$ rpki-client -vvf rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.mft File: aWr0_gNmE9ZRteKaCdT-cbVVpEk.mft (raw, json) Hash identifier: XLmQsCyCnByop4ozfDGfviOHiaZ68jeeaPO/cZYQgQo= Subject key identifier: C7:4E:CA:B1:8F:39:B9:64:C6:6E:B5:D2:C6:49:3A:BD:7C:05:E1:78 Authority key identifier: 69:6A:F4:FE:03:66:13:D6:51:B5:E2:9A:09:D4:FE:71:B5:55:A4:49 Certificate issuer: /CN=A91A80F9/serialNumber=696AF4FE036613D651B5E29A09D4FE71B555A449 Certificate serial: 0CB4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWr0_gNmE9ZRteKaCdT-cbVVpEk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.mft Manifest number: 0CAC Signing time: Wed 02 Jul 2025 18:22:58 +0000 Manifest this update: Wed 02 Jul 2025 18:22:58 +0000 Manifest next update: Wed 09 Jul 2025 18:22:58 +0000 Files and hashes: 1: aWr0_gNmE9ZRteKaCdT-cbVVpEk.crl (hash: h4RGl62lEad+MBCgjCWnKrnMTtzN1BSMprGx38Kdvcc=) 2: 3EF3C6EEF8B511EAAD434755C4F9AE02.roa (hash: 2oxrZykX6FImkgj0+sEn3YTkG/5Ks+ROCEDtHP8d+xs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.crl rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWr0_gNmE9ZRteKaCdT-cbVVpEk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:22:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3252 (0xcb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A80F9, serialNumber=696AF4FE036613D651B5E29A09D4FE71B555A449 Validity Not Before: Jul 2 18:22:58 2025 GMT Not After : Jul 9 18:22:58 2025 GMT Subject: CN=68657902-58a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:44:cf:10:5e:27:1a:22:33:aa:02:cf:ee:d7: 4b:2d:9e:fb:ff:65:09:c0:17:38:25:ed:ef:d1:f1: 3e:dd:46:ec:4e:b0:ff:0b:c2:dc:b6:11:dc:e2:e2: 40:47:b8:38:dd:b6:68:d2:a2:33:9d:48:05:7b:82: e3:20:53:26:90:3a:11:9d:94:97:e1:25:77:70:78: 40:9b:06:5c:62:cc:39:18:2d:b7:8d:85:a9:6a:41: cc:3d:5c:30:30:09:af:8e:c3:7d:f4:9b:d4:bb:3e: 9d:19:11:ba:f8:09:34:bc:d6:fd:75:44:de:08:4c: b0:ff:6d:95:dc:97:2f:8a:5e:42:4f:0b:83:e8:af: eb:f9:b5:50:3f:d9:f4:24:c3:24:82:f9:9d:5f:7f: df:79:0a:fd:83:4e:2a:61:40:c2:a3:f6:da:53:8a: 31:01:f5:57:1a:10:4e:bf:ca:c3:fa:28:ed:ec:6a: 96:65:a4:5c:37:c1:7e:f6:60:31:2c:67:f0:9c:7a: e7:b0:6c:d0:90:7a:59:8a:6b:5f:06:30:92:48:92: 15:53:70:d9:7e:39:cb:15:1c:dd:17:83:88:85:16: bb:cd:64:b6:14:44:8c:8c:80:a4:46:cd:02:27:9b: cd:2d:d3:0a:fd:9e:d9:4f:ba:16:34:97:2c:90:98: 09:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:4E:CA:B1:8F:39:B9:64:C6:6E:B5:D2:C6:49:3A:BD:7C:05:E1:78 X509v3 Authority Key Identifier: keyid:69:6A:F4:FE:03:66:13:D6:51:B5:E2:9A:09:D4:FE:71:B5:55:A4:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWr0_gNmE9ZRteKaCdT-cbVVpEk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:67:4e:b1:6a:85:50:66:bd:68:64:b6:dd:b1:9e:6b:4b:27: aa:f5:fc:b1:3e:cf:c4:45:5a:22:f0:06:99:2a:af:5d:cc:15: be:0f:7a:1a:6d:1e:f2:5c:1d:d7:9f:b8:5f:f1:3f:0c:33:ee: 6a:06:29:a0:06:2d:78:77:0a:7c:9c:08:9b:60:d6:c8:05:e6: 4b:ca:ba:c4:a5:30:1e:b3:77:11:c2:0f:7a:c3:2d:d6:8a:54: 54:99:97:2d:b1:47:f0:68:ac:90:fe:e4:27:47:61:00:aa:8f: d6:8b:bb:f6:af:7c:92:df:23:87:5a:63:6b:52:87:1e:37:b9: 39:22:be:4c:ea:0d:04:7a:31:68:34:ad:0d:51:52:96:12:7b: 79:7a:f8:41:a1:ca:ad:49:cf:e4:eb:7e:87:a8:df:cc:78:80: ab:fa:54:92:00:c8:24:8c:6a:c4:51:45:cd:a7:e6:d2:55:d6: 8e:74:3f:39:22:d7:06:03:73:08:18:38:43:08:5c:b5:d7:87: 72:cb:c2:83:23:78:c3:f2:5a:e0:77:2e:9e:b9:53:7e:12:8b: 90:4d:14:b1:a7:f4:3e:da:07:43:31:5d:fd:e9:45:a1:bb:d7: bc:ca:14:eb:16:1c:5b:42:49:b1:18:86:ce:1b:e9:9b:81:bf: ea:1d:1b:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTgwRjkxMTAvBgNVBAUTKDY5NkFGNEZFMDM2NjEzRDY1MUI1RTI5QTA5RDRGRTcx QjU1NUE0NDkwHhcNMjUwNzAyMTgyMjU4WhcNMjUwNzA5MTgyMjU4WjAYMRYwFAYD VQQDEw02ODY1NzkwMi01OGE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0UTPEF4nGiIzqgLP7tdLLZ77/2UJwBc4Je3v0fE+3UbsTrD/C8LcthHc4uJA R7g43bZo0qIznUgFe4LjIFMmkDoRnZSX4SV3cHhAmwZcYsw5GC23jYWpakHMPVww MAmvjsN99JvUuz6dGRG6+Ak0vNb9dUTeCEyw/22V3Jcvil5CTwuD6K/r+bVQP9n0 JMMkgvmdX3/feQr9g04qYUDCo/baU4oxAfVXGhBOv8rD+ijt7GqWZaRcN8F+9mAx LGfwnHrnsGzQkHpZimtfBjCSSJIVU3DZfjnLFRzdF4OIhRa7zWS2FESMjICkRs0C J5vNLdMK/Z7ZT7oWNJcskJgJdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMdOyrGP Oblkxm610sZJOr18BeF4MB8GA1UdIwQYMBaAFGlq9P4DZhPWUbXimgnU/nG1VaRJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODBGOS80OTc3M0FEMEY0 QTQxMUU5OENDNzVFMzdDNEY5QUUwMi9hV3IwX2dObUU5WlJ0ZUthQ2RULWNiVlZw RWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FXcjBfZ05tRTlaUnRlS2FDZFQtY2JWVnBFay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODBGOS80OTc3M0FEMEY0QTQxMUU5OENDNzVFMzdDNEY5QUUwMi9hV3IwX2dObUU5 WlJ0ZUthQ2RULWNiVlZwRWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGZ06xaoVQZr1oZLbdsZ5rSyeq9fyxPs/ERVoi8AaZKq9dzBW+D3oa bR7yXB3Xn7hf8T8MM+5qBimgBi14dwp8nAibYNbIBeZLyrrEpTAes3cRwg96wy3W ilRUmZctsUfwaKyQ/uQnR2EAqo/Wi7v2r3yS3yOHWmNrUoceN7k5Ir5M6g0EejFo NK0NUVKWEnt5evhBocqtSc/k636HqN/MeICr+lSSAMgkjGrEUUXNp+bSVdaOdD85 ItcGA3MIGDhDCFy114dyy8KDI3jD8lrgdy6euVN+EouQTRSxp/Q+2gdDMV396UWh u9e8yhTrFhxbQkmxGIbOG+mbgb/qHRvu -----END CERTIFICATE-----Generated at Thu Jul 3 01:25:43 2025 by rpki-client