$ rpki-client -vvf rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.mft File: g1sFZ9k-rArjJOofFrPDnLGzOI4.mft (raw, json) Hash identifier: uyrUX1Q9bKgAYL2TJtR60338ZU8i4AkcTX7wheL54p8= Subject key identifier: 7E:19:01:75:E4:0E:C0:96:5C:7F:FC:01:51:03:8C:A8:3B:CF:46:7C Authority key identifier: 83:5B:05:67:D9:3E:AC:0A:E3:24:EA:1F:16:B3:C3:9C:B1:B3:38:8E Certificate issuer: /CN=A911F5B7/serialNumber=835B0567D93EAC0AE324EA1F16B3C39CB1B3388E Certificate serial: 0AD0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1sFZ9k-rArjJOofFrPDnLGzOI4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.mft Manifest number: 0C51 Signing time: Sat 14 Jun 2025 19:17:58 +0000 Manifest this update: Sat 14 Jun 2025 19:17:58 +0000 Manifest next update: Sat 21 Jun 2025 19:17:58 +0000 Files and hashes: 1: g1sFZ9k-rArjJOofFrPDnLGzOI4.crl (hash: BpRM5pQjoZhC2JMtdGGpShhxJfmP+Ls4se6uK3OYyNM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.crl rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1sFZ9k-rArjJOofFrPDnLGzOI4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 19:17:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2768 (0xad0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F5B7, serialNumber=835B0567D93EAC0AE324EA1F16B3C39CB1B3388E Validity Not Before: Jun 14 19:17:58 2025 GMT Not After : Jun 21 19:17:58 2025 GMT Subject: CN=684dcae6-9552 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:5b:7c:2d:33:ac:c2:4d:cc:63:19:16:80:5e: e8:e7:cc:15:22:93:c9:f7:25:c6:32:19:94:3e:08: 59:16:e6:6b:ee:09:23:b3:b4:03:0c:89:ca:89:8a: 21:33:8c:30:d9:02:f0:94:60:f0:4f:e5:c5:9e:90: c5:7d:7c:95:e5:54:0c:47:ae:4f:14:ee:39:f5:10: 48:80:ad:63:ec:c4:57:ae:20:38:64:da:4f:6e:01: 3b:b0:66:ee:48:cb:58:38:f1:78:04:d5:31:97:53: 43:d2:32:ce:2c:cc:2f:69:70:18:f9:99:a7:83:f3: 89:e2:a9:bc:54:8c:10:15:ba:f5:b4:9e:ca:77:05: 00:f1:ca:26:84:17:4d:8a:b7:bc:ba:59:ea:c2:5e: db:a0:de:f5:f8:df:89:62:27:d4:79:4b:25:46:2e: c7:10:75:d3:22:6f:53:46:22:2c:af:26:eb:47:32: 08:57:bb:3d:48:e8:e6:48:88:b6:fd:cf:fb:11:8a: 06:d9:85:97:90:48:c7:d5:45:b9:b7:34:22:c6:4f: c6:12:aa:06:a9:d8:8f:9b:e9:2d:f8:62:6d:a2:95: d1:ca:dc:c9:37:9b:74:aa:c8:2f:1d:f8:29:9a:ce: d8:b9:9c:3e:b6:d2:d3:9b:d9:28:36:03:87:9d:f6: 6e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:19:01:75:E4:0E:C0:96:5C:7F:FC:01:51:03:8C:A8:3B:CF:46:7C X509v3 Authority Key Identifier: keyid:83:5B:05:67:D9:3E:AC:0A:E3:24:EA:1F:16:B3:C3:9C:B1:B3:38:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1sFZ9k-rArjJOofFrPDnLGzOI4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:bd:9e:c6:db:bb:b6:b2:30:f1:c9:7f:b6:9e:7c:81:11:bc: 13:c9:7d:86:83:a6:23:ca:ed:2a:6e:73:65:81:6d:80:94:05: 07:61:f3:9e:c2:f6:00:1a:9c:a7:19:9e:03:6a:01:96:71:5e: cc:12:52:8c:17:da:b3:2f:97:70:f6:11:22:ea:2d:10:1e:2f: a0:af:14:0c:c8:ad:18:32:de:52:66:fe:8b:a0:94:ec:1a:e9: 6a:d8:6f:cc:33:73:7f:42:db:3e:ab:a6:09:ff:c8:30:de:91: 00:1c:46:5d:a8:c7:5e:93:03:1e:37:d8:18:c6:75:e6:49:eb: a7:70:fb:fb:ac:85:c8:e1:8b:66:07:3b:e3:61:d6:c4:47:7b: 0f:b6:bb:0f:10:b2:87:88:e3:9d:10:00:c9:30:34:07:54:2d: 9a:8c:9a:ce:e6:81:1a:cc:4b:7b:ce:5c:25:37:17:6c:9b:d7: e2:dc:96:ed:86:3c:dc:96:3b:43:fc:4c:8a:8f:28:b5:a8:af: d4:af:ea:09:23:1c:c9:45:7e:6f:66:65:a6:dc:6e:41:65:e4: 04:30:85:5e:be:b5:9e:fc:47:ac:6a:5e:9f:63:f4:83:2e:26: 81:cd:8e:ab:41:1b:34:f0:17:13:52:55:89:4a:4e:9e:6b:3c: 2d:35:6c:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCtAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY1QjcxMTAvBgNVBAUTKDgzNUIwNTY3RDkzRUFDMEFFMzI0RUExRjE2QjNDMzlD QjFCMzM4OEUwHhcNMjUwNjE0MTkxNzU4WhcNMjUwNjIxMTkxNzU4WjAYMRYwFAYD VQQDEw02ODRkY2FlNi05NTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwVt8LTOswk3MYxkWgF7o58wVIpPJ9yXGMhmUPghZFuZr7gkjs7QDDInKiYoh M4ww2QLwlGDwT+XFnpDFfXyV5VQMR65PFO459RBIgK1j7MRXriA4ZNpPbgE7sGbu SMtYOPF4BNUxl1ND0jLOLMwvaXAY+Zmng/OJ4qm8VIwQFbr1tJ7KdwUA8comhBdN ire8ulnqwl7boN71+N+JYifUeUslRi7HEHXTIm9TRiIsrybrRzIIV7s9SOjmSIi2 /c/7EYoG2YWXkEjH1UW5tzQixk/GEqoGqdiPm+kt+GJtopXRytzJN5t0qsgvHfgp ms7YuZw+ttLTm9koNgOHnfZuGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH4ZAXXk DsCWXH/8AVEDjKg7z0Z8MB8GA1UdIwQYMBaAFINbBWfZPqwK4yTqHxazw5yxsziO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjVCNy83MUU3QTIyMjUx OTUxMUVBODQ2NEJBNzhDNEY5QUUwMi9nMXNGWjlrLXJBcmpKT29mRnJQRG5MR3pP STQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2cxc0ZaOWstckFyakpPb2ZGclBEbkxHek9JNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjVCNy83MUU3QTIyMjUxOTUxMUVBODQ2NEJBNzhDNEY5QUUwMi9nMXNGWjlrLXJB cmpKT29mRnJQRG5MR3pPSTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBvZ7G27u2sjDxyX+2nnyBEbwTyX2Gg6Yjyu0qbnNlgW2AlAUHYfOe wvYAGpynGZ4DagGWcV7MElKMF9qzL5dw9hEi6i0QHi+grxQMyK0YMt5SZv6LoJTs Gulq2G/MM3N/Qts+q6YJ/8gw3pEAHEZdqMdekwMeN9gYxnXmSeuncPv7rIXI4Ytm BzvjYdbER3sPtrsPELKHiOOdEADJMDQHVC2ajJrO5oEazEt7zlwlNxdsm9fi3Jbt hjzcljtD/EyKjyi1qK/Ur+oJIxzJRX5vZmWm3G5BZeQEMIVevrWe/Eesal6fY/SD LiaBzY6rQRs08BcTUlWJSk6eazwtNWyX -----END CERTIFICATE-----Generated at Sun Jun 15 09:49:44 2025 by rpki-client