$ rpki-client -vvf rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.mft File: G24yksg1ZU5JFJLlWEz5k_Bb2ZA.mft (raw, json) Hash identifier: bfFenXQExdG2WUff1DP1H9uC2s0i1C6Ok1KCdmshbqc= Subject key identifier: AE:E6:DF:05:71:7F:E3:E2:B6:DE:07:D2:7D:7D:61:25:6E:07:96:78 Authority key identifier: 1B:6E:32:92:C8:35:65:4E:49:14:92:E5:58:4C:F9:93:F0:5B:D9:90 Certificate issuer: /CN=A9110A69/serialNumber=1B6E3292C835654E491492E5584CF993F05BD990 Certificate serial: 0BBE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.mft Manifest number: 0BB8 Signing time: Sat 14 Jun 2025 18:47:13 +0000 Manifest this update: Sat 14 Jun 2025 18:47:13 +0000 Manifest next update: Sat 21 Jun 2025 18:47:13 +0000 Files and hashes: 1: G24yksg1ZU5JFJLlWEz5k_Bb2ZA.crl (hash: Hwg6/JErR0A+HnXjypeWyzQZjxutwmPGl1VhVNvQGLQ=) 2: 1407117C216311EA90D74C52C4F9AE02.roa (hash: 2C78FaeQx3m8f9CmVKBPjRPsChYY+d/Ump5Gj8ph3JM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.crl rsync://rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 18:47:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3006 (0xbbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110A69, serialNumber=1B6E3292C835654E491492E5584CF993F05BD990 Validity Not Before: Jun 14 18:47:13 2025 GMT Not After : Jun 21 18:47:13 2025 GMT Subject: CN=684dc3b1-115f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:aa:3b:5c:87:0e:aa:0a:32:11:fd:08:6d:f3: ff:a4:f4:d4:98:d8:e5:85:f7:9b:ee:52:d1:62:11: 43:b8:ff:69:6b:85:7c:0d:fd:30:cf:64:c4:10:56: 96:bf:0b:8e:4d:b0:e3:33:1f:28:70:a4:f6:e1:ff: 21:fe:29:d0:eb:64:b8:fe:d5:fd:9b:ea:97:04:cf: ca:4e:09:fc:e5:fc:da:9c:17:04:88:ed:79:6b:bd: d0:43:47:88:58:e7:29:7b:0d:5d:7c:6b:89:0d:80: e5:e4:d7:1f:28:e2:50:a7:39:b3:fa:f6:f7:1c:09: 01:6c:c1:01:7e:a1:fd:ba:90:69:43:21:5a:56:65: af:66:3d:fc:6f:8f:7b:0c:99:7d:72:d6:a0:89:23: 17:cf:df:b0:f6:ca:0f:5a:ee:92:6b:dc:84:7a:83: 33:18:2b:b8:33:9b:83:e4:b8:63:97:28:89:da:76: 27:7b:d0:f4:33:fd:4a:03:e3:7d:b8:a2:e1:25:6c: f9:34:59:fd:55:03:36:62:c7:db:90:b8:f2:87:dd: 70:22:a8:07:1d:69:3a:16:8d:96:37:91:47:cb:be: 1c:3d:aa:67:12:5e:b9:28:ee:0f:a9:cf:4f:40:40: c3:f3:36:2d:04:a9:d9:0f:c4:ff:9a:03:4b:e2:2e: ba:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:E6:DF:05:71:7F:E3:E2:B6:DE:07:D2:7D:7D:61:25:6E:07:96:78 X509v3 Authority Key Identifier: keyid:1B:6E:32:92:C8:35:65:4E:49:14:92:E5:58:4C:F9:93:F0:5B:D9:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:77:ff:76:5f:b9:68:cc:0c:f4:84:2f:d3:29:82:41:b9:f7: 32:58:29:03:94:55:d4:dc:55:11:41:8a:06:1c:12:4f:2b:71: f7:16:68:9c:eb:c9:6b:ff:61:ec:d1:4f:d1:9a:91:1d:59:81: 58:2a:49:3e:4f:68:2d:51:6c:f8:31:41:5a:cd:56:0e:70:3b: af:57:85:45:9f:b5:8c:1f:34:ee:58:28:df:e3:60:e1:73:d5: 61:4a:f3:98:88:42:71:f8:3c:3a:86:64:88:c9:6c:8c:70:8f: c0:84:cc:cd:06:a5:6f:7e:83:3f:d8:8d:5e:f0:60:9a:68:cc: 8a:e3:c4:16:da:25:2a:e1:3c:6c:b0:bb:be:33:fb:f2:f2:61: 07:1c:98:c9:9f:97:1c:8f:f2:f3:e0:f6:eb:49:f5:fb:c7:fb: c2:2c:e6:d5:fb:db:cb:bc:22:64:f1:bf:46:11:3f:6d:f4:e7: 03:2a:3f:d1:3d:23:b4:20:95:31:ed:b0:26:e1:d9:a7:d4:48: ff:83:77:86:fd:dc:6a:15:5a:59:c6:9d:0c:4c:4b:8b:af:89: 64:9c:bc:c3:43:e8:58:51:0c:92:09:76:6c:a8:28:e6:12:42: 09:55:6c:41:01:7e:69:0c:35:80:89:55:ab:7d:89:e9:da:5f: 16:62:63:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC74wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBBNjkxMTAvBgNVBAUTKDFCNkUzMjkyQzgzNTY1NEU0OTE0OTJFNTU4NENGOTkz RjA1QkQ5OTAwHhcNMjUwNjE0MTg0NzEzWhcNMjUwNjIxMTg0NzEzWjAYMRYwFAYD VQQDEw02ODRkYzNiMS0xMTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxqo7XIcOqgoyEf0IbfP/pPTUmNjlhfeb7lLRYhFDuP9pa4V8Df0wz2TEEFaW vwuOTbDjMx8ocKT24f8h/inQ62S4/tX9m+qXBM/KTgn85fzanBcEiO15a73QQ0eI WOcpew1dfGuJDYDl5NcfKOJQpzmz+vb3HAkBbMEBfqH9upBpQyFaVmWvZj38b497 DJl9ctagiSMXz9+w9soPWu6Sa9yEeoMzGCu4M5uD5LhjlyiJ2nYne9D0M/1KA+N9 uKLhJWz5NFn9VQM2YsfbkLjyh91wIqgHHWk6Fo2WN5FHy74cPapnEl65KO4Pqc9P QEDD8zYtBKnZD8T/mgNL4i66XQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK7m3wVx f+Pitt4H0n19YSVuB5Z4MB8GA1UdIwQYMBaAFBtuMpLINWVOSRSS5VhM+ZPwW9mQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEE2OS9FM0FCRDA0MjIx NDExMUVBQkRGNjc3NjlDNEY5QUUwMi9HMjR5a3NnMVpVNUpGSkxsV0V6NWtfQmIy WkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0cyNHlrc2cxWlU1SkZKTGxXRXo1a19CYjJaQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEE2OS9FM0FCRDA0MjIxNDExMUVBQkRGNjc3NjlDNEY5QUUwMi9HMjR5a3NnMVpV NUpGSkxsV0V6NWtfQmIyWkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2d/92X7lozAz0hC/TKYJBufcyWCkDlFXU3FURQYoGHBJPK3H3Fmic 68lr/2Hs0U/RmpEdWYFYKkk+T2gtUWz4MUFazVYOcDuvV4VFn7WMHzTuWCjf42Dh c9VhSvOYiEJx+Dw6hmSIyWyMcI/AhMzNBqVvfoM/2I1e8GCaaMyK48QW2iUq4Txs sLu+M/vy8mEHHJjJn5ccj/Lz4PbrSfX7x/vCLObV+9vLvCJk8b9GET9t9OcDKj/R PSO0IJUx7bAm4dmn1Ej/g3eG/dxqFVpZxp0MTEuLr4lknLzDQ+hYUQySCXZsqCjm EkIJVWxBAX5pDDWAiVWrfYnp2l8WYmPz -----END CERTIFICATE-----Generated at Sun Jun 15 09:43:57 2025 by rpki-client