$ rpki-client -vvf rpki.apnic.net/member_repository/A911FCFC/0EF3B3887D3E11EB9EDF687CC4F9AE02/PSZeQBIxQ3qRDsIf5O1O47EmnI0.mft File: PSZeQBIxQ3qRDsIf5O1O47EmnI0.mft (raw, json) Hash identifier: 0nYDjVoWXYq1OmiIZYEhnHdc72BFl9bxg3sHNxJnORo= Subject key identifier: B1:85:4E:BF:41:71:91:73:CD:4E:2C:10:31:07:36:4A:76:A4:D4:4D Authority key identifier: 3D:26:5E:40:12:31:43:7A:91:0E:C2:1F:E4:ED:4E:E3:B1:26:9C:8D Certificate issuer: /CN=A911FCFC/serialNumber=3D265E401231437A910EC21FE4ED4EE3B1269C8D Certificate serial: 0685 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSZeQBIxQ3qRDsIf5O1O47EmnI0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FCFC/0EF3B3887D3E11EB9EDF687CC4F9AE02/PSZeQBIxQ3qRDsIf5O1O47EmnI0.mft Manifest number: 067A Signing time: Sat 14 Jun 2025 22:04:20 +0000 Manifest this update: Sat 14 Jun 2025 22:04:19 +0000 Manifest next update: Sat 21 Jun 2025 22:04:19 +0000 Files and hashes: 1: PSZeQBIxQ3qRDsIf5O1O47EmnI0.crl (hash: iMiSO8OX68YUtF/RPPC0eEalKwqFVgKWubY/uE2sa6U=) 2: 584CC9ACEA0911EF91395D2BC4F9AE02.roa (hash: 0CvjA6RG6CwLDhsi+lvIuB2qC+UIcfKPm+dtie8AJzA=) 3: 3A542BE0BC7511EBBB084D27C4F9AE02.roa (hash: h6cfh4R2DSVctuRgtsUmGsASm4gMo0dIEjDPej0xQNc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FCFC/0EF3B3887D3E11EB9EDF687CC4F9AE02/PSZeQBIxQ3qRDsIf5O1O47EmnI0.crl rsync://rpki.apnic.net/member_repository/A911FCFC/0EF3B3887D3E11EB9EDF687CC4F9AE02/PSZeQBIxQ3qRDsIf5O1O47EmnI0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSZeQBIxQ3qRDsIf5O1O47EmnI0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 22:04:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1669 (0x685) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FCFC, serialNumber=3D265E401231437A910EC21FE4ED4EE3B1269C8D Validity Not Before: Jun 14 22:04:19 2025 GMT Not After : Jun 21 22:04:19 2025 GMT Subject: CN=684df1e3-d419 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:23:ff:6e:f1:63:cd:7e:5f:25:db:e3:1f:24: 18:79:5c:57:89:92:96:8a:34:1b:7a:5d:31:8f:ca: a2:64:76:ff:74:60:98:65:4d:49:b9:d7:08:55:40: 14:a8:dd:26:5f:86:6a:6b:4b:78:6a:d9:17:b7:77: 86:31:df:67:9e:c2:a7:f0:b7:d5:17:02:95:03:17: 6a:6d:1e:5b:33:01:84:ba:58:23:5b:7a:dd:25:8f: b2:39:6e:e6:3f:94:aa:29:90:f7:94:f4:89:a3:76: e1:fe:c0:28:7c:4b:c9:27:7b:14:63:40:d0:8c:7d: 18:6f:1c:2a:ff:17:56:50:0f:a6:27:2c:17:05:c1: 4d:50:9b:dc:e9:58:49:82:4a:8f:ec:2f:e8:61:7a: e4:69:50:07:f8:52:f9:4c:58:5a:79:b8:75:2e:94: 0d:d9:25:28:7f:4d:2d:49:72:7d:6b:8b:66:8e:df: 45:28:51:87:0c:31:5d:05:89:81:18:c1:7c:18:4f: f1:4a:f1:5f:b5:e5:08:f5:53:67:69:ee:05:2d:f8: 25:fb:30:09:54:ae:df:bf:d9:12:0a:4b:72:87:48: d5:39:fe:6f:46:84:e8:d7:91:74:5a:77:91:6b:8f: f5:e9:b0:3f:83:24:b6:db:72:ca:a3:21:99:68:f9: 0d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:85:4E:BF:41:71:91:73:CD:4E:2C:10:31:07:36:4A:76:A4:D4:4D X509v3 Authority Key Identifier: keyid:3D:26:5E:40:12:31:43:7A:91:0E:C2:1F:E4:ED:4E:E3:B1:26:9C:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FCFC/0EF3B3887D3E11EB9EDF687CC4F9AE02/PSZeQBIxQ3qRDsIf5O1O47EmnI0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSZeQBIxQ3qRDsIf5O1O47EmnI0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FCFC/0EF3B3887D3E11EB9EDF687CC4F9AE02/PSZeQBIxQ3qRDsIf5O1O47EmnI0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:ce:2e:7b:5f:b4:f7:d0:35:9e:78:c6:c4:f1:a8:93:3f:77: 05:1f:f6:d8:1f:fb:f8:ea:36:7e:bb:64:51:ce:11:85:7f:13: a0:ac:f5:02:40:b8:5d:c1:a1:c2:a2:c9:98:c2:a5:c3:af:de: 85:85:59:d5:df:64:c1:00:a3:be:06:09:37:d0:69:7e:1d:a2: 8f:59:04:41:5b:4f:c2:87:79:1d:db:da:97:52:f1:2b:d5:d1: 4d:2f:72:d9:16:9c:92:e6:f3:e8:f7:ca:71:b1:b1:81:33:c7: 28:9c:8a:01:7b:cc:26:e8:58:a5:00:b0:7c:1e:2e:d6:a1:7c: 10:18:dd:c4:03:42:43:97:a6:94:f0:9e:80:f2:c4:cd:26:9a: f9:07:a1:60:45:37:1d:e6:85:2e:a9:d6:dc:c5:52:9d:92:a4: cb:1e:13:fb:75:7d:a8:80:6f:2a:04:19:cc:ab:d3:dd:2a:d0: c5:84:e8:39:34:9d:03:4e:a8:bc:01:f6:83:dc:a9:bb:79:e7: 4b:5d:9f:5b:97:43:e9:fd:d0:33:b8:8d:dd:63:bb:c8:35:c6: 76:68:fa:07:d3:7d:8c:3e:a8:30:0d:03:21:30:30:e7:c6:0b: 60:d6:ab:07:0a:4f:2b:7e:a8:d4:70:ac:8a:b2:7b:22:42:8a: e2:2d:03:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZDRkMxMTAvBgNVBAUTKDNEMjY1RTQwMTIzMTQzN0E5MTBFQzIxRkU0RUQ0RUUz QjEyNjlDOEQwHhcNMjUwNjE0MjIwNDE5WhcNMjUwNjIxMjIwNDE5WjAYMRYwFAYD VQQDEw02ODRkZjFlMy1kNDE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoSP/bvFjzX5fJdvjHyQYeVxXiZKWijQbel0xj8qiZHb/dGCYZU1JudcIVUAU qN0mX4Zqa0t4atkXt3eGMd9nnsKn8LfVFwKVAxdqbR5bMwGEulgjW3rdJY+yOW7m P5SqKZD3lPSJo3bh/sAofEvJJ3sUY0DQjH0Ybxwq/xdWUA+mJywXBcFNUJvc6VhJ gkqP7C/oYXrkaVAH+FL5TFhaebh1LpQN2SUof00tSXJ9a4tmjt9FKFGHDDFdBYmB GMF8GE/xSvFfteUI9VNnae4FLfgl+zAJVK7fv9kSCktyh0jVOf5vRoTo15F0WneR a4/16bA/gyS223LKoyGZaPkNuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLGFTr9B cZFzzU4sEDEHNkp2pNRNMB8GA1UdIwQYMBaAFD0mXkASMUN6kQ7CH+TtTuOxJpyN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkNGQy8wRUYzQjM4ODdE M0UxMUVCOUVERjY4N0NDNEY5QUUwMi9QU1plUUJJeFEzcVJEc0lmNU8xTzQ3RW1u STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BTWmVRQkl4UTNxUkRzSWY1TzFPNDdFbW5JMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkNGQy8wRUYzQjM4ODdEM0UxMUVCOUVERjY4N0NDNEY5QUUwMi9QU1plUUJJeFEz cVJEc0lmNU8xTzQ3RW1uSTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPzi57X7T30DWeeMbE8aiTP3cFH/bYH/v46jZ+u2RRzhGFfxOgrPUC QLhdwaHCosmYwqXDr96FhVnV32TBAKO+Bgk30Gl+HaKPWQRBW0/Ch3kd29qXUvEr 1dFNL3LZFpyS5vPo98pxsbGBM8conIoBe8wm6FilALB8Hi7WoXwQGN3EA0JDl6aU 8J6A8sTNJpr5B6FgRTcd5oUuqdbcxVKdkqTLHhP7dX2ogG8qBBnMq9PdKtDFhOg5 NJ0DTqi8AfaD3Km7eedLXZ9bl0Pp/dAzuI3dY7vINcZ2aPoH032MPqgwDQMhMDDn xgtg1qsHCk8rfqjUcKyKsnsiQoriLQNy -----END CERTIFICATE-----Generated at Sun Jun 15 05:36:15 2025 by rpki-client