1WK4zXsMffrmcGa0gdrGINvycqaM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.crl rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAs7T4iVfN1tN9_2ExONb1SoW3k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1729 (0x6c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F48, serialNumber=000B3B4F88957CDD6D37DFF613138D6F54A85B79 Validity Not Before: Jul 2 22:27:27 2025 GMT Not After : Jul 9 22:27:27 2025 GMT Subject: CN=6865b250-69cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:8d:3a:59:ed:86:5a:47:13:dc:48:cb:aa:23: b1:dc:5d:df:7d:fb:6b:f9:d3:ef:86:eb:a3:8a:cd: 31:84:e7:9b:61:96:d9:78:dd:ff:53:ea:f6:93:1e: 30:38:d1:bc:7d:16:47:61:cb:d0:11:33:98:76:a0: 0f:19:80:19:13:4b:5d:7e:ee:96:7c:e4:22:b7:60: f1:a8:4c:1c:94:4f:37:d1:a5:71:31:7b:54:0e:22: 63:25:e0:7e:30:19:2e:09:5e:92:4e:33:97:9b:fb: 53:79:68:e6:8a:18:4a:9d:30:ef:d8:dd:ae:e6:11: 25:b9:18:eb:61:4f:0e:d0:15:58:b7:49:09:e9:a5: fc:74:f7:4e:6b:80:4e:98:52:2b:a7:67:d0:3d:99: bc:bc:93:ad:da:b5:af:e4:9d:3a:9c:25:a1:6d:f4: f5:7c:c9:a9:58:fe:7b:56:fe:64:9a:f4:17:23:83: 1b:2a:53:8d:f6:68:87:a8:ce:86:21:a9:8b:3a:d5: 4d:cf:42:fb:96:3b:ef:42:4e:3e:c5:7d:01:fa:e9: e6:22:93:01:bd:5c:a3:b8:3f:c9:b7:ce:c1:7b:17: b3:42:ee:c7:15:ba:99:ae:a3:3f:9f:75:20:2e:a2: 23:f8:5d:0b:ce:ac:a1:99:d1:25:d4:e4:9f:f9:33: 3b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:EC:7C:80:68:9F:CE:CD:E0:FD:4C:C9:F0:AD:53:F9:62:24:C5:30 X509v3 Authority Key Identifier: keyid:00:0B:3B:4F:88:95:7C:DD:6D:37:DF:F6:13:13:8D:6F:54:A8:5B:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAs7T4iVfN1tN9_2ExONb1SoW3k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:4a:9a:84:6b:78:49:33:19:66:59:15:9e:57:d1:41:d9:0f: ca:3f:67:a6:e8:cf:7f:fe:7d:bc:1c:26:f5:78:30:3d:0b:80: 27:8f:c5:58:76:c2:26:c2:bb:0d:4f:41:ed:38:a0:e6:2b:c9: 0e:68:ba:00:1d:e3:78:75:1e:e9:c0:e2:42:51:90:4d:fa:e4: 6e:ea:1a:54:05:a4:a6:2c:a2:6f:80:6d:69:85:c9:23:d0:ae: 2c:95:53:fb:cf:5c:66:10:08:b4:81:2f:7b:23:94:67:80:c6: 63:b7:58:df:2a:be:06:d9:e7:2a:65:a1:7b:8f:75:22:1b:1f: 43:46:a9:54:17:01:0d:53:04:52:b7:45:47:59:13:73:2a:26: 54:28:10:1c:e2:b8:79:a9:0d:50:46:98:c5:8f:f2:bc:9d:5a: f6:16:f2:8f:20:99:de:fe:4e:3c:01:19:90:55:e2:6b:47:57: f2:fe:e9:70:4a:8b:3d:8e:64:ed:8f:d8:ad:a1:5d:37:7d:75: 1a:a8:55:82:ea:70:a2:45:69:12:4a:88:26:97:e6:07:79:99: 56:79:bf:94:2a:f0:62:58:e4:0e:cc:7f:9b:28:33:75:89:a4: 26:78:35:bf:5d:71:c8:80:8b:9f:99:5d:ed:cb:0d:85:a0:29: 15:60:3b:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBsEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGNDgxMTAvBgNVBAUTKDAwMEIzQjRGODg5NTdDREQ2RDM3REZGNjEzMTM4RDZG NTRBODVCNzkwHhcNMjUwNzAyMjIyNzI3WhcNMjUwNzA5MjIyNzI3WjAYMRYwFAYD VQQDEw02ODY1YjI1MC02OWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0406We2GWkcT3EjLqiOx3F3ffftr+dPvhuujis0xhOebYZbZeN3/U+r2kx4w ONG8fRZHYcvQETOYdqAPGYAZE0tdfu6WfOQit2DxqEwclE830aVxMXtUDiJjJeB+ MBkuCV6STjOXm/tTeWjmihhKnTDv2N2u5hEluRjrYU8O0BVYt0kJ6aX8dPdOa4BO mFIrp2fQPZm8vJOt2rWv5J06nCWhbfT1fMmpWP57Vv5kmvQXI4MbKlON9miHqM6G IamLOtVNz0L7ljvvQk4+xX0B+unmIpMBvVyjuD/Jt87BexezQu7HFbqZrqM/n3Ug LqIj+F0LzqyhmdEl1OSf+TM7uwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFrsfIBo n87N4P1MyfCtU/liJMUwMB8GA1UdIwQYMBaAFAALO0+IlXzdbTff9hMTjW9UqFt5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUY0OC9EOUVGOTlDMDZE NjMxMUVCOURGODE5NDlDNEY5QUUwMi9BQXM3VDRpVmZOMXROOV8yRXhPTmIxU29X M2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FBczdUNGlWZk4xdE45XzJFeE9OYjFTb1czay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUY0OC9EOUVGOTlDMDZENjMxMUVCOURGODE5NDlDNEY5QUUwMi9BQXM3VDRpVmZO MXROOV8yRXhPTmIxU29XM2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANSpqEa3hJMxlmWRWeV9FB2Q/KP2em6M9//n28HCb1eDA9C4Anj8VY dsImwrsNT0HtOKDmK8kOaLoAHeN4dR7pwOJCUZBN+uRu6hpUBaSmLKJvgG1phckj 0K4slVP7z1xmEAi0gS97I5RngMZjt1jfKr4G2ecqZaF7j3UiGx9DRqlUFwENUwRS t0VHWRNzKiZUKBAc4rh5qQ1QRpjFj/K8nVr2FvKPIJne/k48ARmQVeJrR1fy/ulw Sos9jmTtj9itoV03fXUaqFWC6nCiRWkSSogml+YHeZlWeb+UKvBiWOQOzH+bKDN1 iaQmeDW/XXHIgIufmV3tyw2FoCkVYDvC -----END CERTIFICATE-----Generated at Thu Jul 3 08:09:30 2025 by rpki-client