$ rpki-client -vvf rpki.apnic.net/member_repository/A9189EA6/CD93F36C0E7A11EB91D84B3FC4F9AE02/aPPOswXHv_fe-qaMB-tBwLjjcWw.mft File: aPPOswXHv_fe-qaMB-tBwLjjcWw.mft (raw, json) Hash identifier: zir8ooKHuQxK3IlcER0C2Pce3kRdSAU0xjANKwBUJY4= Subject key identifier: 1F:76:2C:31:B5:11:C3:65:98:09:6E:CF:3C:DC:4F:36:A8:CE:81:E3 Authority key identifier: 68:F3:CE:B3:05:C7:BF:F7:DE:FA:A6:8C:07:EB:41:C0:B8:E3:71:6C Certificate issuer: /CN=A9189EA6/serialNumber=68F3CEB305C7BFF7DEFAA68C07EB41C0B8E3716C Certificate serial: 079B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPPOswXHv_fe-qaMB-tBwLjjcWw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189EA6/CD93F36C0E7A11EB91D84B3FC4F9AE02/aPPOswXHv_fe-qaMB-tBwLjjcWw.mft Manifest number: 0796 Signing time: Sat 28 Jun 2025 21:00:19 +0000 Manifest this update: Sat 28 Jun 2025 21:00:18 +0000 Manifest next update: Sat 05 Jul 2025 21:00:18 +0000 Files and hashes: 1: aPPOswXHv_fe-qaMB-tBwLjjcWw.crl (hash: Xf/MlHRjRGYq09jr1SuHHtRkcRzQrG1gXfSXvyV54BI=) 2: E4C5DB840E7C11EB8625AE5AC4F9AE02.roa (hash: 0a3iDH5bkO5J9nl1C2L0muZWxN/ekxHt+EqAXGCfnCM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189EA6/CD93F36C0E7A11EB91D84B3FC4F9AE02/aPPOswXHv_fe-qaMB-tBwLjjcWw.crl rsync://rpki.apnic.net/member_repository/A9189EA6/CD93F36C0E7A11EB91D84B3FC4F9AE02/aPPOswXHv_fe-qaMB-tBwLjjcWw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPPOswXHv_fe-qaMB-tBwLjjcWw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1947 (0x79b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189EA6, serialNumber=68F3CEB305C7BFF7DEFAA68C07EB41C0B8E3716C Validity Not Before: Jun 28 21:00:18 2025 GMT Not After : Jul 5 21:00:18 2025 GMT Subject: CN=686057e2-818d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:01:7c:3d:5f:4b:0a:0b:16:63:0f:5e:22:78: 52:13:53:52:0e:9c:23:bb:d0:c0:26:e6:80:28:8d: a9:64:c6:3e:f2:c4:7d:64:6f:b3:70:29:98:ed:1c: 01:d5:06:fc:91:97:ff:02:ba:4f:9b:0e:d6:4c:e0: 10:7c:9e:a8:b7:fc:c0:a1:9d:63:6b:cb:24:84:b4: 93:bf:00:08:d1:51:e2:5d:f7:cc:a6:3e:4e:63:ac: 9a:62:e6:c2:d2:df:74:eb:46:62:f3:8e:64:72:3e: 0c:03:71:6f:c0:67:b1:c0:0c:75:64:97:32:82:55: 94:a0:9f:e0:83:6e:9c:76:4e:be:4b:46:90:11:f7: 7d:82:fb:d1:4f:6e:64:4e:c6:24:49:f1:81:97:57: 11:ce:65:03:cc:18:02:7f:82:fc:4b:60:63:2b:ae: 38:8e:7d:40:c2:ce:89:89:f7:f1:0b:fc:60:3e:a8: 0d:58:5c:1a:9a:fa:9f:ab:ad:7c:7d:12:ee:0d:d1: b6:ab:65:c2:7b:83:82:3a:e0:85:32:51:e2:7b:9e: e6:3f:8f:01:81:34:e2:e0:0a:70:c1:09:05:45:a6: 14:bb:45:9c:2a:a3:2e:a3:a1:74:23:12:1a:1f:25: d3:9c:0d:ef:07:cf:24:9d:be:4f:68:90:1a:15:bd: 02:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:76:2C:31:B5:11:C3:65:98:09:6E:CF:3C:DC:4F:36:A8:CE:81:E3 X509v3 Authority Key Identifier: keyid:68:F3:CE:B3:05:C7:BF:F7:DE:FA:A6:8C:07:EB:41:C0:B8:E3:71:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189EA6/CD93F36C0E7A11EB91D84B3FC4F9AE02/aPPOswXHv_fe-qaMB-tBwLjjcWw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPPOswXHv_fe-qaMB-tBwLjjcWw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189EA6/CD93F36C0E7A11EB91D84B3FC4F9AE02/aPPOswXHv_fe-qaMB-tBwLjjcWw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:40:9c:b2:65:fb:8b:f5:06:e1:75:1b:4e:28:a5:80:b7:0c: b3:8a:20:c5:d5:65:fc:71:12:96:35:cd:22:60:55:d5:52:5f: 46:2f:93:d7:99:2b:97:52:49:69:82:b8:2d:f3:61:85:1f:ac: ef:ac:d3:a7:a2:93:12:83:76:e5:70:15:09:b1:78:93:b5:97: 59:c6:c4:ba:37:46:24:fe:5d:78:66:bb:21:39:5c:5a:6a:1e: b4:ea:96:07:bc:4f:e1:ba:19:85:bb:1a:dd:0b:83:c7:07:8a: 6a:6e:71:30:20:06:cd:85:a2:c0:61:65:aa:8e:da:00:4a:a6: 97:a2:33:18:4c:49:21:a8:d2:00:98:a8:d1:02:32:83:3b:4e: bd:51:69:c7:dd:4a:9c:29:ee:2b:b6:91:83:c6:d0:78:5c:fa: 33:75:79:14:52:b4:8d:f9:2c:6a:23:b7:c2:b6:62:a7:03:d2: 99:46:fb:96:7b:be:3f:1d:b6:29:1a:0a:f1:a1:47:62:4a:af: 3f:7a:3e:bb:f2:88:4d:18:2c:88:c5:6e:e8:37:14:9b:3b:e5: 3a:32:62:c0:78:45:a6:c2:bc:32:44:e0:cd:c5:61:e5:da:29: a2:f6:74:7b:f0:2c:25:91:eb:20:33:d4:68:12:18:47:3d:64: 8b:bd:69:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODlFQTYxMTAvBgNVBAUTKDY4RjNDRUIzMDVDN0JGRjdERUZBQTY4QzA3RUI0MUMw QjhFMzcxNkMwHhcNMjUwNjI4MjEwMDE4WhcNMjUwNzA1MjEwMDE4WjAYMRYwFAYD VQQDEw02ODYwNTdlMi04MThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxgF8PV9LCgsWYw9eInhSE1NSDpwju9DAJuaAKI2pZMY+8sR9ZG+zcCmY7RwB 1Qb8kZf/ArpPmw7WTOAQfJ6ot/zAoZ1ja8skhLSTvwAI0VHiXffMpj5OY6yaYubC 0t9060Zi845kcj4MA3FvwGexwAx1ZJcyglWUoJ/gg26cdk6+S0aQEfd9gvvRT25k TsYkSfGBl1cRzmUDzBgCf4L8S2BjK644jn1Aws6JiffxC/xgPqgNWFwamvqfq618 fRLuDdG2q2XCe4OCOuCFMlHie57mP48BgTTi4ApwwQkFRaYUu0WcKqMuo6F0IxIa HyXTnA3vB88knb5PaJAaFb0CIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB92LDG1 EcNlmAluzzzcTzaozoHjMB8GA1UdIwQYMBaAFGjzzrMFx7/33vqmjAfrQcC443Fs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUVBNi9DRDkzRjM2QzBF N0ExMUVCOTFEODRCM0ZDNEY5QUUwMi9hUFBPc3dYSHZfZmUtcWFNQi10QndMampj V3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FQUE9zd1hIdl9mZS1xYU1CLXRCd0xqamNXdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OUVBNi9DRDkzRjM2QzBFN0ExMUVCOTFEODRCM0ZDNEY5QUUwMi9hUFBPc3dYSHZf ZmUtcWFNQi10QndMampjV3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBQJyyZfuL9QbhdRtOKKWAtwyziiDF1WX8cRKWNc0iYFXVUl9GL5PX mSuXUklpgrgt82GFH6zvrNOnopMSg3blcBUJsXiTtZdZxsS6N0Yk/l14ZrshOVxa ah606pYHvE/huhmFuxrdC4PHB4pqbnEwIAbNhaLAYWWqjtoASqaXojMYTEkhqNIA mKjRAjKDO069UWnH3UqcKe4rtpGDxtB4XPozdXkUUrSN+SxqI7fCtmKnA9KZRvuW e74/HbYpGgrxoUdiSq8/ej678ohNGCyIxW7oNxSbO+U6MmLAeEWmwrwyRODNxWHl 2imi9nR78CwlkesgM9RoEhhHPWSLvWmy -----END CERTIFICATE-----Generated at Sun Jun 29 12:30:07 2025 by rpki-client