$ rpki-client -vvf rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.mft File: 48M322aHKgqTXJ1VXltt01MHLHQ.mft (raw, json) Hash identifier: oGLmLd05SscNhltewMlahfSrkErxNTxGwGDGx18cfB8= Subject key identifier: 3D:E4:FF:31:16:8D:0B:D0:F8:93:B0:DA:FC:97:85:B7:20:EB:4A:41 Authority key identifier: E3:C3:37:DB:66:87:2A:0A:93:5C:9D:55:5E:5B:6D:D3:53:07:2C:74 Certificate issuer: /CN=A912B0A3/serialNumber=E3C337DB66872A0A935C9D555E5B6DD353072C74 Certificate serial: 07B5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/48M322aHKgqTXJ1VXltt01MHLHQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.mft Manifest number: 07B5 Signing time: Wed 18 Jun 2025 21:05:02 +0000 Manifest this update: Wed 18 Jun 2025 21:05:01 +0000 Manifest next update: Wed 25 Jun 2025 21:05:01 +0000 Files and hashes: 1: 48M322aHKgqTXJ1VXltt01MHLHQ.crl (hash: pxQyD5R5i/yQeYhyYUnDTt0ciKm0ESRU5yhKtNVtazo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.crl rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/48M322aHKgqTXJ1VXltt01MHLHQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 21:05:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1973 (0x7b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B0A3, serialNumber=E3C337DB66872A0A935C9D555E5B6DD353072C74 Validity Not Before: Jun 18 21:05:01 2025 GMT Not After : Jun 25 21:05:01 2025 GMT Subject: CN=685329fd-35b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:94:84:4e:6c:98:57:50:cd:9d:65:8c:ff:3a: e4:73:4b:d9:4f:31:b3:24:cb:20:0b:10:f7:c9:fe: 99:c3:db:94:ec:00:3d:c0:32:80:b1:57:35:25:c1: 08:ae:27:2d:e7:42:7c:93:9a:c7:db:e6:f5:93:a1: fb:ea:6b:ff:3b:16:af:00:c9:24:d8:67:a3:59:1e: 1e:22:e5:e9:39:4f:a3:3f:73:d4:db:39:8b:4d:ff: 15:f6:dd:f7:c6:f5:3a:45:81:90:98:8a:6b:45:5f: e2:46:4d:fb:11:ec:ed:64:35:98:8e:84:87:4b:9e: 1b:86:ca:0b:ad:a1:f4:f4:c8:61:a9:9e:dd:be:1c: ee:63:81:fa:af:4f:ae:de:77:a7:68:ef:34:01:ee: e3:8e:47:f4:1c:f6:47:18:5b:d3:a9:37:2a:32:fc: f5:fc:d9:87:56:2c:e9:5a:bf:8b:22:65:f8:15:b5: 7a:63:a3:e9:d4:52:73:cf:99:87:72:f5:93:fa:d7: 2f:d7:bf:eb:e5:f0:23:ef:6d:c8:68:2d:08:ed:cc: cb:27:0b:5d:f4:16:ad:c7:bb:72:7f:27:7d:de:aa: a1:a3:65:e2:7c:37:cc:50:cb:8d:9c:76:f4:9d:02: e6:e0:2a:91:3e:5b:91:bb:1d:e6:fe:b4:73:8e:e5: c2:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:E4:FF:31:16:8D:0B:D0:F8:93:B0:DA:FC:97:85:B7:20:EB:4A:41 X509v3 Authority Key Identifier: keyid:E3:C3:37:DB:66:87:2A:0A:93:5C:9D:55:5E:5B:6D:D3:53:07:2C:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/48M322aHKgqTXJ1VXltt01MHLHQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:18:60:db:6c:5c:f1:45:36:e5:28:d3:7e:9d:a6:79:34:16: 81:c0:5b:c5:ab:fa:33:9b:7b:6e:43:03:9b:4b:5b:93:c6:8f: 6a:bc:72:fc:d6:20:fc:4f:d0:57:43:4e:7f:8f:97:27:49:ad: 34:36:76:b4:34:fe:98:da:b3:d1:fb:61:ba:df:11:b8:bb:6f: bb:c6:fd:b0:2d:d8:0a:55:12:f9:7d:b3:7a:45:03:38:f8:65: e5:47:a4:40:bd:ec:43:bf:8d:94:9a:21:7b:88:b6:36:eb:d4: dd:7c:32:2e:56:47:ad:2b:86:8a:ca:96:7e:d3:0c:16:4d:2c: 11:b2:c1:44:9e:e8:55:f3:17:78:39:85:7d:5d:31:9f:58:29: 49:9b:3e:79:f7:c5:15:14:d2:d8:d1:b9:53:4c:82:87:dc:ca: 04:9f:36:f6:aa:e3:bc:65:c1:01:61:12:4e:ac:b1:81:14:0c: 7d:43:c9:ca:ab:f7:1a:36:c8:59:4f:7d:af:9d:be:e9:68:aa: ae:31:73:29:b3:9d:5a:58:24:ed:2c:71:ff:d2:d9:a4:2a:fa: 49:fc:95:02:96:fa:67:6f:86:58:b3:b4:f1:63:df:ed:ae:d8: 3d:1c:39:f2:f8:88:b6:87:3f:43:19:88:c9:b7:41:e6:e6:50: 30:6f:98:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkIwQTMxMTAvBgNVBAUTKEUzQzMzN0RCNjY4NzJBMEE5MzVDOUQ1NTVFNUI2REQz NTMwNzJDNzQwHhcNMjUwNjE4MjEwNTAxWhcNMjUwNjI1MjEwNTAxWjAYMRYwFAYD VQQDEw02ODUzMjlmZC0zNWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8JSETmyYV1DNnWWM/zrkc0vZTzGzJMsgCxD3yf6Zw9uU7AA9wDKAsVc1JcEI rict50J8k5rH2+b1k6H76mv/OxavAMkk2GejWR4eIuXpOU+jP3PU2zmLTf8V9t33 xvU6RYGQmIprRV/iRk37EeztZDWYjoSHS54bhsoLraH09MhhqZ7dvhzuY4H6r0+u 3nenaO80Ae7jjkf0HPZHGFvTqTcqMvz1/NmHVizpWr+LImX4FbV6Y6Pp1FJzz5mH cvWT+tcv17/r5fAj723IaC0I7czLJwtd9Batx7tyfyd93qqho2XifDfMUMuNnHb0 nQLm4CqRPluRux3m/rRzjuXC6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD3k/zEW jQvQ+JOw2vyXhbcg60pBMB8GA1UdIwQYMBaAFOPDN9tmhyoKk1ydVV5bbdNTByx0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjBBMy82RTJGRkVERTAz QjcxMUVCOTdGQkU1NjhDNEY5QUUwMi80OE0zMjJhSEtncVRYSjFWWGx0dDAxTUhM SFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzQ4TTMyMmFIS2dxVFhKMVZYbHR0MDFNSExIUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjBBMy82RTJGRkVERTAzQjcxMUVCOTdGQkU1NjhDNEY5QUUwMi80OE0zMjJhSEtn cVRYSjFWWGx0dDAxTUhMSFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXGGDbbFzxRTblKNN+naZ5NBaBwFvFq/ozm3tuQwObS1uTxo9qvHL8 1iD8T9BXQ05/j5cnSa00Nna0NP6Y2rPR+2G63xG4u2+7xv2wLdgKVRL5fbN6RQM4 +GXlR6RAvexDv42UmiF7iLY269TdfDIuVketK4aKypZ+0wwWTSwRssFEnuhV8xd4 OYV9XTGfWClJmz5598UVFNLY0blTTIKH3MoEnzb2quO8ZcEBYRJOrLGBFAx9Q8nK q/caNshZT32vnb7paKquMXMps51aWCTtLHH/0tmkKvpJ/JUClvpnb4ZYs7TxY9/t rtg9HDny+Ii2hz9DGYjJt0Hm5lAwb5iz -----END CERTIFICATE-----Generated at Fri Jun 20 03:24:27 2025 by rpki-client