$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.mft File: apjAwIy9NBmpCCuGDSm_qXL98qc.mft (raw, json) Hash identifier: FCwBtIoWZpy4xWj+frrXdh+8vS+FAF7ZfJnvJJcWIBs= Subject key identifier: 14:D8:A6:4E:8B:EA:21:7F:03:9C:17:D6:12:C0:CB:42:E8:E6:B6:A2 Authority key identifier: 6A:98:C0:C0:8C:BD:34:19:A9:08:2B:86:0D:29:BF:A9:72:FD:F2:A7 Certificate issuer: /CN=A91A2BD6/serialNumber=6A98C0C08CBD3419A9082B860D29BFA972FDF2A7 Certificate serial: 043D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/apjAwIy9NBmpCCuGDSm_qXL98qc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.mft Manifest number: 0439 Signing time: Sat 28 Jun 2025 23:53:35 +0000 Manifest this update: Sat 28 Jun 2025 23:53:34 +0000 Manifest next update: Sat 05 Jul 2025 23:53:34 +0000 Files and hashes: 1: apjAwIy9NBmpCCuGDSm_qXL98qc.crl (hash: rNGnhig0pVA9a0ymiHwCi9UX6gsXwWFsrAnMGP7Urig=) 2: 61B3CBDC631911ECAE6AA33DC4F9AE02.roa (hash: /+PqdcGfeQGq1JSsbPZ7utBGw8SAzSRzzxhLFAim1J0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.crl rsync://rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/apjAwIy9NBmpCCuGDSm_qXL98qc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 23:53:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1085 (0x43d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2BD6, serialNumber=6A98C0C08CBD3419A9082B860D29BFA972FDF2A7 Validity Not Before: Jun 28 23:53:34 2025 GMT Not After : Jul 5 23:53:34 2025 GMT Subject: CN=6860807f-2f0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:96:ea:81:16:b7:a4:6a:0b:fc:b4:23:22:17: cc:c8:56:0c:1a:44:c8:50:d7:b9:9b:16:41:8d:44: 6e:b1:f6:55:64:a5:43:1f:14:a5:6a:b9:cc:5c:af: 22:0c:27:fe:0a:20:81:9d:c7:9e:90:25:da:6e:91: 80:96:a6:24:51:0b:5c:45:80:b9:dd:45:44:fa:ca: 29:f3:de:5e:6a:d5:54:b9:2a:18:b3:e9:c3:ce:6c: 70:5b:1f:40:75:be:ec:fd:2b:77:12:2b:0f:3e:e7: ac:f3:ad:e5:0a:f7:0d:90:72:70:1f:e8:b4:2d:d9: 48:43:32:3c:22:1f:b2:19:fd:02:db:52:31:0d:9d: fd:9f:08:74:36:c2:d6:58:42:ab:86:db:ad:14:26: be:ed:a4:a0:50:84:32:5a:47:06:1b:e3:eb:4c:de: ac:56:f0:39:24:79:b7:d5:cd:39:7d:1c:13:ec:ab: 78:d1:dc:e9:5a:f1:b7:27:45:1b:2c:95:47:aa:43: 99:e2:6b:e2:45:0c:22:6a:62:56:ae:0f:7f:75:72: 1c:a1:ae:71:01:96:5e:84:fc:08:be:8d:de:1e:f8: 5f:e7:91:23:0f:67:c1:7a:28:8b:b9:b5:45:5f:c6: fc:54:74:3b:6d:c3:11:97:f0:70:be:be:f1:36:bb: be:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:D8:A6:4E:8B:EA:21:7F:03:9C:17:D6:12:C0:CB:42:E8:E6:B6:A2 X509v3 Authority Key Identifier: keyid:6A:98:C0:C0:8C:BD:34:19:A9:08:2B:86:0D:29:BF:A9:72:FD:F2:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/apjAwIy9NBmpCCuGDSm_qXL98qc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:2e:63:3b:c4:00:b4:ad:6c:17:8c:1d:2a:10:4b:b3:ca:34: 59:d0:0b:d9:5f:1a:ec:2d:4d:d5:ac:c4:84:d4:2d:8e:3c:d7: 6f:df:66:9b:34:47:7b:f6:2a:7b:5f:80:20:f4:44:b4:c8:30: dc:55:2d:55:ab:3c:09:f4:75:bd:cd:69:df:f0:bc:e4:00:50: 84:bb:37:e5:d0:d1:51:b1:03:c2:8b:7e:b8:73:b9:4c:ba:b2: d2:8c:f7:a6:27:4c:15:92:d6:bb:c6:91:cf:37:d1:36:78:10: 9e:c2:1b:ac:79:f7:01:a9:99:07:bf:0b:79:9d:d0:26:ff:a5: 52:41:29:2f:c5:0b:af:d1:a0:19:aa:7c:35:13:be:48:d6:3b: ab:4a:cd:7f:90:c1:bd:c2:76:0d:5b:63:27:aa:02:a8:18:d0: 3c:6f:81:4f:1b:80:cd:3b:9c:09:44:47:17:6d:04:4b:c0:48: 55:72:03:d4:0d:04:ae:b7:b1:68:4d:c4:74:fd:1e:c2:34:1b: e9:ba:c1:88:2f:cb:76:5d:25:c7:cf:b0:3d:64:09:0c:70:b7: ec:6e:e5:d1:9b:89:87:cd:44:37:0e:73:8f:65:bc:d8:55:40: 65:d0:ce:4b:10:71:1b:b0:c4:fa:57:a9:2a:03:a8:75:6b:cc: 34:07:2c:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBD0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTJCRDYxMTAvBgNVBAUTKDZBOThDMEMwOENCRDM0MTlBOTA4MkI4NjBEMjlCRkE5 NzJGREYyQTcwHhcNMjUwNjI4MjM1MzM0WhcNMjUwNzA1MjM1MzM0WjAYMRYwFAYD VQQDEw02ODYwODA3Zi0yZjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8pbqgRa3pGoL/LQjIhfMyFYMGkTIUNe5mxZBjURusfZVZKVDHxSlarnMXK8i DCf+CiCBnceekCXabpGAlqYkUQtcRYC53UVE+sop895eatVUuSoYs+nDzmxwWx9A db7s/St3EisPPues863lCvcNkHJwH+i0LdlIQzI8Ih+yGf0C21IxDZ39nwh0NsLW WEKrhtutFCa+7aSgUIQyWkcGG+PrTN6sVvA5JHm31c05fRwT7Kt40dzpWvG3J0Ub LJVHqkOZ4mviRQwiamJWrg9/dXIcoa5xAZZehPwIvo3eHvhf55EjD2fBeiiLubVF X8b8VHQ7bcMRl/Bwvr7xNru++QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBTYpk6L 6iF/A5wX1hLAy0Lo5raiMB8GA1UdIwQYMBaAFGqYwMCMvTQZqQgrhg0pv6ly/fKn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMkJENi85QzU4NURCMDYz MTUxMUVDQkE1MzY5NjlDNEY5QUUwMi9hcGpBd0l5OU5CbXBDQ3VHRFNtX3FYTDk4 cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FwakF3SXk5TkJtcENDdUdEU21fcVhMOThxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MkJENi85QzU4NURCMDYzMTUxMUVDQkE1MzY5NjlDNEY5QUUwMi9hcGpBd0l5OU5C bXBDQ3VHRFNtX3FYTDk4cWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBELmM7xAC0rWwXjB0qEEuzyjRZ0AvZXxrsLU3VrMSE1C2OPNdv32ab NEd79ip7X4Ag9ES0yDDcVS1VqzwJ9HW9zWnf8LzkAFCEuzfl0NFRsQPCi364c7lM urLSjPemJ0wVkta7xpHPN9E2eBCewhusefcBqZkHvwt5ndAm/6VSQSkvxQuv0aAZ qnw1E75I1jurSs1/kMG9wnYNW2MnqgKoGNA8b4FPG4DNO5wJREcXbQRLwEhVcgPU DQSut7FoTcR0/R7CNBvpusGIL8t2XSXHz7A9ZAkMcLfsbuXRm4mHzUQ3DnOPZbzY VUBl0M5LEHEbsMT6V6kqA6h1a8w0Bywb -----END CERTIFICATE-----Generated at Sun Jun 29 19:24:58 2025 by rpki-client