$ rpki-client -vvf rpki.apnic.net/member_repository/A912F190/57B405943A8411EFA5731584C4F9AE02/1r894WRB7X2HUG3gnk3V1jjgumk.mft File: 1r894WRB7X2HUG3gnk3V1jjgumk.mft (raw, json) Hash identifier: sEuIgOBRXvYNxj1fXRZRGgXmPseFSAK40Dvq4uf41RU= Subject key identifier: 60:0E:9E:7B:1E:58:C5:9E:02:8F:A7:5C:58:DF:C3:19:8D:D3:F1:01 Authority key identifier: D6:BF:3D:E1:64:41:ED:7D:87:50:6D:E0:9E:4D:D5:D6:38:E0:BA:69 Certificate issuer: /CN=A912F190/serialNumber=D6BF3DE16441ED7D87506DE09E4DD5D638E0BA69 Certificate serial: E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1r894WRB7X2HUG3gnk3V1jjgumk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F190/57B405943A8411EFA5731584C4F9AE02/1r894WRB7X2HUG3gnk3V1jjgumk.mft Manifest number: CF Signing time: Fri 13 Jun 2025 04:57:57 +0000 Manifest this update: Fri 13 Jun 2025 04:57:56 +0000 Manifest next update: Fri 20 Jun 2025 04:57:56 +0000 Files and hashes: 1: 1r894WRB7X2HUG3gnk3V1jjgumk.crl (hash: WG1ehZVwCJpcG7UJs2+zJ/0LMePNdNu/FIORgAyYrCc=) 2: 23CFDCD244BE11EF8FA8A37FC4F9AE02.roa (hash: vUDH2ZK5OJcy3mBbkdGoudlGrWh6Xv2GZJY44SeKbcc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F190/57B405943A8411EFA5731584C4F9AE02/1r894WRB7X2HUG3gnk3V1jjgumk.crl rsync://rpki.apnic.net/member_repository/A912F190/57B405943A8411EFA5731584C4F9AE02/1r894WRB7X2HUG3gnk3V1jjgumk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1r894WRB7X2HUG3gnk3V1jjgumk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 04:57:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 227 (0xe3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F190, serialNumber=D6BF3DE16441ED7D87506DE09E4DD5D638E0BA69 Validity Not Before: Jun 13 04:57:56 2025 GMT Not After : Jun 20 04:57:56 2025 GMT Subject: CN=684bafd5-b0a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:28:96:c9:85:3d:d5:23:20:52:de:c6:43:55: 26:6f:9b:bf:05:bc:d9:2c:7a:e4:b3:59:e4:19:bf: 48:b5:5a:75:a8:15:fa:a3:84:6b:27:de:19:b0:e4: 21:42:ca:f3:16:f3:59:7b:7c:ba:79:a2:ec:f0:d7: 13:ed:58:05:ec:95:b5:e2:9d:b6:72:23:dc:0d:11: 26:27:b1:2d:de:ac:ba:04:e7:38:f6:59:b3:78:38: e0:56:ce:86:96:df:47:e6:80:c5:b8:c5:ba:4d:79: 0d:bc:b4:0f:96:ed:ab:a5:d1:58:68:b5:96:7f:9b: c4:36:81:a7:6f:2e:88:cf:a8:dc:cf:b7:da:e2:8d: d0:36:7e:29:d7:17:ee:91:87:e6:1f:ef:1e:f8:8f: 81:6c:4c:30:e9:f8:39:7f:25:aa:a6:3b:1f:07:2f: 65:90:48:a2:57:14:c5:69:f7:62:2b:bc:ee:74:13: e1:b4:43:0a:8c:f0:17:95:80:34:46:4f:32:81:4b: df:0c:1a:de:06:94:59:df:5d:e7:37:84:18:57:29: fa:d2:05:54:5d:0b:db:8d:64:f2:2e:4f:3d:59:c1: 23:b9:b4:ce:bf:60:c8:e9:82:50:04:f4:16:5d:ca: 65:a1:17:49:d4:a0:7c:1c:dc:9a:9e:bf:e8:10:d4: 6e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:0E:9E:7B:1E:58:C5:9E:02:8F:A7:5C:58:DF:C3:19:8D:D3:F1:01 X509v3 Authority Key Identifier: keyid:D6:BF:3D:E1:64:41:ED:7D:87:50:6D:E0:9E:4D:D5:D6:38:E0:BA:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F190/57B405943A8411EFA5731584C4F9AE02/1r894WRB7X2HUG3gnk3V1jjgumk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1r894WRB7X2HUG3gnk3V1jjgumk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F190/57B405943A8411EFA5731584C4F9AE02/1r894WRB7X2HUG3gnk3V1jjgumk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:35:df:41:19:77:2d:d5:0f:a0:0f:5d:36:04:c5:16:09:fc: 67:d6:56:63:bb:32:1b:a0:b5:4d:c5:4e:90:1a:5b:2c:32:8d: 8d:0c:28:ff:eb:1d:51:9a:9e:f1:d7:b0:9d:1d:50:ee:87:05: 89:f7:66:67:49:53:5e:b7:80:9c:f0:93:a5:9e:a7:b6:2a:0b: 16:bb:4b:09:33:43:1b:de:c0:36:b7:ed:6c:a8:d1:1e:d5:b7: cf:5b:7a:1c:2e:3a:8b:26:c2:e4:fc:54:41:9c:1c:a2:4a:12: e0:85:2f:53:87:7d:5a:d0:da:b5:74:1e:53:5b:97:35:73:06: d5:ab:31:36:96:9c:96:17:cf:2d:89:ca:7a:40:c1:1a:31:2d: b7:8d:66:0a:f7:5f:0c:19:0e:76:53:89:e4:1a:d7:ff:13:f2: 3f:d8:ab:ac:0c:23:9d:be:d2:d7:ba:98:b9:ac:e9:22:39:22: 5e:61:50:fd:88:f7:02:db:c7:e0:a5:93:3c:b7:6f:5d:b5:64: 69:31:91:fc:67:27:41:59:90:aa:31:42:e1:3c:14:96:71:23: 3a:20:63:d4:d0:85:53:79:01:da:ad:86:07:fe:62:04:7d:82: 7c:70:83:40:8b:77:4e:c4:9a:77:09:86:67:9c:76:dc:e2:b6: ad:ee:1e:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYxOTAxMTAvBgNVBAUTKEQ2QkYzREUxNjQ0MUVEN0Q4NzUwNkRFMDlFNERENUQ2 MzhFMEJBNjkwHhcNMjUwNjEzMDQ1NzU2WhcNMjUwNjIwMDQ1NzU2WjAYMRYwFAYD VQQDEw02ODRiYWZkNS1iMGExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2iiWyYU91SMgUt7GQ1Umb5u/BbzZLHrks1nkGb9ItVp1qBX6o4RrJ94ZsOQh QsrzFvNZe3y6eaLs8NcT7VgF7JW14p22ciPcDREmJ7Et3qy6BOc49lmzeDjgVs6G lt9H5oDFuMW6TXkNvLQPlu2rpdFYaLWWf5vENoGnby6Iz6jcz7fa4o3QNn4p1xfu kYfmH+8e+I+BbEww6fg5fyWqpjsfBy9lkEiiVxTFafdiK7zudBPhtEMKjPAXlYA0 Rk8ygUvfDBreBpRZ313nN4QYVyn60gVUXQvbjWTyLk89WcEjubTOv2DI6YJQBPQW XcploRdJ1KB8HNyanr/oENRuDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGAOnnse WMWeAo+nXFjfwxmN0/EBMB8GA1UdIwQYMBaAFNa/PeFkQe19h1Bt4J5N1dY44Lpp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjE5MC81N0I0MDU5NDNB ODQxMUVGQTU3MzE1ODRDNEY5QUUwMi8xcjg5NFdSQjdYMkhVRzNnbmszVjFqamd1 bWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFyODk0V1JCN1gySFVHM2duazNWMWpqZ3Vtay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjE5MC81N0I0MDU5NDNBODQxMUVGQTU3MzE1ODRDNEY5QUUwMi8xcjg5NFdSQjdY MkhVRzNnbmszVjFqamd1bWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJNd9BGXct1Q+gD102BMUWCfxn1lZjuzIboLVNxU6QGlssMo2NDCj/ 6x1Rmp7x17CdHVDuhwWJ92ZnSVNet4Cc8JOlnqe2KgsWu0sJM0Mb3sA2t+1sqNEe 1bfPW3ocLjqLJsLk/FRBnByiShLghS9Th31a0Nq1dB5TW5c1cwbVqzE2lpyWF88t icp6QMEaMS23jWYK918MGQ52U4nkGtf/E/I/2KusDCOdvtLXupi5rOkiOSJeYVD9 iPcC28fgpZM8t29dtWRpMZH8ZydBWZCqMULhPBSWcSM6IGPU0IVTeQHarYYH/mIE fYJ8cINAi3dOxJp3CYZnnHbc4rat7h6k -----END CERTIFICATE-----Generated at Sat Jun 14 19:31:01 2025 by rpki-client