$ rpki-client -vvf rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft File: cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft (raw, json) Hash identifier: lxrV99A5ypP5XRO/aih8pyKvkvhk/x6pdPvICJNS/2k= Subject key identifier: 9A:F9:9D:2E:F0:55:D9:B4:76:6E:9F:7D:47:CB:03:69:82:53:36:63 Authority key identifier: 71:17:3E:DA:73:05:CC:FD:10:BD:78:D8:3A:93:30:E8:C7:64:0D:F6 Certificate issuer: /CN=A911F627/serialNumber=71173EDA7305CCFD10BD78D83A9330E8C7640DF6 Certificate serial: 016A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRc-2nMFzP0QvXjYOpMw6MdkDfY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft Manifest number: 0168 Signing time: Sun 15 Jun 2025 03:05:16 +0000 Manifest this update: Sun 15 Jun 2025 03:05:16 +0000 Manifest next update: Sun 22 Jun 2025 03:05:15 +0000 Files and hashes: 1: cRc-2nMFzP0QvXjYOpMw6MdkDfY.crl (hash: WkH9n55Id6qiKRYNxsWEih2knFoj/mJHNStIdftlvNY=) 2: C001E5861FCC11EEB409C35EC4F9AE02.roa (hash: HsjfDSOih06ECrmd3NlukL0cYpkEm4olWRK90K810ck=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.crl rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRc-2nMFzP0QvXjYOpMw6MdkDfY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 362 (0x16a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F627, serialNumber=71173EDA7305CCFD10BD78D83A9330E8C7640DF6 Validity Not Before: Jun 15 03:05:16 2025 GMT Not After : Jun 22 03:05:15 2025 GMT Subject: CN=684e386c-1eaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e1:31:c7:4d:45:48:9d:88:07:7f:54:fe:77: bf:be:28:35:0a:aa:1d:de:5e:b2:b2:8e:50:75:80: 5d:4f:52:cc:7b:ee:a8:e0:38:77:a0:e5:78:5e:87: 90:06:f7:de:bc:db:24:03:f1:a5:5e:cf:ee:97:86: e3:e4:81:3e:73:8b:46:87:47:54:9b:18:7a:9d:84: 1f:dd:98:46:35:0d:ae:d7:b6:25:56:43:59:e6:e7: 3a:ee:6c:b5:93:6b:06:ac:9b:76:4f:ac:c7:90:42: 5b:76:a5:b8:23:a0:d6:5f:89:9a:7d:00:07:26:7a: d8:d7:a3:7f:64:31:2a:7f:65:c0:95:3b:8d:cd:22: 97:8e:fd:0c:6c:df:12:de:fb:b8:b2:47:6e:c9:46: fe:af:7f:20:2c:1d:01:3a:b2:41:2a:ec:d5:31:93: 3e:22:76:3a:d9:31:e2:00:e0:79:f3:f1:37:83:5e: 4b:76:10:98:23:c0:37:c3:70:cc:90:d8:49:67:60: 7b:ed:fc:77:f6:fe:57:57:a8:24:3b:19:b9:64:e1: a5:11:fd:c5:21:7b:61:e8:3d:c9:2f:21:cf:39:39: 4a:1f:01:97:01:98:fe:07:da:13:e8:bc:33:ec:24: c0:88:6e:de:d5:2c:7b:53:1e:87:0c:f6:71:73:f3: 59:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:F9:9D:2E:F0:55:D9:B4:76:6E:9F:7D:47:CB:03:69:82:53:36:63 X509v3 Authority Key Identifier: keyid:71:17:3E:DA:73:05:CC:FD:10:BD:78:D8:3A:93:30:E8:C7:64:0D:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRc-2nMFzP0QvXjYOpMw6MdkDfY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:a1:d6:17:ac:bd:8b:ef:d9:bc:b9:dd:fc:73:7f:64:0b:d0: bd:40:7f:60:2d:d7:16:d8:a7:5b:17:e7:b3:38:e7:46:7c:e3: 6b:2f:81:8e:76:8d:3c:16:28:fc:aa:dd:ce:a2:73:b6:b8:42: 84:4d:52:b0:8e:7b:75:4c:ed:65:08:4e:60:62:b7:b0:0f:1c: ba:1f:99:74:cc:03:f7:25:e3:5c:e9:c6:38:2d:32:3b:99:b4: af:14:64:c8:62:6f:53:4a:ac:cf:71:d7:f3:a6:a5:d7:f3:51: 60:2b:88:04:df:81:8c:fa:8a:48:6e:3e:3f:2b:f1:7a:cb:0e: ff:b6:d0:ac:1d:99:72:c3:70:55:90:ad:f0:ee:b1:80:06:44: ac:b4:f4:5f:b4:09:38:51:0f:3d:40:a7:cf:02:bb:b4:78:86: 0c:1c:62:aa:c2:e0:7e:d6:76:a1:a0:95:54:9d:11:56:e8:92: e7:59:e3:d4:1b:1b:61:b6:69:fd:6d:5c:03:98:e3:e8:d1:6d: 2d:e3:b0:94:6e:10:90:1b:d7:ec:0f:95:4e:47:93:c8:59:90: b0:bb:7f:e5:63:19:e7:71:e4:f6:f6:68:70:9b:2c:80:32:41: 5c:64:5b:6b:84:08:87:2d:1b:1b:6a:3f:15:8f:8e:76:e2:ba: 4b:7b:56:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY2MjcxMTAvBgNVBAUTKDcxMTczRURBNzMwNUNDRkQxMEJENzhEODNBOTMzMEU4 Qzc2NDBERjYwHhcNMjUwNjE1MDMwNTE2WhcNMjUwNjIyMDMwNTE1WjAYMRYwFAYD VQQDEw02ODRlMzg2Yy0xZWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyeExx01FSJ2IB39U/ne/vig1Cqod3l6yso5QdYBdT1LMe+6o4Dh3oOV4XoeQ BvfevNskA/GlXs/ul4bj5IE+c4tGh0dUmxh6nYQf3ZhGNQ2u17YlVkNZ5uc67my1 k2sGrJt2T6zHkEJbdqW4I6DWX4mafQAHJnrY16N/ZDEqf2XAlTuNzSKXjv0MbN8S 3vu4skduyUb+r38gLB0BOrJBKuzVMZM+InY62THiAOB58/E3g15LdhCYI8A3w3DM kNhJZ2B77fx39v5XV6gkOxm5ZOGlEf3FIXth6D3JLyHPOTlKHwGXAZj+B9oT6Lwz 7CTAiG7e1Sx7Ux6HDPZxc/NZDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJr5nS7w Vdm0dm6ffUfLA2mCUzZjMB8GA1UdIwQYMBaAFHEXPtpzBcz9EL142DqTMOjHZA32 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjYyNy80OTNEQTM2NjFG QzkxMUVFOTk5RjU5NjBDNEY5QUUwMi9jUmMtMm5NRnpQMFF2WGpZT3BNdzZNZGtE ZlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NSYy0ybk1GelAwUXZYallPcE13Nk1ka0RmWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjYyNy80OTNEQTM2NjFGQzkxMUVFOTk5RjU5NjBDNEY5QUUwMi9jUmMtMm5NRnpQ MFF2WGpZT3BNdzZNZGtEZlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLodYXrL2L79m8ud38c39kC9C9QH9gLdcW2KdbF+ezOOdGfONrL4GO do08Fij8qt3OonO2uEKETVKwjnt1TO1lCE5gYrewDxy6H5l0zAP3JeNc6cY4LTI7 mbSvFGTIYm9TSqzPcdfzpqXX81FgK4gE34GM+opIbj4/K/F6yw7/ttCsHZlyw3BV kK3w7rGABkSstPRftAk4UQ89QKfPAru0eIYMHGKqwuB+1nahoJVUnRFW6JLnWePU Gxthtmn9bVwDmOPo0W0t47CUbhCQG9fsD5VOR5PIWZCwu3/lYxnnceT29mhwmyyA MkFcZFtrhAiHLRsbaj8Vj4524rpLe1az -----END CERTIFICATE-----Generated at Sun Jun 15 08:35:20 2025 by rpki-client