$ rpki-client -vvf rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/IwN4FncHnC-7R0lkDwZXociO20Q.mft File: IwN4FncHnC-7R0lkDwZXociO20Q.mft (raw, json) Hash identifier: 7xBbRJIG99ihpApIbqjdLVW9herGrr/lnlvB//8Pen4= Subject key identifier: 2F:4A:39:D1:F3:7C:F2:55:E6:26:9A:BE:BA:8D:25:95:87:FF:50:AE Authority key identifier: 23:03:78:16:77:07:9C:2F:BB:47:49:64:0F:06:57:A1:C8:8E:DB:44 Certificate issuer: /CN=A911E0B4/serialNumber=2303781677079C2FBB4749640F0657A1C88EDB44 Certificate serial: 64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IwN4FncHnC-7R0lkDwZXociO20Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/IwN4FncHnC-7R0lkDwZXociO20Q.mft Manifest number: 64 Signing time: Fri 13 Jun 2025 05:56:11 +0000 Manifest this update: Fri 13 Jun 2025 05:56:11 +0000 Manifest next update: Fri 20 Jun 2025 05:56:11 +0000 Files and hashes: 1: IwN4FncHnC-7R0lkDwZXociO20Q.crl (hash: pq/BapI8zrInvbI9smwBH+34/SqINYFwgbZkfPj1QkY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/IwN4FncHnC-7R0lkDwZXociO20Q.crl rsync://rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/IwN4FncHnC-7R0lkDwZXociO20Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IwN4FncHnC-7R0lkDwZXociO20Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 05:56:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 100 (0x64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E0B4, serialNumber=2303781677079C2FBB4749640F0657A1C88EDB44 Validity Not Before: Jun 13 05:56:11 2025 GMT Not After : Jun 20 05:56:11 2025 GMT Subject: CN=684bbd7b-970f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:86:94:f6:cc:c5:dd:d9:91:85:01:c2:1f:14: a2:81:16:a7:df:dc:dd:be:b0:ca:4a:7b:4d:ed:cf: fd:98:f9:38:38:1a:25:c4:f5:4b:a9:f8:fa:08:0b: 61:b3:d5:00:93:8d:e0:58:42:6c:08:fe:bc:8f:a5: 45:19:ff:6f:20:84:d6:c1:8f:8a:c1:80:2c:d4:3a: 62:ed:61:56:41:9b:9a:35:e5:f0:56:f4:12:b1:b6: 53:01:4a:4c:b4:f4:88:d4:93:58:d5:62:9e:db:b0: 42:f9:86:b0:4a:be:07:54:1d:02:fe:06:6d:f8:a7: ef:b5:dd:d8:52:f4:52:26:a1:53:26:a9:f2:0c:01: cd:a8:ea:92:80:58:60:1d:6b:07:82:cb:34:15:93: 99:c7:00:44:a8:e6:78:42:03:c2:d4:8a:0f:19:76: 19:87:c8:76:30:2e:53:2f:03:b1:6e:54:f7:b7:5c: 44:a6:f2:13:bf:da:6c:f8:bc:a3:34:8b:24:0e:32: 40:85:f5:d3:ac:15:d6:b3:64:61:1c:13:88:a0:f6: c4:d8:aa:c7:cd:08:98:6c:2b:de:8d:31:cf:07:5a: aa:fb:ad:07:39:0f:27:ec:80:92:7f:0f:7b:af:a0: 5d:3e:48:2c:e1:ac:21:66:b4:98:d5:25:f7:c0:80: ee:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:4A:39:D1:F3:7C:F2:55:E6:26:9A:BE:BA:8D:25:95:87:FF:50:AE X509v3 Authority Key Identifier: keyid:23:03:78:16:77:07:9C:2F:BB:47:49:64:0F:06:57:A1:C8:8E:DB:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/IwN4FncHnC-7R0lkDwZXociO20Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IwN4FncHnC-7R0lkDwZXociO20Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/IwN4FncHnC-7R0lkDwZXociO20Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:a9:a7:e3:38:7f:b7:3d:de:da:b6:03:79:b5:bf:e2:06:73: 83:a8:60:0f:d3:3e:fd:67:25:7f:10:ac:11:90:1a:14:23:ee: 4e:60:20:9c:d0:ea:eb:e2:6b:c1:33:9a:6f:7b:4b:e0:88:09: 33:ea:0e:18:b7:28:6e:f3:20:96:95:3b:e3:0f:91:1a:72:79: fe:dd:c5:25:9c:77:46:6b:93:fa:79:8c:e7:f2:9a:72:75:b8: 0e:22:7d:77:ef:82:a2:81:a6:66:05:72:02:95:ef:1d:5c:26: 93:7c:c0:30:1d:b5:12:ea:c1:ce:17:8b:18:38:ed:c3:0c:6a: c9:62:4a:35:94:53:ad:48:09:0e:cf:0a:95:0f:67:52:df:0d: 96:fb:0f:be:32:4f:14:38:7b:b7:dd:bf:e8:22:40:ce:6c:d8: 8d:60:46:d8:12:49:8e:81:28:49:82:7e:63:11:1d:dd:9e:ff: 1a:9a:3e:01:6a:80:78:34:ea:47:ad:11:48:17:31:d6:20:b2: 03:ab:6f:89:a3:a7:00:26:7b:5d:99:e4:7d:dc:23:5c:4f:62: 10:e7:e7:6c:2f:d9:fc:3b:71:ac:d7:20:93:a6:58:e6:36:ec: ac:8e:c9:d8:e9:80:88:be:b8:6d:d6:1c:42:e1:50:07:a7:e9: 28:21:b8:f5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx RTBCNDExMC8GA1UEBRMoMjMwMzc4MTY3NzA3OUMyRkJCNDc0OTY0MEYwNjU3QTFD ODhFREI0NDAeFw0yNTA2MTMwNTU2MTFaFw0yNTA2MjAwNTU2MTFaMBgxFjAUBgNV BAMTDTY4NGJiZDdiLTk3MGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDYhpT2zMXd2ZGFAcIfFKKBFqff3N2+sMpKe03tz/2Y+Tg4GiXE9Uup+PoIC2Gz 1QCTjeBYQmwI/ryPpUUZ/28ghNbBj4rBgCzUOmLtYVZBm5o15fBW9BKxtlMBSky0 9IjUk1jVYp7bsEL5hrBKvgdUHQL+Bm34p++13dhS9FImoVMmqfIMAc2o6pKAWGAd aweCyzQVk5nHAESo5nhCA8LUig8ZdhmHyHYwLlMvA7FuVPe3XESm8hO/2mz4vKM0 iyQOMkCF9dOsFdazZGEcE4ig9sTYqsfNCJhsK96NMc8HWqr7rQc5DyfsgJJ/D3uv oF0+SCzhrCFmtJjVJffAgO5LAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUL0o50fN8 8lXmJpq+uo0llYf/UK4wHwYDVR0jBBgwFoAUIwN4FncHnC+7R0lkDwZXociO20Qw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFFMEI0L0YyMjMxREU0QUYz ODExRUZBMjBERDAxM0M0RjlBRTAyL0l3TjRGbmNIbkMtN1IwbGtEd1pYb2NpTzIw US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSXdONEZuY0huQy03UjBsa0R3WlhvY2lPMjBRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFF MEI0L0YyMjMxREU0QUYzODExRUZBMjBERDAxM0M0RjlBRTAyL0l3TjRGbmNIbkMt N1IwbGtEd1pYb2NpTzIwUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEipp+M4f7c93tq2A3m1v+IGc4OoYA/TPv1nJX8QrBGQGhQj7k5gIJzQ 6uvia8Ezmm97S+CICTPqDhi3KG7zIJaVO+MPkRpyef7dxSWcd0Zrk/p5jOfymnJ1 uA4ifXfvgqKBpmYFcgKV7x1cJpN8wDAdtRLqwc4Xixg47cMMasliSjWUU61ICQ7P CpUPZ1LfDZb7D74yTxQ4e7fdv+giQM5s2I1gRtgSSY6BKEmCfmMRHd2e/xqaPgFq gHg06ketEUgXMdYgsgOrb4mjpwAme12Z5H3cI1xPYhDn52wv2fw7cazXIJOmWOY2 7KyOydjpgIi+uG3WHELhUAen6SghuPU= -----END CERTIFICATE-----Generated at Sat Jun 14 19:38:01 2025 by rpki-client