$ rpki-client -vvf rpki.apnic.net/member_repository/A912C4DB/D7DFD6CA08F811EA9D18AE68C4F9AE02/dQVeDYzbFO-fBPi5XayLiclozd0.mft File: dQVeDYzbFO-fBPi5XayLiclozd0.mft (raw, json) Hash identifier: eYy8l4x3pNQMw755bSS7gZF4XrgzYUPn62iIPpGp43E= Subject key identifier: 07:94:CE:EF:5A:B3:B2:96:1A:A7:D9:8B:85:AC:4A:07:40:DA:E6:21 Authority key identifier: 75:05:5E:0D:8C:DB:14:EF:9F:04:F8:B9:5D:AC:8B:89:C9:68:CD:DD Certificate issuer: /CN=A912C4DB/serialNumber=75055E0D8CDB14EF9F04F8B95DAC8B89C968CDDD Certificate serial: 0C4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQVeDYzbFO-fBPi5XayLiclozd0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C4DB/D7DFD6CA08F811EA9D18AE68C4F9AE02/dQVeDYzbFO-fBPi5XayLiclozd0.mft Manifest number: 0C43 Signing time: Wed 18 Jun 2025 18:25:20 +0000 Manifest this update: Wed 18 Jun 2025 18:25:19 +0000 Manifest next update: Wed 25 Jun 2025 18:25:19 +0000 Files and hashes: 1: dQVeDYzbFO-fBPi5XayLiclozd0.crl (hash: UbCif6E/YTnE/75Vt7AJBS2YoY7QWcT5Zd42a++TseY=) 2: 3E0EDBC83E0111ECA3AF5462C4F9AE02.roa (hash: MeK9ET7gmT0HXM7WrsCFabf5Xt6ViCVNKTA3zZ5Z6Ss=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C4DB/D7DFD6CA08F811EA9D18AE68C4F9AE02/dQVeDYzbFO-fBPi5XayLiclozd0.crl rsync://rpki.apnic.net/member_repository/A912C4DB/D7DFD6CA08F811EA9D18AE68C4F9AE02/dQVeDYzbFO-fBPi5XayLiclozd0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQVeDYzbFO-fBPi5XayLiclozd0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 18:25:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3151 (0xc4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C4DB, serialNumber=75055E0D8CDB14EF9F04F8B95DAC8B89C968CDDD Validity Not Before: Jun 18 18:25:19 2025 GMT Not After : Jun 25 18:25:19 2025 GMT Subject: CN=6853048f-7542 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:1a:86:18:a7:8d:26:3b:2e:eb:48:41:3e:5a: 21:65:60:e3:2a:54:2d:1b:df:0b:11:17:3b:af:57: 40:cf:0a:85:72:11:98:42:29:20:2a:48:78:9f:1a: 43:42:37:64:28:75:dd:96:25:16:6d:62:88:98:42: 0c:bb:61:d5:32:8e:45:26:db:c4:0a:ca:dc:bc:0d: ee:e0:a3:6a:36:16:dd:51:d6:2c:84:25:d9:11:10: 9c:0f:4a:f9:8a:fb:91:44:c4:f2:d3:e3:45:ad:2b: 21:4c:97:19:51:14:f4:6b:e4:32:39:66:cc:fb:47: 20:b9:2a:c5:29:61:36:7d:98:a4:34:7c:41:0b:c7: c7:83:1a:1a:25:00:5e:46:c3:eb:b8:aa:49:ca:d8: aa:cd:7e:3f:1d:38:36:45:b8:69:32:d1:2c:79:bb: d7:54:f4:af:0c:7d:40:b8:09:8f:0d:c5:4e:06:ad: 09:92:30:e9:ff:15:21:ff:06:ec:45:53:d2:d1:aa: 13:fc:0d:81:73:eb:47:f1:3b:18:02:c5:e9:ee:de: e9:ad:bf:02:e7:65:71:a0:c5:9c:01:7f:86:4b:ac: b3:32:23:2b:19:b9:88:cb:b3:40:46:0e:df:0a:84: a2:0b:6e:70:18:39:d0:8f:44:e0:70:37:ca:29:27: c9:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:94:CE:EF:5A:B3:B2:96:1A:A7:D9:8B:85:AC:4A:07:40:DA:E6:21 X509v3 Authority Key Identifier: keyid:75:05:5E:0D:8C:DB:14:EF:9F:04:F8:B9:5D:AC:8B:89:C9:68:CD:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C4DB/D7DFD6CA08F811EA9D18AE68C4F9AE02/dQVeDYzbFO-fBPi5XayLiclozd0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQVeDYzbFO-fBPi5XayLiclozd0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C4DB/D7DFD6CA08F811EA9D18AE68C4F9AE02/dQVeDYzbFO-fBPi5XayLiclozd0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:43:d0:f2:a8:26:7c:f7:06:32:b9:07:77:0f:a1:bc:31:32: 43:15:88:aa:60:75:c6:24:f4:1e:ee:ba:1f:9b:42:fc:ed:1f: db:3d:a1:3e:50:57:25:73:a5:27:a2:68:4a:6f:24:94:6d:0d: 6c:07:84:f0:d4:af:db:be:2b:d8:3b:b1:a2:b8:4a:bf:27:fd: 36:28:4c:97:f1:0f:b9:9d:79:7b:6a:60:84:99:33:3a:db:16: 90:79:4f:42:55:4c:cb:fa:ea:6b:b4:e4:c4:2e:82:28:e0:c8: 23:52:87:87:c3:86:c4:f3:c3:a7:84:a2:50:45:bb:1f:7f:61: 82:d3:c5:fb:ba:7f:0b:7d:a2:79:ca:9f:ef:4a:d6:42:8a:42: 1f:6e:38:82:e8:96:67:e1:40:5d:fa:1c:55:77:f2:85:6e:d0: 95:e8:0a:c9:3e:d5:d1:1c:1e:3e:ae:10:8e:4f:bc:26:6b:1c: 56:7e:c9:1c:ec:a2:c8:0c:7a:a5:c9:aa:95:93:fb:96:78:88: 56:09:0b:12:cd:4a:60:b0:28:a0:5a:ea:1d:aa:6f:9f:8c:ba: 9b:66:bc:e4:ff:ea:48:75:5b:f6:d7:3f:46:82:14:61:d6:0a: 17:aa:fe:62:5b:c6:38:ee:0b:06:14:98:b2:0e:4e:05:c0:c3: e6:52:d7:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDE8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM0REIxMTAvBgNVBAUTKDc1MDU1RTBEOENEQjE0RUY5RjA0RjhCOTVEQUM4Qjg5 Qzk2OENEREQwHhcNMjUwNjE4MTgyNTE5WhcNMjUwNjI1MTgyNTE5WjAYMRYwFAYD VQQDEw02ODUzMDQ4Zi03NTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzRqGGKeNJjsu60hBPlohZWDjKlQtG98LERc7r1dAzwqFchGYQikgKkh4nxpD QjdkKHXdliUWbWKImEIMu2HVMo5FJtvECsrcvA3u4KNqNhbdUdYshCXZERCcD0r5 ivuRRMTy0+NFrSshTJcZURT0a+QyOWbM+0cguSrFKWE2fZikNHxBC8fHgxoaJQBe RsPruKpJytiqzX4/HTg2RbhpMtEsebvXVPSvDH1AuAmPDcVOBq0JkjDp/xUh/wbs RVPS0aoT/A2Bc+tH8TsYAsXp7t7prb8C52VxoMWcAX+GS6yzMiMrGbmIy7NARg7f CoSiC25wGDnQj0TgcDfKKSfJEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAeUzu9a s7KWGqfZi4WsSgdA2uYhMB8GA1UdIwQYMBaAFHUFXg2M2xTvnwT4uV2si4nJaM3d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzREQi9EN0RGRDZDQTA4 RjgxMUVBOUQxOEFFNjhDNEY5QUUwMi9kUVZlRFl6YkZPLWZCUGk1WGF5TGljbG96 ZDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RRVmVEWXpiRk8tZkJQaTVYYXlMaWNsb3pkMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzREQi9EN0RGRDZDQTA4RjgxMUVBOUQxOEFFNjhDNEY5QUUwMi9kUVZlRFl6YkZP LWZCUGk1WGF5TGljbG96ZDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5Q9DyqCZ89wYyuQd3D6G8MTJDFYiqYHXGJPQe7rofm0L87R/bPaE+ UFclc6UnomhKbySUbQ1sB4Tw1K/bvivYO7GiuEq/J/02KEyX8Q+5nXl7amCEmTM6 2xaQeU9CVUzL+uprtOTELoIo4MgjUoeHw4bE88OnhKJQRbsff2GC08X7un8LfaJ5 yp/vStZCikIfbjiC6JZn4UBd+hxVd/KFbtCV6ArJPtXRHB4+rhCOT7wmaxxWfskc 7KLIDHqlyaqVk/uWeIhWCQsSzUpgsCigWuodqm+fjLqbZrzk/+pIdVv21z9GghRh 1goXqv5iW8Y47gsGFJiyDk4FwMPmUte2 -----END CERTIFICATE-----Generated at Fri Jun 20 11:41:18 2025 by rpki-client