$ rpki-client -vvf rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/aSE1YIaDdV6U2OylfYsLNY7OFxg.mft File: aSE1YIaDdV6U2OylfYsLNY7OFxg.mft (raw, json) Hash identifier: ZLSo74pF73I1UP4ENnI6XTuScWc92GNW2docyU3/qi8= Subject key identifier: EC:D5:F3:9D:D3:0E:F8:7C:D0:D3:93:E4:97:D0:77:F9:E5:E2:E0:5C Authority key identifier: 69:21:35:60:86:83:75:5E:94:D8:EC:A5:7D:8B:0B:35:8E:CE:17:18 Certificate issuer: /CN=A9198996/serialNumber=692135608683755E94D8ECA57D8B0B358ECE1718 Certificate serial: 0367 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aSE1YIaDdV6U2OylfYsLNY7OFxg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/aSE1YIaDdV6U2OylfYsLNY7OFxg.mft Manifest number: 0344 Signing time: Tue 01 Jul 2025 01:44:58 +0000 Manifest this update: Tue 01 Jul 2025 01:44:57 +0000 Manifest next update: Tue 08 Jul 2025 01:44:57 +0000 Files and hashes: 1: aSE1YIaDdV6U2OylfYsLNY7OFxg.crl (hash: 0ahx7s6sfGtJ+QJQSJP0Y+/3U/u78UEY+omcvYZh6e4=) 2: EFEEF8165BB211EE88BB1945C4F9AE02.roa (hash: pBp+3YEZO1rLrx0bvICmu2Gq4WoxGLfmXIpKccpgGw8=) 3: 593105685BB711EE8E69584CC4F9AE02.roa (hash: uvitL8GneMzjmVuJsx1eXtiAdiTmVIZbzsGZDaPZNkE=) 4: D0D44F9A7A7311EF9B70B061C4F9AE02.roa (hash: rOMU6+JJyASa3UMEbMc1nVoiFLnAmgt++mEA6n5GZvo=) 5: 3E6E7A0C5FFB11EDBDF5A627C4F9AE02.roa (hash: U81ppJdJPa/NwEizA2XDkKKg4D0+UWmO8vP3Sd1xBj4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/aSE1YIaDdV6U2OylfYsLNY7OFxg.crl rsync://rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/aSE1YIaDdV6U2OylfYsLNY7OFxg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aSE1YIaDdV6U2OylfYsLNY7OFxg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 01:44:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 871 (0x367) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198996, serialNumber=692135608683755E94D8ECA57D8B0B358ECE1718 Validity Not Before: Jul 1 01:44:57 2025 GMT Not After : Jul 8 01:44:57 2025 GMT Subject: CN=68633d9a-34ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:75:9e:8a:29:d8:b0:82:4c:8d:62:bb:d6:94: c7:c2:d2:b9:23:b5:22:3e:9a:db:15:ca:f0:a7:5b: a2:6f:cf:d3:a5:d9:4d:f8:be:09:5e:1d:03:4f:44: 04:20:b8:68:4d:f4:d3:46:6f:78:4f:d9:13:f4:d0: 49:7a:85:d5:d4:91:9c:b0:9a:39:71:d5:a6:dd:92: ec:07:e9:9c:0a:a8:1e:03:4b:84:3d:8a:92:b5:dd: 67:87:5d:7b:fe:ba:fa:e8:35:f7:bf:0a:aa:e4:f6: 5a:6b:b2:d0:e5:c2:e2:fb:45:58:fd:46:53:a4:0e: ab:c2:90:ba:a8:27:48:69:e5:08:b8:6d:e6:c6:f6: a9:50:15:6b:75:ab:51:b0:53:27:68:68:17:34:2b: 73:bb:c6:08:88:3a:9b:fa:a9:3e:8f:ce:b2:91:a4: 82:2c:14:1a:31:07:bd:93:13:b5:cd:69:3f:76:1f: bc:b9:38:a4:9f:ef:0c:60:db:92:ff:6b:95:cc:d5: 72:19:70:20:e8:06:9f:8f:0d:64:3c:a3:b3:7c:07: d0:de:6f:1b:50:d0:9d:3c:4d:93:75:c7:92:de:6e: 02:67:bd:ca:42:e7:70:3e:77:2b:21:dd:97:cb:72: 56:4d:f4:8f:b3:a2:8a:ab:7e:5c:88:0e:47:70:c8: f1:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:D5:F3:9D:D3:0E:F8:7C:D0:D3:93:E4:97:D0:77:F9:E5:E2:E0:5C X509v3 Authority Key Identifier: keyid:69:21:35:60:86:83:75:5E:94:D8:EC:A5:7D:8B:0B:35:8E:CE:17:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/aSE1YIaDdV6U2OylfYsLNY7OFxg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aSE1YIaDdV6U2OylfYsLNY7OFxg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/aSE1YIaDdV6U2OylfYsLNY7OFxg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:c4:2e:ee:8a:02:25:2b:20:ee:76:1e:e7:f4:6f:04:88:b7: 71:fc:fd:28:83:05:00:c6:32:05:4c:69:17:71:de:8d:98:d4: 1e:66:0f:5e:59:27:d4:a6:05:a9:40:b0:50:0f:02:5c:a6:ac: 84:5a:65:a8:55:d5:bf:d3:91:a5:b1:f3:eb:f4:37:e0:51:f7: 85:20:e6:98:84:4a:cf:58:c9:64:ef:5f:e7:db:e4:fe:46:9b: f1:14:cc:63:23:1a:b5:48:ed:2d:f8:49:8e:2d:c1:e7:5f:41: 0f:c8:76:d9:78:f5:7d:b5:a7:83:99:ff:4b:31:51:c3:25:9e: 55:01:19:d4:04:81:4b:82:41:de:36:5c:c0:36:fb:7c:8a:36: dc:15:13:35:f6:50:1a:ec:6f:1d:25:06:d9:d1:fc:fe:84:08: f3:27:e5:d8:87:d4:84:87:ed:e1:e7:f3:12:7f:58:db:96:6f: 13:4a:2a:a0:53:c4:cf:d3:d9:5e:34:60:d2:23:97:da:fb:96: da:d2:ad:5e:bc:6c:5d:e0:e0:20:fe:c6:06:b7:d0:f5:65:8f: a1:f4:58:d3:01:4e:9e:af:11:3c:5b:6e:f5:a2:b8:46:cd:c4: 1b:1f:05:d2:23:1c:b8:14:ae:d9:91:e9:6b:5d:c6:02:87:d8: f5:30:8a:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTg5OTYxMTAvBgNVBAUTKDY5MjEzNTYwODY4Mzc1NUU5NEQ4RUNBNTdEOEIwQjM1 OEVDRTE3MTgwHhcNMjUwNzAxMDE0NDU3WhcNMjUwNzA4MDE0NDU3WjAYMRYwFAYD VQQDEw02ODYzM2Q5YS0zNGVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsXWeiinYsIJMjWK71pTHwtK5I7UiPprbFcrwp1uib8/TpdlN+L4JXh0DT0QE ILhoTfTTRm94T9kT9NBJeoXV1JGcsJo5cdWm3ZLsB+mcCqgeA0uEPYqStd1nh117 /rr66DX3vwqq5PZaa7LQ5cLi+0VY/UZTpA6rwpC6qCdIaeUIuG3mxvapUBVrdatR sFMnaGgXNCtzu8YIiDqb+qk+j86ykaSCLBQaMQe9kxO1zWk/dh+8uTikn+8MYNuS /2uVzNVyGXAg6Aafjw1kPKOzfAfQ3m8bUNCdPE2TdceS3m4CZ73KQudwPncrId2X y3JWTfSPs6KKq35ciA5HcMjxvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOzV853T Dvh80NOT5JfQd/nl4uBcMB8GA1UdIwQYMBaAFGkhNWCGg3VelNjspX2LCzWOzhcY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODk5Ni82NjAzMEY1RUQw NjAxMUVDQkE0MEZDODNDNEY5QUUwMi9hU0UxWUlhRGRWNlUyT3lsZllzTE5ZN09G eGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FTRTFZSWFEZFY2VTJPeWxmWXNMTlk3T0Z4Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODk5Ni82NjAzMEY1RUQwNjAxMUVDQkE0MEZDODNDNEY5QUUwMi9hU0UxWUlhRGRW NlUyT3lsZllzTE5ZN09GeGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6xC7uigIlKyDudh7n9G8EiLdx/P0ogwUAxjIFTGkXcd6NmNQeZg9e WSfUpgWpQLBQDwJcpqyEWmWoVdW/05GlsfPr9DfgUfeFIOaYhErPWMlk71/n2+T+ RpvxFMxjIxq1SO0t+EmOLcHnX0EPyHbZePV9taeDmf9LMVHDJZ5VARnUBIFLgkHe NlzANvt8ijbcFRM19lAa7G8dJQbZ0fz+hAjzJ+XYh9SEh+3h5/MSf1jblm8TSiqg U8TP09leNGDSI5fa+5ba0q1evGxd4OAg/sYGt9D1ZY+h9FjTAU6erxE8W271orhG zcQbHwXSIxy4FK7ZkelrXcYCh9j1MIr2 -----END CERTIFICATE-----Generated at Thu Jul 3 02:47:08 2025 by rpki-client