$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.mft File: AwfvDynPItsJcPUIPAI8KqDW9Rc.mft (raw, json) Hash identifier: DDxGYgXh5T4F2s1bQuGogFyAkQqjOvj/SFiVcU/+poM= Subject key identifier: 63:FE:80:4F:B4:2F:F7:74:4F:54:0C:8A:8A:C4:2B:4D:53:19:59:22 Authority key identifier: 03:07:EF:0F:29:CF:22:DB:09:70:F5:08:3C:02:3C:2A:A0:D6:F5:17 Certificate issuer: /CN=A91D8704/serialNumber=0307EF0F29CF22DB0970F5083C023C2AA0D6F517 Certificate serial: 08AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwfvDynPItsJcPUIPAI8KqDW9Rc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.mft Manifest number: 08A6 Signing time: Sat 28 Jun 2025 20:12:29 +0000 Manifest this update: Sat 28 Jun 2025 20:12:28 +0000 Manifest next update: Sat 05 Jul 2025 20:12:28 +0000 Files and hashes: 1: AwfvDynPItsJcPUIPAI8KqDW9Rc.crl (hash: ygWIlNOpEYLlUJauSJDHZsVYI1oaPvJvQBA/jrTxcBs=) 2: B1AAC5B2BC4111EA9A5B2786C4F9AE02.roa (hash: RBbk8UhQUJAo0+DivNUUdglkSzsFknX4rSnxZW8gCTk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.crl rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwfvDynPItsJcPUIPAI8KqDW9Rc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 20:12:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2221 (0x8ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8704, serialNumber=0307EF0F29CF22DB0970F5083C023C2AA0D6F517 Validity Not Before: Jun 28 20:12:28 2025 GMT Not After : Jul 5 20:12:28 2025 GMT Subject: CN=68604cad-3075 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:cb:6c:a9:b0:8f:2a:8d:19:bf:e3:b7:64:cf: 2a:d3:cd:20:1a:8a:8a:c8:36:41:bc:24:d5:be:24: 77:c0:31:e9:10:38:6b:bb:64:22:62:2f:ba:3e:8e: 14:47:77:62:1a:3e:d7:70:b5:78:88:92:33:b5:b4: f1:73:e3:b7:ce:59:81:39:b5:2c:70:bd:34:80:6a: e2:47:3e:86:88:f2:f9:2e:52:df:d6:1b:85:57:3d: 4d:92:ff:52:73:62:e1:c2:45:56:75:73:e7:0b:00: 00:bb:c6:bf:d1:f3:1d:54:ab:ff:f1:08:7b:79:8e: ee:17:db:8a:d5:79:ac:ba:bc:90:54:47:9b:a2:c9: 43:aa:d2:c9:ea:3f:07:43:b4:7d:a3:ce:38:95:33: 44:b1:d0:c7:e1:d3:fa:37:ef:23:79:98:91:05:a2: 73:c3:68:e4:42:6a:df:78:9b:f7:d9:65:be:43:2f: f4:b1:2a:7f:33:cc:db:c1:92:d5:35:69:f0:5b:6e: 4c:7e:6a:7d:2f:f2:b4:b4:a7:87:15:d0:3e:d8:9c: 39:ab:b9:bc:ec:eb:62:be:25:d6:d9:24:a9:03:04: f6:05:8a:c9:18:0c:e6:77:64:4c:d9:8e:97:ce:27: 0b:4f:17:4e:d8:44:be:2c:be:66:43:77:64:7d:ea: ad:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:FE:80:4F:B4:2F:F7:74:4F:54:0C:8A:8A:C4:2B:4D:53:19:59:22 X509v3 Authority Key Identifier: keyid:03:07:EF:0F:29:CF:22:DB:09:70:F5:08:3C:02:3C:2A:A0:D6:F5:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwfvDynPItsJcPUIPAI8KqDW9Rc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:24:14:03:04:8e:67:4e:99:0d:de:73:f6:2f:58:1c:bd:02: 90:60:8b:86:1e:99:09:36:9e:f3:f0:bb:a2:ba:7e:12:13:3c: 8f:58:28:ec:e8:95:ca:54:64:94:75:6d:f3:0f:ae:19:59:6d: d8:f5:a5:da:5d:08:63:fb:d6:78:d8:60:70:28:63:c0:e7:d8: 83:9e:68:63:84:f1:20:5a:ee:d6:71:2d:ae:83:b4:c2:cd:46: ca:5e:a4:79:92:d5:d6:74:02:67:da:e1:2e:08:4f:e9:1c:c5: 56:07:9e:84:f1:e3:9f:c4:29:8b:e5:49:96:f0:ab:b2:65:f2: 92:1a:18:54:f2:95:88:68:b7:fa:7b:26:be:c9:a1:b8:b5:b5: f1:96:0b:70:ba:67:7f:e7:2d:8d:c3:fc:07:29:43:4c:87:59: 59:3e:24:b6:55:87:f7:a9:aa:75:57:fa:88:1f:5c:a6:6f:f3: 79:c0:65:b4:c4:9b:72:7f:66:82:36:62:38:96:53:55:40:bd: 67:fe:75:d2:3e:9c:4d:1d:e7:be:06:f0:fa:71:3b:c9:8d:d1: 7f:f7:14:c2:b5:c5:fe:8e:d4:9c:ae:66:0c:82:4e:f4:68:c1: f8:10:a0:88:58:b2:50:25:62:82:ba:8f:e4:57:75:f9:62:08: fe:a9:e9:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg3MDQxMTAvBgNVBAUTKDAzMDdFRjBGMjlDRjIyREIwOTcwRjUwODNDMDIzQzJB QTBENkY1MTcwHhcNMjUwNjI4MjAxMjI4WhcNMjUwNzA1MjAxMjI4WjAYMRYwFAYD VQQDEw02ODYwNGNhZC0zMDc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx8tsqbCPKo0Zv+O3ZM8q080gGoqKyDZBvCTVviR3wDHpEDhru2QiYi+6Po4U R3diGj7XcLV4iJIztbTxc+O3zlmBObUscL00gGriRz6GiPL5LlLf1huFVz1Nkv9S c2LhwkVWdXPnCwAAu8a/0fMdVKv/8Qh7eY7uF9uK1XmsuryQVEeboslDqtLJ6j8H Q7R9o844lTNEsdDH4dP6N+8jeZiRBaJzw2jkQmrfeJv32WW+Qy/0sSp/M8zbwZLV NWnwW25Mfmp9L/K0tKeHFdA+2Jw5q7m87OtiviXW2SSpAwT2BYrJGAzmd2RM2Y6X zicLTxdO2ES+LL5mQ3dkfeqtLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGP+gE+0 L/d0T1QMiorEK01TGVkiMB8GA1UdIwQYMBaAFAMH7w8pzyLbCXD1CDwCPCqg1vUX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODcwNC81NjU1QUM5OEJD MEMxMUVBOTFFMDlCNjhDNEY5QUUwMi9Bd2Z2RHluUEl0c0pjUFVJUEFJOEtxRFc5 UmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0F3ZnZEeW5QSXRzSmNQVUlQQUk4S3FEVzlSYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODcwNC81NjU1QUM5OEJDMEMxMUVBOTFFMDlCNjhDNEY5QUUwMi9Bd2Z2RHluUEl0 c0pjUFVJUEFJOEtxRFc5UmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlJBQDBI5nTpkN3nP2L1gcvQKQYIuGHpkJNp7z8Luiun4SEzyPWCjs 6JXKVGSUdW3zD64ZWW3Y9aXaXQhj+9Z42GBwKGPA59iDnmhjhPEgWu7WcS2ug7TC zUbKXqR5ktXWdAJn2uEuCE/pHMVWB56E8eOfxCmL5UmW8KuyZfKSGhhU8pWIaLf6 eya+yaG4tbXxlgtwumd/5y2Nw/wHKUNMh1lZPiS2VYf3qap1V/qIH1ymb/N5wGW0 xJtyf2aCNmI4llNVQL1n/nXSPpxNHee+BvD6cTvJjdF/9xTCtcX+jtScrmYMgk70 aMH4EKCIWLJQJWKCuo/kV3X5Ygj+qeky -----END CERTIFICATE-----Generated at Sun Jun 29 14:07:56 2025 by rpki-client