$ rpki-client -vvf rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.mft File: kWov4qosIKsBxaE9I22knbfqUGI.mft (raw, json) Hash identifier: KSRNFxsD7WQnKlS0Vg8IiZjiZON0nnPlKsXH0OV3qaU= Subject key identifier: E6:E6:1B:42:BA:54:E4:51:CE:AD:14:E3:AC:DB:37:B6:3E:31:DB:FE Authority key identifier: 91:6A:2F:E2:AA:2C:20:AB:01:C5:A1:3D:23:6D:A4:9D:B7:EA:50:62 Certificate issuer: /CN=A912EF71/serialNumber=916A2FE2AA2C20AB01C5A13D236DA49DB7EA5062 Certificate serial: 0E24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kWov4qosIKsBxaE9I22knbfqUGI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.mft Manifest number: 0E1B Signing time: Sat 14 Jun 2025 17:43:17 +0000 Manifest this update: Sat 14 Jun 2025 17:43:17 +0000 Manifest next update: Sat 21 Jun 2025 17:43:17 +0000 Files and hashes: 1: kWov4qosIKsBxaE9I22knbfqUGI.crl (hash: 6gKTsZjWKRdV2wZC/Arj8tlOV3S7wmEExW7KijYGhVA=) 2: 6877A622A9DB11E9B353AF85C4F9AE02.roa (hash: NeUqjo2VYHUQAlZoEGW65z9tYOjTgZvuRZo90c+p6gU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.crl rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kWov4qosIKsBxaE9I22knbfqUGI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 17:13:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3620 (0xe24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912EF71, serialNumber=916A2FE2AA2C20AB01C5A13D236DA49DB7EA5062 Validity Not Before: Jun 14 17:43:17 2025 GMT Not After : Jun 21 17:43:17 2025 GMT Subject: CN=684db4b5-e4cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:85:30:d3:47:55:71:5a:39:50:7e:6b:93:8c: b5:eb:19:b5:1c:73:26:f0:96:be:d0:56:89:1a:6b: 31:3b:c1:37:21:69:d7:ba:62:f2:93:31:90:15:6e: 43:2b:0b:c4:50:2f:11:17:99:f3:1b:1f:84:70:1f: 3a:6c:b3:cf:43:19:e0:34:e6:d6:14:c4:68:ef:0f: ea:ae:78:96:62:cd:8f:cf:e5:a9:ac:ec:c3:bc:9d: 33:d5:b2:e3:e8:e0:2e:64:02:06:e6:28:91:21:4d: 24:1e:cd:7b:c4:3d:29:99:8e:e0:6b:75:27:52:82: f5:b9:5c:5c:29:c7:99:d6:68:86:8e:43:31:96:d5: 60:85:9c:96:e3:ef:97:4a:e2:7c:fb:f5:8e:5c:2e: 6b:67:ee:11:17:f5:be:ac:3c:b3:22:84:95:60:18: 6b:1c:b5:55:bd:92:ee:3f:24:0d:3a:3a:8f:db:2e: b2:e7:bd:8a:02:4d:a4:a4:11:4b:15:73:fe:5e:a1: f4:e1:56:68:ef:5b:af:09:47:e0:45:ba:b5:d1:47: ee:dd:e7:d0:1e:ba:66:86:ff:5f:bc:8d:61:8f:0f: 72:d9:67:7b:ef:5a:56:46:e1:57:1e:e9:60:cc:58: a0:1a:01:73:dc:b7:f8:22:11:9d:68:69:99:fc:3f: 10:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:E6:1B:42:BA:54:E4:51:CE:AD:14:E3:AC:DB:37:B6:3E:31:DB:FE X509v3 Authority Key Identifier: keyid:91:6A:2F:E2:AA:2C:20:AB:01:C5:A1:3D:23:6D:A4:9D:B7:EA:50:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kWov4qosIKsBxaE9I22knbfqUGI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:4d:0b:cd:4f:dc:34:99:7c:88:84:44:70:16:f9:fa:bf:d7: c3:4f:6f:c0:7e:44:8c:df:0a:14:31:fb:14:4c:a2:b0:9d:71: fe:98:51:81:58:db:5b:b2:f7:e7:c8:3f:c3:04:8c:b7:81:4f: ea:1f:3b:26:b9:67:f3:0b:bc:b0:0c:44:c2:cb:03:a6:0f:10: a6:cc:d0:73:85:92:59:c1:b1:ae:b4:c3:d7:7f:2b:ec:35:b6: 4b:ee:54:d5:19:a9:78:36:e0:84:74:90:1a:39:28:93:81:d5: ee:6d:c7:de:53:68:62:c4:d9:4f:6f:67:4f:f6:74:99:ce:a7: 14:1e:c6:2f:98:34:50:ad:39:e4:cd:1a:d9:36:86:b2:ad:40: 2b:64:04:3f:f9:05:a7:75:7d:99:4d:76:38:5c:19:c0:97:9a: e1:07:34:ba:4c:61:42:15:fb:3d:90:bd:36:cd:8f:80:22:db: 46:a1:f7:c1:88:eb:b7:cc:fb:ef:d5:29:44:13:ed:d7:b2:e9: 3e:de:e0:de:d6:e1:90:c9:35:ab:8a:21:36:19:a2:78:16:77: fd:cc:cd:18:c1:59:b0:06:4b:e9:a0:03:75:16:c5:4a:12:9e: 21:10:5b:fa:75:e3:c9:52:27:7d:1d:4f:0a:fd:91:a5:cd:5c: a7:da:f8:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDiQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkVGNzExMTAvBgNVBAUTKDkxNkEyRkUyQUEyQzIwQUIwMUM1QTEzRDIzNkRBNDlE QjdFQTUwNjIwHhcNMjUwNjE0MTc0MzE3WhcNMjUwNjIxMTc0MzE3WjAYMRYwFAYD VQQDEw02ODRkYjRiNS1lNGNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApoUw00dVcVo5UH5rk4y16xm1HHMm8Ja+0FaJGmsxO8E3IWnXumLykzGQFW5D KwvEUC8RF5nzGx+EcB86bLPPQxngNObWFMRo7w/qrniWYs2Pz+WprOzDvJ0z1bLj 6OAuZAIG5iiRIU0kHs17xD0pmY7ga3UnUoL1uVxcKceZ1miGjkMxltVghZyW4++X SuJ8+/WOXC5rZ+4RF/W+rDyzIoSVYBhrHLVVvZLuPyQNOjqP2y6y572KAk2kpBFL FXP+XqH04VZo71uvCUfgRbq10Ufu3efQHrpmhv9fvI1hjw9y2Wd771pWRuFXHulg zFigGgFz3Lf4IhGdaGmZ/D8QjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFObmG0K6 VORRzq0U46zbN7Y+Mdv+MB8GA1UdIwQYMBaAFJFqL+KqLCCrAcWhPSNtpJ236lBi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRUY3MS83RUE4Mjk3Q0E5 REExMUU5OTU0MzM0ODRDNEY5QUUwMi9rV292NHFvc0lLc0J4YUU5STIya25iZnFV R0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tXb3Y0cW9zSUtzQnhhRTlJMjJrbmJmcVVHSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RUY3MS83RUE4Mjk3Q0E5REExMUU5OTU0MzM0ODRDNEY5QUUwMi9rV292NHFvc0lL c0J4YUU5STIya25iZnFVR0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfTQvNT9w0mXyIhERwFvn6v9fDT2/AfkSM3woUMfsUTKKwnXH+mFGB WNtbsvfnyD/DBIy3gU/qHzsmuWfzC7ywDETCywOmDxCmzNBzhZJZwbGutMPXfyvs NbZL7lTVGal4NuCEdJAaOSiTgdXubcfeU2hixNlPb2dP9nSZzqcUHsYvmDRQrTnk zRrZNoayrUArZAQ/+QWndX2ZTXY4XBnAl5rhBzS6TGFCFfs9kL02zY+AIttGoffB iOu3zPvv1SlEE+3Xsuk+3uDe1uGQyTWriiE2GaJ4Fnf9zM0YwVmwBkvpoAN1FsVK Ep4hEFv6dePJUid9HU8K/ZGlzVyn2vhK -----END CERTIFICATE-----Generated at Sat Jun 14 19:29:33 2025 by rpki-client