$ rpki-client -vvf rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.mft File: c_u1j1Vx8_TGKmP99a_vnLcOdAM.mft (raw, json) Hash identifier: Mi8ci7IQDScM98/VdkePpCRLF7szgcJG2EbMBxwUQZ0= Subject key identifier: 48:68:45:53:E8:4C:09:E4:82:EC:37:49:85:F0:99:87:BC:64:30:E2 Authority key identifier: 73:FB:B5:8F:55:71:F3:F4:C6:2A:63:FD:F5:AF:EF:9C:B7:0E:74:03 Certificate issuer: /CN=A911C3BB/serialNumber=73FBB58F5571F3F4C62A63FDF5AFEF9CB70E7403 Certificate serial: 01BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_u1j1Vx8_TGKmP99a_vnLcOdAM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.mft Manifest number: 01B6 Signing time: Fri 13 Jun 2025 02:08:40 +0000 Manifest this update: Fri 13 Jun 2025 02:08:39 +0000 Manifest next update: Fri 20 Jun 2025 02:08:39 +0000 Files and hashes: 1: c_u1j1Vx8_TGKmP99a_vnLcOdAM.crl (hash: AJPf7mVBvP3loYTKH6gs2QWMzkFCUnN7tECGoq5HHZc=) 2: CB2788CAAB4C11EDB3DC7336C4F9AE02.roa (hash: 5/W5EqvBYrwaBbNXisgVsa/BWjLPbFWwbLiAWCjCMGo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.crl rsync://rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_u1j1Vx8_TGKmP99a_vnLcOdAM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 02:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 442 (0x1ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C3BB, serialNumber=73FBB58F5571F3F4C62A63FDF5AFEF9CB70E7403 Validity Not Before: Jun 13 02:08:39 2025 GMT Not After : Jun 20 02:08:39 2025 GMT Subject: CN=684b8827-5ef1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:dc:24:33:f3:34:2a:d6:a2:a4:a8:f6:3b:0c: 0c:fc:17:8a:f1:c6:64:60:31:c9:98:0e:70:ba:82: 4c:42:ea:e9:a2:d0:f6:a1:51:33:ad:10:d0:14:07: 85:be:dc:b1:d2:ee:4a:47:2d:37:d0:2f:52:54:46: b5:64:1a:c3:77:05:37:2f:e2:23:5c:bc:63:ba:34: 02:65:35:5d:be:ee:2a:b7:ba:9a:91:a8:76:5d:22: fe:87:40:b5:99:25:5b:7a:44:ea:67:a4:91:fa:f6: 87:dd:b8:8f:f1:e7:bd:03:01:ab:50:8e:f2:3e:13: b6:ef:74:8b:0c:26:f5:ff:f5:85:d9:5d:57:5b:bb: 2f:44:6e:a2:ad:9b:55:06:0c:85:bb:7c:06:83:23: ea:5f:d5:ea:56:ba:4c:44:00:d7:17:74:12:fc:07: 08:b0:e2:e1:cd:04:4b:e7:a2:21:7f:05:bc:54:6c: b8:e3:ff:0a:7f:c7:4a:73:23:74:06:c9:79:86:53: 2b:16:43:57:a4:92:3d:02:56:b1:87:ac:3f:58:bf: 86:8f:22:d0:97:99:01:5f:de:23:66:c8:3d:74:cb: 52:1e:eb:b9:f7:af:1e:70:26:f6:d6:2b:0a:c6:fd: 98:13:5b:4c:50:b1:2b:40:9e:e2:13:09:d4:16:fa: 99:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:68:45:53:E8:4C:09:E4:82:EC:37:49:85:F0:99:87:BC:64:30:E2 X509v3 Authority Key Identifier: keyid:73:FB:B5:8F:55:71:F3:F4:C6:2A:63:FD:F5:AF:EF:9C:B7:0E:74:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_u1j1Vx8_TGKmP99a_vnLcOdAM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:38:20:f0:27:66:c8:b4:0d:04:d1:25:70:07:5e:1d:2d:29: 8f:cb:a6:82:cc:52:6e:fa:5c:70:8a:b2:a7:ee:f9:bd:66:d8: 35:02:34:7a:76:a2:cd:a4:84:62:a7:81:66:97:73:f3:93:ca: 4a:7e:ea:88:dd:46:fc:be:cc:03:2a:dc:96:db:81:f1:21:2b: 4f:74:dc:fe:89:ce:6d:02:f6:f6:c1:62:23:34:41:89:52:50: 8c:ed:1f:b3:7c:bf:2b:e2:9c:1a:e0:a2:50:3b:f6:bc:df:62: ff:aa:16:fc:6c:bf:e0:73:80:26:fe:be:0d:67:f0:60:3f:ce: 4e:45:6c:55:15:56:90:a3:59:15:65:84:60:12:3d:b2:53:70: 4d:57:99:c4:59:c0:4c:f5:c9:f6:c0:88:67:7f:d9:a9:95:45: b3:21:93:1f:41:9f:b1:83:f3:63:4a:40:ae:c8:79:e0:b4:9d: 8d:b2:29:2d:5b:eb:bc:e9:64:33:d7:be:29:bc:74:91:80:f5: 9a:64:15:7c:29:af:0d:c8:51:64:e2:b8:d7:be:ed:d7:32:fc: df:9d:76:cd:a5:c6:af:42:e9:86:87:cd:b8:eb:d7:3c:bd:bc: 93:59:7b:bb:1b:60:cf:ce:12:bd:c2:fd:f6:5d:f8:11:c3:56: 87:a4:05:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMzQkIxMTAvBgNVBAUTKDczRkJCNThGNTU3MUYzRjRDNjJBNjNGREY1QUZFRjlD QjcwRTc0MDMwHhcNMjUwNjEzMDIwODM5WhcNMjUwNjIwMDIwODM5WjAYMRYwFAYD VQQDEw02ODRiODgyNy01ZWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsNwkM/M0KtaipKj2OwwM/BeK8cZkYDHJmA5wuoJMQurpotD2oVEzrRDQFAeF vtyx0u5KRy030C9SVEa1ZBrDdwU3L+IjXLxjujQCZTVdvu4qt7qakah2XSL+h0C1 mSVbekTqZ6SR+vaH3biP8ee9AwGrUI7yPhO273SLDCb1//WF2V1XW7svRG6irZtV BgyFu3wGgyPqX9XqVrpMRADXF3QS/AcIsOLhzQRL56IhfwW8VGy44/8Kf8dKcyN0 Bsl5hlMrFkNXpJI9Alaxh6w/WL+GjyLQl5kBX94jZsg9dMtSHuu5968ecCb21isK xv2YE1tMULErQJ7iEwnUFvqZcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEhoRVPo TAnkguw3SYXwmYe8ZDDiMB8GA1UdIwQYMBaAFHP7tY9VcfP0xipj/fWv75y3DnQD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzNCQi9DOTA4ODc5QUFC NDkxMUVEOUZCNDBCMzVDNEY5QUUwMi9jX3UxajFWeDhfVEdLbVA5OWFfdm5MY09k QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NfdTFqMVZ4OF9UR0ttUDk5YV92bkxjT2RBTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzNCQi9DOTA4ODc5QUFCNDkxMUVEOUZCNDBCMzVDNEY5QUUwMi9jX3UxajFWeDhf VEdLbVA5OWFfdm5MY09kQU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOOCDwJ2bItA0E0SVwB14dLSmPy6aCzFJu+lxwirKn7vm9Ztg1AjR6 dqLNpIRip4Fml3Pzk8pKfuqI3Ub8vswDKtyW24HxIStPdNz+ic5tAvb2wWIjNEGJ UlCM7R+zfL8r4pwa4KJQO/a832L/qhb8bL/gc4Am/r4NZ/BgP85ORWxVFVaQo1kV ZYRgEj2yU3BNV5nEWcBM9cn2wIhnf9mplUWzIZMfQZ+xg/NjSkCuyHngtJ2Nsikt W+u86WQz174pvHSRgPWaZBV8Ka8NyFFk4rjXvu3XMvzfnXbNpcavQumGh82469c8 vbyTWXu7G2DPzhK9wv32XfgRw1aHpAXG -----END CERTIFICATE-----Generated at Sat Jun 14 18:44:31 2025 by rpki-client