$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.mft File: aj72cYLbsPbM88pBN4wBGYBq6b0.mft (raw, json) Hash identifier: xOEcd6b5ycjh8+dbdFntX6LU/CvG+8h5CUKqxQvwC7U= Subject key identifier: 5D:E3:B9:35:D7:F3:13:3E:5A:D3:32:47:55:75:44:E8:04:9B:E7:CC Authority key identifier: 6A:3E:F6:71:82:DB:B0:F6:CC:F3:CA:41:37:8C:01:19:80:6A:E9:BD Certificate issuer: /CN=A91A0A2E/serialNumber=6A3EF67182DBB0F6CCF3CA41378C0119806AE9BD Certificate serial: 4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aj72cYLbsPbM88pBN4wBGYBq6b0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.mft Manifest number: 49 Signing time: Tue 01 Jul 2025 08:07:22 +0000 Manifest this update: Tue 01 Jul 2025 08:07:21 +0000 Manifest next update: Tue 08 Jul 2025 08:07:21 +0000 Files and hashes: 1: aj72cYLbsPbM88pBN4wBGYBq6b0.crl (hash: 5hEM5YAguG2NTDrSpmDa4Bf1C0A+oq4l+SBDdmwq3Oc=) 2: FDE6938CE90C11EFB9D98326C4F9AE02.roa (hash: EQY90pkMKZS20T7XhciTL191HbTMnbpWtQHaja8QyGI=) 3: F449A3FCE9C811EF9972A934C4F9AE02.roa (hash: 7MwfNHRXASMEn22ZfT4zj9oG/ZQKY9GDP1pjifjdSXI=) 4: FD63D5BEE90C11EFB9D98326C4F9AE02.roa (hash: XHfUu+5yh0x5y1fbUjOYEtUpMyJC2J2Z1oZf8nnZcak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.crl rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aj72cYLbsPbM88pBN4wBGYBq6b0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:07:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0A2E, serialNumber=6A3EF67182DBB0F6CCF3CA41378C0119806AE9BD Validity Not Before: Jul 1 08:07:21 2025 GMT Not After : Jul 8 08:07:21 2025 GMT Subject: CN=6863973a-9cd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d2:8f:1e:b3:19:24:03:6a:73:58:f8:30:13: 5a:95:6b:95:12:20:32:f0:f5:fa:b5:69:de:53:33: d8:07:62:a4:62:6a:c0:9c:5f:c2:72:75:8a:db:e4: 09:10:b2:01:c4:47:c6:c7:94:df:db:7d:4c:87:40: 8e:bf:32:4d:45:f6:2e:44:b0:f0:03:ae:f0:2f:a7: ba:0a:be:19:f4:fa:75:27:d5:fb:a5:83:57:41:f7: ba:9e:35:df:e4:8c:1f:c7:d1:04:be:d1:1b:e4:51: 33:86:3d:42:42:8e:8b:45:0a:e9:b6:3a:0f:99:94: 44:64:1a:a5:fa:e4:68:54:2c:86:b7:78:1e:b3:45: 9f:1a:c0:81:d4:fc:85:fd:c0:d8:63:bd:98:08:a6: 7e:99:a3:f4:3b:83:e1:c8:a2:c8:bc:9e:b0:83:35: 6c:2b:5c:3e:f9:06:17:fb:fe:9d:48:d3:45:3f:68: 18:51:2a:97:c2:17:ef:60:8f:b8:b5:58:63:71:0c: 7e:11:3b:be:e4:be:e6:04:d6:c0:e9:b7:b7:a3:a1: 8c:3a:a6:89:5d:7d:64:04:e7:e5:0c:42:60:c4:3f: 00:98:96:57:ff:f6:6d:3f:15:dc:15:35:71:c4:06: 8f:4e:8e:52:4d:37:20:53:f9:f0:d2:ef:e7:d9:ce: 7a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:E3:B9:35:D7:F3:13:3E:5A:D3:32:47:55:75:44:E8:04:9B:E7:CC X509v3 Authority Key Identifier: keyid:6A:3E:F6:71:82:DB:B0:F6:CC:F3:CA:41:37:8C:01:19:80:6A:E9:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aj72cYLbsPbM88pBN4wBGYBq6b0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:39:d7:56:46:11:dc:51:5e:f7:4f:95:12:4b:f9:30:8f:60: 1f:8e:c1:e2:95:51:c0:03:7e:24:85:7e:86:da:fb:cd:56:8d: ae:56:ef:f2:8f:30:b0:88:1d:ed:a4:fa:b8:a8:3e:2d:76:e8: 49:40:ea:c0:42:76:e8:b8:46:9b:37:a6:3a:aa:6f:ce:d3:27: 66:19:42:da:b6:0c:ac:ab:6f:ab:c3:ec:a9:ee:f7:01:b0:ce: f7:7b:b3:28:09:26:56:40:14:19:b5:15:78:22:86:b2:3a:af: b1:f4:16:3d:db:4a:34:ac:dc:4d:16:c9:cb:15:d8:78:61:63: 8c:bc:8b:31:ed:a6:a8:26:55:9d:2a:e3:fd:7c:eb:9f:8e:6f: a8:a0:9d:1d:82:52:32:6e:14:76:5d:64:19:58:b7:a3:9b:6d: f7:6a:81:47:39:40:94:96:73:d1:43:8d:a5:06:35:00:a4:73: f1:0f:db:ef:41:3f:00:13:c8:24:e5:f7:28:52:3c:83:5f:97: 94:af:29:ec:ee:e3:17:de:1e:50:f5:49:a3:27:cd:b0:8e:c7: 9f:59:c5:7b:25:34:8b:05:5d:90:8a:26:7c:35:5b:0a:02:6c: 46:df:01:c9:cb:16:83:a9:b9:84:20:8e:a2:61:9c:d1:1c:e4: cf:fa:bd:5c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MEEyRTExMC8GA1UEBRMoNkEzRUY2NzE4MkRCQjBGNkNDRjNDQTQxMzc4QzAxMTk4 MDZBRTlCRDAeFw0yNTA3MDEwODA3MjFaFw0yNTA3MDgwODA3MjFaMBgxFjAUBgNV BAMTDTY4NjM5NzNhLTljZDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDO0o8esxkkA2pzWPgwE1qVa5USIDLw9fq1ad5TM9gHYqRiasCcX8JydYrb5AkQ sgHER8bHlN/bfUyHQI6/Mk1F9i5EsPADrvAvp7oKvhn0+nUn1fulg1dB97qeNd/k jB/H0QS+0RvkUTOGPUJCjotFCum2Og+ZlERkGqX65GhULIa3eB6zRZ8awIHU/IX9 wNhjvZgIpn6Zo/Q7g+HIosi8nrCDNWwrXD75Bhf7/p1I00U/aBhRKpfCF+9gj7i1 WGNxDH4RO77kvuYE1sDpt7ejoYw6poldfWQE5+UMQmDEPwCYllf/9m0/FdwVNXHE Bo9OjlJNNyBT+fDS7+fZznoZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUXeO5Ndfz Ez5a0zJHVXVE6ASb58wwHwYDVR0jBBgwFoAUaj72cYLbsPbM88pBN4wBGYBq6b0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEwQTJFL0M4MzZDN0IyRTkw QjExRUY4MjE4NTgyNEM0RjlBRTAyL2FqNzJjWUxic1BiTTg4cEJONHdCR1lCcTZi MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYWo3MmNZTGJzUGJNODhwQk40d0JHWUJxNmIwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEw QTJFL0M4MzZDN0IyRTkwQjExRUY4MjE4NTgyNEM0RjlBRTAyL2FqNzJjWUxic1Bi TTg4cEJONHdCR1lCcTZiMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGM511ZGEdxRXvdPlRJL+TCPYB+OweKVUcADfiSFfoba+81Wja5W7/KP MLCIHe2k+rioPi126ElA6sBCdui4Rps3pjqqb87TJ2YZQtq2DKyrb6vD7Knu9wGw zvd7sygJJlZAFBm1FXgihrI6r7H0Fj3bSjSs3E0WycsV2HhhY4y8izHtpqgmVZ0q 4/1865+Ob6ignR2CUjJuFHZdZBlYt6ObbfdqgUc5QJSWc9FDjaUGNQCkc/EP2+9B PwATyCTl9yhSPINfl5SvKezu4xfeHlD1SaMnzbCOx59ZxXslNIsFXZCKJnw1WwoC bEbfAcnLFoOpuYQgjqJhnNEc5M/6vVw= -----END CERTIFICATE-----Generated at Wed Jul 2 11:35:24 2025 by rpki-client