$ rpki-client -vvf rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/aeHOy4gdpslouq4HMjfCZglaRc0.mft File: aeHOy4gdpslouq4HMjfCZglaRc0.mft (raw, json) Hash identifier: WjEuat3xT5mq6jItYL0gS268P4yqCkLeoYQPzJyLLe8= Subject key identifier: FA:6B:EB:96:BE:46:0F:2F:8C:11:73:CE:B9:35:A1:AA:7D:38:63:97 Authority key identifier: 69:E1:CE:CB:88:1D:A6:C9:68:BA:AE:07:32:37:C2:66:09:5A:45:CD Certificate issuer: /CN=A9172CB5/serialNumber=69E1CECB881DA6C968BAAE073237C266095A45CD Certificate serial: 03B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aeHOy4gdpslouq4HMjfCZglaRc0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/aeHOy4gdpslouq4HMjfCZglaRc0.mft Manifest number: 03AB Signing time: Sat 05 Jul 2025 01:14:38 +0000 Manifest this update: Sat 05 Jul 2025 01:14:38 +0000 Manifest next update: Sat 12 Jul 2025 01:14:38 +0000 Files and hashes: 1: aeHOy4gdpslouq4HMjfCZglaRc0.crl (hash: WM0K5mn5fBEYOIX3Py7p4EKe9Waley0FHY3NUeBkaEc=) 2: 9F2E362C9B6E11ECA489542DC4F9AE02.roa (hash: ASwdm1L9Wn+Rz2UEXw3LVXx6V8cb6bPFge6o2YPGGR8=) 3: DD2DD3489F9111ECB958FF25C4F9AE02.roa (hash: ge5i/gUk2rLl8NFshkx3QLIeml4hinyetB2nMALgvq0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/aeHOy4gdpslouq4HMjfCZglaRc0.crl rsync://rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/aeHOy4gdpslouq4HMjfCZglaRc0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aeHOy4gdpslouq4HMjfCZglaRc0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 948 (0x3b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172CB5, serialNumber=69E1CECB881DA6C968BAAE073237C266095A45CD Validity Not Before: Jul 5 01:14:38 2025 GMT Not After : Jul 12 01:14:38 2025 GMT Subject: CN=68687c7e-2f05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a5:cf:ca:ca:63:6d:f5:25:4c:fb:9d:9d:1f: 9f:a9:82:ef:14:be:be:0c:cd:f4:f8:d1:c4:9c:eb: df:af:06:9e:61:59:53:f6:fc:42:3f:53:c7:fb:a3: 04:88:dc:a1:82:ac:e6:f0:26:59:e7:98:d8:3e:29: 22:c5:c6:36:3e:9e:f0:fe:c9:0f:88:76:26:38:7f: eb:f4:d9:71:ca:5c:1f:28:7a:f7:c3:e1:04:fa:3b: a3:59:dc:7c:42:fd:df:7d:e1:dc:7a:a0:31:71:1d: 9e:c8:01:f3:25:fd:f0:aa:af:37:4d:36:91:82:4c: e6:da:d9:e7:d2:ee:14:1a:37:8f:16:28:1e:4b:19: d9:07:fc:99:9f:4c:e9:3d:5e:7e:03:0a:51:48:8e: 9e:d8:e7:e2:2e:89:69:ea:80:5e:d0:22:63:11:90: a4:9a:cc:fc:69:dd:6c:b0:2f:d8:42:ba:e9:e5:62: 47:27:6f:43:0c:be:91:6e:0c:8d:91:f1:c4:d5:28: d7:5a:c9:b3:92:b6:7c:78:10:31:ac:ca:bc:d3:c1: c8:06:05:3b:ab:d6:d2:7d:67:1a:96:7e:ed:5c:43: 7b:ca:41:2a:26:1f:9a:89:66:19:1b:4b:cc:19:c5: db:d5:9d:e5:6a:4b:a2:43:29:3d:5b:51:49:2d:96: 18:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:6B:EB:96:BE:46:0F:2F:8C:11:73:CE:B9:35:A1:AA:7D:38:63:97 X509v3 Authority Key Identifier: keyid:69:E1:CE:CB:88:1D:A6:C9:68:BA:AE:07:32:37:C2:66:09:5A:45:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/aeHOy4gdpslouq4HMjfCZglaRc0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aeHOy4gdpslouq4HMjfCZglaRc0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/aeHOy4gdpslouq4HMjfCZglaRc0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:48:97:07:62:10:50:5e:fd:63:f6:e4:ef:bc:e5:3c:44:76: 95:0c:e0:31:ed:9c:bf:80:15:28:6c:2c:d2:e0:fb:a9:a4:58: bc:b3:47:c3:79:c6:af:39:e6:b1:93:f3:dd:00:a5:b6:da:53: 0d:eb:eb:53:12:f5:36:8e:c7:f6:05:b7:31:fa:32:31:2f:9e: 26:14:e7:02:66:6d:35:d7:c3:06:92:af:85:e8:16:21:c3:6a: 2a:ce:a8:21:89:0c:1a:e6:65:fb:38:bb:ad:a2:ef:cc:fa:f7: 78:6d:37:18:03:65:ed:d4:be:9b:97:28:e6:9d:cb:46:cb:c5: 79:57:06:e1:fd:ef:b4:77:5b:dd:9a:15:bd:7a:5e:9a:6f:77: 82:2c:60:40:14:fa:d6:f3:e7:db:6c:4d:86:82:17:8d:8d:69: 53:0f:79:da:55:3d:02:99:fa:c2:84:8d:1f:55:dd:a5:9a:04: 15:57:cc:bd:ab:ff:17:e4:bc:1b:1b:de:fe:d5:7a:49:26:4c: e3:97:32:d2:6d:4e:b5:78:3e:4b:0d:f5:73:95:bd:3c:1b:4c: a5:ee:a4:7e:da:7c:28:82:ed:d2:e0:cc:51:da:83:32:e0:1e: 12:68:73:7c:cc:40:30:0d:fd:1c:4b:cb:51:3a:4e:f4:3b:28: 69:b8:9c:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJDQjUxMTAvBgNVBAUTKDY5RTFDRUNCODgxREE2Qzk2OEJBQUUwNzMyMzdDMjY2 MDk1QTQ1Q0QwHhcNMjUwNzA1MDExNDM4WhcNMjUwNzEyMDExNDM4WjAYMRYwFAYD VQQDEw02ODY4N2M3ZS0yZjA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1qXPyspjbfUlTPudnR+fqYLvFL6+DM30+NHEnOvfrwaeYVlT9vxCP1PH+6ME iNyhgqzm8CZZ55jYPikixcY2Pp7w/skPiHYmOH/r9NlxylwfKHr3w+EE+jujWdx8 Qv3ffeHceqAxcR2eyAHzJf3wqq83TTaRgkzm2tnn0u4UGjePFigeSxnZB/yZn0zp PV5+AwpRSI6e2OfiLolp6oBe0CJjEZCkmsz8ad1ssC/YQrrp5WJHJ29DDL6RbgyN kfHE1SjXWsmzkrZ8eBAxrMq808HIBgU7q9bSfWcaln7tXEN7ykEqJh+aiWYZG0vM GcXb1Z3lakuiQyk9W1FJLZYYaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPpr65a+ Rg8vjBFzzrk1oap9OGOXMB8GA1UdIwQYMBaAFGnhzsuIHabJaLquBzI3wmYJWkXN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkNCNS8zOUQ3NjcyMDlC NkExMUVDQTY4MjM1MjJDNEY5QUUwMi9hZUhPeTRnZHBzbG91cTRITWpmQ1pnbGFS YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FlSE95NGdkcHNsb3VxNEhNamZDWmdsYVJjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkNCNS8zOUQ3NjcyMDlCNkExMUVDQTY4MjM1MjJDNEY5QUUwMi9hZUhPeTRnZHBz bG91cTRITWpmQ1pnbGFSYzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjSJcHYhBQXv1j9uTvvOU8RHaVDOAx7Zy/gBUobCzS4PuppFi8s0fD ecavOeaxk/PdAKW22lMN6+tTEvU2jsf2Bbcx+jIxL54mFOcCZm0118MGkq+F6BYh w2oqzqghiQwa5mX7OLutou/M+vd4bTcYA2Xt1L6blyjmnctGy8V5Vwbh/e+0d1vd mhW9el6ab3eCLGBAFPrW8+fbbE2GgheNjWlTD3naVT0CmfrChI0fVd2lmgQVV8y9 q/8X5LwbG97+1XpJJkzjlzLSbU61eD5LDfVzlb08G0yl7qR+2nwogu3S4MxR2oMy 4B4SaHN8zEAwDf0cS8tROk70OyhpuJzz -----END CERTIFICATE-----Generated at Sun Jul 6 01:08:41 2025 by rpki-client