$ rpki-client -vvf rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.mft File: RLx47eY9W2Ire6wDs0mWsv5C4yc.mft (raw, json) Hash identifier: /pjOAkdOVSvCQaBTC6cQESKsV8GrAfkiM2m+7XhUIdU= Subject key identifier: 50:17:15:DC:49:43:99:D6:4D:75:2F:EB:4E:A8:06:2C:46:1E:20:3F Authority key identifier: 44:BC:78:ED:E6:3D:5B:62:2B:7B:AC:03:B3:49:96:B2:FE:42:E3:27 Certificate issuer: /CN=A913B7C7/serialNumber=44BC78EDE63D5B622B7BAC03B34996B2FE42E327 Certificate serial: 74 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RLx47eY9W2Ire6wDs0mWsv5C4yc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.mft Manifest number: 73 Signing time: Thu 19 Jun 2025 06:11:53 +0000 Manifest this update: Thu 19 Jun 2025 06:11:52 +0000 Manifest next update: Thu 26 Jun 2025 06:11:52 +0000 Files and hashes: 1: RLx47eY9W2Ire6wDs0mWsv5C4yc.crl (hash: 6DWZO8Ezs+GInK8/r/84NjkIQ8tcYITJoD81OyhoF5E=) 2: 0A18EF4A9D9C11EFBAF0D76AC4F9AE02.roa (hash: CckqoSL6Kl8ijND7YWEunm6CSbx21plf0BMP2SCxoy0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.crl rsync://rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RLx47eY9W2Ire6wDs0mWsv5C4yc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 06:11:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 116 (0x74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B7C7, serialNumber=44BC78EDE63D5B622B7BAC03B34996B2FE42E327 Validity Not Before: Jun 19 06:11:52 2025 GMT Not After : Jun 26 06:11:52 2025 GMT Subject: CN=6853aa29-462c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:1a:8c:70:65:a9:cb:e4:2e:68:1d:e7:16:e8: 1f:4b:8c:28:51:8d:21:6c:98:ec:2d:25:9b:80:2f: 50:f3:08:a9:55:41:2c:de:db:be:06:1f:4c:3e:1c: 7d:83:ca:21:ee:51:da:ac:0c:ea:6e:2e:63:f2:33: ca:28:86:8e:a3:62:3f:72:0f:bb:2e:3d:72:41:6c: 39:8b:57:65:53:37:5a:80:30:ea:d6:82:37:5b:1e: 81:df:4f:b1:2e:9a:9c:e3:ce:96:e4:7c:21:a9:be: c3:67:6e:ed:ba:53:82:dc:01:35:46:5d:e9:f1:4e: 34:ec:17:96:28:1f:e1:3b:16:42:44:00:6e:93:29: 73:92:90:8a:9e:16:2c:a4:9c:fb:b8:24:aa:86:2b: 10:d8:c9:12:72:42:5b:aa:97:7c:73:ae:8b:c4:cf: a0:a8:f9:cc:a0:8f:6c:b7:30:6d:c1:b7:4a:f3:fa: 7d:eb:d3:2e:ad:c7:fc:72:29:25:f2:f5:a9:e1:1c: 11:d9:8d:79:1f:24:53:3c:df:56:ff:a3:64:3d:36: 60:7a:1f:6f:96:27:fd:20:24:a0:ac:81:de:e8:ff: d3:29:80:68:6f:6e:c5:0b:0f:f5:e9:6e:0e:36:48: 3c:96:d2:9d:4c:3b:27:5a:6d:79:84:1f:31:f2:c8: 7f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:17:15:DC:49:43:99:D6:4D:75:2F:EB:4E:A8:06:2C:46:1E:20:3F X509v3 Authority Key Identifier: keyid:44:BC:78:ED:E6:3D:5B:62:2B:7B:AC:03:B3:49:96:B2:FE:42:E3:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RLx47eY9W2Ire6wDs0mWsv5C4yc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:1b:40:03:24:4a:59:3c:44:34:4c:6e:cb:74:fc:00:be:d4: 9a:ae:cb:a5:f1:42:d8:35:42:2b:a3:8e:eb:7b:a0:2f:39:c5: 9c:f1:92:93:06:4f:29:56:da:6a:cf:c6:ac:69:a1:13:6a:95: 7f:b3:ba:d0:16:26:f0:d5:84:46:d8:89:4b:cf:8f:ef:1d:1d: c9:1b:f8:6c:5c:87:d1:cc:8a:60:b5:df:35:bf:0c:cf:f8:86: 94:c4:03:e1:63:b7:85:ff:5a:7a:03:e0:9b:02:6b:73:5e:ab: 48:3b:e4:69:dd:0b:86:cf:18:e4:ab:5e:2a:72:75:19:98:e4: 0a:31:12:06:ea:d7:cc:d5:59:51:85:e7:a0:f6:10:f8:b5:9c: 46:e1:58:d4:15:29:55:2b:fb:60:53:fd:64:f5:80:c0:e0:be: 83:ff:d6:a0:ba:e1:94:10:61:38:86:52:a3:51:1c:37:ef:b5: 43:2f:fe:70:1f:9b:75:8d:61:2f:88:11:fd:44:f0:bd:3a:bc: a4:e9:88:14:29:10:f5:b4:61:63:a0:f6:7f:e9:4d:b7:a3:e8: e1:0e:b6:49:3c:70:51:d3:2a:31:82:db:40:b9:da:0b:c9:57: 1b:00:0e:60:fa:e6:7f:7e:ba:0d:aa:24:2f:b7:63:95:16:05: 68:78:15:7f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz QjdDNzExMC8GA1UEBRMoNDRCQzc4RURFNjNENUI2MjJCN0JBQzAzQjM0OTk2QjJG RTQyRTMyNzAeFw0yNTA2MTkwNjExNTJaFw0yNTA2MjYwNjExNTJaMBgxFjAUBgNV BAMTDTY4NTNhYTI5LTQ2MmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDUGoxwZanL5C5oHecW6B9LjChRjSFsmOwtJZuAL1DzCKlVQSze274GH0w+HH2D yiHuUdqsDOpuLmPyM8ooho6jYj9yD7suPXJBbDmLV2VTN1qAMOrWgjdbHoHfT7Eu mpzjzpbkfCGpvsNnbu26U4LcATVGXenxTjTsF5YoH+E7FkJEAG6TKXOSkIqeFiyk nPu4JKqGKxDYyRJyQluql3xzrovEz6Co+cygj2y3MG3Bt0rz+n3r0y6tx/xyKSXy 9anhHBHZjXkfJFM831b/o2Q9NmB6H2+WJ/0gJKCsgd7o/9MpgGhvbsULD/Xpbg42 SDyW0p1MOydabXmEHzHyyH/7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUBcV3ElD mdZNdS/rTqgGLEYeID8wHwYDVR0jBBgwFoAURLx47eY9W2Ire6wDs0mWsv5C4ycw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNCN0M3L0EyNDUxMTQ2OUQ5 QjExRUY4NjA1MDQ2OUM0RjlBRTAyL1JMeDQ3ZVk5VzJJcmU2d0RzMG1Xc3Y1QzR5 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUkx4NDdlWTlXMklyZTZ3RHMwbVdzdjVDNHljLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNC N0M3L0EyNDUxMTQ2OUQ5QjExRUY4NjA1MDQ2OUM0RjlBRTAyL1JMeDQ3ZVk5VzJJ cmU2d0RzMG1Xc3Y1QzR5Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG8bQAMkSlk8RDRMbst0/AC+1Jquy6XxQtg1Qiujjut7oC85xZzxkpMG TylW2mrPxqxpoRNqlX+zutAWJvDVhEbYiUvPj+8dHckb+Gxch9HMimC13zW/DM/4 hpTEA+Fjt4X/WnoD4JsCa3Neq0g75GndC4bPGOSrXipydRmY5AoxEgbq18zVWVGF 56D2EPi1nEbhWNQVKVUr+2BT/WT1gMDgvoP/1qC64ZQQYTiGUqNRHDfvtUMv/nAf m3WNYS+IEf1E8L06vKTpiBQpEPW0YWOg9n/pTbej6OEOtkk8cFHTKjGC20C52gvJ VxsADmD65n9+ug2qJC+3Y5UWBWh4FX8= -----END CERTIFICATE-----Generated at Fri Jun 20 13:16:39 2025 by rpki-client