$ rpki-client -vvf rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.mft File: mdb3fuCkNuVIfpjO5VK2S17GWxM.mft (raw, json) Hash identifier: b+KyeujBMwdmH7EAdB0mZ5/kRtAy485tur5Ducd9LeM= Subject key identifier: 64:61:61:20:9E:F8:40:3B:02:D0:6E:23:38:04:3A:D4:72:B3:8B:BD Authority key identifier: 99:D6:F7:7E:E0:A4:36:E5:48:7E:98:CE:E5:52:B6:4B:5E:C6:5B:13 Certificate issuer: /CN=A912A799/serialNumber=99D6F77EE0A436E5487E98CEE552B64B5EC65B13 Certificate serial: 348B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mdb3fuCkNuVIfpjO5VK2S17GWxM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.mft Manifest number: 348A Signing time: Mon 16 Jun 2025 15:14:14 +0000 Manifest this update: Mon 16 Jun 2025 15:14:14 +0000 Manifest next update: Mon 23 Jun 2025 15:14:14 +0000 Files and hashes: 1: mdb3fuCkNuVIfpjO5VK2S17GWxM.crl (hash: bJacsF59DnQbRczTPMQa1AVJQTiS746TCw4Hu1w3qWM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.crl rsync://rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mdb3fuCkNuVIfpjO5VK2S17GWxM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 15:14:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13451 (0x348b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A799, serialNumber=99D6F77EE0A436E5487E98CEE552B64B5EC65B13 Validity Not Before: Jun 16 15:14:14 2025 GMT Not After : Jun 23 15:14:14 2025 GMT Subject: CN=685034c6-a2ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:72:07:02:19:0d:8d:a8:71:24:a1:a7:a7:f7: c5:b9:51:c8:56:3c:34:66:63:e4:39:0c:ae:5c:c8: 50:2d:62:bf:3e:96:9f:82:9b:c9:ea:d1:16:c2:f9: 1b:06:49:43:2d:d3:89:c9:37:a3:09:5f:aa:6f:90: 8a:09:9f:31:95:5c:49:a1:aa:d7:95:65:16:27:58: 2c:1e:6c:ce:27:47:32:cd:42:72:c2:36:dc:1b:b7: a8:cb:14:92:d5:ba:82:89:7b:00:16:d4:c6:58:37: 41:cb:83:26:f0:4f:d4:6c:54:cd:29:a2:53:79:4d: 68:23:73:ae:05:ac:c8:d2:b2:53:c2:0f:03:2b:25: 01:8c:70:11:63:f1:6e:0a:77:88:d1:d2:c8:7f:f8: dd:90:4c:7f:34:1a:d2:a5:0b:d1:99:76:b9:65:27: d1:90:af:b5:6e:00:fa:39:00:51:41:e7:a6:ec:50: a8:3d:f6:ee:b1:93:09:3c:95:9f:e4:a9:89:fc:e2: 06:a9:68:fe:04:3b:bf:4a:91:ea:ae:97:02:f5:02: 93:cf:99:ef:ea:1d:9e:88:0f:f0:ce:fa:1d:9d:ef: df:b7:d5:3c:28:01:e3:29:da:60:5f:fc:c2:7e:77: 8d:17:06:b9:85:ac:d3:a5:bf:1e:b7:63:ab:34:56: d3:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:61:61:20:9E:F8:40:3B:02:D0:6E:23:38:04:3A:D4:72:B3:8B:BD X509v3 Authority Key Identifier: keyid:99:D6:F7:7E:E0:A4:36:E5:48:7E:98:CE:E5:52:B6:4B:5E:C6:5B:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mdb3fuCkNuVIfpjO5VK2S17GWxM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:2d:a7:6a:5d:1d:09:44:ec:20:b5:81:d1:7b:fa:9a:92:2a: aa:6d:a9:6d:af:14:28:c8:cd:33:5a:7e:d4:57:21:e1:4b:ef: 75:11:10:48:b1:c0:ac:7b:fd:89:84:4c:93:a0:13:f6:bd:6a: a2:af:dc:b3:82:9d:9c:a2:5d:ce:07:d5:8f:1a:f3:ed:e5:fa: 01:ad:2f:b3:ca:e1:68:4f:40:c2:ff:53:cf:52:3a:6b:f0:c9: 7e:61:3a:2b:c0:45:4b:13:c2:8a:c4:19:6c:55:94:c0:0b:9a: 37:3d:1c:9c:ca:7e:8a:52:85:49:9a:85:d0:1b:86:46:53:03: 8c:05:5c:3c:4f:29:da:7d:21:73:10:fd:b8:84:8f:79:d3:75: 46:b8:1a:49:7b:79:3a:01:36:de:9d:db:15:95:ba:29:d7:5c: c3:a9:7b:a5:c6:39:e8:4b:8d:9f:f2:ad:87:01:8e:f0:71:99: 7c:e1:90:5a:d4:17:68:7b:28:6f:ac:b9:6c:85:84:cd:cd:0f: 65:5d:e6:a8:1f:07:7b:08:68:45:42:d5:79:1f:4a:f8:86:2b: 5d:a8:8d:2d:ad:f9:85:c1:9a:e3:e1:1a:4e:da:83:3a:5d:e3: 1e:0f:e9:89:a3:15:9a:b0:e3:16:41:02:c6:fa:e2:eb:7a:dc: c8:38:10:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE3OTkxMTAvBgNVBAUTKDk5RDZGNzdFRTBBNDM2RTU0ODdFOThDRUU1NTJCNjRC NUVDNjVCMTMwHhcNMjUwNjE2MTUxNDE0WhcNMjUwNjIzMTUxNDE0WjAYMRYwFAYD VQQDEw02ODUwMzRjNi1hMmVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3HIHAhkNjahxJKGnp/fFuVHIVjw0ZmPkOQyuXMhQLWK/PpafgpvJ6tEWwvkb BklDLdOJyTejCV+qb5CKCZ8xlVxJoarXlWUWJ1gsHmzOJ0cyzUJywjbcG7eoyxSS 1bqCiXsAFtTGWDdBy4Mm8E/UbFTNKaJTeU1oI3OuBazI0rJTwg8DKyUBjHARY/Fu CneI0dLIf/jdkEx/NBrSpQvRmXa5ZSfRkK+1bgD6OQBRQeem7FCoPfbusZMJPJWf 5KmJ/OIGqWj+BDu/SpHqrpcC9QKTz5nv6h2eiA/wzvodne/ft9U8KAHjKdpgX/zC fneNFwa5hazTpb8et2OrNFbT8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGRhYSCe +EA7AtBuIzgEOtRys4u9MB8GA1UdIwQYMBaAFJnW937gpDblSH6YzuVStktexlsT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTc5OS8wREE5RjAyRTFE QTYxMUUyQjgyQjIzOUQwOEIwMkNEMi9tZGIzZnVDa051VklmcGpPNVZLMlMxN0dX eE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21kYjNmdUNrTnVWSWZwak81VksyUzE3R1d4TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTc5OS8wREE5RjAyRTFEQTYxMUUyQjgyQjIzOUQwOEIwMkNEMi9tZGIzZnVDa051 VklmcGpPNVZLMlMxN0dXeE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmLadqXR0JROwgtYHRe/qakiqqbaltrxQoyM0zWn7UVyHhS+91ERBI scCse/2JhEyToBP2vWqir9yzgp2col3OB9WPGvPt5foBrS+zyuFoT0DC/1PPUjpr 8Ml+YTorwEVLE8KKxBlsVZTAC5o3PRycyn6KUoVJmoXQG4ZGUwOMBVw8TynafSFz EP24hI9503VGuBpJe3k6ATbendsVlbop11zDqXulxjnoS42f8q2HAY7wcZl84ZBa 1BdoeyhvrLlshYTNzQ9lXeaoHwd7CGhFQtV5H0r4hitdqI0trfmFwZrj4RpO2oM6 XeMeD+mJoxWasOMWQQLG+uLretzIOBBp -----END CERTIFICATE-----Generated at Wed Jun 18 04:24:13 2025 by rpki-client