$ rpki-client -vvf rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft File: Kt1a2PtDrdgNUrtYNpPDG42asuw.mft (raw, json) Hash identifier: WiBaa51oDsi/kKPdASa2d8b+rNn1iPeBGrsjjCW9Dmk= Subject key identifier: 11:21:32:D0:56:71:19:A8:BF:1D:E6:86:4E:76:00:15:2D:25:37:55 Authority key identifier: 2A:DD:5A:D8:FB:43:AD:D8:0D:52:BB:58:36:93:C3:1B:8D:9A:B2:EC Certificate issuer: /CN=A913149F/serialNumber=2ADD5AD8FB43ADD80D52BB583693C31B8D9AB2EC Certificate serial: 0C33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kt1a2PtDrdgNUrtYNpPDG42asuw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft Manifest number: 0C2E Signing time: Sat 14 Jun 2025 18:24:15 +0000 Manifest this update: Sat 14 Jun 2025 18:24:15 +0000 Manifest next update: Sat 21 Jun 2025 18:24:15 +0000 Files and hashes: 1: Kt1a2PtDrdgNUrtYNpPDG42asuw.crl (hash: H1MVuLF6l+r7+ZPPCVHHvCsi6I5+gIAMdqdfjNvmZaY=) 2: 78550A2608FE11EAA003E778C4F9AE02.roa (hash: /6LQIDdmV3dE7MeUvHilah4V60fZn+m3/u3zkX+mGFA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.crl rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kt1a2PtDrdgNUrtYNpPDG42asuw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 18:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3123 (0xc33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913149F, serialNumber=2ADD5AD8FB43ADD80D52BB583693C31B8D9AB2EC Validity Not Before: Jun 14 18:24:15 2025 GMT Not After : Jun 21 18:24:15 2025 GMT Subject: CN=684dbe4f-0f02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f9:3e:62:52:dc:30:f2:7e:1b:ee:98:ca:e1: ee:e4:73:4d:86:b2:74:bf:e3:29:55:13:87:57:7d: 97:17:0b:3f:ea:2a:5e:a4:84:33:6d:33:da:fd:f8: 4d:91:28:95:ac:fe:58:02:36:d8:25:00:be:b6:19: 45:07:88:75:c3:ce:e9:c5:09:bd:95:fe:7a:01:26: 4e:08:97:ed:69:f3:e8:0e:c8:47:26:d2:26:66:01: 68:81:6c:ff:4c:11:b8:26:84:00:88:ad:56:a9:fb: 5a:4c:dd:84:f6:2a:4e:66:2b:33:e9:f0:79:3d:ea: ab:22:91:19:2f:30:ba:2c:12:f9:65:8a:66:36:9d: 9d:de:9c:5a:2d:d2:74:85:49:12:69:45:56:ca:77: 99:73:4e:ca:10:aa:0f:70:18:f8:d0:8e:29:0d:9c: 1b:16:1c:0d:65:d9:a9:0c:04:49:18:d5:14:eb:f2: 8a:b9:a1:73:da:aa:fc:8d:0d:12:d0:00:f6:b7:8f: 69:53:d2:86:ca:b0:1c:3a:5f:3e:92:20:57:77:06: f9:40:d7:7d:2a:70:a1:10:55:f0:47:17:e2:d8:92: 97:e3:ed:a6:5e:fc:29:7f:2f:9a:67:fa:16:6f:3d: b2:2e:b9:26:3a:8a:26:48:24:bf:91:85:9d:97:ee: ba:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:21:32:D0:56:71:19:A8:BF:1D:E6:86:4E:76:00:15:2D:25:37:55 X509v3 Authority Key Identifier: keyid:2A:DD:5A:D8:FB:43:AD:D8:0D:52:BB:58:36:93:C3:1B:8D:9A:B2:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kt1a2PtDrdgNUrtYNpPDG42asuw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:8e:74:72:ed:a3:56:1c:ec:81:fe:3d:2b:2e:d1:8b:35:11: 2b:2a:be:66:40:5f:98:db:a7:12:55:22:24:6f:a6:2e:b6:6a: 76:06:fc:91:69:b7:38:b2:de:9c:e4:67:21:45:a8:b9:e8:72: d3:3c:08:c7:ec:a9:63:74:23:de:ec:b4:1d:1d:9e:2d:58:2d: e9:8f:ad:7f:06:ac:56:a1:33:4e:7f:da:57:a1:2d:fc:b0:80: 08:c7:bb:a1:09:45:a8:b6:ca:53:cf:45:66:1d:75:4d:50:75: 90:b5:0a:0f:33:0b:3d:a0:da:71:8e:81:d1:3c:8b:a8:da:04: 28:91:64:e3:0f:b7:37:86:5e:3c:38:8f:10:90:c9:37:e4:13: db:22:71:09:5b:cb:b7:41:54:15:34:2d:d0:0c:d5:2d:ed:ca: 9a:8d:b1:fa:ed:7c:5c:ce:f9:2f:3d:d7:a9:a3:b0:7c:0a:5d: 05:32:83:ec:e8:00:e9:a1:ca:1e:a4:ec:34:b9:ef:4c:6e:3a: 0b:a1:e0:cc:94:99:8a:42:cd:36:c2:44:98:e7:e4:1d:89:20: 6e:46:d1:a3:10:4e:cf:30:3f:ab:78:38:74:f6:43:be:d5:ef: 15:06:b6:3a:c6:de:b3:0f:49:87:bb:1b:a8:89:46:61:f7:85: 01:31:77:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE0OUYxMTAvBgNVBAUTKDJBREQ1QUQ4RkI0M0FERDgwRDUyQkI1ODM2OTNDMzFC OEQ5QUIyRUMwHhcNMjUwNjE0MTgyNDE1WhcNMjUwNjIxMTgyNDE1WjAYMRYwFAYD VQQDEw02ODRkYmU0Zi0wZjAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvfk+YlLcMPJ+G+6YyuHu5HNNhrJ0v+MpVROHV32XFws/6ipepIQzbTPa/fhN kSiVrP5YAjbYJQC+thlFB4h1w87pxQm9lf56ASZOCJftafPoDshHJtImZgFogWz/ TBG4JoQAiK1WqftaTN2E9ipOZisz6fB5PeqrIpEZLzC6LBL5ZYpmNp2d3pxaLdJ0 hUkSaUVWyneZc07KEKoPcBj40I4pDZwbFhwNZdmpDARJGNUU6/KKuaFz2qr8jQ0S 0AD2t49pU9KGyrAcOl8+kiBXdwb5QNd9KnChEFXwRxfi2JKX4+2mXvwpfy+aZ/oW bz2yLrkmOoomSCS/kYWdl+66CwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBEhMtBW cRmovx3mhk52ABUtJTdVMB8GA1UdIwQYMBaAFCrdWtj7Q63YDVK7WDaTwxuNmrLs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTQ5Ri9ERjAxNTgwODA4 RkMxMUVBQTg5MUE1NzVDNEY5QUUwMi9LdDFhMlB0RHJkZ05VcnRZTnBQREc0MmFz dXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0t0MWEyUHREcmRnTlVydFlOcFBERzQyYXN1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTQ5Ri9ERjAxNTgwODA4RkMxMUVBQTg5MUE1NzVDNEY5QUUwMi9LdDFhMlB0RHJk Z05VcnRZTnBQREc0MmFzdXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEjnRy7aNWHOyB/j0rLtGLNRErKr5mQF+Y26cSVSIkb6Yutmp2BvyR abc4st6c5GchRai56HLTPAjH7KljdCPe7LQdHZ4tWC3pj61/BqxWoTNOf9pXoS38 sIAIx7uhCUWotspTz0VmHXVNUHWQtQoPMws9oNpxjoHRPIuo2gQokWTjD7c3hl48 OI8QkMk35BPbInEJW8u3QVQVNC3QDNUt7cqajbH67XxczvkvPdepo7B8Cl0FMoPs 6ADpocoepOw0ue9MbjoLoeDMlJmKQs02wkSY5+QdiSBuRtGjEE7PMD+reDh09kO+ 1e8VBrY6xt6zD0mHuxuoiUZh94UBMXdi -----END CERTIFICATE-----Generated at Sun Jun 15 08:45:24 2025 by rpki-client