$ rpki-client -vvf rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.mft File: MAeESqoZm6nIjWQEw9_oduHjn8Y.mft (raw, json) Hash identifier: rV/SLR6gbAJT31MpUXHQq3sUbLTD6rguzPBmR5pnXUM= Subject key identifier: C6:19:94:E2:D7:89:24:A8:56:F9:58:49:4C:B8:80:EC:72:5E:C7:2D Authority key identifier: 30:07:84:4A:AA:19:9B:A9:C8:8D:64:04:C3:DF:E8:76:E1:E3:9F:C6 Certificate issuer: /CN=A91E46B1/serialNumber=3007844AAA199BA9C88D6404C3DFE876E1E39FC6 Certificate serial: 14A0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAeESqoZm6nIjWQEw9_oduHjn8Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.mft Manifest number: 148E Signing time: Wed 02 Jul 2025 17:02:45 +0000 Manifest this update: Wed 02 Jul 2025 17:02:44 +0000 Manifest next update: Wed 09 Jul 2025 17:02:44 +0000 Files and hashes: 1: MAeESqoZm6nIjWQEw9_oduHjn8Y.crl (hash: Kmbsv4mmW06EZ0sI4aekaWR1OZj0Mxy+YNK3lzp7Szk=) 2: D0D94718CB8111E89EDE697DC4F9AE02.roa (hash: 9jViCMxta64fmIo5dm4osOtVC5SSmRZm2YRKWH3IWTM=) 3: 391E6EDE679B11E886728650C4F9AE02.roa (hash: FfJi+Cna0JYZDzk+rBUfl7UT75ngYXqfbGnsFnMhnRc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.crl rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAeESqoZm6nIjWQEw9_oduHjn8Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5280 (0x14a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E46B1, serialNumber=3007844AAA199BA9C88D6404C3DFE876E1E39FC6 Validity Not Before: Jul 2 17:02:44 2025 GMT Not After : Jul 9 17:02:44 2025 GMT Subject: CN=68656634-ed27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c9:69:dc:48:57:b8:71:bb:18:59:f8:3b:d4: 8c:ad:ba:12:11:63:02:6f:a3:3c:43:18:a5:54:7f: 11:56:d2:92:f5:ed:f2:0f:f6:2d:44:56:4f:14:24: 10:c6:7d:ff:a6:b8:49:62:9a:af:2f:38:f6:31:00: c3:c1:62:03:1b:35:a4:ab:d0:4b:40:d9:70:87:7e: 5d:84:b7:8e:78:79:8a:70:d7:6d:e1:8c:d9:76:1c: ed:75:c8:dd:3e:b0:40:e2:a6:e3:00:96:f6:f6:33: 47:46:3d:de:63:e7:f5:f1:81:bc:b4:2b:ca:03:16: 37:12:92:83:4c:ba:31:80:b9:a0:9d:c2:d5:a9:e2: ec:26:b5:6d:11:68:3a:bd:91:a0:cd:89:de:e9:1c: 00:91:60:bd:fe:c8:1d:ec:1c:9b:e3:f7:da:60:94: 69:59:8a:4c:d5:05:5b:4d:66:9c:a3:bd:1f:fd:98: 33:b7:42:ac:fb:0c:7e:a5:c8:d9:49:0f:36:a3:64: a4:d1:7a:26:32:59:e6:05:da:7d:ea:c2:55:91:d9: 3a:dc:b6:b5:11:78:e1:a3:63:ec:25:b2:5e:44:db: a6:d4:a5:38:a6:bc:4e:d8:0d:da:6c:57:f1:f1:15: 24:b3:70:b9:9c:0e:ba:63:97:c4:64:90:0f:95:e2: b2:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:19:94:E2:D7:89:24:A8:56:F9:58:49:4C:B8:80:EC:72:5E:C7:2D X509v3 Authority Key Identifier: keyid:30:07:84:4A:AA:19:9B:A9:C8:8D:64:04:C3:DF:E8:76:E1:E3:9F:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAeESqoZm6nIjWQEw9_oduHjn8Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:33:87:1f:8d:c7:f0:59:2e:e9:fb:24:36:11:b1:ac:e4:bb: 14:62:04:17:f2:31:a5:68:62:07:f1:0f:0a:81:9c:16:bf:98: 65:7f:61:ec:1b:df:41:20:f6:ae:f5:cd:0f:19:69:3c:06:78: eb:09:42:cc:a3:72:e1:b6:c3:19:ff:cb:a6:18:cd:46:6a:39: 39:db:ee:d1:e2:4e:e9:99:5e:ed:f6:c4:6c:4d:8a:e0:38:50: ec:16:66:cb:be:4c:29:56:0e:d6:ee:c3:89:f5:67:fb:87:23: 62:20:19:0b:77:92:45:59:45:9c:2a:2b:3d:da:09:8e:84:2f: 99:74:d3:03:21:86:18:bd:8e:cb:3d:c4:b8:4e:25:12:2d:22: 63:6d:64:bc:71:4a:a9:65:38:05:7c:66:9b:b9:d7:6b:f8:9d: b5:e8:e2:3b:8d:05:f5:da:93:a3:94:d0:7b:22:50:9b:8b:b2: 56:bc:c0:54:bc:9a:24:84:5d:ed:a7:33:15:e7:cf:76:b3:b6: 9d:a9:e9:1c:3b:44:5e:d0:fb:c1:e2:b2:a2:fd:2d:18:32:25: b3:4a:bf:b3:14:8d:38:d6:35:bf:cc:86:0a:88:ef:d1:86:f9: 5b:50:41:09:8b:4f:87:6d:68:c4:74:02:99:a8:2d:40:cc:56: 9e:a5:91:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ2QjExMTAvBgNVBAUTKDMwMDc4NDRBQUExOTlCQTlDODhENjQwNEMzREZFODc2 RTFFMzlGQzYwHhcNMjUwNzAyMTcwMjQ0WhcNMjUwNzA5MTcwMjQ0WjAYMRYwFAYD VQQDEw02ODY1NjYzNC1lZDI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr8lp3EhXuHG7GFn4O9SMrboSEWMCb6M8QxilVH8RVtKS9e3yD/YtRFZPFCQQ xn3/prhJYpqvLzj2MQDDwWIDGzWkq9BLQNlwh35dhLeOeHmKcNdt4YzZdhztdcjd PrBA4qbjAJb29jNHRj3eY+f18YG8tCvKAxY3EpKDTLoxgLmgncLVqeLsJrVtEWg6 vZGgzYne6RwAkWC9/sgd7Byb4/faYJRpWYpM1QVbTWaco70f/Zgzt0Ks+wx+pcjZ SQ82o2Sk0XomMlnmBdp96sJVkdk63La1EXjho2PsJbJeRNum1KU4prxO2A3abFfx 8RUks3C5nA66Y5fEZJAPleKyOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMYZlOLX iSSoVvlYSUy4gOxyXsctMB8GA1UdIwQYMBaAFDAHhEqqGZupyI1kBMPf6Hbh45/G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDZCMS9GMDBERjM2NjY3 OTcxMUU4QTc4OTFDNDhDNEY5QUUwMi9NQWVFU3FvWm02bklqV1FFdzlfb2R1SGpu OFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL01BZUVTcW9abTZuSWpXUUV3OV9vZHVIam44WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDZCMS9GMDBERjM2NjY3OTcxMUU4QTc4OTFDNDhDNEY5QUUwMi9NQWVFU3FvWm02 bklqV1FFdzlfb2R1SGpuOFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlM4cfjcfwWS7p+yQ2EbGs5LsUYgQX8jGlaGIH8Q8KgZwWv5hlf2Hs G99BIPau9c0PGWk8BnjrCULMo3LhtsMZ/8umGM1Gajk52+7R4k7pmV7t9sRsTYrg OFDsFmbLvkwpVg7W7sOJ9Wf7hyNiIBkLd5JFWUWcKis92gmOhC+ZdNMDIYYYvY7L PcS4TiUSLSJjbWS8cUqpZTgFfGabuddr+J216OI7jQX12pOjlNB7IlCbi7JWvMBU vJokhF3tpzMV5892s7adqekcO0Re0PvB4rKi/S0YMiWzSr+zFI041jW/zIYKiO/R hvlbUEEJi0+HbWjEdAKZqC1AzFaepZEz -----END CERTIFICATE-----Generated at Fri Jul 4 11:50:54 2025 by rpki-client