$ rpki-client -vvf rpki.apnic.net/member_repository/A913BA27/EA4E669C458C11F0B2BEB64DC4F9AE02/d31UDhYfpnH7JFijP_5L8z1qcBU.mft File: d31UDhYfpnH7JFijP_5L8z1qcBU.mft (raw, json) Hash identifier: rva0GcDEMLrsvHxskZbf2e7wGjQB4gXCnDKCAa95X6Q= Subject key identifier: 02:B0:99:0D:10:2B:CA:ED:4B:5C:3E:BB:79:3F:EC:17:6D:AF:B3:33 Authority key identifier: 77:7D:54:0E:16:1F:A6:71:FB:24:58:A3:3F:FE:4B:F3:3D:6A:70:15 Certificate issuer: /CN=A913BA27/serialNumber=777D540E161FA671FB2458A33FFE4BF33D6A7015 Certificate serial: 06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d31UDhYfpnH7JFijP_5L8z1qcBU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913BA27/EA4E669C458C11F0B2BEB64DC4F9AE02/d31UDhYfpnH7JFijP_5L8z1qcBU.mft Manifest number: 05 Signing time: Fri 13 Jun 2025 07:04:56 +0000 Manifest this update: Fri 13 Jun 2025 07:04:55 +0000 Manifest next update: Fri 20 Jun 2025 07:04:55 +0000 Files and hashes: 1: d31UDhYfpnH7JFijP_5L8z1qcBU.crl (hash: Z8zJdve7W1JyOnQvrXHQ9BCclyUDdRbepU32gIaYPXo=) 2: 71B7688645AB11F0949A471EC4F9AE02.roa (hash: yl2cL3cHIW46lNiv/5lOmjEF6XN4CiYiCi/4pbPGnEk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913BA27/EA4E669C458C11F0B2BEB64DC4F9AE02/d31UDhYfpnH7JFijP_5L8z1qcBU.crl rsync://rpki.apnic.net/member_repository/A913BA27/EA4E669C458C11F0B2BEB64DC4F9AE02/d31UDhYfpnH7JFijP_5L8z1qcBU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d31UDhYfpnH7JFijP_5L8z1qcBU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 07:04:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6 (0x6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913BA27, serialNumber=777D540E161FA671FB2458A33FFE4BF33D6A7015 Validity Not Before: Jun 13 07:04:55 2025 GMT Not After : Jun 20 07:04:55 2025 GMT Subject: CN=684bcd98-1799 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:17:96:8d:0a:f3:5f:02:24:57:24:e8:4a:fa: 76:e5:0a:80:e1:1d:28:d6:7b:bc:c1:ac:01:88:98: 2b:b8:06:eb:f6:b5:1d:d4:d5:0e:79:c9:b5:fb:a2: a9:2e:3b:e2:98:1f:5b:04:5c:05:9e:0e:c4:23:3c: f4:ed:b1:8e:b2:90:01:42:5a:cf:24:84:db:93:15: f3:eb:75:9e:e5:80:2e:a4:eb:d8:c0:0a:e7:26:d8: 5b:7f:e7:73:77:ef:c0:86:b1:4d:3e:0d:1c:5e:1c: 27:b9:6f:5c:7a:df:40:9e:0e:d7:2f:c2:08:de:7f: da:76:71:a9:f2:ad:d8:a1:85:34:e5:97:09:90:77: c3:21:cc:b4:ca:83:23:66:6a:b9:5d:75:c2:8b:b0: e0:3b:3b:fe:87:74:47:30:b6:43:fc:28:37:ce:65: be:a3:d9:8c:24:20:22:52:9e:74:2e:61:8c:6a:43: a0:6d:5d:c5:ae:cc:a3:c5:bf:af:60:9b:ac:5e:13: 47:c0:0c:52:6a:6d:46:07:3d:c2:e5:ec:06:dc:a8: c4:82:92:33:76:f4:87:41:df:b7:c0:c3:a2:76:4f: f4:e1:4a:8b:cf:60:e3:9f:57:cf:2f:2e:8e:6b:5f: cf:9e:e8:5f:25:9c:dc:d2:b3:7a:75:1b:9d:0d:e0: 39:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:B0:99:0D:10:2B:CA:ED:4B:5C:3E:BB:79:3F:EC:17:6D:AF:B3:33 X509v3 Authority Key Identifier: keyid:77:7D:54:0E:16:1F:A6:71:FB:24:58:A3:3F:FE:4B:F3:3D:6A:70:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913BA27/EA4E669C458C11F0B2BEB64DC4F9AE02/d31UDhYfpnH7JFijP_5L8z1qcBU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d31UDhYfpnH7JFijP_5L8z1qcBU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BA27/EA4E669C458C11F0B2BEB64DC4F9AE02/d31UDhYfpnH7JFijP_5L8z1qcBU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:d0:7d:a9:14:fa:c1:48:0c:57:62:15:26:91:02:65:0f:75: b4:34:20:37:fc:0e:5e:21:09:15:7d:55:9a:76:f8:5e:a2:b9: ab:20:c6:76:75:9a:b1:64:f8:a1:67:d1:67:f5:bb:f7:7c:53: f4:57:d7:8b:84:c6:32:c5:07:c8:e9:7e:df:b6:4b:4c:52:29: a1:0a:01:b8:29:0e:d3:16:fb:27:82:40:c9:13:c1:35:76:ec: 63:1d:27:1a:10:02:e2:77:a0:ce:b9:e4:c4:0e:ca:bd:13:c7: 2c:ec:79:b9:23:a8:aa:08:a1:b4:b6:45:76:66:49:ab:ac:67: 10:59:c6:84:92:18:e0:d2:61:10:3b:47:03:e8:f5:93:92:9c: c8:ef:36:40:00:96:06:7f:f0:5b:82:a5:c1:87:40:ff:63:d9: 72:43:b5:ab:33:44:3f:51:9c:d8:e6:d6:93:a1:8e:26:5c:c5: e6:0f:50:21:b5:21:84:39:64:06:39:3c:72:0d:07:05:6c:58: dc:88:61:18:1a:39:e2:a6:27:db:e3:a2:20:54:95:48:e5:45: 36:59:8d:3f:15:ac:e7:97:59:59:f0:52:8f:95:ea:f4:c1:5e: 73:ca:9d:46:e6:f2:3d:4c:cd:17:de:84:35:b4:f5:ad:3b:79: 41:ff:5e:88 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz QkEyNzExMC8GA1UEBRMoNzc3RDU0MEUxNjFGQTY3MUZCMjQ1OEEzM0ZGRTRCRjMz RDZBNzAxNTAeFw0yNTA2MTMwNzA0NTVaFw0yNTA2MjAwNzA0NTVaMBgxFjAUBgNV BAMTDTY4NGJjZDk4LTE3OTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGF5aNCvNfAiRXJOhK+nblCoDhHSjWe7zBrAGImCu4Buv2tR3U1Q55ybX7oqku O+KYH1sEXAWeDsQjPPTtsY6ykAFCWs8khNuTFfPrdZ7lgC6k69jACucm2Ft/53N3 78CGsU0+DRxeHCe5b1x630CeDtcvwgjef9p2canyrdihhTTllwmQd8MhzLTKgyNm arlddcKLsOA7O/6HdEcwtkP8KDfOZb6j2YwkICJSnnQuYYxqQ6BtXcWuzKPFv69g m6xeE0fADFJqbUYHPcLl7AbcqMSCkjN29IdB37fAw6J2T/ThSovPYOOfV88vLo5r X8+e6F8lnNzSs3p1G50N4DnfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUArCZDRAr yu1LXD67eT/sF22vszMwHwYDVR0jBBgwFoAUd31UDhYfpnH7JFijP/5L8z1qcBUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNCQTI3L0VBNEU2NjlDNDU4 QzExRjBCMkJFQjY0REM0RjlBRTAyL2QzMVVEaFlmcG5IN0pGaWpQXzVMOHoxcWNC VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZDMxVURoWWZwbkg3SkZpalBfNUw4ejFxY0JVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNC QTI3L0VBNEU2NjlDNDU4QzExRjBCMkJFQjY0REM0RjlBRTAyL2QzMVVEaFlmcG5I N0pGaWpQXzVMOHoxcWNCVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAbQfakU+sFIDFdiFSaRAmUPdbQ0IDf8Dl4hCRV9VZp2+F6iuasgxnZ1 mrFk+KFn0Wf1u/d8U/RX14uExjLFB8jpft+2S0xSKaEKAbgpDtMW+yeCQMkTwTV2 7GMdJxoQAuJ3oM655MQOyr0TxyzsebkjqKoIobS2RXZmSausZxBZxoSSGODSYRA7 RwPo9ZOSnMjvNkAAlgZ/8FuCpcGHQP9j2XJDtaszRD9RnNjm1pOhjiZcxeYPUCG1 IYQ5ZAY5PHINBwVsWNyIYRgaOeKmJ9vjoiBUlUjlRTZZjT8VrOeXWVnwUo+V6vTB XnPKnUbm8j1MzRfehDW09a07eUH/Xog= -----END CERTIFICATE-----Generated at Sat Jun 14 19:34:37 2025 by rpki-client