$ rpki-client -vvf rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft File: -Dcw_Tkbb492_vMXbtufxvVUHkA.mft (raw, json) Hash identifier: sKEMXp79lJ8Gx7n4TjU70gm4FHOJItH2oHYP0uAOVL0= Subject key identifier: FE:23:23:C0:DB:F2:A7:00:0F:F9:EB:FF:23:79:AD:45:EF:72:01:95 Authority key identifier: F8:37:30:FD:39:1B:6F:8F:76:FE:F3:17:6E:DB:9F:C6:F5:54:1E:40 Certificate issuer: /CN=A913621A/serialNumber=F83730FD391B6F8F76FEF3176EDB9FC6F5541E40 Certificate serial: 3501 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Dcw_Tkbb492_vMXbtufxvVUHkA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft Manifest number: 34CE Signing time: Sat 14 Jun 2025 14:17:31 +0000 Manifest this update: Sat 14 Jun 2025 14:17:31 +0000 Manifest next update: Sat 21 Jun 2025 14:17:31 +0000 Files and hashes: 1: -Dcw_Tkbb492_vMXbtufxvVUHkA.crl (hash: pK6Sip/TtxGgpWqOtvfFWF6okI0sqVvDWjEbwqpgx8E=) 2: 7369CB76E42F11E9B6290B4EC4F9AE02.roa (hash: 5NXAIxqc7ZB69eigMV3ENYonV7O2v0+3W3X0MsYYlQU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.crl rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Dcw_Tkbb492_vMXbtufxvVUHkA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 14:17:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13569 (0x3501) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913621A, serialNumber=F83730FD391B6F8F76FEF3176EDB9FC6F5541E40 Validity Not Before: Jun 14 14:17:31 2025 GMT Not After : Jun 21 14:17:31 2025 GMT Subject: CN=684d847b-c916 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c9:d9:c1:09:16:50:52:ee:52:50:c5:25:0d: 8f:49:44:94:34:09:f1:ab:68:30:68:4c:9f:e8:8d: d3:36:f3:14:04:50:0b:b2:5d:46:20:2d:ea:a5:12: 96:03:01:9a:f0:81:f6:ec:1f:a6:8f:ce:7e:49:22: a0:5a:38:b0:bb:89:17:d5:84:83:62:b0:6e:47:69: a6:d6:ba:31:80:83:b0:4e:c9:b1:b8:f3:9b:f5:c9: ce:51:ca:26:58:63:0e:75:07:6d:a7:86:01:a6:bc: b1:cd:dd:c9:dd:77:a5:8e:f2:de:d3:bf:81:03:d9: 5a:a3:bb:15:75:3c:09:6c:49:4c:b3:3b:ea:12:dc: 46:41:fb:95:3f:d4:5c:66:be:e3:05:50:ed:22:cd: 54:8a:cb:93:3d:ec:fc:46:80:9f:2e:87:c5:a2:2a: 89:90:78:94:9e:f6:9d:22:6c:3f:88:64:66:c5:7b: 09:c4:61:58:ea:dd:7a:45:c9:3f:95:20:3e:7c:dc: 54:8b:28:5e:4c:0f:f2:22:f7:6d:41:1e:e2:fc:d7: 3f:21:48:97:b9:78:33:7e:24:da:d6:2d:88:6d:1b: 00:3b:52:78:1d:c2:18:4d:d2:1d:45:4e:0b:86:9c: 6f:f5:e6:2d:19:37:98:9c:3a:92:6c:d3:76:fa:83: cb:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:23:23:C0:DB:F2:A7:00:0F:F9:EB:FF:23:79:AD:45:EF:72:01:95 X509v3 Authority Key Identifier: keyid:F8:37:30:FD:39:1B:6F:8F:76:FE:F3:17:6E:DB:9F:C6:F5:54:1E:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Dcw_Tkbb492_vMXbtufxvVUHkA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:4e:bb:d8:26:02:d6:ad:6d:cf:d7:77:21:46:80:16:73:d4: 93:50:b4:93:40:18:4e:41:58:1b:07:41:e9:62:45:49:9e:86: ca:86:a8:8e:1a:48:69:7e:61:8b:04:4a:35:57:12:98:4e:ba: 70:0f:a5:78:a5:5f:be:0e:39:70:a5:f7:41:a4:5c:ad:31:87: 3f:ee:7b:28:9e:76:16:32:b3:a8:b0:1f:1d:9b:01:44:17:b3: d4:de:b4:8a:17:66:16:e9:40:27:18:3e:d8:c8:2e:fc:da:f7: de:c0:65:b8:cf:c6:3f:da:a8:1f:99:31:e2:57:f7:0a:cb:d9: 5f:f5:c1:ea:25:51:a3:54:f6:dd:f6:98:2d:0b:15:5f:d8:ba: ef:12:f4:4e:7c:b6:65:99:da:de:da:bc:26:38:b5:49:93:47: 8d:b2:56:ed:51:97:e6:30:bd:20:99:99:0d:72:75:c8:04:73: e3:8c:c9:27:ff:ce:0d:9b:5e:2e:f4:63:92:15:b2:6e:d7:82: 9b:ce:2a:af:fa:52:2d:f3:99:f9:53:ea:4b:b3:cd:7f:c3:db: 30:4e:05:78:37:54:85:1e:84:66:0d:5e:e5:97:ac:dd:a0:dd: ed:78:4b:e7:93:1a:6c:7b:c9:d4:35:61:a7:0d:14:08:52:a1: d0:af:ae:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzYyMUExMTAvBgNVBAUTKEY4MzczMEZEMzkxQjZGOEY3NkZFRjMxNzZFREI5RkM2 RjU1NDFFNDAwHhcNMjUwNjE0MTQxNzMxWhcNMjUwNjIxMTQxNzMxWjAYMRYwFAYD VQQDEw02ODRkODQ3Yi1jOTE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2cnZwQkWUFLuUlDFJQ2PSUSUNAnxq2gwaEyf6I3TNvMUBFALsl1GIC3qpRKW AwGa8IH27B+mj85+SSKgWjiwu4kX1YSDYrBuR2mm1roxgIOwTsmxuPOb9cnOUcom WGMOdQdtp4YBpryxzd3J3XeljvLe07+BA9lao7sVdTwJbElMszvqEtxGQfuVP9Rc Zr7jBVDtIs1UisuTPez8RoCfLofFoiqJkHiUnvadImw/iGRmxXsJxGFY6t16Rck/ lSA+fNxUiyheTA/yIvdtQR7i/Nc/IUiXuXgzfiTa1i2IbRsAO1J4HcIYTdIdRU4L hpxv9eYtGTeYnDqSbNN2+oPLhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP4jI8Db 8qcAD/nr/yN5rUXvcgGVMB8GA1UdIwQYMBaAFPg3MP05G2+Pdv7zF27bn8b1VB5A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjIxQS8yODIyNDJGMDFE NkQxMUUyQjRDMEU2QUQwOEIwMkNEMi8tRGN3X1RrYmI0OTJfdk1YYnR1Znh2VlVI a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1EY3dfVGtiYjQ5Ml92TVhidHVmeHZWVUhrQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjIxQS8yODIyNDJGMDFENkQxMUUyQjRDMEU2QUQwOEIwMkNEMi8tRGN3X1RrYmI0 OTJfdk1YYnR1Znh2VlVIa0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwTrvYJgLWrW3P13chRoAWc9STULSTQBhOQVgbB0HpYkVJnobKhqiO GkhpfmGLBEo1VxKYTrpwD6V4pV++DjlwpfdBpFytMYc/7nsonnYWMrOosB8dmwFE F7PU3rSKF2YW6UAnGD7YyC782vfewGW4z8Y/2qgfmTHiV/cKy9lf9cHqJVGjVPbd 9pgtCxVf2LrvEvROfLZlmdre2rwmOLVJk0eNslbtUZfmML0gmZkNcnXIBHPjjMkn /84Nm14u9GOSFbJu14Kbziqv+lIt85n5U+pLs81/w9swTgV4N1SFHoRmDV7ll6zd oN3teEvnkxpse8nUNWGnDRQIUqHQr66S -----END CERTIFICATE-----Generated at Sun Jun 15 17:58:53 2025 by rpki-client