$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0C0B/4459448C2C6A11EA9CECBF4AC4F9AE02/AShwXWnFHg4rB4rtuZiR5_GbTR8.mft File: AShwXWnFHg4rB4rtuZiR5_GbTR8.mft (raw, json) Hash identifier: 8YDso8hz4wo/eXgjneHekTWKo/+/EdCoqK3JM8qlkf0= Subject key identifier: 17:4A:B5:5F:50:1C:C6:E5:D5:05:8F:BF:AD:FA:0A:83:3E:0E:0B:FA Authority key identifier: 01:28:70:5D:69:C5:1E:0E:2B:07:8A:ED:B9:98:91:E7:F1:9B:4D:1F Certificate issuer: /CN=A91C0C0B/serialNumber=0128705D69C51E0E2B078AEDB99891E7F19B4D1F Certificate serial: 0B9B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AShwXWnFHg4rB4rtuZiR5_GbTR8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0C0B/4459448C2C6A11EA9CECBF4AC4F9AE02/AShwXWnFHg4rB4rtuZiR5_GbTR8.mft Manifest number: 0B8D Signing time: Wed 02 Jul 2025 19:14:46 +0000 Manifest this update: Wed 02 Jul 2025 19:14:46 +0000 Manifest next update: Wed 09 Jul 2025 19:14:46 +0000 Files and hashes: 1: AShwXWnFHg4rB4rtuZiR5_GbTR8.crl (hash: cMlFKDfLIlbZPG9RTwLlK9iPZCSyME2jHHmFau+mzSI=) 2: E85B23282DF211EAA63F5D60C4F9AE02.roa (hash: mo/NLmT3qTw906fWZIYD+HCMnaLWUZhtdPeHn3oqJ6A=) 3: 71E30CDCC4ED11EAA1C5766AC4F9AE02.roa (hash: vucacXYSTLw3pjicQM0MXD2U1//BsbEO3gpX4wVcXB8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0C0B/4459448C2C6A11EA9CECBF4AC4F9AE02/AShwXWnFHg4rB4rtuZiR5_GbTR8.crl rsync://rpki.apnic.net/member_repository/A91C0C0B/4459448C2C6A11EA9CECBF4AC4F9AE02/AShwXWnFHg4rB4rtuZiR5_GbTR8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AShwXWnFHg4rB4rtuZiR5_GbTR8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:14:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2971 (0xb9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0C0B, serialNumber=0128705D69C51E0E2B078AEDB99891E7F19B4D1F Validity Not Before: Jul 2 19:14:46 2025 GMT Not After : Jul 9 19:14:46 2025 GMT Subject: CN=68658526-df16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4d:6f:d8:52:69:ca:c2:d2:ae:bb:fe:ff:c5: e1:07:43:00:e6:0d:c9:9d:86:02:30:96:ce:f7:3f: db:fe:e2:a6:9a:d5:83:53:31:23:8e:97:0c:cc:cc: 7d:10:18:90:02:92:b8:1f:5b:69:3c:73:cc:7f:ad: fc:74:49:df:e1:63:27:54:3c:58:4f:00:31:86:3d: 85:ee:a0:cf:08:89:f9:93:22:a3:dc:32:a0:fb:9a: 5e:0a:f3:9a:87:3d:89:25:f3:35:5a:ee:d5:e6:b3: 00:4b:f9:82:9c:52:6e:22:6e:15:8b:f0:69:9e:98: d5:69:e8:d2:5d:41:7f:a1:50:6c:e3:f7:b1:28:3e: d6:e3:15:c4:1c:54:16:7c:f4:84:19:d9:76:ab:66: 31:81:cf:74:e5:22:ed:58:c1:95:8e:5d:70:a0:08: f4:1d:2c:b0:c5:8d:a6:3b:6a:85:b3:b1:46:74:de: 23:54:d3:63:3f:33:4e:c5:b1:e7:1c:1e:1b:8c:14: 9f:0c:05:6c:7b:ab:53:2f:3b:62:fb:c7:35:8d:13: 03:c3:fd:84:83:4a:fd:f4:c7:00:81:af:8b:b6:2c: 18:d6:49:d1:0c:bd:09:76:33:4e:2c:3f:aa:ae:c4: 51:e5:66:2b:3d:5e:3c:bd:4e:3f:76:04:f1:6d:50: e6:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:4A:B5:5F:50:1C:C6:E5:D5:05:8F:BF:AD:FA:0A:83:3E:0E:0B:FA X509v3 Authority Key Identifier: keyid:01:28:70:5D:69:C5:1E:0E:2B:07:8A:ED:B9:98:91:E7:F1:9B:4D:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0C0B/4459448C2C6A11EA9CECBF4AC4F9AE02/AShwXWnFHg4rB4rtuZiR5_GbTR8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AShwXWnFHg4rB4rtuZiR5_GbTR8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0C0B/4459448C2C6A11EA9CECBF4AC4F9AE02/AShwXWnFHg4rB4rtuZiR5_GbTR8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:14:96:09:85:39:40:fd:f6:db:74:1e:be:93:4c:2a:5e:96: 46:9f:7d:c3:94:b5:af:bb:e0:ab:bf:18:75:f7:c0:c8:9c:57: 87:f6:70:8f:f9:d0:15:18:cf:a4:17:ef:61:3f:81:2a:14:30: 3f:fa:ec:32:40:8e:cd:74:49:45:80:75:13:83:37:8a:18:3e: a9:e2:1b:3c:af:49:e5:05:25:e6:4c:ff:6d:84:26:54:72:a2: ae:0e:6f:be:b8:1f:08:32:30:32:e7:ec:fd:38:0c:1b:dc:5b: 9f:9d:e7:df:f1:8b:86:c5:75:78:e5:af:dd:0b:44:0a:ea:1e: 3c:1c:e1:a8:bb:d6:5c:a7:3b:cc:59:e7:81:d5:4d:65:fe:cb: 36:d2:ec:f6:b2:47:e8:1e:f7:65:c6:48:1e:09:7a:68:67:fb: 54:34:b7:4d:35:17:e2:53:bf:ed:71:8e:1f:9c:0c:20:02:b6: 0f:9c:38:cf:55:00:33:d0:3a:8f:dc:3a:e1:c1:1d:b2:9f:c8: 75:d7:b1:80:70:9d:4a:3d:c1:e1:4a:da:5c:60:fa:de:b3:42: 04:d2:3e:1c:57:84:fd:84:6c:4e:74:9b:81:52:91:89:d8:c0: aa:e8:0d:b5:84:a0:13:23:fe:93:ef:8f:39:e2:e1:8d:b3:22: ab:28:04:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC5swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBDMEIxMTAvBgNVBAUTKDAxMjg3MDVENjlDNTFFMEUyQjA3OEFFREI5OTg5MUU3 RjE5QjREMUYwHhcNMjUwNzAyMTkxNDQ2WhcNMjUwNzA5MTkxNDQ2WjAYMRYwFAYD VQQDEw02ODY1ODUyNi1kZjE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu01v2FJpysLSrrv+/8XhB0MA5g3JnYYCMJbO9z/b/uKmmtWDUzEjjpcMzMx9 EBiQApK4H1tpPHPMf638dEnf4WMnVDxYTwAxhj2F7qDPCIn5kyKj3DKg+5peCvOa hz2JJfM1Wu7V5rMAS/mCnFJuIm4Vi/BpnpjVaejSXUF/oVBs4/exKD7W4xXEHFQW fPSEGdl2q2Yxgc905SLtWMGVjl1woAj0HSywxY2mO2qFs7FGdN4jVNNjPzNOxbHn HB4bjBSfDAVse6tTLzti+8c1jRMDw/2Eg0r99McAga+LtiwY1knRDL0JdjNOLD+q rsRR5WYrPV48vU4/dgTxbVDmiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBdKtV9Q HMbl1QWPv636CoM+Dgv6MB8GA1UdIwQYMBaAFAEocF1pxR4OKweK7bmYkefxm00f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEMwQi80NDU5NDQ4QzJD NkExMUVBOUNFQ0JGNEFDNEY5QUUwMi9BU2h3WFduRkhnNHJCNHJ0dVppUjVfR2JU UjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FTaHdYV25GSGc0ckI0cnR1WmlSNV9HYlRSOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEMwQi80NDU5NDQ4QzJDNkExMUVBOUNFQ0JGNEFDNEY5QUUwMi9BU2h3WFduRkhn NHJCNHJ0dVppUjVfR2JUUjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVFJYJhTlA/fbbdB6+k0wqXpZGn33DlLWvu+Crvxh198DInFeH9nCP +dAVGM+kF+9hP4EqFDA/+uwyQI7NdElFgHUTgzeKGD6p4hs8r0nlBSXmTP9thCZU cqKuDm++uB8IMjAy5+z9OAwb3Fufneff8YuGxXV45a/dC0QK6h48HOGou9ZcpzvM WeeB1U1l/ss20uz2skfoHvdlxkgeCXpoZ/tUNLdNNRfiU7/tcY4fnAwgArYPnDjP VQAz0DqP3DrhwR2yn8h117GAcJ1KPcHhStpcYPres0IE0j4cV4T9hGxOdJuBUpGJ 2MCq6A21hKATI/6T74854uGNsyKrKAQI -----END CERTIFICATE-----Generated at Thu Jul 3 10:53:19 2025 by rpki-client