$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/m_aWWObA_qLqCOOn_dKtysoTOUk.mft File: m_aWWObA_qLqCOOn_dKtysoTOUk.mft (raw, json) Hash identifier: oHcKWg8lyB0KjH3g/eckA+yx+s+mo/Le9codbncaM28= Subject key identifier: 0F:0E:42:F8:49:67:31:F8:38:DC:DB:73:64:17:CC:35:78:1F:1E:D0 Authority key identifier: 9B:F6:96:58:E6:C0:FE:A2:EA:08:E3:A7:FD:D2:AD:CA:CA:13:39:49 Certificate issuer: /CN=A91CC28E/serialNumber=9BF69658E6C0FEA2EA08E3A7FDD2ADCACA133949 Certificate serial: 01E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m_aWWObA_qLqCOOn_dKtysoTOUk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/m_aWWObA_qLqCOOn_dKtysoTOUk.mft Manifest number: 01DE Signing time: Sun 29 Jun 2025 01:53:01 +0000 Manifest this update: Sun 29 Jun 2025 01:53:00 +0000 Manifest next update: Sun 06 Jul 2025 01:53:00 +0000 Files and hashes: 1: m_aWWObA_qLqCOOn_dKtysoTOUk.crl (hash: AsY8hNRdLuw8/nZ7FJaZPoqVPBLNwhPxeDj9H+6PmzE=) 2: 73E253FC76D011EDBAECD665C4F9AE02.roa (hash: n/BMRPFUHjUzsfa0GoSirwLl0k+pEwLO2kUv8wHTWRI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/m_aWWObA_qLqCOOn_dKtysoTOUk.crl rsync://rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/m_aWWObA_qLqCOOn_dKtysoTOUk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m_aWWObA_qLqCOOn_dKtysoTOUk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 01:53:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 481 (0x1e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC28E, serialNumber=9BF69658E6C0FEA2EA08E3A7FDD2ADCACA133949 Validity Not Before: Jun 29 01:53:00 2025 GMT Not After : Jul 6 01:53:00 2025 GMT Subject: CN=68609c7d-4457 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ce:30:f4:38:9c:24:57:45:e7:1e:f3:cb:9a: 16:23:61:35:b2:50:a0:61:7a:ed:ca:c6:95:c9:19: fa:22:ea:f4:b0:94:d8:c8:00:95:75:c0:d2:0c:ef: bf:0d:11:79:db:b0:fa:13:63:49:ce:a5:66:3f:46: 3d:34:86:98:f8:f6:84:82:8d:59:12:99:d2:e3:da: 11:ea:eb:7a:b0:3a:2a:e2:a5:53:4f:9d:bb:a3:81: 4f:c2:ac:de:35:8f:a9:c5:16:2f:5b:90:3d:ca:57: c8:09:c5:7a:ca:7a:0f:ab:0a:d6:5b:d6:c7:2f:53: 27:a0:d6:f2:99:34:b2:61:8f:78:a1:e7:0d:e7:4f: 0d:c5:86:ac:ce:b3:77:44:d8:0d:1e:7c:09:39:20: 5c:d7:bd:a4:0d:8b:34:72:92:f2:cb:2e:ff:00:12: f4:02:b3:75:64:36:8f:02:c5:ca:0e:f2:0a:7d:39: fb:30:f4:e8:e3:62:7e:f3:b7:cf:6c:bc:f0:f8:59: 4c:a7:f4:a9:1c:22:70:8d:e0:0f:25:cd:f2:35:3d: cf:dc:fe:8b:81:5d:5b:83:20:a7:18:51:0c:a7:df: ed:84:eb:47:41:f8:1b:83:0d:3b:cc:04:46:f0:71: 6d:95:6d:a8:d4:83:67:7f:b3:2e:3b:a1:ba:22:88: 99:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:0E:42:F8:49:67:31:F8:38:DC:DB:73:64:17:CC:35:78:1F:1E:D0 X509v3 Authority Key Identifier: keyid:9B:F6:96:58:E6:C0:FE:A2:EA:08:E3:A7:FD:D2:AD:CA:CA:13:39:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/m_aWWObA_qLqCOOn_dKtysoTOUk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m_aWWObA_qLqCOOn_dKtysoTOUk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/m_aWWObA_qLqCOOn_dKtysoTOUk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:e5:77:52:3b:7a:a8:5f:47:a9:43:e3:11:42:2c:16:02:cc: 51:f1:75:da:c2:72:1c:82:aa:a1:d4:39:9d:7f:b0:21:74:00: e1:fb:2c:4d:aa:be:4b:9d:c6:92:8c:a7:a0:fb:07:26:51:7c: ce:49:12:12:1a:8d:07:84:eb:2d:32:ec:f9:05:72:a0:a1:f0: a5:b8:e1:48:30:d3:3a:be:db:ef:c3:2b:8c:9c:2a:e7:fa:70: 09:7f:56:4a:6b:6d:0a:fb:d0:82:b6:f3:67:8e:dc:b6:94:90: 93:37:c1:04:33:d8:9b:3b:13:a1:1f:ec:9a:20:60:e0:3e:b6: d5:3f:89:4d:0a:b7:aa:ed:3c:19:a1:53:92:ef:cf:04:6a:49: 42:1b:d3:e6:e2:3e:ad:24:af:c1:f3:89:a6:7c:11:68:88:67: d2:9b:ed:6c:1a:24:85:d4:80:08:40:f9:14:18:79:98:55:ba: f2:32:a8:c7:bd:da:64:42:f4:76:e0:62:ee:7f:41:8c:06:b3: 74:75:a6:44:7a:fd:88:a2:04:f0:05:24:a2:49:08:71:d1:a2: a5:76:b8:b7:8c:e2:3d:0d:6d:70:8f:16:fa:7e:5c:01:86:25: 10:4d:3d:b7:7b:bc:a5:11:c7:7f:83:94:7e:99:82:a7:be:3f: 12:95:62:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0MyOEUxMTAvBgNVBAUTKDlCRjY5NjU4RTZDMEZFQTJFQTA4RTNBN0ZERDJBRENB Q0ExMzM5NDkwHhcNMjUwNjI5MDE1MzAwWhcNMjUwNzA2MDE1MzAwWjAYMRYwFAYD VQQDEw02ODYwOWM3ZC00NDU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA184w9DicJFdF5x7zy5oWI2E1slCgYXrtysaVyRn6Iur0sJTYyACVdcDSDO+/ DRF527D6E2NJzqVmP0Y9NIaY+PaEgo1ZEpnS49oR6ut6sDoq4qVTT527o4FPwqze NY+pxRYvW5A9ylfICcV6ynoPqwrWW9bHL1MnoNbymTSyYY94oecN508NxYaszrN3 RNgNHnwJOSBc172kDYs0cpLyyy7/ABL0ArN1ZDaPAsXKDvIKfTn7MPTo42J+87fP bLzw+FlMp/SpHCJwjeAPJc3yNT3P3P6LgV1bgyCnGFEMp9/thOtHQfgbgw07zARG 8HFtlW2o1INnf7MuO6G6IoiZ7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA8OQvhJ ZzH4ONzbc2QXzDV4Hx7QMB8GA1UdIwQYMBaAFJv2lljmwP6i6gjjp/3SrcrKEzlJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzI4RS9CNUNBODk2ODc2 Q0QxMUVEOERDNjNBNjRDNEY5QUUwMi9tX2FXV09iQV9xTHFDT09uX2RLdHlzb1RP VWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21fYVdXT2JBX3FMcUNPT25fZEt0eXNvVE9Vay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QzI4RS9CNUNBODk2ODc2Q0QxMUVEOERDNjNBNjRDNEY5QUUwMi9tX2FXV09iQV9x THFDT09uX2RLdHlzb1RPVWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBI5XdSO3qoX0epQ+MRQiwWAsxR8XXawnIcgqqh1Dmdf7AhdADh+yxN qr5LncaSjKeg+wcmUXzOSRISGo0HhOstMuz5BXKgofCluOFIMNM6vtvvwyuMnCrn +nAJf1ZKa20K+9CCtvNnjty2lJCTN8EEM9ibOxOhH+yaIGDgPrbVP4lNCreq7TwZ oVOS788EaklCG9Pm4j6tJK/B84mmfBFoiGfSm+1sGiSF1IAIQPkUGHmYVbryMqjH vdpkQvR24GLuf0GMBrN0daZEev2IogTwBSSiSQhx0aKldri3jOI9DW1wjxb6flwB hiUQTT23e7ylEcd/g5R+mYKnvj8SlWKF -----END CERTIFICATE-----Generated at Sun Jun 29 16:32:26 2025 by rpki-client