$ rpki-client -vvf rpki.apnic.net/member_repository/A91549ED/B7714B96091811EB95FA2737C4F9AE02/aIuwWV9ZW3EeAkUKzuOybBE7eS8.mft File: aIuwWV9ZW3EeAkUKzuOybBE7eS8.mft (raw, json) Hash identifier: kmAUG3vwzr6GIPcWvbsyvQTYp2hD5lTzjvr4u/cDz9Q= Subject key identifier: 92:1A:76:C8:63:BF:47:ED:2A:09:31:4C:26:B9:F1:2F:18:58:08:F1 Authority key identifier: 68:8B:B0:59:5F:59:5B:71:1E:02:45:0A:CE:E3:B2:6C:11:3B:79:2F Certificate issuer: /CN=A91549ED/serialNumber=688BB0595F595B711E02450ACEE3B26C113B792F Certificate serial: 07B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIuwWV9ZW3EeAkUKzuOybBE7eS8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91549ED/B7714B96091811EB95FA2737C4F9AE02/aIuwWV9ZW3EeAkUKzuOybBE7eS8.mft Manifest number: 07A9 Signing time: Mon 30 Jun 2025 21:29:54 +0000 Manifest this update: Mon 30 Jun 2025 21:29:54 +0000 Manifest next update: Mon 07 Jul 2025 21:29:54 +0000 Files and hashes: 1: aIuwWV9ZW3EeAkUKzuOybBE7eS8.crl (hash: 1eAHbu1/ol9ySQjnCXrOSyysQGoSulDlcvuUWviU0G0=) 2: 89B3D06E0F9111EBA9B90727C4F9AE02.roa (hash: nNeDg/wlklIxGFoighizLl95GENL1V1dEvF0FUrVfns=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91549ED/B7714B96091811EB95FA2737C4F9AE02/aIuwWV9ZW3EeAkUKzuOybBE7eS8.crl rsync://rpki.apnic.net/member_repository/A91549ED/B7714B96091811EB95FA2737C4F9AE02/aIuwWV9ZW3EeAkUKzuOybBE7eS8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIuwWV9ZW3EeAkUKzuOybBE7eS8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 21:29:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1969 (0x7b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91549ED, serialNumber=688BB0595F595B711E02450ACEE3B26C113B792F Validity Not Before: Jun 30 21:29:54 2025 GMT Not After : Jul 7 21:29:54 2025 GMT Subject: CN=686301d2-a312 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b3:b3:3e:7c:d3:10:ef:dc:db:17:d6:7f:ee: f4:f6:04:85:2f:7f:e0:5a:77:78:a2:c7:7b:38:28: 3a:17:75:d9:6f:ec:2c:f9:6d:86:22:56:bb:ca:52: c4:11:70:0b:64:d4:1a:6f:1f:36:fb:c2:25:07:36: cc:14:41:9e:73:18:af:d4:92:7d:04:20:a0:1a:74: 14:3f:64:7d:ac:4a:b2:9c:65:b9:29:15:37:49:36: 91:2a:62:9e:d2:8e:56:be:be:61:3f:df:67:d7:5c: c7:20:a0:49:fb:e2:5e:3a:a2:cc:ab:17:e7:e1:de: 11:23:0a:a9:99:d6:22:14:53:83:41:33:c8:a4:22: 0e:94:85:b6:37:19:d7:24:8f:a7:67:cc:63:25:98: 92:87:a4:22:6e:50:e4:67:ea:b1:66:17:06:0e:46: 24:f7:6f:f5:36:0b:2a:d9:17:8e:54:8a:5e:2d:07: 84:e5:7b:92:a2:f3:a5:e9:63:fd:6b:d0:ea:46:83: c5:0e:a7:83:67:ed:67:07:02:a0:c6:1c:ac:0c:91: ac:75:31:f9:d9:3b:30:39:fe:11:1d:63:d1:37:de: a6:a3:1e:48:02:c1:f5:10:70:44:4a:84:55:ec:0d: 58:c1:68:dc:d3:37:89:0a:c4:0d:3a:61:f0:28:28: 42:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:1A:76:C8:63:BF:47:ED:2A:09:31:4C:26:B9:F1:2F:18:58:08:F1 X509v3 Authority Key Identifier: keyid:68:8B:B0:59:5F:59:5B:71:1E:02:45:0A:CE:E3:B2:6C:11:3B:79:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91549ED/B7714B96091811EB95FA2737C4F9AE02/aIuwWV9ZW3EeAkUKzuOybBE7eS8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIuwWV9ZW3EeAkUKzuOybBE7eS8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91549ED/B7714B96091811EB95FA2737C4F9AE02/aIuwWV9ZW3EeAkUKzuOybBE7eS8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:4e:82:7d:70:c5:e2:a2:44:39:9a:54:81:30:44:0a:2f:0d: 2d:48:a6:b4:02:5f:21:01:80:93:11:25:cc:d7:8b:ca:cf:a1: 65:b4:86:c3:44:83:91:bc:17:03:59:c9:5f:9a:49:be:1c:73: bc:b8:79:f8:5c:0e:81:df:b6:68:7a:6c:9d:24:19:57:f3:f9: a9:a7:54:a0:6f:ad:47:34:c9:36:42:93:25:ba:36:c2:db:35: 7a:ce:6f:b1:a5:40:a3:5a:5b:12:1b:28:fe:98:d5:67:44:8d: 89:72:1f:bf:e2:ef:d5:23:8d:b8:bd:c0:15:62:f6:70:2d:d1: ed:ef:e1:15:57:77:9d:4f:f3:de:2e:84:4f:17:28:0e:ae:65: d6:24:45:7e:6b:c5:18:7a:df:2d:96:c6:aa:c5:0c:b1:95:5e: 94:53:4a:93:87:5d:82:d6:d6:07:1d:1c:34:f4:a1:38:78:5b: d7:99:2b:27:9f:c4:4d:08:3b:5f:80:fa:81:8f:c1:95:90:07: 10:0b:0c:fb:61:79:2f:8d:d8:f9:16:f5:a5:c1:a7:35:94:21: dc:2c:e3:d8:97:39:b1:1c:03:cc:f4:ef:cc:06:96:80:d1:3a: 9d:57:86:da:1d:63:1c:a5:d5:4c:ba:b4:c5:23:ac:c3:a1:22: 65:ff:0f:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQ5RUQxMTAvBgNVBAUTKDY4OEJCMDU5NUY1OTVCNzExRTAyNDUwQUNFRTNCMjZD MTEzQjc5MkYwHhcNMjUwNjMwMjEyOTU0WhcNMjUwNzA3MjEyOTU0WjAYMRYwFAYD VQQDEw02ODYzMDFkMi1hMzEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu7OzPnzTEO/c2xfWf+709gSFL3/gWnd4osd7OCg6F3XZb+ws+W2GIla7ylLE EXALZNQabx82+8IlBzbMFEGecxiv1JJ9BCCgGnQUP2R9rEqynGW5KRU3STaRKmKe 0o5Wvr5hP99n11zHIKBJ++JeOqLMqxfn4d4RIwqpmdYiFFODQTPIpCIOlIW2NxnX JI+nZ8xjJZiSh6QiblDkZ+qxZhcGDkYk92/1Ngsq2ReOVIpeLQeE5XuSovOl6WP9 a9DqRoPFDqeDZ+1nBwKgxhysDJGsdTH52TswOf4RHWPRN96mox5IAsH1EHBESoRV 7A1YwWjc0zeJCsQNOmHwKChCWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJIadshj v0ftKgkxTCa58S8YWAjxMB8GA1UdIwQYMBaAFGiLsFlfWVtxHgJFCs7jsmwRO3kv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDlFRC9CNzcxNEI5NjA5 MTgxMUVCOTVGQTI3MzdDNEY5QUUwMi9hSXV3V1Y5WlczRWVBa1VLenVPeWJCRTdl UzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FJdXdXVjlaVzNFZUFrVUt6dU95YkJFN2VTOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDlFRC9CNzcxNEI5NjA5MTgxMUVCOTVGQTI3MzdDNEY5QUUwMi9hSXV3V1Y5Wlcz RWVBa1VLenVPeWJCRTdlUzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjToJ9cMXiokQ5mlSBMEQKLw0tSKa0Al8hAYCTESXM14vKz6FltIbD RIORvBcDWclfmkm+HHO8uHn4XA6B37ZoemydJBlX8/mpp1Sgb61HNMk2QpMlujbC 2zV6zm+xpUCjWlsSGyj+mNVnRI2Jch+/4u/VI424vcAVYvZwLdHt7+EVV3edT/Pe LoRPFygOrmXWJEV+a8UYet8tlsaqxQyxlV6UU0qTh12C1tYHHRw09KE4eFvXmSsn n8RNCDtfgPqBj8GVkAcQCwz7YXkvjdj5FvWlwac1lCHcLOPYlzmxHAPM9O/MBpaA 0TqdV4baHWMcpdVMurTFI6zDoSJl/w8R -----END CERTIFICATE-----Generated at Wed Jul 2 15:59:04 2025 by rpki-client