$ rpki-client -vvf rpki.apnic.net/member_repository/A913C34F/35FBF5D48A0411E2B8821D093292B5E8/1l59EGxXG0LrbOL4iHLeery6-7g.mft File: 1l59EGxXG0LrbOL4iHLeery6-7g.mft (raw, json) Hash identifier: 85pvL/ni+mxcaHk7Je6DXQ3ZqaRM0NrdiGrSn134BK0= Subject key identifier: CD:D2:27:00:75:94:FB:0D:B9:9F:E2:B7:59:99:2C:C8:4B:75:19:6A Authority key identifier: D6:5E:7D:10:6C:57:1B:42:EB:6C:E2:F8:88:72:DE:7A:BC:BA:FB:B8 Certificate issuer: /CN=A913C34F/serialNumber=D65E7D106C571B42EB6CE2F88872DE7ABCBAFBB8 Certificate serial: 3264 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1l59EGxXG0LrbOL4iHLeery6-7g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C34F/35FBF5D48A0411E2B8821D093292B5E8/1l59EGxXG0LrbOL4iHLeery6-7g.mft Manifest number: 3264 Signing time: Wed 18 Jun 2025 15:23:00 +0000 Manifest this update: Wed 18 Jun 2025 15:22:59 +0000 Manifest next update: Wed 25 Jun 2025 15:22:59 +0000 Files and hashes: 1: 1l59EGxXG0LrbOL4iHLeery6-7g.crl (hash: k3RSdnX8i9xVe/gROW0VhIGwD9/BOhv4ylwmBxTIOIE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C34F/35FBF5D48A0411E2B8821D093292B5E8/1l59EGxXG0LrbOL4iHLeery6-7g.crl rsync://rpki.apnic.net/member_repository/A913C34F/35FBF5D48A0411E2B8821D093292B5E8/1l59EGxXG0LrbOL4iHLeery6-7g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1l59EGxXG0LrbOL4iHLeery6-7g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 15:22:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12900 (0x3264) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C34F, serialNumber=D65E7D106C571B42EB6CE2F88872DE7ABCBAFBB8 Validity Not Before: Jun 18 15:22:59 2025 GMT Not After : Jun 25 15:22:59 2025 GMT Subject: CN=6852d9d3-ab2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:bb:87:03:11:c6:90:09:2f:6e:4d:77:a0:3c: ab:22:e0:de:e7:d9:19:e7:fd:40:bf:55:cf:d1:02: 24:53:e4:e8:4d:9a:0a:fe:cb:0c:6a:d2:72:21:6d: 67:8d:be:49:fe:69:eb:4c:cc:4f:49:59:6c:be:3c: 8e:d8:01:51:b2:d4:a2:54:b7:ed:ac:79:43:02:38: 61:8a:2e:48:13:01:61:88:53:0a:b4:fc:af:ca:f8: f8:f5:9b:3e:e8:08:04:ad:05:ca:c7:8d:7d:8f:a3: 3d:16:2a:47:c7:dd:5f:73:9b:84:b0:f9:45:7a:a2: da:50:af:25:9a:70:47:db:99:42:f8:d8:49:4b:43: 45:92:7d:83:0a:01:a2:34:40:e6:c8:f8:15:b0:5b: ec:1f:ac:49:27:ad:45:b8:51:d0:96:8e:fe:19:31: 82:bc:1e:24:d8:0e:14:e5:5a:30:5f:9f:32:91:fe: f6:5c:14:4d:0a:cc:6a:91:22:76:62:ad:c8:61:e1: 39:2c:ab:48:51:6c:5f:04:c2:d6:3b:f2:eb:47:02: d4:5a:ff:d7:41:79:e6:b9:93:af:1e:c5:1d:c4:cc: 1d:d7:b7:24:9e:85:c1:78:13:8a:67:9b:6c:c8:98: 18:a6:56:77:6d:6f:55:39:5b:42:5a:e0:85:aa:9b: 6c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:D2:27:00:75:94:FB:0D:B9:9F:E2:B7:59:99:2C:C8:4B:75:19:6A X509v3 Authority Key Identifier: keyid:D6:5E:7D:10:6C:57:1B:42:EB:6C:E2:F8:88:72:DE:7A:BC:BA:FB:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C34F/35FBF5D48A0411E2B8821D093292B5E8/1l59EGxXG0LrbOL4iHLeery6-7g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1l59EGxXG0LrbOL4iHLeery6-7g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C34F/35FBF5D48A0411E2B8821D093292B5E8/1l59EGxXG0LrbOL4iHLeery6-7g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:77:2b:44:40:c0:40:91:c0:94:b5:41:d8:22:a1:85:7d:3f: 93:ae:23:a6:50:f2:e7:d7:fc:9b:61:60:48:4b:2e:72:c6:f9: 78:44:a6:f1:9d:80:40:4b:b5:00:a9:1f:b2:aa:6e:2f:76:38: 9c:ca:06:84:03:01:cd:b7:5c:3a:ee:59:9f:40:d0:65:54:0e: f5:46:5d:65:a5:a3:60:d9:81:ba:80:14:0e:7b:22:66:5f:cd: 2d:4c:7d:a3:5b:e1:16:1e:20:9e:4b:f1:22:cc:27:ce:f9:bd: 0d:27:fc:6d:9c:c3:bb:84:15:5b:cc:8e:d5:3a:33:c8:6e:f0: 57:f9:ee:77:a2:aa:88:3d:23:ee:21:75:dd:10:f0:7a:09:4e: bf:fa:d6:cc:b3:42:a8:ac:5c:94:92:d7:ef:d6:ec:12:11:f3: 03:72:3c:cb:65:e4:81:94:48:39:19:d9:db:14:02:da:f6:09: d2:4a:0b:06:08:fd:fa:47:b4:b3:9d:e5:e1:e2:fa:21:9d:02: 4e:88:de:fc:a2:76:66:5c:34:99:d1:02:2d:f5:9d:84:6b:60: 55:8c:f8:06:55:a1:5d:7f:22:f1:20:e2:1d:47:d0:32:d4:46: 67:32:80:53:85:3b:ba:ef:ca:7a:cb:79:6f:2b:30:28:db:a7: 81:42:40:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMmQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0MzNEYxMTAvBgNVBAUTKEQ2NUU3RDEwNkM1NzFCNDJFQjZDRTJGODg4NzJERTdB QkNCQUZCQjgwHhcNMjUwNjE4MTUyMjU5WhcNMjUwNjI1MTUyMjU5WjAYMRYwFAYD VQQDEw02ODUyZDlkMy1hYjJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt7uHAxHGkAkvbk13oDyrIuDe59kZ5/1Av1XP0QIkU+ToTZoK/ssMatJyIW1n jb5J/mnrTMxPSVlsvjyO2AFRstSiVLftrHlDAjhhii5IEwFhiFMKtPyvyvj49Zs+ 6AgErQXKx419j6M9FipHx91fc5uEsPlFeqLaUK8lmnBH25lC+NhJS0NFkn2DCgGi NEDmyPgVsFvsH6xJJ61FuFHQlo7+GTGCvB4k2A4U5VowX58ykf72XBRNCsxqkSJ2 Yq3IYeE5LKtIUWxfBMLWO/LrRwLUWv/XQXnmuZOvHsUdxMwd17cknoXBeBOKZ5ts yJgYplZ3bW9VOVtCWuCFqptsHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM3SJwB1 lPsNuZ/it1mZLMhLdRlqMB8GA1UdIwQYMBaAFNZefRBsVxtC62zi+Ihy3nq8uvu4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzM0Ri8zNUZCRjVENDhB MDQxMUUyQjg4MjFEMDkzMjkyQjVFOC8xbDU5RUd4WEcwTHJiT0w0aUhMZWVyeTYt N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFsNTlFR3hYRzBMcmJPTDRpSExlZXJ5Ni03Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QzM0Ri8zNUZCRjVENDhBMDQxMUUyQjg4MjFEMDkzMjkyQjVFOC8xbDU5RUd4WEcw THJiT0w0aUhMZWVyeTYtN2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNdytEQMBAkcCUtUHYIqGFfT+TriOmUPLn1/ybYWBISy5yxvl4RKbx nYBAS7UAqR+yqm4vdjicygaEAwHNt1w67lmfQNBlVA71Rl1lpaNg2YG6gBQOeyJm X80tTH2jW+EWHiCeS/EizCfO+b0NJ/xtnMO7hBVbzI7VOjPIbvBX+e53oqqIPSPu IXXdEPB6CU6/+tbMs0KorFyUktfv1uwSEfMDcjzLZeSBlEg5GdnbFALa9gnSSgsG CP36R7SzneXh4vohnQJOiN78onZmXDSZ0QIt9Z2Ea2BVjPgGVaFdfyLxIOIdR9Ay 1EZnMoBThTu678p6y3lvKzAo26eBQkCp -----END CERTIFICATE-----Generated at Fri Jun 20 05:38:57 2025 by rpki-client