$ rpki-client -vvf rpki.apnic.net/member_repository/A912D71D/262C9B0236CE11F0A2A69C1FC4F9AE02/Mqch0wW1KTmxanDu43n7nIIQmhI.mft File: Mqch0wW1KTmxanDu43n7nIIQmhI.mft (raw, json) Hash identifier: RiLq7j2rnF5NIp0DO8o65U4ANb9hh5lkP6ukK290tPY= Subject key identifier: CB:3E:30:8B:ED:02:C9:1D:53:27:CF:E2:5C:B2:56:92:51:66:65:9D Authority key identifier: 32:A7:21:D3:05:B5:29:39:B1:6A:70:EE:E3:79:FB:9C:82:10:9A:12 Certificate issuer: /CN=A912D71D/serialNumber=32A721D305B52939B16A70EEE379FB9C82109A12 Certificate serial: 0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mqch0wW1KTmxanDu43n7nIIQmhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D71D/262C9B0236CE11F0A2A69C1FC4F9AE02/Mqch0wW1KTmxanDu43n7nIIQmhI.mft Manifest number: 0C Signing time: Fri 13 Jun 2025 06:59:09 +0000 Manifest this update: Fri 13 Jun 2025 06:59:08 +0000 Manifest next update: Fri 20 Jun 2025 06:59:08 +0000 Files and hashes: 1: Mqch0wW1KTmxanDu43n7nIIQmhI.crl (hash: PLJ6pBlfJmEy6j9zH9Iu93WLNs6OaHRmnFw7133T1Co=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D71D/262C9B0236CE11F0A2A69C1FC4F9AE02/Mqch0wW1KTmxanDu43n7nIIQmhI.crl rsync://rpki.apnic.net/member_repository/A912D71D/262C9B0236CE11F0A2A69C1FC4F9AE02/Mqch0wW1KTmxanDu43n7nIIQmhI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mqch0wW1KTmxanDu43n7nIIQmhI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 06:59:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12 (0xc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D71D, serialNumber=32A721D305B52939B16A70EEE379FB9C82109A12 Validity Not Before: Jun 13 06:59:08 2025 GMT Not After : Jun 20 06:59:08 2025 GMT Subject: CN=684bcc3c-0d52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:09:46:1a:45:52:ae:52:d9:d2:a1:08:52:65: 29:80:85:98:bb:e6:89:0c:ec:79:97:8d:60:9e:3d: 88:2f:cb:1a:03:3f:bd:f0:5a:35:71:77:0f:43:0a: 98:59:ba:f8:65:03:74:7e:00:99:44:99:bd:e7:01: ff:55:04:97:72:90:4f:57:5b:19:80:2c:24:b7:ee: 94:eb:be:ec:16:a2:79:68:56:c7:8e:03:b1:29:76: aa:47:1e:31:ad:2f:d0:43:49:b2:4b:e8:ba:a5:2c: 53:23:26:dd:a6:84:d7:de:c2:7c:39:ed:e3:f3:a2: 11:c4:e3:33:4a:f9:aa:41:d1:ff:d1:e8:2c:20:9e: 3e:22:1e:dd:07:9b:af:fd:54:e9:4e:3b:55:c9:d4: 36:b3:69:73:cc:77:2c:8b:c7:74:c9:5c:fe:39:db: cf:28:6e:61:6d:49:cf:20:c7:01:ab:d1:d0:1a:20: 18:c2:25:04:fb:dd:b1:20:8b:8f:3a:0f:39:a4:ce: 78:44:a4:83:d9:a4:83:17:9f:4f:85:0a:f0:fd:57: 76:e9:3b:76:4f:65:b9:3c:18:6f:6c:83:95:df:48: 2c:e1:61:51:d8:de:cb:42:06:a1:6a:44:a9:49:ad: 6a:30:c5:d1:06:c2:4a:7e:4f:0b:a3:a2:60:1d:ec: c7:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:3E:30:8B:ED:02:C9:1D:53:27:CF:E2:5C:B2:56:92:51:66:65:9D X509v3 Authority Key Identifier: keyid:32:A7:21:D3:05:B5:29:39:B1:6A:70:EE:E3:79:FB:9C:82:10:9A:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D71D/262C9B0236CE11F0A2A69C1FC4F9AE02/Mqch0wW1KTmxanDu43n7nIIQmhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mqch0wW1KTmxanDu43n7nIIQmhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D71D/262C9B0236CE11F0A2A69C1FC4F9AE02/Mqch0wW1KTmxanDu43n7nIIQmhI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:da:b9:4c:b7:a5:0f:c1:7d:8f:97:de:1b:bc:06:65:33:04: fa:d3:08:48:16:17:c8:76:9b:3f:2b:97:d8:98:24:b8:9c:93: 6f:39:13:42:bf:0c:d8:1e:df:72:0b:24:8a:22:db:f7:f3:0b: a6:73:55:a0:82:3e:51:af:86:07:c3:06:50:ab:b3:38:47:c6: 8e:68:6d:c6:72:e1:08:86:25:c9:91:27:9a:44:d1:a5:e2:c8: 40:bc:a2:00:73:4f:f1:87:58:52:b3:96:9e:fa:16:01:9e:79: 6d:d7:c4:ca:67:a9:89:1b:53:28:c9:ef:bc:87:86:b1:2f:ce: 89:5d:13:f4:48:5b:f3:8f:48:32:1a:43:c5:5d:3c:6e:50:2c: 32:a3:0c:b0:80:8e:1f:b7:7b:54:ca:f5:39:f4:8f:aa:1c:0c: 7f:ed:c0:f5:92:72:46:ca:f7:93:2d:31:31:05:7e:5b:20:ff: f8:c6:39:fe:74:3e:6e:1e:2f:b0:fa:91:c5:32:97:97:5a:16: 12:4c:35:7b:20:69:49:ed:30:77:f4:15:0a:2f:81:59:03:ff: e1:27:bf:1f:ff:db:7c:df:31:ae:b9:b0:63:e5:35:cd:b8:6d: 6e:11:21:d1:3b:df:11:56:99:65:c5:eb:89:88:7f:2e:c5:28: d0:6f:54:7a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RDcxRDExMC8GA1UEBRMoMzJBNzIxRDMwNUI1MjkzOUIxNkE3MEVFRTM3OUZCOUM4 MjEwOUExMjAeFw0yNTA2MTMwNjU5MDhaFw0yNTA2MjAwNjU5MDhaMBgxFjAUBgNV BAMTDTY4NGJjYzNjLTBkNTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/CUYaRVKuUtnSoQhSZSmAhZi75okM7HmXjWCePYgvyxoDP73wWjVxdw9DCphZ uvhlA3R+AJlEmb3nAf9VBJdykE9XWxmALCS37pTrvuwWonloVseOA7EpdqpHHjGt L9BDSbJL6LqlLFMjJt2mhNfewnw57ePzohHE4zNK+apB0f/R6Cwgnj4iHt0Hm6/9 VOlOO1XJ1DazaXPMdyyLx3TJXP45288obmFtSc8gxwGr0dAaIBjCJQT73bEgi486 DzmkznhEpIPZpIMXn0+FCvD9V3bpO3ZPZbk8GG9sg5XfSCzhYVHY3stCBqFqRKlJ rWowxdEGwkp+TwujomAd7McLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUyz4wi+0C yR1TJ8/iXLJWklFmZZ0wHwYDVR0jBBgwFoAUMqch0wW1KTmxanDu43n7nIIQmhIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJENzFELzI2MkM5QjAyMzZD RTExRjBBMkE2OUMxRkM0RjlBRTAyL01xY2gwd1cxS1RteGFuRHU0M243bklJUW1o SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTXFjaDB3VzFLVG14YW5EdTQzbjduSUlRbWhJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJE NzFELzI2MkM5QjAyMzZDRTExRjBBMkE2OUMxRkM0RjlBRTAyL01xY2gwd1cxS1Rt eGFuRHU0M243bklJUW1oSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACjauUy3pQ/BfY+X3hu8BmUzBPrTCEgWF8h2mz8rl9iYJLick285E0K/ DNge33ILJIoi2/fzC6ZzVaCCPlGvhgfDBlCrszhHxo5obcZy4QiGJcmRJ5pE0aXi yEC8ogBzT/GHWFKzlp76FgGeeW3XxMpnqYkbUyjJ77yHhrEvzoldE/RIW/OPSDIa Q8VdPG5QLDKjDLCAjh+3e1TK9Tn0j6ocDH/twPWSckbK95MtMTEFflsg//jGOf50 Pm4eL7D6kcUyl5daFhJMNXsgaUntMHf0FQovgVkD/+Envx//23zfMa65sGPlNc24 bW4RIdE73xFWmWXF64mIfy7FKNBvVHo= -----END CERTIFICATE-----Generated at Sat Jun 14 19:39:24 2025 by rpki-client