$ rpki-client -vvf rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.mft File: Kz0hH8mZjfIDXiDZGqVe3sYo8KM.mft (raw, json) Hash identifier: 9IawMah+QWOBflwjdkkxraFVzK/0Dl51x5MnGvNucw4= Subject key identifier: 24:B1:E8:99:E2:4F:A4:66:74:BB:0E:91:36:D4:AC:36:BC:92:EE:C0 Authority key identifier: 2B:3D:21:1F:C9:99:8D:F2:03:5E:20:D9:1A:A5:5E:DE:C6:28:F0:A3 Certificate issuer: /CN=A912B75A/serialNumber=2B3D211FC9998DF2035E20D91AA55EDEC628F0A3 Certificate serial: 9C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.mft Manifest number: 9C Signing time: Fri 13 Jun 2025 05:12:28 +0000 Manifest this update: Fri 13 Jun 2025 05:12:28 +0000 Manifest next update: Fri 20 Jun 2025 05:12:28 +0000 Files and hashes: 1: Kz0hH8mZjfIDXiDZGqVe3sYo8KM.crl (hash: ZJ+QId1WAflODk1VrZM5B7fzLZ745xM2Rpi6U/ujQHc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.crl rsync://rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 05:12:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 156 (0x9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B75A, serialNumber=2B3D211FC9998DF2035E20D91AA55EDEC628F0A3 Validity Not Before: Jun 13 05:12:28 2025 GMT Not After : Jun 20 05:12:28 2025 GMT Subject: CN=684bb33c-321b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:5e:81:c2:20:22:7f:f8:c1:5f:64:dd:f2:7f: 45:c4:05:08:54:46:51:2e:7e:5e:09:8d:3d:67:74: 46:04:48:ab:99:9e:15:fc:08:1b:01:4f:87:a3:61: 21:8c:f3:5f:da:e8:65:5d:16:16:2d:cb:c7:a7:52: 34:d2:be:c9:9d:0c:63:29:b0:7e:4d:c2:8c:d2:de: 54:8b:73:09:83:c4:e9:56:53:ef:08:62:25:cd:e8: 7f:98:15:8c:08:4f:be:02:0f:b5:87:ba:15:1e:b7: 5e:50:db:46:ef:26:b2:24:cc:f5:af:fb:b8:7a:6e: d8:c7:2c:28:db:3b:6a:37:bd:22:25:87:9d:00:ba: 25:56:88:8a:5b:5e:f2:67:28:7b:6f:39:28:b3:3c: 74:3e:f3:84:7b:bf:13:cd:ae:d0:26:7b:6a:55:f9: b4:83:fc:93:9c:2b:2d:fe:3e:0e:97:1f:ec:27:2b: 60:57:32:07:f5:74:14:ad:63:3b:e2:1d:9c:19:4c: de:10:aa:0c:17:14:e5:2a:d3:f4:24:c0:53:f3:20: 7b:28:98:d0:4b:df:f2:02:96:0d:55:0b:12:ff:24: 89:a9:fc:a6:31:d4:8a:ec:82:56:2e:54:e0:5b:d6: de:a2:0c:a1:ff:d4:b3:68:c8:5e:f0:f0:65:90:7c: dc:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:B1:E8:99:E2:4F:A4:66:74:BB:0E:91:36:D4:AC:36:BC:92:EE:C0 X509v3 Authority Key Identifier: keyid:2B:3D:21:1F:C9:99:8D:F2:03:5E:20:D9:1A:A5:5E:DE:C6:28:F0:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:db:1c:3a:24:c7:60:1c:13:62:69:3b:32:c6:9b:23:97:f3: 4b:82:88:09:7d:de:d7:f8:30:17:7a:13:45:2e:05:e2:93:3b: cd:d1:9c:11:bd:b6:bc:a5:11:33:32:e2:e9:19:47:18:26:46: 91:ac:5c:43:09:c1:f0:d3:7c:ef:23:d9:cf:de:fb:15:55:ac: e8:e7:f6:e1:92:46:c8:11:3f:05:f6:fa:fe:50:57:87:d9:8e: 89:50:a1:47:4c:b7:68:12:4f:92:99:1e:85:73:14:ee:b4:5f: f7:08:4e:f6:8a:33:b5:33:ac:f8:cc:36:8e:d1:32:2b:d6:0c: 91:49:96:d5:ad:ca:eb:b8:21:69:75:c6:ae:7e:3e:b7:f4:b0: 6d:cb:f8:99:72:cd:7a:31:28:8a:e3:44:b1:95:3f:01:ae:b1: 72:42:17:0d:f0:ff:eb:80:34:61:d9:2d:76:fd:90:6a:9d:df: b6:e5:24:f3:de:9a:6d:94:df:ec:95:44:1e:77:89:80:4a:7b: 12:79:45:67:1f:39:95:71:93:70:52:98:11:57:d6:3e:26:5d: c2:7d:36:d0:2b:17:fe:3a:43:4c:0d:65:a2:0b:ef:bc:bc:b9: ea:6a:23:5e:bc:99:ef:ba:b0:ac:70:09:93:1e:d6:4e:2d:38: 98:d6:57:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkI3NUExMTAvBgNVBAUTKDJCM0QyMTFGQzk5OThERjIwMzVFMjBEOTFBQTU1RURF QzYyOEYwQTMwHhcNMjUwNjEzMDUxMjI4WhcNMjUwNjIwMDUxMjI4WjAYMRYwFAYD VQQDEw02ODRiYjMzYy0zMjFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArF6BwiAif/jBX2Td8n9FxAUIVEZRLn5eCY09Z3RGBEirmZ4V/AgbAU+Ho2Eh jPNf2uhlXRYWLcvHp1I00r7JnQxjKbB+TcKM0t5Ui3MJg8TpVlPvCGIlzeh/mBWM CE++Ag+1h7oVHrdeUNtG7yayJMz1r/u4em7Yxywo2ztqN70iJYedALolVoiKW17y Zyh7bzkoszx0PvOEe78Tza7QJntqVfm0g/yTnCst/j4Olx/sJytgVzIH9XQUrWM7 4h2cGUzeEKoMFxTlKtP0JMBT8yB7KJjQS9/yApYNVQsS/ySJqfymMdSK7IJWLlTg W9beogyh/9SzaMhe8PBlkHzcJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCSx6Jni T6RmdLsOkTbUrDa8ku7AMB8GA1UdIwQYMBaAFCs9IR/JmY3yA14g2RqlXt7GKPCj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjc1QS8xQjIyRTFGRTVC OUExMUVGODIwMjc2NDBDNEY5QUUwMi9LejBoSDhtWmpmSURYaURaR3FWZTNzWW84 S00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0t6MGhIOG1aamZJRFhpRFpHcVZlM3NZbzhLTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Qjc1QS8xQjIyRTFGRTVCOUExMUVGODIwMjc2NDBDNEY5QUUwMi9LejBoSDhtWmpm SURYaURaR3FWZTNzWW84S00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+2xw6JMdgHBNiaTsyxpsjl/NLgogJfd7X+DAXehNFLgXikzvN0ZwR vba8pREzMuLpGUcYJkaRrFxDCcHw03zvI9nP3vsVVazo5/bhkkbIET8F9vr+UFeH 2Y6JUKFHTLdoEk+SmR6FcxTutF/3CE72ijO1M6z4zDaO0TIr1gyRSZbVrcrruCFp dcaufj639LBty/iZcs16MSiK40SxlT8BrrFyQhcN8P/rgDRh2S12/ZBqnd+25STz 3pptlN/slUQed4mASnsSeUVnHzmVcZNwUpgRV9Y+Jl3CfTbQKxf+OkNMDWWiC++8 vLnqaiNevJnvurCscAmTHtZOLTiY1ldr -----END CERTIFICATE-----Generated at Sat Jun 14 19:33:57 2025 by rpki-client