$ rpki-client -vvf rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/aecBsfM0KSOA56u5AcNCYzLGqlo.mft File: aecBsfM0KSOA56u5AcNCYzLGqlo.mft (raw, json) Hash identifier: 5nnbaMFRdzQz5IVSuSE8dlRJDqE/6C3Q6LZ63wpBDtM= Subject key identifier: D9:E8:E6:2E:40:41:5B:54:EE:61:56:E2:30:61:45:FD:AA:00:49:CE Authority key identifier: 69:E7:01:B1:F3:34:29:23:80:E7:AB:B9:01:C3:42:63:32:C6:AA:5A Certificate issuer: /CN=A91F44EA/serialNumber=69E701B1F334292380E7ABB901C3426332C6AA5A Certificate serial: 15DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aecBsfM0KSOA56u5AcNCYzLGqlo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/aecBsfM0KSOA56u5AcNCYzLGqlo.mft Manifest number: 15CF Signing time: Wed 02 Jul 2025 16:54:37 +0000 Manifest this update: Wed 02 Jul 2025 16:54:36 +0000 Manifest next update: Wed 09 Jul 2025 16:54:36 +0000 Files and hashes: 1: aecBsfM0KSOA56u5AcNCYzLGqlo.crl (hash: AhudoJK1z5YGOPhRdbwaKTk4KkZ+t09tafI4gIzMfOU=) 2: F6CE4EEC56F911E997D5B40AC4F9AE02.roa (hash: jy3Wft/F/5UxXAXx08sOlZkwBarb1srk+Xi5m/F+Ac0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/aecBsfM0KSOA56u5AcNCYzLGqlo.crl rsync://rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/aecBsfM0KSOA56u5AcNCYzLGqlo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aecBsfM0KSOA56u5AcNCYzLGqlo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:54:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5597 (0x15dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F44EA, serialNumber=69E701B1F334292380E7ABB901C3426332C6AA5A Validity Not Before: Jul 2 16:54:36 2025 GMT Not After : Jul 9 16:54:36 2025 GMT Subject: CN=6865644d-1612 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:99:27:27:88:0c:33:1d:f7:21:ec:be:6c:21: 5f:c2:85:47:68:c3:67:de:61:1f:1b:d4:d8:b8:eb: cc:64:a1:0b:40:67:2c:20:45:57:90:ef:28:fc:ae: 58:c7:e5:59:76:a7:8b:03:de:6d:12:05:65:27:6e: e1:d6:08:27:40:a4:ce:f3:88:78:d4:79:72:ba:d5: bc:07:39:af:15:96:0b:8b:49:b4:e5:02:bf:c3:26: 66:1d:f4:77:26:1a:ec:4f:d8:67:eb:5e:f6:93:17: b7:67:fb:00:e2:9e:7f:50:aa:ee:bf:e4:4a:1e:24: 6e:8f:0b:3a:a5:64:ea:a3:d2:c0:41:06:ae:da:72: aa:d7:b6:2d:96:ea:a2:28:b9:d1:b9:fc:e2:4c:1d: b3:c6:7b:ef:42:5c:bd:db:d5:6b:18:68:d2:99:58: c5:a4:2c:58:54:cb:09:84:b6:74:7f:45:81:21:c8: e9:5e:1e:58:a8:c4:2d:2e:3e:fe:26:e4:5c:25:70: 94:5d:49:fd:eb:37:40:6a:91:c3:54:d9:dd:e2:d7: f8:45:03:a7:e5:1b:45:5a:c9:27:39:92:7b:02:33: a9:ae:36:af:81:a4:c7:52:1c:8b:be:43:b2:e4:4a: d2:3c:7e:a7:a9:dd:b6:6d:9f:23:c1:e4:49:97:9b: 9c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:E8:E6:2E:40:41:5B:54:EE:61:56:E2:30:61:45:FD:AA:00:49:CE X509v3 Authority Key Identifier: keyid:69:E7:01:B1:F3:34:29:23:80:E7:AB:B9:01:C3:42:63:32:C6:AA:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/aecBsfM0KSOA56u5AcNCYzLGqlo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aecBsfM0KSOA56u5AcNCYzLGqlo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/aecBsfM0KSOA56u5AcNCYzLGqlo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:6a:5b:3e:29:33:de:ea:c4:b5:54:fe:c1:7a:ae:f0:68:7c: e7:99:fa:d7:75:49:00:56:42:2f:a2:fe:d6:c3:9b:ac:59:ca: b5:0a:3e:a2:2f:73:40:f2:df:31:eb:24:af:37:f1:8e:9c:5c: 7d:ce:15:4e:61:60:7e:f5:2a:0c:dd:f0:c1:71:ef:6f:27:81: 66:48:df:e3:50:5c:e6:59:85:f5:c7:d7:85:75:c8:f8:d6:2d: 99:ac:a8:1b:d7:ba:ef:a3:9d:a5:e5:2f:71:dc:d0:b5:9a:55: 16:26:bc:1c:0c:c2:fb:c8:db:70:ae:ad:ca:d3:53:33:6d:83: 4a:70:13:50:20:61:8e:75:65:58:f3:1b:80:4e:df:f7:47:17: 69:74:e5:a4:70:b9:c8:8c:2e:55:7c:93:46:7b:4d:08:b3:5d: 97:07:6a:d7:09:61:a4:b0:ed:fe:31:f4:fb:5e:a8:58:fd:1e: 2d:7b:96:c2:1d:99:e4:41:3b:1e:78:b4:5d:c4:a1:8b:57:81: 21:76:fe:1b:9c:c8:8b:2c:ce:ed:34:38:b0:1e:38:6b:f6:1d: 2a:e2:7e:52:40:9e:e4:78:40:da:a7:9a:99:fb:b8:88:71:fe: aa:3f:f5:95:50:ef:c7:83:ab:7c:88:a5:51:a8:a1:bb:25:36: 70:33:8f:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFd0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ0RUExMTAvBgNVBAUTKDY5RTcwMUIxRjMzNDI5MjM4MEU3QUJCOTAxQzM0MjYz MzJDNkFBNUEwHhcNMjUwNzAyMTY1NDM2WhcNMjUwNzA5MTY1NDM2WjAYMRYwFAYD VQQDEw02ODY1NjQ0ZC0xNjEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmpknJ4gMMx33Iey+bCFfwoVHaMNn3mEfG9TYuOvMZKELQGcsIEVXkO8o/K5Y x+VZdqeLA95tEgVlJ27h1ggnQKTO84h41HlyutW8BzmvFZYLi0m05QK/wyZmHfR3 JhrsT9hn6172kxe3Z/sA4p5/UKruv+RKHiRujws6pWTqo9LAQQau2nKq17Ytluqi KLnRufziTB2zxnvvQly929VrGGjSmVjFpCxYVMsJhLZ0f0WBIcjpXh5YqMQtLj7+ JuRcJXCUXUn96zdAapHDVNnd4tf4RQOn5RtFWsknOZJ7AjOprjavgaTHUhyLvkOy 5ErSPH6nqd22bZ8jweRJl5ucAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNno5i5A QVtU7mFW4jBhRf2qAEnOMB8GA1UdIwQYMBaAFGnnAbHzNCkjgOeruQHDQmMyxqpa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDRFQS82ODkwMzM5NjJC NDExMUU4ODQ1NzkzODdDNEY5QUUwMi9hZWNCc2ZNMEtTT0E1NnU1QWNOQ1l6TEdx bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FlY0JzZk0wS1NPQTU2dTVBY05DWXpMR3Fsby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDRFQS82ODkwMzM5NjJCNDExMUU4ODQ1NzkzODdDNEY5QUUwMi9hZWNCc2ZNMEtT T0E1NnU1QWNOQ1l6TEdxbG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMals+KTPe6sS1VP7Beq7waHznmfrXdUkAVkIvov7Ww5usWcq1Cj6i L3NA8t8x6ySvN/GOnFx9zhVOYWB+9SoM3fDBce9vJ4FmSN/jUFzmWYX1x9eFdcj4 1i2ZrKgb17rvo52l5S9x3NC1mlUWJrwcDML7yNtwrq3K01MzbYNKcBNQIGGOdWVY 8xuATt/3RxdpdOWkcLnIjC5VfJNGe00Is12XB2rXCWGksO3+MfT7XqhY/R4te5bC HZnkQTseeLRdxKGLV4Ehdv4bnMiLLM7tNDiwHjhr9h0q4n5SQJ7keEDap5qZ+7iI cf6qP/WVUO/Hg6t8iKVRqKG7JTZwM49n -----END CERTIFICATE-----Generated at Thu Jul 3 09:13:30 2025 by rpki-client