$ rpki-client -vvf rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/aecBsfM0KSOA56u5AcNCYzLGqlo.mft File: aecBsfM0KSOA56u5AcNCYzLGqlo.mft (raw, json) Hash identifier: ZBjcP0LWxgO0aGmhFfn96QHLY9WA0MEIMrPaAzBX5bs= Subject key identifier: F3:A7:89:82:C5:B3:6C:44:0F:AF:D3:2A:8A:EA:C2:11:DB:17:5D:E6 Authority key identifier: 69:E7:01:B1:F3:34:29:23:80:E7:AB:B9:01:C3:42:63:32:C6:AA:5A Certificate issuer: /CN=A91F44EA/serialNumber=69E701B1F334292380E7ABB901C3426332C6AA5A Certificate serial: 15C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aecBsfM0KSOA56u5AcNCYzLGqlo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/aecBsfM0KSOA56u5AcNCYzLGqlo.mft Manifest number: 15B6 Signing time: Wed 14 May 2025 16:51:47 +0000 Manifest this update: Wed 14 May 2025 16:51:47 +0000 Manifest next update: Wed 21 May 2025 16:51:47 +0000 Files and hashes: 1: aecBsfM0KSOA56u5AcNCYzLGqlo.crl (hash: UQKuATBkvx0JEg5hsCRm5P4Xn6h/qrKS48tlCfFJync=) 2: F6CE4EEC56F911E997D5B40AC4F9AE02.roa (hash: jy3Wft/F/5UxXAXx08sOlZkwBarb1srk+Xi5m/F+Ac0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/aecBsfM0KSOA56u5AcNCYzLGqlo.crl rsync://rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/aecBsfM0KSOA56u5AcNCYzLGqlo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aecBsfM0KSOA56u5AcNCYzLGqlo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 16:51:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5572 (0x15c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F44EA, serialNumber=69E701B1F334292380E7ABB901C3426332C6AA5A Validity Not Before: May 14 16:51:47 2025 GMT Not After : May 21 16:51:47 2025 GMT Subject: CN=6824ca23-50a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e0:29:94:dc:1f:28:66:cc:e3:18:19:47:d3: 1c:df:6b:9b:b6:50:b8:4a:58:4f:c8:d0:e5:a2:47: 58:9e:44:1c:b0:f6:b6:01:3f:1f:ab:fd:6a:a8:b5: f2:c8:c0:bf:13:02:3d:b6:de:de:05:b0:30:f3:49: 6d:fb:15:11:c6:c1:76:17:56:fc:be:d4:26:8a:cc: d5:c3:46:ce:5e:55:37:6d:26:d5:18:e2:8b:e2:c3: 19:ec:2f:e9:20:c5:66:0e:5a:ca:a2:3d:88:2d:dc: cd:29:cd:c7:77:1d:d4:e2:59:34:d8:38:94:f3:05: 5a:10:de:a6:d4:2a:0c:b2:d2:c5:49:44:3c:82:09: a2:dd:c0:cf:3d:7c:9a:06:0c:4e:4f:60:bc:59:32: 8d:fb:46:55:37:54:81:73:2f:c2:27:c6:bc:9d:8f: 73:da:fe:d9:0d:03:6a:f3:9d:b0:86:45:f7:0a:cd: 5b:7a:84:a7:c0:5e:bc:18:cb:2d:d1:f1:08:e7:f6: b6:3e:7a:22:70:59:94:39:c5:6d:48:bc:cc:8a:2d: 72:38:6a:36:be:f1:84:1d:dd:93:b4:8d:55:b1:8c: 72:1d:47:ad:36:dc:9b:bb:31:9f:65:ff:1f:f3:7d: 58:d4:4f:34:a5:15:d9:8e:77:b9:ac:3f:26:70:23: 7d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:A7:89:82:C5:B3:6C:44:0F:AF:D3:2A:8A:EA:C2:11:DB:17:5D:E6 X509v3 Authority Key Identifier: keyid:69:E7:01:B1:F3:34:29:23:80:E7:AB:B9:01:C3:42:63:32:C6:AA:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/aecBsfM0KSOA56u5AcNCYzLGqlo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aecBsfM0KSOA56u5AcNCYzLGqlo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/aecBsfM0KSOA56u5AcNCYzLGqlo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:31:fd:73:1b:0d:b1:da:87:4e:c8:2f:f0:d7:0e:67:24:c0: fb:cb:7d:8c:13:9b:b0:10:7d:7f:6a:d9:a1:1d:f2:00:64:97: 2c:d7:5a:cf:10:93:b9:38:f0:96:19:c8:84:3f:1e:59:d0:91: 2e:12:3f:8d:c4:a0:3c:6d:fe:c5:81:29:c0:27:71:e2:d5:bf: 56:9d:65:34:f5:04:b3:c3:b9:fb:53:16:48:af:dc:c3:54:f2: b0:2d:d2:d2:3e:c5:15:93:33:d3:4c:8a:4f:23:06:61:79:f2: 4a:70:8f:08:28:03:4e:ba:42:db:85:49:5c:bb:b6:ca:37:0e: a0:09:d8:97:e6:91:10:5c:96:37:d1:5d:d3:1a:58:20:2d:ae: a7:ef:eb:af:6d:a9:0e:33:70:63:84:3d:48:f1:58:d2:e8:59: b5:f5:6b:f9:4c:fd:83:e7:76:ac:4d:13:14:53:c3:34:56:31: bc:78:f8:44:58:8b:4f:37:0c:bf:f3:40:d5:6f:31:8c:64:7d: 8a:3d:34:21:c9:96:30:58:d7:d2:9d:d6:8c:21:17:c6:85:f1: 4c:75:16:41:b2:95:0b:ea:af:3d:1f:6d:ed:bd:07:9e:7b:66: 3a:3c:14:17:f8:b7:1b:ee:1a:a9:ff:87:eb:bc:6d:87:b0:cf: 01:be:2a:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFcQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ0RUExMTAvBgNVBAUTKDY5RTcwMUIxRjMzNDI5MjM4MEU3QUJCOTAxQzM0MjYz MzJDNkFBNUEwHhcNMjUwNTE0MTY1MTQ3WhcNMjUwNTIxMTY1MTQ3WjAYMRYwFAYD VQQDEw02ODI0Y2EyMy01MGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0eAplNwfKGbM4xgZR9Mc32ubtlC4SlhPyNDlokdYnkQcsPa2AT8fq/1qqLXy yMC/EwI9tt7eBbAw80lt+xURxsF2F1b8vtQmiszVw0bOXlU3bSbVGOKL4sMZ7C/p IMVmDlrKoj2ILdzNKc3Hdx3U4lk02DiU8wVaEN6m1CoMstLFSUQ8ggmi3cDPPXya BgxOT2C8WTKN+0ZVN1SBcy/CJ8a8nY9z2v7ZDQNq852whkX3Cs1beoSnwF68GMst 0fEI5/a2PnoicFmUOcVtSLzMii1yOGo2vvGEHd2TtI1VsYxyHUetNtybuzGfZf8f 831Y1E80pRXZjne5rD8mcCN9rQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPOniYLF s2xED6/TKorqwhHbF13mMB8GA1UdIwQYMBaAFGnnAbHzNCkjgOeruQHDQmMyxqpa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDRFQS82ODkwMzM5NjJC NDExMUU4ODQ1NzkzODdDNEY5QUUwMi9hZWNCc2ZNMEtTT0E1NnU1QWNOQ1l6TEdx bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FlY0JzZk0wS1NPQTU2dTVBY05DWXpMR3Fsby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDRFQS82ODkwMzM5NjJCNDExMUU4ODQ1NzkzODdDNEY5QUUwMi9hZWNCc2ZNMEtT T0E1NnU1QWNOQ1l6TEdxbG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTMf1zGw2x2odOyC/w1w5nJMD7y32ME5uwEH1/atmhHfIAZJcs11rP EJO5OPCWGciEPx5Z0JEuEj+NxKA8bf7FgSnAJ3Hi1b9WnWU09QSzw7n7UxZIr9zD VPKwLdLSPsUVkzPTTIpPIwZhefJKcI8IKANOukLbhUlcu7bKNw6gCdiX5pEQXJY3 0V3TGlggLa6n7+uvbakOM3BjhD1I8VjS6Fm19Wv5TP2D53asTRMUU8M0VjG8ePhE WItPNwy/80DVbzGMZH2KPTQhyZYwWNfSndaMIRfGhfFMdRZBspUL6q89H23tvQee e2Y6PBQX+Lcb7hqp/4frvG2HsM8BvipE -----END CERTIFICATE-----Generated at Fri May 16 15:24:38 2025 by rpki-client