$ rpki-client -vvf rpki.apnic.net/member_repository/A911829D/5125526E9C6D11EF83A8BD16C4F9AE02/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.mft File: PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.mft (raw, json) Hash identifier: u5cs+IYJJyDvhHIBVtNN3aue3XPjzmEQtkA6fEN03E8= Subject key identifier: 67:7B:0D:B1:6E:20:0E:6F:2A:93:AD:89:5F:A9:04:CF:40:F2:62:D5 Authority key identifier: 3C:18:CD:8B:5B:01:D5:02:37:64:0C:26:C0:37:75:46:D8:04:FD:B4 Certificate issuer: /CN=A911829D/serialNumber=3C18CD8B5B01D50237640C26C0377546D804FDB4 Certificate serial: 71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911829D/5125526E9C6D11EF83A8BD16C4F9AE02/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.mft Manifest number: 71 Signing time: Fri 13 Jun 2025 05:45:44 +0000 Manifest this update: Fri 13 Jun 2025 05:45:44 +0000 Manifest next update: Fri 20 Jun 2025 05:45:44 +0000 Files and hashes: 1: PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.crl (hash: FfdIg+ZovSGtcohcNOoE+bYNZK8XWehH2FFUhqgA4bg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911829D/5125526E9C6D11EF83A8BD16C4F9AE02/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.crl rsync://rpki.apnic.net/member_repository/A911829D/5125526E9C6D11EF83A8BD16C4F9AE02/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 05:45:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 113 (0x71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911829D, serialNumber=3C18CD8B5B01D50237640C26C0377546D804FDB4 Validity Not Before: Jun 13 05:45:44 2025 GMT Not After : Jun 20 05:45:44 2025 GMT Subject: CN=684bbb08-5fc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:b5:09:29:6c:15:66:8e:3e:15:56:c8:5d:b9: 8c:df:fd:66:ee:72:c4:b4:9b:7e:a1:d1:db:e8:4e: e8:06:17:16:fe:e8:8f:2e:38:df:5d:15:cd:59:18: 34:b0:7d:50:2a:f6:d6:81:37:68:fb:cd:f3:80:76: 47:79:b0:38:aa:c5:56:71:af:94:1a:06:2b:16:d6: e9:35:01:cb:3c:d1:db:eb:e5:a7:67:d2:f9:43:c8: e5:47:dd:93:62:01:f3:6d:35:6b:f6:7c:a7:e1:ed: e6:97:54:70:af:46:e7:88:b7:5c:e6:5c:26:b9:c0: c0:a6:55:fe:95:29:17:cc:73:ff:b1:38:0c:69:49: aa:6b:24:34:7e:bc:0c:59:4e:d6:02:c9:e5:e4:46: da:3a:fe:22:b5:7e:97:0c:1b:bc:a4:27:45:67:b7: 7e:b7:d3:43:ad:2d:cb:23:a0:33:93:c3:63:d9:e4: 26:ad:5f:d4:04:78:e1:82:f7:c9:8a:fc:d7:87:7f: 3f:c2:a5:7b:52:0d:35:7e:ce:64:06:a8:9e:85:5c: 78:0c:2e:94:a2:52:bb:54:3b:b2:21:b5:6d:54:4e: 7a:11:4a:5b:da:8a:85:4a:f4:12:0c:7c:a9:dd:78: d5:45:0b:b1:0d:fd:1f:eb:29:c8:ad:cc:b9:e6:7a: 38:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:7B:0D:B1:6E:20:0E:6F:2A:93:AD:89:5F:A9:04:CF:40:F2:62:D5 X509v3 Authority Key Identifier: keyid:3C:18:CD:8B:5B:01:D5:02:37:64:0C:26:C0:37:75:46:D8:04:FD:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911829D/5125526E9C6D11EF83A8BD16C4F9AE02/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911829D/5125526E9C6D11EF83A8BD16C4F9AE02/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:d9:24:ee:72:d6:a4:e2:69:b6:0f:19:2d:ad:16:ab:20:39: e0:0f:4b:77:5c:00:61:ea:0d:6d:f2:de:ef:0e:da:72:49:4e: 79:4f:37:97:8e:2c:8e:39:24:12:6c:a5:8e:d3:69:a0:e0:cd: b7:c6:fd:1d:93:bd:18:7c:c5:d5:ee:a9:d4:48:19:0b:3b:d2: c4:60:98:d1:5a:1e:03:f5:a3:33:94:5e:02:1e:5a:2b:0a:83: 80:18:1d:d8:55:21:1f:08:b8:17:7a:30:85:a2:2b:e8:fc:9c: ea:71:d5:d7:91:7e:72:b0:92:92:b4:c9:dc:86:55:45:29:27: cf:c1:b0:64:e2:b6:21:da:60:51:3f:05:66:34:2b:73:1a:f0: 4d:be:2e:6c:38:b0:69:5a:c7:b2:78:71:7f:ac:db:ca:80:ae: ee:67:55:83:8f:e7:1e:d7:5b:ef:5c:6f:2e:54:1f:46:62:a8: 1f:9f:23:17:f7:15:48:26:7a:ce:ca:1b:52:bb:10:8b:13:81: 47:96:ca:69:d9:cb:ec:ce:a7:18:e4:96:ec:02:e9:28:c7:94: 3c:11:56:cc:a2:a0:c3:74:4a:f7:ce:d9:9b:29:e2:6b:46:19: 36:14:0f:53:20:39:e2:36:d7:b3:bc:fe:6a:a1:07:64:70:1e: 2b:0b:69:6d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx ODI5RDExMC8GA1UEBRMoM0MxOENEOEI1QjAxRDUwMjM3NjQwQzI2QzAzNzc1NDZE ODA0RkRCNDAeFw0yNTA2MTMwNTQ1NDRaFw0yNTA2MjAwNTQ1NDRaMBgxFjAUBgNV BAMTDTY4NGJiYjA4LTVmYzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD0tQkpbBVmjj4VVshduYzf/WbucsS0m36h0dvoTugGFxb+6I8uON9dFc1ZGDSw fVAq9taBN2j7zfOAdkd5sDiqxVZxr5QaBisW1uk1Acs80dvr5adn0vlDyOVH3ZNi AfNtNWv2fKfh7eaXVHCvRueIt1zmXCa5wMCmVf6VKRfMc/+xOAxpSaprJDR+vAxZ TtYCyeXkRto6/iK1fpcMG7ykJ0Vnt36300OtLcsjoDOTw2PZ5CatX9QEeOGC98mK /NeHfz/CpXtSDTV+zmQGqJ6FXHgMLpSiUrtUO7IhtW1UTnoRSlvaioVK9BIMfKnd eNVFC7EN/R/rKcitzLnmejgnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZ3sNsW4g Dm8qk62JX6kEz0DyYtUwHwYDVR0jBBgwFoAUPBjNi1sB1QI3ZAwmwDd1RtgE/bQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE4MjlELzUxMjU1MjZFOUM2 RDExRUY4M0E4QkQxNkM0RjlBRTAyL1BCak5pMXNCMVFJM1pBd213RGQxUnRnRV9i US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUEJqTmkxc0IxUUkzWkF3bXdEZDFSdGdFX2JRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE4 MjlELzUxMjU1MjZFOUM2RDExRUY4M0E4QkQxNkM0RjlBRTAyL1BCak5pMXNCMVFJ M1pBd213RGQxUnRnRV9iUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFzZJO5y1qTiabYPGS2tFqsgOeAPS3dcAGHqDW3y3u8O2nJJTnlPN5eO LI45JBJspY7TaaDgzbfG/R2TvRh8xdXuqdRIGQs70sRgmNFaHgP1ozOUXgIeWisK g4AYHdhVIR8IuBd6MIWiK+j8nOpx1deRfnKwkpK0ydyGVUUpJ8/BsGTitiHaYFE/ BWY0K3Ma8E2+Lmw4sGlax7J4cX+s28qAru5nVYOP5x7XW+9cby5UH0ZiqB+fIxf3 FUgmes7KG1K7EIsTgUeWymnZy+zOpxjkluwC6SjHlDwRVsyioMN0SvfO2Zsp4mtG GTYUD1MgOeI217O8/mqhB2RwHisLaW0= -----END CERTIFICATE-----Generated at Sat Jun 14 19:30:54 2025 by rpki-client