$ rpki-client -vvf rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/u-IzVg79QJs4zbgKAFdaN7qJZDU.mft File: u-IzVg79QJs4zbgKAFdaN7qJZDU.mft (raw, json) Hash identifier: I+Bm8Ca0Z2p0vOZPlOhuWeDle1Rf1nUuIlnaFIwap00= Subject key identifier: 2D:82:77:B5:00:64:C5:A2:DB:F8:33:BB:AD:5F:EB:AC:E5:04:FE:AC Authority key identifier: BB:E2:33:56:0E:FD:40:9B:38:CD:B8:0A:00:57:5A:37:BA:89:64:35 Certificate issuer: /CN=A911ABF4/serialNumber=BBE233560EFD409B38CDB80A00575A37BA896435 Certificate serial: 0823 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-IzVg79QJs4zbgKAFdaN7qJZDU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/u-IzVg79QJs4zbgKAFdaN7qJZDU.mft Manifest number: 17E2 Signing time: Sat 14 Jun 2025 17:32:14 +0000 Manifest this update: Sat 14 Jun 2025 17:32:14 +0000 Manifest next update: Sat 21 Jun 2025 17:32:14 +0000 Files and hashes: 1: u-IzVg79QJs4zbgKAFdaN7qJZDU.crl (hash: 64VL5A1jY+Q8ZwtGm/v+bY2wRhqxsDKWsLB8rjn3BVQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/u-IzVg79QJs4zbgKAFdaN7qJZDU.crl rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/u-IzVg79QJs4zbgKAFdaN7qJZDU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-IzVg79QJs4zbgKAFdaN7qJZDU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 17:32:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2083 (0x823) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911ABF4, serialNumber=BBE233560EFD409B38CDB80A00575A37BA896435 Validity Not Before: Jun 14 17:32:14 2025 GMT Not After : Jun 21 17:32:14 2025 GMT Subject: CN=684db21e-1449 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d0:a5:b2:ec:3f:a9:c5:3a:4e:1b:ec:db:c4: df:42:30:c7:55:7c:82:a4:e2:ff:2e:ff:0b:b0:9b: bf:7c:57:da:34:90:b3:3d:63:7f:97:94:a7:3f:f8: d9:b4:f7:72:9d:38:ae:a9:4d:c1:23:d8:b6:62:b5: 0e:28:0e:3f:98:f1:00:ba:d2:46:90:91:6b:e5:52: 1c:23:8d:46:e0:24:05:11:e9:d0:f0:f2:4d:bc:c1: 90:b8:8b:06:55:82:69:86:6f:d5:a7:3c:c8:a1:14: c2:3b:17:9e:e1:6c:9e:96:45:43:d9:f6:47:2b:0c: 21:5a:41:60:68:38:fa:7c:d5:7b:3c:47:89:88:c5: 5e:ae:1d:d0:72:0c:04:68:63:87:b8:a3:c0:f0:b1: 19:e7:bf:c2:f0:34:1a:b6:b4:bc:80:f4:b4:57:ba: de:8e:ed:21:43:91:cd:cf:e7:5f:3d:43:1d:d7:5f: 45:43:7b:dd:53:2d:2b:a5:ad:30:fb:12:cf:c9:f7: 91:7e:a4:d9:00:34:b7:e0:43:eb:18:79:25:5a:e0: 68:e1:dc:d3:a4:ec:81:ad:03:cb:04:8e:26:59:10: e1:2d:55:83:85:5c:cb:a9:8c:28:a0:79:c4:c2:8e: e9:43:78:03:bd:7e:d1:13:a2:fb:03:cf:61:83:09: ab:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:82:77:B5:00:64:C5:A2:DB:F8:33:BB:AD:5F:EB:AC:E5:04:FE:AC X509v3 Authority Key Identifier: keyid:BB:E2:33:56:0E:FD:40:9B:38:CD:B8:0A:00:57:5A:37:BA:89:64:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/u-IzVg79QJs4zbgKAFdaN7qJZDU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-IzVg79QJs4zbgKAFdaN7qJZDU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/u-IzVg79QJs4zbgKAFdaN7qJZDU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:52:a4:07:ec:f6:4c:00:36:c3:05:5d:05:d4:b0:7e:7a:2d: da:55:50:c3:be:b6:50:00:51:f5:1c:e8:7c:3a:85:64:ed:30: 5e:fc:25:b2:35:dd:03:4a:65:a8:0f:6e:38:4b:24:5c:89:d5: da:bd:bc:85:1e:e6:5c:a6:73:8f:a5:18:a4:11:6b:c5:ef:e4: 0f:30:4a:45:cb:c5:37:9b:d3:24:c4:92:28:a4:ac:5c:d4:95: 24:b9:7c:d9:87:17:26:5a:59:ed:1c:29:a2:ff:f0:ae:32:f5: 5d:cc:62:c4:c6:72:2f:ef:14:52:58:80:08:7b:21:1c:57:dd: b3:b8:89:79:39:ee:f2:49:6e:a4:eb:9d:d7:6c:57:85:51:ef: 13:57:64:69:f8:96:07:7f:9f:dd:a1:42:59:12:99:16:e7:3b: 01:ed:36:12:92:98:76:04:fb:fa:38:86:35:d8:60:88:4e:b1: f9:12:bb:a1:0b:24:9d:db:63:76:2d:b0:c5:2d:0a:36:bb:2c: a6:c3:d0:0a:71:81:d4:d2:7f:96:ff:91:b3:71:17:07:b0:6b: d5:c2:e0:71:4a:dc:7f:b0:f1:fe:5d:5f:3f:fc:15:f0:c6:33: 01:40:e2:23:9f:33:02:d3:cb:04:bb:b7:a5:02:6d:b1:1a:41: 8d:f2:5c:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFCRjQxMTAvBgNVBAUTKEJCRTIzMzU2MEVGRDQwOUIzOENEQjgwQTAwNTc1QTM3 QkE4OTY0MzUwHhcNMjUwNjE0MTczMjE0WhcNMjUwNjIxMTczMjE0WjAYMRYwFAYD VQQDEw02ODRkYjIxZS0xNDQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn9Clsuw/qcU6Thvs28TfQjDHVXyCpOL/Lv8LsJu/fFfaNJCzPWN/l5SnP/jZ tPdynTiuqU3BI9i2YrUOKA4/mPEAutJGkJFr5VIcI41G4CQFEenQ8PJNvMGQuIsG VYJphm/VpzzIoRTCOxee4WyelkVD2fZHKwwhWkFgaDj6fNV7PEeJiMVerh3QcgwE aGOHuKPA8LEZ57/C8DQatrS8gPS0V7reju0hQ5HNz+dfPUMd119FQ3vdUy0rpa0w +xLPyfeRfqTZADS34EPrGHklWuBo4dzTpOyBrQPLBI4mWRDhLVWDhVzLqYwooHnE wo7pQ3gDvX7RE6L7A89hgwmrzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC2Cd7UA ZMWi2/gzu61f66zlBP6sMB8GA1UdIwQYMBaAFLviM1YO/UCbOM24CgBXWje6iWQ1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUJGNC9FQTg3MTg1Qzcy MUIxMUU5QkI3NDgxNTBDNEY5QUUwMi91LUl6Vmc3OVFKczR6YmdLQUZkYU43cUpa RFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UtSXpWZzc5UUpzNHpiZ0tBRmRhTjdxSlpEVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUJGNC9FQTg3MTg1QzcyMUIxMUU5QkI3NDgxNTBDNEY5QUUwMi91LUl6Vmc3OVFK czR6YmdLQUZkYU43cUpaRFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeUqQH7PZMADbDBV0F1LB+ei3aVVDDvrZQAFH1HOh8OoVk7TBe/CWy Nd0DSmWoD244SyRcidXavbyFHuZcpnOPpRikEWvF7+QPMEpFy8U3m9MkxJIopKxc 1JUkuXzZhxcmWlntHCmi//CuMvVdzGLExnIv7xRSWIAIeyEcV92zuIl5Oe7ySW6k 653XbFeFUe8TV2Rp+JYHf5/doUJZEpkW5zsB7TYSkph2BPv6OIY12GCITrH5Eruh CySd22N2LbDFLQo2uyymw9AKcYHU0n+W/5GzcRcHsGvVwuBxStx/sPH+XV8//BXw xjMBQOIjnzMC08sEu7elAm2xGkGN8lzJ -----END CERTIFICATE-----Generated at Sun Jun 15 10:15:47 2025 by rpki-client