$ rpki-client -vvf rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft File: aRgc9FH4s_7GT8gpi1ItSIylyeY.mft (raw, json) Hash identifier: fsbU2AB0e7rWdr+gDcB1J7fO1ppFhL4EWoke0H7QI2U= Subject key identifier: FE:E8:CC:CD:40:AA:1B:F8:E0:A0:7F:CB:62:6F:F5:9B:92:45:50:88 Authority key identifier: 69:18:1C:F4:51:F8:B3:FE:C6:4F:C8:29:8B:52:2D:48:8C:A5:C9:E6 Certificate issuer: /CN=A916DE3D/serialNumber=69181CF451F8B3FEC64FC8298B522D488CA5C9E6 Certificate serial: 5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aRgc9FH4s_7GT8gpi1ItSIylyeY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft Manifest number: 58 Signing time: Thu 03 Jul 2025 07:30:25 +0000 Manifest this update: Thu 03 Jul 2025 07:30:24 +0000 Manifest next update: Thu 10 Jul 2025 07:30:24 +0000 Files and hashes: 1: aRgc9FH4s_7GT8gpi1ItSIylyeY.crl (hash: 2f3oQU9JHopKf5mOvW1Y2P6k1U5iwiisdPLuZW2P8/w=) 2: 3AA17754FD8211EFB5BB677AC4F9AE02.roa (hash: imHJlERFiYSGRBFLnXEmas2EVRVLv/9+zOxRclw7D8g=) 3: B3266880FD8511EFA4783083C4F9AE02.roa (hash: W6yWEruXPIDPoCs6QL8pnWnNjj8hPqXcENkKFmbbFhk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.crl rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aRgc9FH4s_7GT8gpi1ItSIylyeY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 95 (0x5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DE3D, serialNumber=69181CF451F8B3FEC64FC8298B522D488CA5C9E6 Validity Not Before: Jul 3 07:30:24 2025 GMT Not After : Jul 10 07:30:24 2025 GMT Subject: CN=68663190-826d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2a:3e:e2:ec:d6:92:6b:4e:12:d5:ba:33:77: 4d:9f:ba:80:c0:3f:5f:c8:b1:f0:79:ac:23:a6:0d: a5:07:c0:87:26:42:6f:b9:f8:a3:5c:db:0a:84:1b: 34:ca:5d:7d:9e:71:b8:44:87:26:34:f6:89:b7:a2: 99:1e:1d:48:4b:20:b1:6d:38:31:de:a4:c3:9b:cc: 79:66:ef:a1:18:e1:92:e4:82:97:d8:0f:9d:24:70: cd:d1:56:a5:95:9e:0f:aa:68:d7:48:5f:c6:9b:20: ed:0b:df:31:fd:7c:4f:36:61:49:84:f1:79:53:9a: 7b:48:e5:95:d6:a3:29:2f:63:82:fe:c9:2d:2f:98: 3a:c4:d7:d7:09:70:17:99:51:06:00:a4:46:05:9c: f6:2f:93:ec:b0:e9:e3:9f:67:2e:2d:a0:95:ff:14: e9:2a:33:3a:e5:b8:f0:68:cf:84:c5:a3:82:a3:37: 6d:f5:61:c6:dd:f0:52:09:f0:79:46:b1:61:ba:c3: 17:a8:77:b5:59:3b:97:98:ba:11:dd:08:e4:0f:d2: 6b:60:6d:d7:90:e0:e7:92:53:fe:6c:24:a6:55:c9: ff:af:49:ad:5c:39:cb:17:8c:a7:85:60:e7:de:25: 70:c5:ff:3d:0d:5d:f1:5b:c3:c1:7e:c3:59:c9:12: 71:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:E8:CC:CD:40:AA:1B:F8:E0:A0:7F:CB:62:6F:F5:9B:92:45:50:88 X509v3 Authority Key Identifier: keyid:69:18:1C:F4:51:F8:B3:FE:C6:4F:C8:29:8B:52:2D:48:8C:A5:C9:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aRgc9FH4s_7GT8gpi1ItSIylyeY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:b3:89:17:ff:82:3c:99:08:98:84:81:ce:ed:86:6e:84:14: af:cd:d5:9d:24:3d:29:89:36:6f:bd:c9:dc:b7:70:5e:98:8c: 5c:f8:c3:77:d3:31:0b:9f:86:8b:4c:d2:57:a0:db:a2:18:37: e3:51:58:76:10:68:27:01:71:d8:e6:e2:4a:d7:62:39:86:b2: 6c:ce:e4:a9:6a:98:19:67:f2:8e:87:69:90:dc:fc:67:24:c1: 38:12:9c:c5:30:51:a7:b4:5b:52:c1:1c:96:92:67:c8:83:ad: 39:f6:95:dc:e8:0c:50:4f:b1:c9:2b:45:cf:c4:77:55:f0:27: 4e:b1:9d:ac:14:75:a2:b1:a7:f7:98:de:8b:2d:42:fa:76:58: c1:10:b1:86:57:17:c2:21:91:94:36:1f:30:0c:36:30:2d:c3: d9:13:73:49:0f:a3:97:1c:7e:66:12:e4:8a:4f:41:90:2e:3a: 49:4b:23:aa:b6:76:6b:b8:14:7e:4a:b2:e2:1a:0f:f6:3f:ba: d1:4c:9b:32:d3:ce:2b:cc:2a:75:4f:1a:ab:f2:e5:44:b9:7a: 91:80:b7:e2:a5:e6:f4:be:de:1a:db:ff:a0:59:cc:00:28:43: 70:de:d1:70:27:ea:d5:f0:80:dd:74:1a:85:5d:c7:3d:00:58: 69:5b:1e:c6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 REUzRDExMC8GA1UEBRMoNjkxODFDRjQ1MUY4QjNGRUM2NEZDODI5OEI1MjJENDg4 Q0E1QzlFNjAeFw0yNTA3MDMwNzMwMjRaFw0yNTA3MTAwNzMwMjRaMBgxFjAUBgNV BAMTDTY4NjYzMTkwLTgyNmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/Kj7i7NaSa04S1bozd02fuoDAP1/IsfB5rCOmDaUHwIcmQm+5+KNc2wqEGzTK XX2ecbhEhyY09om3opkeHUhLILFtODHepMObzHlm76EY4ZLkgpfYD50kcM3RVqWV ng+qaNdIX8abIO0L3zH9fE82YUmE8XlTmntI5ZXWoykvY4L+yS0vmDrE19cJcBeZ UQYApEYFnPYvk+yw6eOfZy4toJX/FOkqMzrluPBoz4TFo4KjN231Ycbd8FIJ8HlG sWG6wxeod7VZO5eYuhHdCOQP0mtgbdeQ4OeSU/5sJKZVyf+vSa1cOcsXjKeFYOfe JXDF/z0NXfFbw8F+w1nJEnHbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/ujMzUCq G/jgoH/LYm/1m5JFUIgwHwYDVR0jBBgwFoAUaRgc9FH4s/7GT8gpi1ItSIylyeYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZERTNEL0ZEMUU0NTUwREU2 NTExRUY4MjQzRUUzMEM0RjlBRTAyL2FSZ2M5Rkg0c183R1Q4Z3BpMUl0U0l5bHll WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYVJnYzlGSDRzXzdHVDhncGkxSXRTSXlseWVZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZE RTNEL0ZEMUU0NTUwREU2NTExRUY4MjQzRUUzMEM0RjlBRTAyL2FSZ2M5Rkg0c183 R1Q4Z3BpMUl0U0l5bHllWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJGziRf/gjyZCJiEgc7thm6EFK/N1Z0kPSmJNm+9ydy3cF6YjFz4w3fT MQufhotM0leg26IYN+NRWHYQaCcBcdjm4krXYjmGsmzO5KlqmBln8o6HaZDc/Gck wTgSnMUwUae0W1LBHJaSZ8iDrTn2ldzoDFBPsckrRc/Ed1XwJ06xnawUdaKxp/eY 3ostQvp2WMEQsYZXF8IhkZQ2HzAMNjAtw9kTc0kPo5ccfmYS5IpPQZAuOklLI6q2 dmu4FH5KsuIaD/Y/utFMmzLTzivMKnVPGqvy5US5epGAt+Kl5vS+3hrb/6BZzAAo Q3De0XAn6tXwgN10GoVdxz0AWGlbHsY= -----END CERTIFICATE-----Generated at Fri Jul 4 12:19:43 2025 by rpki-client