$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft File: aXYgUV57Huisfz9tE76uumLE7ak.mft (raw, json) Hash identifier: YFfcqhCD/rxBuJyv4pNbw8skpS6XBL6Ye8xVbyA6+YM= Subject key identifier: 9F:78:A2:46:FB:07:8E:1E:5C:E4:2E:F0:9B:EA:4F:3C:2C:4F:83:0F Authority key identifier: 69:76:20:51:5E:7B:1E:E8:AC:7F:3F:6D:13:BE:AE:BA:62:C4:ED:A9 Certificate issuer: /CN=A91DE2AE/serialNumber=697620515E7B1EE8AC7F3F6D13BEAEBA62C4EDA9 Certificate serial: 01F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft Manifest number: 01E4 Signing time: Thu 03 Jul 2025 03:06:54 +0000 Manifest this update: Thu 03 Jul 2025 03:06:53 +0000 Manifest next update: Thu 10 Jul 2025 03:06:53 +0000 Files and hashes: 1: aXYgUV57Huisfz9tE76uumLE7ak.crl (hash: v3BkxVgDIj9vDuzCY7b+BIAQmMaVqnKaBzkF5+ShddQ=) 2: 38E45CE08C2511EDB64DB410C4F9AE02.roa (hash: cR87tK+M2QvPpStj15TUAHSw7pMeZSCsKtclKhkYsV4=) 3: F3B716768F2F11EE86964D62C4F9AE02.roa (hash: Ez3fMRvxWFNiR5F6idq+GUYygoYJpqIuMgbojOp3vAE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.crl rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:06:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 504 (0x1f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE2AE, serialNumber=697620515E7B1EE8AC7F3F6D13BEAEBA62C4EDA9 Validity Not Before: Jul 3 03:06:53 2025 GMT Not After : Jul 10 03:06:53 2025 GMT Subject: CN=6865f3cd-067d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ae:78:7e:34:05:84:7d:fa:bb:23:77:7a:ca: 5f:dd:4b:cb:2a:d1:9f:02:6b:27:a1:bf:a0:bc:f1: 7a:84:47:dc:32:bf:ca:02:49:a1:0f:8e:32:52:7f: d1:4f:f6:46:fb:c7:58:f1:17:66:4a:28:29:04:7b: e4:48:19:1d:01:86:f4:ce:e0:99:93:4b:3c:29:5f: a0:8f:66:4b:a8:51:bb:be:58:b1:2d:e5:64:41:1f: 08:9d:9d:d3:e8:bc:e7:2e:a8:27:58:a1:87:e5:18: c3:39:1c:f9:03:6a:8a:46:c4:e3:5a:25:a5:92:30: e8:6e:93:e7:fc:26:92:b7:37:76:a2:bc:8f:29:7b: f6:71:81:5e:ab:bf:a2:e6:ce:f0:59:3e:f3:4c:ec: 7d:c5:58:d8:eb:d3:bb:84:38:bc:d8:2e:d5:10:26: 04:09:96:3c:6e:97:b3:8c:79:96:13:50:5d:16:a3: 0b:ae:ab:eb:e3:21:a8:72:33:2f:6b:d0:43:ff:bf: 48:0b:af:49:c9:8c:45:05:d9:e3:cb:9e:42:e6:c6: 3d:21:d9:3e:bf:c4:a1:3d:ec:ed:07:2a:47:fd:cf: 16:62:be:b5:61:76:80:21:c0:c2:d6:26:9f:c6:7c: cd:67:79:62:7c:2a:46:61:11:ea:3e:0d:a6:28:f0: c2:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:78:A2:46:FB:07:8E:1E:5C:E4:2E:F0:9B:EA:4F:3C:2C:4F:83:0F X509v3 Authority Key Identifier: keyid:69:76:20:51:5E:7B:1E:E8:AC:7F:3F:6D:13:BE:AE:BA:62:C4:ED:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:b7:2b:b8:7b:db:e8:dd:1e:1f:c0:9d:7f:ef:ab:07:4b:a5: c5:68:46:c3:d5:7e:05:e1:ae:9f:6c:23:40:9b:4d:3c:01:af: 58:9a:aa:e5:7b:f4:6b:2d:d7:db:03:48:65:81:d3:4b:58:8a: 64:f3:d5:0e:1a:10:37:6b:71:90:42:db:11:d7:1c:b2:91:69: a2:c6:21:d6:3a:d8:40:8e:de:fd:1a:30:31:46:89:9d:40:d6: a3:02:2e:7a:a1:cf:da:56:f3:aa:10:83:80:5e:c0:77:4e:a6: c2:71:72:26:45:8a:a1:3d:b0:da:b1:7b:c3:b8:1f:54:d0:25: 80:86:f2:4a:65:5a:f9:e7:7a:ed:b4:e6:4e:9b:cd:6f:54:fc: 13:95:38:05:48:b2:a0:4b:1a:6e:10:aa:a8:b3:7c:ed:04:41: 42:74:77:17:65:86:95:64:49:d1:6c:e6:84:f7:4e:e4:19:4a: 6d:30:0c:f0:60:6d:13:e5:fe:f1:41:a6:19:4b:25:2f:8c:62: c9:b4:56:60:3e:25:ab:57:eb:80:a5:83:8b:d9:1f:5d:3a:0c: d3:e0:1e:6e:d1:7b:b8:e5:df:29:9a:59:71:93:0b:21:7b:5c: 8b:4a:44:4d:f6:3a:89:54:0b:49:75:b4:ec:71:6a:5d:30:68: 17:66:59:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REUyQUUxMTAvBgNVBAUTKDY5NzYyMDUxNUU3QjFFRThBQzdGM0Y2RDEzQkVBRUJB NjJDNEVEQTkwHhcNMjUwNzAzMDMwNjUzWhcNMjUwNzEwMDMwNjUzWjAYMRYwFAYD VQQDEw02ODY1ZjNjZC0wNjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs654fjQFhH36uyN3espf3UvLKtGfAmsnob+gvPF6hEfcMr/KAkmhD44yUn/R T/ZG+8dY8RdmSigpBHvkSBkdAYb0zuCZk0s8KV+gj2ZLqFG7vlixLeVkQR8InZ3T 6LznLqgnWKGH5RjDORz5A2qKRsTjWiWlkjDobpPn/CaStzd2oryPKXv2cYFeq7+i 5s7wWT7zTOx9xVjY69O7hDi82C7VECYECZY8bpezjHmWE1BdFqMLrqvr4yGocjMv a9BD/79IC69JyYxFBdnjy55C5sY9Idk+v8ShPeztBypH/c8WYr61YXaAIcDC1iaf xnzNZ3lifCpGYRHqPg2mKPDCdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ94okb7 B44eXOQu8JvqTzwsT4MPMB8GA1UdIwQYMBaAFGl2IFFeex7orH8/bRO+rrpixO2p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTJBRS9DNzBGRUEyQThD MjAxMUVEQURENUM4MDlDNEY5QUUwMi9hWFlnVVY1N0h1aXNmejl0RTc2dXVtTEU3 YWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FYWWdVVjU3SHVpc2Z6OXRFNzZ1dW1MRTdhay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTJBRS9DNzBGRUEyQThDMjAxMUVEQURENUM4MDlDNEY5QUUwMi9hWFlnVVY1N0h1 aXNmejl0RTc2dXVtTEU3YWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQtyu4e9vo3R4fwJ1/76sHS6XFaEbD1X4F4a6fbCNAm008Aa9Ymqrl e/RrLdfbA0hlgdNLWIpk89UOGhA3a3GQQtsR1xyykWmixiHWOthAjt79GjAxRomd QNajAi56oc/aVvOqEIOAXsB3TqbCcXImRYqhPbDasXvDuB9U0CWAhvJKZVr553rt tOZOm81vVPwTlTgFSLKgSxpuEKqos3ztBEFCdHcXZYaVZEnRbOaE907kGUptMAzw YG0T5f7xQaYZSyUvjGLJtFZgPiWrV+uApYOL2R9dOgzT4B5u0Xu45d8pmllxkwsh e1yLSkRN9jqJVAtJdbTscWpdMGgXZlmi -----END CERTIFICATE-----Generated at Thu Jul 3 06:49:53 2025 by rpki-client