$ rpki-client -vvf rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/fYMJxfIu84yfUsnLfjr_WEjvvgQ.mft File: fYMJxfIu84yfUsnLfjr_WEjvvgQ.mft (raw, json) Hash identifier: NWen9zofa1cWtfY4cD9qzicY5cQ2gxMXcadyzgGXrak= Subject key identifier: 85:38:0F:CA:AE:9B:B4:22:5A:73:9D:57:3B:56:DD:E9:D8:AE:39:FA Authority key identifier: 7D:83:09:C5:F2:2E:F3:8C:9F:52:C9:CB:7E:3A:FF:58:48:EF:BE:04 Certificate issuer: /CN=A911ABF4/serialNumber=7D8309C5F22EF38C9F52C9CB7E3AFF5848EFBE04 Certificate serial: 0F3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fYMJxfIu84yfUsnLfjr_WEjvvgQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/fYMJxfIu84yfUsnLfjr_WEjvvgQ.mft Manifest number: 17E1 Signing time: Sat 14 Jun 2025 17:32:12 +0000 Manifest this update: Sat 14 Jun 2025 17:32:11 +0000 Manifest next update: Sat 21 Jun 2025 17:32:11 +0000 Files and hashes: 1: fYMJxfIu84yfUsnLfjr_WEjvvgQ.crl (hash: XS4Q0AJTdBvpyRjdFeaT/nQSO93XnYUbS90xOY4C0Ok=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/fYMJxfIu84yfUsnLfjr_WEjvvgQ.crl rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/fYMJxfIu84yfUsnLfjr_WEjvvgQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fYMJxfIu84yfUsnLfjr_WEjvvgQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 17:13:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3903 (0xf3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911ABF4, serialNumber=7D8309C5F22EF38C9F52C9CB7E3AFF5848EFBE04 Validity Not Before: Jun 14 17:32:11 2025 GMT Not After : Jun 21 17:32:11 2025 GMT Subject: CN=684db21c-3862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b9:7c:ee:8d:57:f3:b5:5f:11:1b:9e:01:a8: 45:a9:69:1f:f9:26:78:54:da:ea:55:19:b2:44:aa: 18:10:a1:09:23:90:62:1a:9b:79:94:1e:be:ad:57: 79:72:b8:93:39:57:5a:f6:9e:13:de:01:a9:e0:e8: 55:07:95:57:70:07:f3:36:24:9d:17:6e:43:a5:74: ff:5f:d9:0c:ab:5e:8a:af:5a:d1:97:53:20:07:93: 86:77:82:2a:dd:e9:e0:f3:97:91:ed:94:9c:06:9d: 12:eb:d8:3c:a0:1c:ba:89:60:07:a6:7f:c1:55:38: 0d:1c:59:53:9d:3e:2a:85:31:fd:09:5d:3a:cc:8c: bd:83:4e:b4:69:db:44:ec:5b:db:5f:0e:64:de:1e: 11:08:ea:c0:2b:b9:51:79:41:68:2e:5d:c5:3f:04: 6d:75:9a:79:22:54:ae:7a:5c:7b:8b:03:28:af:ef: b9:8e:7e:2f:cf:21:3b:62:bb:d9:78:40:58:36:90: 88:83:2e:c1:84:42:ea:36:62:33:b0:64:5f:a0:2c: ff:0b:ef:f2:3a:1b:85:46:c4:69:c1:16:ad:b4:c0: f9:20:ea:93:ed:a5:9b:68:6a:53:cf:f9:39:05:d5: b8:51:54:f3:bc:ca:cd:19:e4:ed:d0:33:da:64:7b: 04:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:38:0F:CA:AE:9B:B4:22:5A:73:9D:57:3B:56:DD:E9:D8:AE:39:FA X509v3 Authority Key Identifier: keyid:7D:83:09:C5:F2:2E:F3:8C:9F:52:C9:CB:7E:3A:FF:58:48:EF:BE:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/fYMJxfIu84yfUsnLfjr_WEjvvgQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fYMJxfIu84yfUsnLfjr_WEjvvgQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/fYMJxfIu84yfUsnLfjr_WEjvvgQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:33:a1:71:83:8c:6b:12:fb:e4:4e:c3:d8:c0:66:5b:12:62: 0e:d8:9d:a3:d5:d2:3c:2d:1e:5d:e7:99:93:a5:77:8b:ff:b4: 53:1c:f1:1f:aa:12:54:ab:e6:14:44:2c:f4:f6:86:85:c2:e2: 83:bf:f3:fc:3f:7c:27:b7:bc:0f:a1:68:03:bd:9b:16:2e:80: 96:9c:d7:2a:9f:01:27:e8:4b:57:84:36:0c:62:b2:1a:5b:a4: bc:02:0e:c1:c1:58:61:b6:ad:d5:5d:bd:a2:da:f1:c4:73:3a: ff:4b:63:ea:31:f7:cb:dd:53:21:59:cc:e4:18:94:9e:6b:9a: d1:da:8d:d9:d1:92:c6:70:3b:aa:88:65:c7:57:3f:29:cd:df: 03:10:85:be:02:88:dc:fe:0c:74:18:c1:e8:7e:4d:64:67:b2: 4b:c9:a7:be:b8:72:4b:db:9f:c7:4b:8e:0f:eb:8e:aa:e7:6c: bf:25:87:bf:5c:61:76:16:0d:42:cf:43:97:38:c7:55:79:aa: 66:87:01:de:74:c0:8d:9d:ce:df:15:d9:cb:b4:13:a8:cd:3c: b5:4e:af:79:5e:3b:0e:56:6b:7a:ea:b2:ba:a9:8b:de:31:e6: f0:5a:9d:84:40:47:9f:2a:9b:e9:b6:2f:e4:d8:2d:52:2b:20: 5a:5c:ae:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDz8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFCRjQxMTAvBgNVBAUTKDdEODMwOUM1RjIyRUYzOEM5RjUyQzlDQjdFM0FGRjU4 NDhFRkJFMDQwHhcNMjUwNjE0MTczMjExWhcNMjUwNjIxMTczMjExWjAYMRYwFAYD VQQDEw02ODRkYjIxYy0zODYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2rl87o1X87VfERueAahFqWkf+SZ4VNrqVRmyRKoYEKEJI5BiGpt5lB6+rVd5 criTOVda9p4T3gGp4OhVB5VXcAfzNiSdF25DpXT/X9kMq16Kr1rRl1MgB5OGd4Iq 3eng85eR7ZScBp0S69g8oBy6iWAHpn/BVTgNHFlTnT4qhTH9CV06zIy9g060adtE 7FvbXw5k3h4RCOrAK7lReUFoLl3FPwRtdZp5IlSuelx7iwMor++5jn4vzyE7YrvZ eEBYNpCIgy7BhELqNmIzsGRfoCz/C+/yOhuFRsRpwRattMD5IOqT7aWbaGpTz/k5 BdW4UVTzvMrNGeTt0DPaZHsEcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIU4D8qu m7QiWnOdVztW3enYrjn6MB8GA1UdIwQYMBaAFH2DCcXyLvOMn1LJy346/1hI774E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUJGNC9FQTg3MTg1Qzcy MUIxMUU5QkI3NDgxNTBDNEY5QUUwMi9mWU1KeGZJdTg0eWZVc25MZmpyX1dFanZ2 Z1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZZTUp4Zkl1ODR5ZlVzbkxmanJfV0VqdnZnUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUJGNC9FQTg3MTg1QzcyMUIxMUU5QkI3NDgxNTBDNEY5QUUwMi9mWU1KeGZJdTg0 eWZVc25MZmpyX1dFanZ2Z1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHM6Fxg4xrEvvkTsPYwGZbEmIO2J2j1dI8LR5d55mTpXeL/7RTHPEf qhJUq+YURCz09oaFwuKDv/P8P3wnt7wPoWgDvZsWLoCWnNcqnwEn6EtXhDYMYrIa W6S8Ag7BwVhhtq3VXb2i2vHEczr/S2PqMffL3VMhWczkGJSea5rR2o3Z0ZLGcDuq iGXHVz8pzd8DEIW+Aojc/gx0GMHofk1kZ7JLyae+uHJL25/HS44P646q52y/JYe/ XGF2Fg1Cz0OXOMdVeapmhwHedMCNnc7fFdnLtBOozTy1Tq95XjsOVmt66rK6qYve MebwWp2EQEefKpvpti/k2C1SKyBaXK47 -----END CERTIFICATE-----Generated at Sat Jun 14 19:36:43 2025 by rpki-client