$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.mft File: AaQS70FsiE9vY38b2oAOtu9nttY.mft (raw, json) Hash identifier: JhSibWvTr+Iz5TBKxcPyMIHsy5z7QTxkMdsYZkK69P8= Subject key identifier: 37:CB:35:CC:14:B3:A7:35:79:8F:BA:94:A8:DE:6E:E5:59:46:45:BC Authority key identifier: 01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6 Certificate issuer: /CN=A91E4845/serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6 Certificate serial: 221F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.mft Manifest number: 21F0 Signing time: Wed 02 Jul 2025 16:00:05 +0000 Manifest this update: Wed 02 Jul 2025 16:00:05 +0000 Manifest next update: Wed 09 Jul 2025 16:00:05 +0000 Files and hashes: 1: AaQS70FsiE9vY38b2oAOtu9nttY.crl (hash: yHWjPqUepvQF7aQjIKtLcmZK0BWt0V0ORAT3ocPs1sU=) 2: 756C3370F38611EFBF7CEF35C4F9AE02.roa (hash: du5SamzGoud2VmU4jSD3B3FaKaAiMGpYcMTILdk3Bb0=) 3: 2694EA4C3A5011F0B1C5451DC4F9AE02.roa (hash: dsbkNjB8r9NS6dycnX8NYGX8V7f1CmLJzm5qZaFGorQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:00:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8735 (0x221f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4845, serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6 Validity Not Before: Jul 2 16:00:05 2025 GMT Not After : Jul 9 16:00:05 2025 GMT Subject: CN=68655785-e07f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f1:c8:8a:8f:b7:44:5e:2b:93:94:90:9f:75: 90:8e:3f:cb:61:f8:b9:33:e0:58:a5:aa:dd:f1:71: f7:fc:c5:38:79:12:79:ef:22:da:67:1e:07:8f:73: db:8e:38:36:c7:08:b1:33:8d:97:23:e0:47:69:0f: ae:b7:40:c9:d3:de:70:83:50:f1:0b:42:92:15:1f: d0:6a:77:a5:cc:83:f7:a7:dc:68:62:54:94:84:16: 91:52:af:ab:89:03:ff:54:72:3c:51:e4:4c:bc:ce: 48:0c:8b:c9:22:9f:91:dd:8d:b5:77:36:8f:18:02: 28:76:87:61:a7:17:cb:4d:7a:11:97:46:de:99:b6: 8e:5e:43:66:67:a0:0b:e6:d1:b6:43:39:70:36:02: fb:4d:e1:bb:83:43:a3:b8:12:a2:db:64:fc:a8:ba: 5f:6a:0c:d3:5c:d9:9e:3d:4a:02:81:8c:0e:5a:43: bf:c7:80:11:5a:98:e2:97:2e:69:5b:b1:4b:04:c3: db:32:33:df:73:dd:20:a9:e6:7a:c1:c3:ee:79:f6: f2:53:d3:9f:68:a1:ec:b0:d7:8f:54:55:69:46:b0: ea:78:52:bf:41:bb:a7:56:62:d5:d9:74:94:a8:82: 33:05:d1:31:fe:5e:13:29:b7:d2:38:1e:c2:33:c4: c7:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:CB:35:CC:14:B3:A7:35:79:8F:BA:94:A8:DE:6E:E5:59:46:45:BC X509v3 Authority Key Identifier: keyid:01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:39:82:00:10:51:b0:56:e9:2e:9f:70:f9:38:5e:10:ba:62: 3c:c7:7f:b5:a1:ef:71:95:9b:81:d6:1f:91:5a:32:f9:ed:0d: 11:24:24:07:8f:d9:a4:2c:22:c7:bd:97:e2:12:0c:48:19:f6: 7b:0b:3a:8a:54:05:b8:c5:f0:5b:6b:b0:8d:c6:bf:05:da:e5: e0:2b:bb:34:f2:c1:d6:86:9a:17:8d:af:35:c2:a8:27:14:7b: 58:1d:de:ad:1d:f5:57:45:14:b3:90:c7:fc:bb:37:e5:45:30: ac:3e:ac:86:97:46:82:9a:4e:23:c4:bd:30:81:db:56:22:00: 24:ab:23:0c:bc:4d:d0:9e:8a:39:98:ac:c7:d8:4d:55:a9:29: 8a:73:bb:a5:1a:4d:2a:81:2f:21:9b:46:f3:6d:e8:c2:8e:d1: 88:cb:aa:f1:72:cf:8b:ce:65:f3:bb:41:6f:ee:d0:f5:5c:11: c5:3e:6a:2a:77:84:92:8b:49:4a:9e:82:b2:c1:cd:43:76:ac: ed:56:0f:dd:c3:ae:d5:2b:f3:44:77:f6:b9:9f:70:83:29:8f: 39:ad:22:65:6d:d6:04:3a:26:a3:9e:aa:b3:36:50:9d:51:95: 0c:ca:67:0a:e0:6c:b4:14:47:6a:72:dd:7f:01:97:19:8d:8f: c0:7b:34:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIh8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ4NDUxMTAvBgNVBAUTKDAxQTQxMkVGNDE2Qzg4NEY2RjYzN0YxQkRBODAwRUI2 RUY2N0I2RDYwHhcNMjUwNzAyMTYwMDA1WhcNMjUwNzA5MTYwMDA1WjAYMRYwFAYD VQQDEw02ODY1NTc4NS1lMDdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsfHIio+3RF4rk5SQn3WQjj/LYfi5M+BYpard8XH3/MU4eRJ57yLaZx4Hj3Pb jjg2xwixM42XI+BHaQ+ut0DJ095wg1DxC0KSFR/QanelzIP3p9xoYlSUhBaRUq+r iQP/VHI8UeRMvM5IDIvJIp+R3Y21dzaPGAIododhpxfLTXoRl0bembaOXkNmZ6AL 5tG2QzlwNgL7TeG7g0OjuBKi22T8qLpfagzTXNmePUoCgYwOWkO/x4ARWpjily5p W7FLBMPbMjPfc90gqeZ6wcPuefbyU9OfaKHssNePVFVpRrDqeFK/QbunVmLV2XSU qIIzBdEx/l4TKbfSOB7CM8THcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDfLNcwU s6c1eY+6lKjebuVZRkW8MB8GA1UdIwQYMBaAFAGkEu9BbIhPb2N/G9qADrbvZ7bW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDg0NS80MDAxNTNCNkQy RUIxMUU1QjREMTVBNEVDNEY5QUUwMi9BYVFTNzBGc2lFOXZZMzhiMm9BT3R1OW50 dFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FhUVM3MEZzaUU5dlkzOGIyb0FPdHU5bnR0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDg0NS80MDAxNTNCNkQyRUIxMUU1QjREMTVBNEVDNEY5QUUwMi9BYVFTNzBGc2lF OXZZMzhiMm9BT3R1OW50dFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDEOYIAEFGwVukun3D5OF4QumI8x3+1oe9xlZuB1h+RWjL57Q0RJCQH j9mkLCLHvZfiEgxIGfZ7CzqKVAW4xfBba7CNxr8F2uXgK7s08sHWhpoXja81wqgn FHtYHd6tHfVXRRSzkMf8uzflRTCsPqyGl0aCmk4jxL0wgdtWIgAkqyMMvE3Qnoo5 mKzH2E1VqSmKc7ulGk0qgS8hm0bzbejCjtGIy6rxcs+LzmXzu0Fv7tD1XBHFPmoq d4SSi0lKnoKywc1DdqztVg/dw67VK/NEd/a5n3CDKY85rSJlbdYEOiajnqqzNlCd UZUMymcK4Gy0FEdqct1/AZcZjY/AezR5 -----END CERTIFICATE-----Generated at Thu Jul 3 23:30:00 2025 by rpki-client