$ rpki-client -vvf rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft File: 1cBKCsLVKt_nBVZHjcsOHYHtENo.mft (raw, json) Hash identifier: zX290WTE3uKoLuEaWbZuAy11FPnFOBThNh9L+eR5Vko= Subject key identifier: 40:67:16:DE:D8:97:34:0C:90:05:A2:3C:D9:24:1A:A8:42:4A:FB:DB Authority key identifier: D5:C0:4A:0A:C2:D5:2A:DF:E7:05:56:47:8D:CB:0E:1D:81:ED:10:DA Certificate issuer: /CN=A91284EC/serialNumber=D5C04A0AC2D52ADFE70556478DCB0E1D81ED10DA Certificate serial: 0481 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft Manifest number: 047A Signing time: Thu 12 Jun 2025 23:41:01 +0000 Manifest this update: Thu 12 Jun 2025 23:41:00 +0000 Manifest next update: Thu 19 Jun 2025 23:41:00 +0000 Files and hashes: 1: 1cBKCsLVKt_nBVZHjcsOHYHtENo.crl (hash: AWncFbu0UQjCpKCuUff6FadZd91XNWqbnqkPVjTm+7g=) 2: F11B4C14E40111ECBD78E571C4F9AE02.roa (hash: viYY8r9Z3djQTP7Mtv5p3ALckTBTe0eKvVy/mChOa9g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.crl rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 23:41:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1153 (0x481) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91284EC, serialNumber=D5C04A0AC2D52ADFE70556478DCB0E1D81ED10DA Validity Not Before: Jun 12 23:41:00 2025 GMT Not After : Jun 19 23:41:00 2025 GMT Subject: CN=684b658d-ae0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:24:ee:4d:95:1e:3f:6a:da:85:d5:91:02:85: f6:ca:eb:82:97:c1:25:38:3d:33:07:df:6f:8e:ee: 8f:f4:96:91:81:b8:d3:b9:9f:f0:cf:32:dd:7b:ec: 7e:79:90:ff:31:1c:38:42:67:74:05:d6:c4:89:a5: 38:95:19:7b:4f:46:58:ec:f7:4d:c1:be:7e:70:38: ba:49:9c:9f:1b:5f:b6:fc:b6:7a:43:67:08:0a:e8: 16:19:0e:9b:47:7a:63:a9:66:1f:f5:8a:d1:4e:f2: 15:0f:32:05:6f:71:e2:03:11:98:45:47:8e:08:3d: ca:a0:59:cd:04:ae:16:fa:6d:aa:18:51:57:77:3d: b9:68:f0:ae:e1:87:95:34:34:06:8e:d8:e5:e3:c8: 0d:b0:4b:f4:94:70:e5:88:28:98:d2:d5:ee:4a:20: a4:6d:a5:e6:42:17:12:89:c9:0f:a4:f1:17:c4:fd: 13:e0:76:46:42:08:49:82:00:80:68:64:2f:d3:2c: 03:48:08:87:84:ff:55:a9:70:41:7d:89:2b:4d:d8: 4e:8c:93:7e:8e:9f:64:e2:e5:d4:cf:51:c2:bd:d8: 85:eb:b4:d5:c2:79:ac:62:66:f8:af:61:c6:1d:c7: 62:54:d4:54:f1:f3:93:f9:1b:d5:92:20:4a:3e:84: 33:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:67:16:DE:D8:97:34:0C:90:05:A2:3C:D9:24:1A:A8:42:4A:FB:DB X509v3 Authority Key Identifier: keyid:D5:C0:4A:0A:C2:D5:2A:DF:E7:05:56:47:8D:CB:0E:1D:81:ED:10:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:71:7f:84:f5:05:cf:af:47:e3:e8:12:a5:21:28:22:c6:19: 4c:74:9a:72:13:35:78:d1:27:6c:03:8d:f1:bd:cf:bd:d1:e3: 45:52:bc:2a:c0:e6:36:29:2e:2c:1c:c0:00:93:31:02:1b:76: d9:1b:73:c5:30:6b:c6:af:df:63:88:2a:49:d4:2e:50:b7:3a: 81:92:ac:02:d5:f5:0b:72:fd:12:ad:e3:7d:77:d4:a2:26:04: 39:7a:c0:38:01:b2:50:62:0f:7a:44:44:5b:e3:6b:f1:9e:34: 3f:df:3b:41:1f:86:7a:f5:a9:04:8f:51:6f:05:9e:46:23:08: 61:65:f9:6a:6e:5d:19:14:cd:05:3f:81:0c:26:2a:a0:4b:44: 7a:20:44:45:55:77:eb:4b:31:90:e7:d0:0e:65:cf:17:f2:1d: da:d8:7f:d4:89:90:50:71:6a:ff:74:a4:6e:18:2d:b5:31:f7: 8d:50:2c:6d:a9:c6:dc:fa:30:c7:92:57:c8:07:7d:64:25:b2: 51:b2:43:9d:3c:bc:9b:88:35:5a:52:27:fb:b8:39:5b:5a:34: 94:53:8a:04:49:85:01:56:41:e2:23:ba:ae:38:da:34:f8:98: 70:cb:0f:27:39:5a:f3:fc:bb:79:d4:04:9e:92:53:d1:25:fa: 23:e9:da:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg0RUMxMTAvBgNVBAUTKEQ1QzA0QTBBQzJENTJBREZFNzA1NTY0NzhEQ0IwRTFE ODFFRDEwREEwHhcNMjUwNjEyMjM0MTAwWhcNMjUwNjE5MjM0MTAwWjAYMRYwFAYD VQQDEw02ODRiNjU4ZC1hZTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvCTuTZUeP2rahdWRAoX2yuuCl8ElOD0zB99vju6P9JaRgbjTuZ/wzzLde+x+ eZD/MRw4Qmd0BdbEiaU4lRl7T0ZY7PdNwb5+cDi6SZyfG1+2/LZ6Q2cICugWGQ6b R3pjqWYf9YrRTvIVDzIFb3HiAxGYRUeOCD3KoFnNBK4W+m2qGFFXdz25aPCu4YeV NDQGjtjl48gNsEv0lHDliCiY0tXuSiCkbaXmQhcSickPpPEXxP0T4HZGQghJggCA aGQv0ywDSAiHhP9VqXBBfYkrTdhOjJN+jp9k4uXUz1HCvdiF67TVwnmsYmb4r2HG HcdiVNRU8fOT+RvVkiBKPoQzeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEBnFt7Y lzQMkAWiPNkkGqhCSvvbMB8GA1UdIwQYMBaAFNXASgrC1Srf5wVWR43LDh2B7RDa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODRFQy9FQkY2MDFGQzQ4 Q0YxMUVDQTY2NkIwM0VDNEY5QUUwMi8xY0JLQ3NMVkt0X25CVlpIamNzT0hZSHRF Tm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFjQktDc0xWS3RfbkJWWkhqY3NPSFlIdEVOby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODRFQy9FQkY2MDFGQzQ4Q0YxMUVDQTY2NkIwM0VDNEY5QUUwMi8xY0JLQ3NMVkt0 X25CVlpIamNzT0hZSHRFTm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAscX+E9QXPr0fj6BKlISgixhlMdJpyEzV40SdsA43xvc+90eNFUrwq wOY2KS4sHMAAkzECG3bZG3PFMGvGr99jiCpJ1C5QtzqBkqwC1fULcv0SreN9d9Si JgQ5esA4AbJQYg96RERb42vxnjQ/3ztBH4Z69akEj1FvBZ5GIwhhZflqbl0ZFM0F P4EMJiqgS0R6IERFVXfrSzGQ59AOZc8X8h3a2H/UiZBQcWr/dKRuGC21MfeNUCxt qcbc+jDHklfIB31kJbJRskOdPLybiDVaUif7uDlbWjSUU4oESYUBVkHiI7quONo0 +Jhwyw8nOVrz/Lt51ASeklPRJfoj6dpS -----END CERTIFICATE-----Generated at Sat Jun 14 18:37:05 2025 by rpki-client