$ rpki-client -vvf rpki.apnic.net/member_repository/A912DFBA/DB9CE678029811EB9823AE82C4F9AE02/rk4wzA0FAaWuZkrbFZBTrOzwrP0.mft File: rk4wzA0FAaWuZkrbFZBTrOzwrP0.mft (raw, json) Hash identifier: R4zzVsfxEx123vrVWQW4lzHxnGlvOwhCuReYLPlPl7w= Subject key identifier: F2:46:0B:90:15:46:A2:02:5F:63:7E:9C:10:2F:BD:E7:70:24:E4:00 Authority key identifier: AE:4E:30:CC:0D:05:01:A5:AE:66:4A:DB:15:90:53:AC:EC:F0:AC:FD Certificate issuer: /CN=A912DFBA/serialNumber=AE4E30CC0D0501A5AE664ADB159053ACECF0ACFD Certificate serial: 07BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rk4wzA0FAaWuZkrbFZBTrOzwrP0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DFBA/DB9CE678029811EB9823AE82C4F9AE02/rk4wzA0FAaWuZkrbFZBTrOzwrP0.mft Manifest number: 07B0 Signing time: Thu 12 Jun 2025 20:55:05 +0000 Manifest this update: Thu 12 Jun 2025 20:55:05 +0000 Manifest next update: Thu 19 Jun 2025 20:55:05 +0000 Files and hashes: 1: rk4wzA0FAaWuZkrbFZBTrOzwrP0.crl (hash: 1eAKOcqPh3bXfQ8deEh0KUuyOIyTx7qwfcVh97faVkk=) 2: 38502DA2029A11EB85BD7B84C4F9AE02.roa (hash: 3OsuoPomkN3KwD+aF1zCoEkkbIN7dOFAl/woMg+7fcw=) 3: CEA093C66CA311ED9DD6425CC4F9AE02.roa (hash: 3rvQwF7VOidxONOxWbJzlS69h1FDkR177X5kmaAbyhg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DFBA/DB9CE678029811EB9823AE82C4F9AE02/rk4wzA0FAaWuZkrbFZBTrOzwrP0.crl rsync://rpki.apnic.net/member_repository/A912DFBA/DB9CE678029811EB9823AE82C4F9AE02/rk4wzA0FAaWuZkrbFZBTrOzwrP0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rk4wzA0FAaWuZkrbFZBTrOzwrP0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 20:55:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1979 (0x7bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DFBA, serialNumber=AE4E30CC0D0501A5AE664ADB159053ACECF0ACFD Validity Not Before: Jun 12 20:55:05 2025 GMT Not After : Jun 19 20:55:05 2025 GMT Subject: CN=684b3ea9-24b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:62:e5:f0:2f:2f:62:05:10:ae:85:72:4a:a1: cf:ba:f9:f8:d9:fd:39:07:69:4b:e9:bb:6f:fd:ef: 4b:98:dc:bc:f0:3c:a1:b2:de:39:24:d0:59:8f:0f: d2:3b:1a:ee:67:fc:45:bc:68:75:09:56:13:ef:fd: fb:e3:14:2b:4a:b6:2a:e5:0f:31:05:be:eb:99:bf: 81:a6:c8:3a:a6:3a:28:ea:ef:96:35:23:1f:46:11: 4a:e7:a9:f0:5c:ed:2f:f0:20:95:c0:24:16:c5:03: 55:09:c6:81:12:2d:c3:d8:a7:24:54:02:9b:4a:80: e3:76:bc:dd:a6:56:ed:52:fc:5a:c5:11:23:64:64: 81:25:0e:cb:92:18:be:9a:4b:e1:bf:3f:45:fd:36: 3e:6c:dd:46:96:e2:9b:e3:86:22:a6:aa:63:a0:6a: 94:86:83:cb:90:65:a7:ac:ad:5c:d9:25:17:1c:02: 4e:b8:39:1b:63:e4:f0:7c:7a:a5:c3:71:2f:28:c2: 19:97:6f:0d:c7:71:16:d2:eb:1c:64:10:d7:54:de: 11:69:71:4c:c5:35:67:37:7c:34:1c:60:a4:33:24: 00:d0:36:ac:0b:61:62:c3:c3:cf:2d:80:a2:3c:14: ab:6b:36:80:d0:56:26:f7:33:ae:1c:6b:b7:79:9e: de:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:46:0B:90:15:46:A2:02:5F:63:7E:9C:10:2F:BD:E7:70:24:E4:00 X509v3 Authority Key Identifier: keyid:AE:4E:30:CC:0D:05:01:A5:AE:66:4A:DB:15:90:53:AC:EC:F0:AC:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DFBA/DB9CE678029811EB9823AE82C4F9AE02/rk4wzA0FAaWuZkrbFZBTrOzwrP0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rk4wzA0FAaWuZkrbFZBTrOzwrP0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DFBA/DB9CE678029811EB9823AE82C4F9AE02/rk4wzA0FAaWuZkrbFZBTrOzwrP0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:38:48:4e:78:29:22:fb:2b:b8:9c:ed:62:a2:4d:8a:ea:a0: 82:0c:7d:e8:fd:54:c8:ec:34:75:0e:7a:60:3e:52:eb:9a:7f: 2c:5e:e6:1b:4d:06:b5:1a:f2:2c:4f:09:c2:96:8d:f5:1f:63: c6:6c:95:d2:00:ae:2e:2f:be:50:10:e1:de:85:76:e7:fe:49: cb:70:a7:70:e6:e7:1f:c7:7e:8a:e1:cb:ce:62:d4:ee:54:d5: 5d:3e:f5:3f:01:d4:64:13:65:3a:1b:86:13:13:ea:d3:e6:a2: 01:3a:5f:63:eb:8c:57:f9:a1:68:c3:11:4d:b6:f4:11:38:f4: ad:16:2c:3e:f7:1d:25:9e:06:49:87:17:e4:d4:e0:72:77:ac: a9:28:26:7d:12:b4:a2:79:00:7f:00:71:71:0c:a7:1d:03:ff: ab:35:14:7d:4a:3f:bc:05:40:cf:d7:71:ae:35:1f:49:73:06: d3:b9:84:52:af:a7:57:67:77:18:0b:05:6e:aa:ba:40:da:45: a0:ba:bb:36:57:5f:e1:66:03:32:5b:67:d6:b9:5a:81:1c:e9: d5:83:d2:9e:8e:00:48:88:ec:36:27:43:0d:08:16:3a:e3:59: fe:e1:cb:6b:04:25:2c:cb:fa:9b:3c:91:cc:83:9a:b2:a5:fc: f2:0f:d2:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRGQkExMTAvBgNVBAUTKEFFNEUzMENDMEQwNTAxQTVBRTY2NEFEQjE1OTA1M0FD RUNGMEFDRkQwHhcNMjUwNjEyMjA1NTA1WhcNMjUwNjE5MjA1NTA1WjAYMRYwFAYD VQQDEw02ODRiM2VhOS0yNGI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0mLl8C8vYgUQroVySqHPuvn42f05B2lL6btv/e9LmNy88Dyhst45JNBZjw/S OxruZ/xFvGh1CVYT7/374xQrSrYq5Q8xBb7rmb+Bpsg6pjoo6u+WNSMfRhFK56nw XO0v8CCVwCQWxQNVCcaBEi3D2KckVAKbSoDjdrzdplbtUvxaxREjZGSBJQ7Lkhi+ mkvhvz9F/TY+bN1GluKb44YipqpjoGqUhoPLkGWnrK1c2SUXHAJOuDkbY+TwfHql w3EvKMIZl28Nx3EW0uscZBDXVN4RaXFMxTVnN3w0HGCkMyQA0DasC2Fiw8PPLYCi PBSrazaA0FYm9zOuHGu3eZ7eCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPJGC5AV RqICX2N+nBAvvedwJOQAMB8GA1UdIwQYMBaAFK5OMMwNBQGlrmZK2xWQU6zs8Kz9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREZCQS9EQjlDRTY3ODAy OTgxMUVCOTgyM0FFODJDNEY5QUUwMi9yazR3ekEwRkFhV3Vaa3JiRlpCVHJPendy UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JrNHd6QTBGQWFXdVprcmJGWkJUck96d3JQMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REZCQS9EQjlDRTY3ODAyOTgxMUVCOTgyM0FFODJDNEY5QUUwMi9yazR3ekEwRkFh V3Vaa3JiRlpCVHJPendyUDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcOEhOeCki+yu4nO1iok2K6qCCDH3o/VTI7DR1DnpgPlLrmn8sXuYb TQa1GvIsTwnClo31H2PGbJXSAK4uL75QEOHehXbn/knLcKdw5ucfx36K4cvOYtTu VNVdPvU/AdRkE2U6G4YTE+rT5qIBOl9j64xX+aFowxFNtvQROPStFiw+9x0lngZJ hxfk1OByd6ypKCZ9ErSieQB/AHFxDKcdA/+rNRR9Sj+8BUDP13GuNR9JcwbTuYRS r6dXZ3cYCwVuqrpA2kWgurs2V1/hZgMyW2fWuVqBHOnVg9KejgBIiOw2J0MNCBY6 41n+4ctrBCUsy/qbPJHMg5qypfzyD9Jz -----END CERTIFICATE-----Generated at Sat Jun 14 17:11:12 2025 by rpki-client