$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.mft File: AXCw4NBuMUc8rBZOSwttIb300jc.mft (raw, json) Hash identifier: wAyUOU+BHyfpFn7mF2DaVxAJKhI4dgmmRkYX+4W2CwU= Subject key identifier: ED:E6:1C:AC:31:1B:69:31:10:77:DC:D9:7F:5C:5C:8D:18:6E:68:99 Authority key identifier: 01:70:B0:E0:D0:6E:31:47:3C:AC:16:4E:4B:0B:6D:21:BD:F4:D2:37 Certificate issuer: /CN=A91AE9F7/serialNumber=0170B0E0D06E31473CAC164E4B0B6D21BDF4D237 Certificate serial: 0FEC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXCw4NBuMUc8rBZOSwttIb300jc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.mft Manifest number: 0FE0 Signing time: Mon 30 Jun 2025 17:42:15 +0000 Manifest this update: Mon 30 Jun 2025 17:42:14 +0000 Manifest next update: Mon 07 Jul 2025 17:42:14 +0000 Files and hashes: 1: AXCw4NBuMUc8rBZOSwttIb300jc.crl (hash: pS0unS2Rr7X6QrnEmVaLwBTtZEuoplNLcCqIvoTmzNs=) 2: 1585570A544C11E9BDFF2B2DC4F9AE02.roa (hash: jZa47LQUiVvIxoLDSyE/2t1CJaYFtRO42+/jeT3MONo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.crl rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXCw4NBuMUc8rBZOSwttIb300jc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 17:42:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4076 (0xfec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE9F7, serialNumber=0170B0E0D06E31473CAC164E4B0B6D21BDF4D237 Validity Not Before: Jun 30 17:42:14 2025 GMT Not After : Jul 7 17:42:14 2025 GMT Subject: CN=6862cc77-77ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d8:42:6c:7a:fd:d3:16:98:ce:62:0c:70:fa: ba:a0:f0:3b:c5:f8:fb:10:11:3a:a7:41:de:c3:7c: 3b:e1:1c:9a:2e:ff:09:2e:40:16:a4:2e:0f:ab:bc: 03:89:2c:bb:2e:97:94:f9:d7:35:8e:f1:76:55:ff: fc:d9:8c:ae:32:ca:92:b0:ea:83:1c:5e:c8:a0:c7: b4:97:c6:b8:6e:61:99:72:5e:cf:1e:19:39:ac:bf: cb:ae:d7:cf:52:d1:aa:4e:8e:80:b4:2a:f6:9f:2b: 7e:a5:a1:a8:79:77:8c:aa:c8:37:b6:b5:c2:3e:b6: ba:94:b6:f8:4e:d6:7a:f3:41:ed:89:88:35:57:6d: a9:63:b6:c0:d9:b0:d4:4e:ba:24:f6:cc:1b:23:6a: a1:1b:e9:9a:b3:6e:39:f3:0e:c5:16:f1:f6:34:74: 4c:35:06:04:32:7f:ab:2c:6e:f7:bf:ec:e5:9d:6c: 67:ad:14:8e:74:f9:0a:dc:39:09:7a:d3:9c:4a:77: 9e:d7:d1:92:aa:15:ee:4e:84:fe:23:a6:1e:cc:cb: 04:33:e6:e5:fd:83:be:4e:2b:c6:fc:8a:39:1e:1a: 81:c1:7e:58:1f:17:03:aa:3e:ea:04:37:83:ab:6f: f6:87:e7:c5:94:29:ba:d3:de:04:04:25:99:0b:e8: 16:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:E6:1C:AC:31:1B:69:31:10:77:DC:D9:7F:5C:5C:8D:18:6E:68:99 X509v3 Authority Key Identifier: keyid:01:70:B0:E0:D0:6E:31:47:3C:AC:16:4E:4B:0B:6D:21:BD:F4:D2:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXCw4NBuMUc8rBZOSwttIb300jc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:03:ff:f3:57:10:85:2d:bc:04:f1:70:85:5a:5b:54:53:ff: 95:38:69:8d:30:a5:28:1d:32:d2:c0:98:e1:f9:ea:2d:69:4e: b0:40:49:36:52:50:7b:0b:73:ff:83:fb:6e:25:19:5a:42:2a: 3f:51:c0:b2:80:bf:2f:4d:9f:37:96:71:5d:62:3e:74:db:8c: a6:1b:0d:26:90:45:6e:f8:3f:4a:9b:9e:12:0b:cc:0a:8c:1b: ed:f4:fc:f0:9c:38:a9:00:0d:20:de:09:6f:1f:2d:b9:46:bc: 42:e5:f0:0b:2c:de:6a:4b:97:56:dc:c4:92:d9:06:e9:47:ce: ea:36:c0:b0:96:81:cf:19:05:3e:e5:b9:f2:df:39:5d:c7:c5: 9c:4f:53:07:b2:27:45:8f:33:35:e8:21:4f:38:27:52:cd:90: c7:e2:bf:a6:f3:c1:7d:1f:87:36:23:77:73:6e:9d:f8:af:d2: 99:19:2f:d6:67:cc:81:d0:8c:1b:8c:ac:64:e3:31:e1:2c:e8: bd:ff:a6:f6:8e:b1:d5:6a:92:f6:37:54:0e:78:82:9f:8e:e4: 15:a4:14:b8:c6:ff:9e:de:2a:11:73:87:b5:b1:c3:af:a6:e0: 5c:ff:46:e5:23:87:d1:af:f3:b8:38:ac:5d:3c:53:bd:5d:9b: 04:e8:b4:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD+wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU5RjcxMTAvBgNVBAUTKDAxNzBCMEUwRDA2RTMxNDczQ0FDMTY0RTRCMEI2RDIx QkRGNEQyMzcwHhcNMjUwNjMwMTc0MjE0WhcNMjUwNzA3MTc0MjE0WjAYMRYwFAYD VQQDEw02ODYyY2M3Ny03N2ZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzNhCbHr90xaYzmIMcPq6oPA7xfj7EBE6p0Hew3w74RyaLv8JLkAWpC4Pq7wD iSy7LpeU+dc1jvF2Vf/82YyuMsqSsOqDHF7IoMe0l8a4bmGZcl7PHhk5rL/LrtfP UtGqTo6AtCr2nyt+paGoeXeMqsg3trXCPra6lLb4TtZ680HtiYg1V22pY7bA2bDU Trok9swbI2qhG+mas2458w7FFvH2NHRMNQYEMn+rLG73v+zlnWxnrRSOdPkK3DkJ etOcSnee19GSqhXuToT+I6YezMsEM+bl/YO+TivG/Io5HhqBwX5YHxcDqj7qBDeD q2/2h+fFlCm6094EBCWZC+gW6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO3mHKwx G2kxEHfc2X9cXI0YbmiZMB8GA1UdIwQYMBaAFAFwsODQbjFHPKwWTksLbSG99NI3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTlGNy8zNzlFQzc0MjU0 NEExMUU5QTM1MEMxMjdDNEY5QUUwMi9BWEN3NE5CdU1VYzhyQlpPU3d0dEliMzAw amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FYQ3c0TkJ1TVVjOHJCWk9Td3R0SWIzMDBqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTlGNy8zNzlFQzc0MjU0NEExMUU5QTM1MEMxMjdDNEY5QUUwMi9BWEN3NE5CdU1V YzhyQlpPU3d0dEliMzAwamMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFA//zVxCFLbwE8XCFWltUU/+VOGmNMKUoHTLSwJjh+eotaU6wQEk2 UlB7C3P/g/tuJRlaQio/UcCygL8vTZ83lnFdYj5024ymGw0mkEVu+D9Km54SC8wK jBvt9PzwnDipAA0g3glvHy25RrxC5fALLN5qS5dW3MSS2QbpR87qNsCwloHPGQU+ 5bny3zldx8WcT1MHsidFjzM16CFPOCdSzZDH4r+m88F9H4c2I3dzbp34r9KZGS/W Z8yB0IwbjKxk4zHhLOi9/6b2jrHVapL2N1QOeIKfjuQVpBS4xv+e3ioRc4e1scOv puBc/0blI4fRr/O4OKxdPFO9XZsE6LRZ -----END CERTIFICATE-----Generated at Tue Jul 1 11:04:54 2025 by rpki-client