$ rpki-client -vvf rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft File: fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft (raw, json) Hash identifier: yAIMC1VKFqKTxw0KGyMxIg68hEVT76L2Xjwzso9BFSw= Subject key identifier: 44:EC:B6:22:7A:0A:3A:F4:10:70:B2:B5:42:76:B7:5A:C3:68:B8:03 Authority key identifier: 7C:BF:81:C5:9E:32:5E:F0:06:97:31:0B:39:45:FE:A1:C1:06:B3:78 Certificate issuer: /CN=A913D02A/serialNumber=7CBF81C59E325EF00697310B3945FEA1C106B378 Certificate serial: 0B5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fL-BxZ4yXvAGlzELOUX-ocEGs3g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft Manifest number: 0B57 Signing time: Sat 14 Jun 2025 18:56:50 +0000 Manifest this update: Sat 14 Jun 2025 18:56:49 +0000 Manifest next update: Sat 21 Jun 2025 18:56:49 +0000 Files and hashes: 1: fL-BxZ4yXvAGlzELOUX-ocEGs3g.crl (hash: i/x7ozdFyu5zLVoAhiJAudd3kdzEW2IqyrWXjuMy6X0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.crl rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fL-BxZ4yXvAGlzELOUX-ocEGs3g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 18:56:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2906 (0xb5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D02A, serialNumber=7CBF81C59E325EF00697310B3945FEA1C106B378 Validity Not Before: Jun 14 18:56:49 2025 GMT Not After : Jun 21 18:56:49 2025 GMT Subject: CN=684dc5f1-0cd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:27:af:e7:9e:65:a2:75:47:07:b9:6d:7b:01: 27:1a:4e:62:e1:be:2a:8c:d5:ba:71:d1:13:24:7d: 10:66:4c:3c:f6:52:5e:34:b5:d0:2b:bd:e2:19:0b: 34:36:4b:98:8d:a5:07:8f:50:6a:52:db:10:38:a5: cb:2a:b2:5b:dc:8b:da:34:27:5d:4f:7b:8a:d3:7a: df:6f:5d:60:3c:b5:da:4d:7f:c2:80:4f:85:fc:2c: a7:7f:1d:aa:2d:18:e4:e5:92:24:38:a5:53:09:d7: 80:d2:c2:2c:d4:a8:96:98:a9:64:a7:0b:0e:31:ee: de:d7:bf:16:41:20:5e:ac:11:f4:f2:a3:84:94:4b: 8a:0b:86:fc:f0:b4:d0:6c:c5:d2:9e:98:e2:3b:6a: 20:e2:7c:ff:de:30:20:86:3d:04:73:d1:41:ec:ff: 88:9b:54:1c:a5:db:d6:7d:5b:b6:c9:87:e4:de:bb: 84:41:d8:69:d7:3f:82:d3:05:c8:14:c5:ae:f4:f4: b1:4b:ac:49:ef:05:30:31:01:c3:9b:94:bb:25:b4: 9a:65:11:30:29:80:80:07:61:5a:cd:ce:75:b2:af: a5:ee:2f:51:ba:fb:70:61:a0:45:b7:fd:d1:46:25: 78:dc:10:55:2c:a2:86:1f:cb:07:7c:d2:72:ad:dc: 89:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:EC:B6:22:7A:0A:3A:F4:10:70:B2:B5:42:76:B7:5A:C3:68:B8:03 X509v3 Authority Key Identifier: keyid:7C:BF:81:C5:9E:32:5E:F0:06:97:31:0B:39:45:FE:A1:C1:06:B3:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fL-BxZ4yXvAGlzELOUX-ocEGs3g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:29:66:9a:6b:e3:6b:3e:f3:70:37:b8:89:32:7d:9d:ad:ec: 8f:04:f3:95:d2:6f:55:e1:4d:e6:ad:19:26:39:a8:1c:33:8d: f5:15:3b:af:44:e0:95:bd:45:b3:a8:31:82:4b:91:88:c8:3c: 9c:1f:93:ae:a4:f5:37:52:48:db:4f:c3:af:53:9f:a9:b9:af: 55:b8:94:d8:33:ad:43:67:04:f7:21:fa:0e:9d:f9:86:70:3b: 6b:a3:9c:cc:4e:4b:64:07:79:99:d9:ca:bc:b6:12:90:e1:be: a3:35:c5:f1:22:f7:50:f6:d7:8c:ca:4d:69:93:ac:ed:23:75: 6a:55:d1:bb:b6:4c:71:2b:8d:31:2f:7c:de:94:56:13:86:3d: 98:04:ad:3a:ad:74:b0:09:70:1f:4b:c5:c2:24:94:71:c0:66: 9a:fc:87:35:24:4e:80:47:e6:3e:6d:04:27:94:a6:40:cc:48: 35:80:cd:85:70:6f:85:29:f9:7f:aa:30:f0:4f:e0:89:ad:b2: 36:32:d4:3e:00:3d:e4:a8:86:2e:08:dd:82:f0:c3:f1:0e:ef: 07:58:da:e4:8c:4b:74:91:52:6d:d4:32:bd:e1:8e:25:d1:6c: 11:10:a4:7e:53:53:1e:96:49:6e:56:27:75:d3:ed:ce:ea:fb: 1a:42:65:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC1owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0QwMkExMTAvBgNVBAUTKDdDQkY4MUM1OUUzMjVFRjAwNjk3MzEwQjM5NDVGRUEx QzEwNkIzNzgwHhcNMjUwNjE0MTg1NjQ5WhcNMjUwNjIxMTg1NjQ5WjAYMRYwFAYD VQQDEw02ODRkYzVmMS0wY2QxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0iev555lonVHB7ltewEnGk5i4b4qjNW6cdETJH0QZkw89lJeNLXQK73iGQs0 NkuYjaUHj1BqUtsQOKXLKrJb3IvaNCddT3uK03rfb11gPLXaTX/CgE+F/Cynfx2q LRjk5ZIkOKVTCdeA0sIs1KiWmKlkpwsOMe7e178WQSBerBH08qOElEuKC4b88LTQ bMXSnpjiO2og4nz/3jAghj0Ec9FB7P+Im1QcpdvWfVu2yYfk3ruEQdhp1z+C0wXI FMWu9PSxS6xJ7wUwMQHDm5S7JbSaZREwKYCAB2Fazc51sq+l7i9RuvtwYaBFt/3R RiV43BBVLKKGH8sHfNJyrdyJewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFETstiJ6 Cjr0EHCytUJ2t1rDaLgDMB8GA1UdIwQYMBaAFHy/gcWeMl7wBpcxCzlF/qHBBrN4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDAyQS83N0ExRDk1RTMz QkMxMUVBODM0OTg1MEJDNEY5QUUwMi9mTC1CeFo0eVh2QUdsekVMT1VYLW9jRUdz M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZMLUJ4WjR5WHZBR2x6RUxPVVgtb2NFR3MzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDAyQS83N0ExRDk1RTMzQkMxMUVBODM0OTg1MEJDNEY5QUUwMi9mTC1CeFo0eVh2 QUdsekVMT1VYLW9jRUdzM2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKKWaaa+NrPvNwN7iJMn2dreyPBPOV0m9V4U3mrRkmOagcM431FTuv ROCVvUWzqDGCS5GIyDycH5OupPU3UkjbT8OvU5+pua9VuJTYM61DZwT3IfoOnfmG cDtro5zMTktkB3mZ2cq8thKQ4b6jNcXxIvdQ9teMyk1pk6ztI3VqVdG7tkxxK40x L3zelFYThj2YBK06rXSwCXAfS8XCJJRxwGaa/Ic1JE6AR+Y+bQQnlKZAzEg1gM2F cG+FKfl/qjDwT+CJrbI2MtQ+AD3kqIYuCN2C8MPxDu8HWNrkjEt0kVJt1DK94Y4l 0WwREKR+U1MelkluVid10+3O6vsaQmVH -----END CERTIFICATE-----Generated at Sun Jun 15 10:06:46 2025 by rpki-client