$ rpki-client -vvf rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.mft File: v1g_8H2jVv3igoGfR7zuJHUTEZo.mft (raw, json) Hash identifier: aXHezaHXlHzCeapEjgcetItr1YJPsjnKXIoNdmShaO8= Subject key identifier: 29:36:1E:DF:F3:B7:B4:1A:66:A3:D0:8C:47:85:D7:4C:99:A9:42:4F Authority key identifier: BF:58:3F:F0:7D:A3:56:FD:E2:82:81:9F:47:BC:EE:24:75:13:11:9A Certificate issuer: /CN=A912142C/serialNumber=BF583FF07DA356FDE282819F47BCEE247513119A Certificate serial: 34BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1g_8H2jVv3igoGfR7zuJHUTEZo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.mft Manifest number: 34A7 Signing time: Sat 14 Jun 2025 14:27:49 +0000 Manifest this update: Sat 14 Jun 2025 14:27:48 +0000 Manifest next update: Sat 21 Jun 2025 14:27:48 +0000 Files and hashes: 1: v1g_8H2jVv3igoGfR7zuJHUTEZo.crl (hash: l4+jwK5LyZ5FNoIvbPwP58iircZkI0rfv0+aKFqmlc8=) 2: 6A1ACEF4D5B711ECB09BCC49C4F9AE02.roa (hash: awbho/uZ6QmNOlz47rfC29uNcbM+u0ajdUiQ48qQdes=) 3: F73D1642F30B11EFA86D9348C4F9AE02.roa (hash: OiDTuOtU2sr+4kSXlrCpirnD6tpZhdVqcG76Sqtu1lo=) 4: 60629332FE4611EFB15A9D48C4F9AE02.roa (hash: 3EtrP079py1XOOa3Ek7irmapcKEfNhwqmeBlfZT1l7s=) 5: 671CE4B2EF5911EFB8C93F62C4F9AE02.roa (hash: G+KGkA6ntZoSU6izS9Aco3EHQif4B2SP1cehoseXxzY=) 6: B3C4F6FCC8E811EFA15E172AC4F9AE02.roa (hash: nKSePsS9MPGNfom4Rnz59tSXOtuz0jzrRs8gfUCXxws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.crl rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1g_8H2jVv3igoGfR7zuJHUTEZo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 14:27:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13499 (0x34bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912142C, serialNumber=BF583FF07DA356FDE282819F47BCEE247513119A Validity Not Before: Jun 14 14:27:48 2025 GMT Not After : Jun 21 14:27:48 2025 GMT Subject: CN=684d86e4-7ee5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:22:2e:d1:ff:f4:0c:08:ce:86:1b:ab:6e:c9: 7b:ac:bc:f9:19:fa:87:a8:54:e2:40:50:46:55:cc: 24:f5:fe:00:7a:d6:cb:6c:46:d0:ba:94:9f:8d:e0: 9d:76:1f:24:ce:fa:95:c6:05:b2:eb:dc:8d:07:a1: 31:aa:e7:8f:8a:2f:e9:9d:c4:03:e1:27:f9:82:85: 56:c6:8d:64:0f:8c:c7:93:9e:de:6a:2a:3e:10:89: 2e:28:18:d9:b4:84:c5:61:05:09:cf:b1:68:50:2a: 97:60:04:fe:86:c6:7e:fa:8f:c8:c7:88:e1:90:06: e3:1a:61:59:c6:25:03:e6:24:46:25:51:ba:62:b4: cf:1d:40:e1:9a:a1:4b:f1:9d:fe:86:4b:65:ce:7a: 2c:81:4d:76:5a:bc:1f:e6:9a:66:ef:48:ea:b0:d8: a4:9e:80:8f:92:6b:99:eb:2a:aa:49:93:a3:75:b1: 56:0d:78:a2:19:8b:07:cf:e3:15:27:0e:c2:ba:25: f1:06:13:bb:9c:54:16:36:ed:a8:e7:4f:94:67:a8: cb:6e:56:81:c3:36:a8:32:9c:3a:53:c8:46:32:d5: 87:53:bd:74:c0:db:8a:8c:af:47:3f:3d:74:ed:27: 54:24:ee:dd:d2:9f:2b:88:c0:11:a3:2f:a7:f8:d3: 76:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:36:1E:DF:F3:B7:B4:1A:66:A3:D0:8C:47:85:D7:4C:99:A9:42:4F X509v3 Authority Key Identifier: keyid:BF:58:3F:F0:7D:A3:56:FD:E2:82:81:9F:47:BC:EE:24:75:13:11:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1g_8H2jVv3igoGfR7zuJHUTEZo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:18:a4:39:81:8d:80:0b:90:7f:d3:f3:a8:07:99:ce:d6:aa: ab:4a:b9:1e:ad:75:77:3a:0a:97:29:d2:ad:52:2f:a5:ac:e0: 59:4d:18:3b:92:fd:97:8c:9e:5a:ba:13:bb:c5:3f:93:ac:d5: 35:f5:a2:71:43:e2:68:25:5c:73:f9:00:db:96:4b:a8:96:ee: 31:87:30:03:83:c6:81:1e:18:40:96:7e:7c:51:a4:8b:86:b1: 19:92:ad:23:ee:c3:26:44:6a:27:22:e4:ce:5d:69:0a:98:c9: e2:95:c0:72:97:cc:7d:04:44:80:9a:a1:38:9a:f6:9d:4f:49: 8d:db:36:d1:3c:70:8d:85:7b:80:21:da:b4:c4:c3:65:43:90: 40:01:d4:22:6b:f0:93:cf:5f:82:8b:e1:55:27:9d:c9:8a:ee: 62:8c:65:de:9d:2d:48:cd:8f:04:c8:5b:ce:e8:3d:da:8e:a2: aa:18:a7:ac:37:3a:ad:6d:3d:56:9d:9a:d8:2e:86:45:e0:0d: 94:52:1f:a7:82:d3:cf:e7:21:a3:10:cf:de:b6:98:49:f5:db: bd:50:78:1f:ce:c6:8f:6a:24:27:16:b0:c9:d2:44:f9:7f:29: b4:7f:4b:e6:05:c4:38:08:ab:dd:2a:06:ff:e2:6f:17:2c:93: a9:df:8c:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE0MkMxMTAvBgNVBAUTKEJGNTgzRkYwN0RBMzU2RkRFMjgyODE5RjQ3QkNFRTI0 NzUxMzExOUEwHhcNMjUwNjE0MTQyNzQ4WhcNMjUwNjIxMTQyNzQ4WjAYMRYwFAYD VQQDEw02ODRkODZlNC03ZWU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2yIu0f/0DAjOhhurbsl7rLz5GfqHqFTiQFBGVcwk9f4AetbLbEbQupSfjeCd dh8kzvqVxgWy69yNB6ExquePii/pncQD4Sf5goVWxo1kD4zHk57eaio+EIkuKBjZ tITFYQUJz7FoUCqXYAT+hsZ++o/Ix4jhkAbjGmFZxiUD5iRGJVG6YrTPHUDhmqFL 8Z3+hktlznosgU12Wrwf5ppm70jqsNiknoCPkmuZ6yqqSZOjdbFWDXiiGYsHz+MV Jw7CuiXxBhO7nFQWNu2o50+UZ6jLblaBwzaoMpw6U8hGMtWHU710wNuKjK9HPz10 7SdUJO7d0p8riMARoy+n+NN2VQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCk2Ht/z t7QaZqPQjEeF10yZqUJPMB8GA1UdIwQYMBaAFL9YP/B9o1b94oKBn0e87iR1ExGa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTQyQy8yMEIzN0NGRTFE ODcxMUUyQkRFRkY3REUwOEIwMkNEMi92MWdfOEgyalZ2M2lnb0dmUjd6dUpIVVRF Wm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3YxZ184SDJqVnYzaWdvR2ZSN3p1SkhVVEVaby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTQyQy8yMEIzN0NGRTFEODcxMUUyQkRFRkY3REUwOEIwMkNEMi92MWdfOEgyalZ2 M2lnb0dmUjd6dUpIVVRFWm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUGKQ5gY2AC5B/0/OoB5nO1qqrSrkerXV3OgqXKdKtUi+lrOBZTRg7 kv2XjJ5auhO7xT+TrNU19aJxQ+JoJVxz+QDblkuolu4xhzADg8aBHhhAln58UaSL hrEZkq0j7sMmRGonIuTOXWkKmMnilcByl8x9BESAmqE4mvadT0mN2zbRPHCNhXuA Idq0xMNlQ5BAAdQia/CTz1+Ci+FVJ53Jiu5ijGXenS1IzY8EyFvO6D3ajqKqGKes NzqtbT1WnZrYLoZF4A2UUh+ngtPP5yGjEM/etphJ9du9UHgfzsaPaiQnFrDJ0kT5 fym0f0vmBcQ4CKvdKgb/4m8XLJOp34xy -----END CERTIFICATE-----Generated at Mon Jun 16 15:59:36 2025 by rpki-client