$ rpki-client -vvf rpki.apnic.net/member_repository/A913D0CA/B78873A245B811F084F36C5FC4F9AE02/pHTwjH8_SI1bkOEpmjSf8lHd4R8.mft File: pHTwjH8_SI1bkOEpmjSf8lHd4R8.mft (raw, json) Hash identifier: nqN+p1bUE0piJV6zXfKl63lChN2ixIikVaWjn0iz7LM= Subject key identifier: 6C:04:AE:B3:C7:B0:24:3B:B0:C4:C3:C2:E6:B9:1B:85:0A:85:36:E0 Authority key identifier: A4:74:F0:8C:7F:3F:48:8D:5B:90:E1:29:9A:34:9F:F2:51:DD:E1:1F Certificate issuer: /CN=A913D0CA/serialNumber=A474F08C7F3F488D5B90E1299A349FF251DDE11F Certificate serial: 06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pHTwjH8_SI1bkOEpmjSf8lHd4R8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D0CA/B78873A245B811F084F36C5FC4F9AE02/pHTwjH8_SI1bkOEpmjSf8lHd4R8.mft Manifest number: 06 Signing time: Tue 17 Jun 2025 07:01:49 +0000 Manifest this update: Tue 17 Jun 2025 07:01:48 +0000 Manifest next update: Tue 24 Jun 2025 07:01:48 +0000 Files and hashes: 1: pHTwjH8_SI1bkOEpmjSf8lHd4R8.crl (hash: 30k+Dd2vcKrYQmjXficHE+yYvUrkOQwGtjd0XhSrFeE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D0CA/B78873A245B811F084F36C5FC4F9AE02/pHTwjH8_SI1bkOEpmjSf8lHd4R8.crl rsync://rpki.apnic.net/member_repository/A913D0CA/B78873A245B811F084F36C5FC4F9AE02/pHTwjH8_SI1bkOEpmjSf8lHd4R8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pHTwjH8_SI1bkOEpmjSf8lHd4R8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 05:08:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6 (0x6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D0CA, serialNumber=A474F08C7F3F488D5B90E1299A349FF251DDE11F Validity Not Before: Jun 17 07:01:48 2025 GMT Not After : Jun 24 07:01:48 2025 GMT Subject: CN=685112dd-1b2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:32:1d:f3:fe:cb:64:bc:ae:27:c2:b6:ce:36: b7:05:40:8c:b4:37:64:19:ac:dc:ad:66:57:a6:ac: 13:49:dc:d1:28:fa:5a:3a:9e:db:80:83:34:f8:a7: 3b:dc:c4:c5:84:f6:a7:3e:a2:3d:7b:8b:33:68:9a: cb:92:0c:f2:c0:e8:02:14:96:8b:0c:4d:cf:4d:16: 43:48:5d:ba:d9:4d:4b:79:dc:fc:5b:2d:bb:d6:b3: 4f:12:fe:c8:ff:bf:36:e0:dd:de:35:d8:da:4a:04: 97:0f:d9:d4:ff:1c:ee:ca:c5:a0:5c:42:e4:83:f6: c5:4d:f0:0a:c6:9e:6c:63:7c:66:b8:bf:cb:7f:d1: ab:41:3e:2a:e4:e7:88:9b:e2:cc:a4:bd:3e:20:9b: a5:bf:8c:9c:8d:a3:61:88:04:c0:a3:4b:0d:8b:db: 95:6b:2c:e0:50:ba:3f:d6:3e:82:9e:d9:0b:e2:b4: fd:ab:9b:5b:cb:a8:08:f7:13:a9:63:d4:80:02:3f: 23:b0:07:ed:35:e3:fa:59:7b:b1:41:dc:39:23:85: 70:87:ea:eb:7a:25:92:fb:4b:6f:b7:be:f1:71:9b: 91:60:0b:b4:fe:68:dc:eb:1b:a3:81:c0:46:93:13: 6b:f2:37:63:74:7c:1b:f5:99:40:7e:50:8c:9c:cf: 89:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:04:AE:B3:C7:B0:24:3B:B0:C4:C3:C2:E6:B9:1B:85:0A:85:36:E0 X509v3 Authority Key Identifier: keyid:A4:74:F0:8C:7F:3F:48:8D:5B:90:E1:29:9A:34:9F:F2:51:DD:E1:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D0CA/B78873A245B811F084F36C5FC4F9AE02/pHTwjH8_SI1bkOEpmjSf8lHd4R8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pHTwjH8_SI1bkOEpmjSf8lHd4R8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D0CA/B78873A245B811F084F36C5FC4F9AE02/pHTwjH8_SI1bkOEpmjSf8lHd4R8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:7c:ff:fe:ab:51:cd:09:e7:73:3b:bb:6e:f1:d3:b2:c8:f9: fe:b0:3d:93:e1:10:68:f2:4e:77:6e:bc:6c:73:c3:0d:90:14: 99:56:53:cc:4f:08:17:db:41:1a:90:8f:01:51:b6:ac:e4:0a: 91:a0:c2:a6:63:2f:d4:2f:93:83:77:d6:24:3d:ae:0c:84:74: 1d:56:8f:f6:91:c3:f0:a8:49:7a:48:34:15:5c:73:08:ef:04: a4:87:e3:dc:7f:50:e3:56:23:f1:80:7f:0a:43:ee:18:ce:7a: 05:aa:16:fb:61:49:17:0e:42:46:d1:55:cf:a7:5a:c6:06:f7: bd:fb:c9:7e:2b:4a:48:bb:a4:ae:5f:9b:95:a7:32:58:06:f2: 0c:3f:20:ca:83:79:61:17:bc:c2:ce:64:8e:1f:51:5c:7f:e0: 81:84:49:70:91:dd:f5:07:ef:ae:23:f0:b8:58:da:05:38:10: 5d:02:19:b9:7e:e2:f9:27:fe:fc:c1:17:76:18:d8:e9:cd:3c: 01:7e:e2:d0:65:e6:72:1e:7e:f3:38:df:4b:52:ed:7f:c4:15: a0:31:43:69:2c:bf:26:f6:2b:52:d2:07:5b:41:18:ce:f1:b8: e3:23:9a:f9:9b:80:30:6c:dd:82:2a:44:30:f3:f3:e8:ed:cb: b8:00:15:4d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RDBDQTExMC8GA1UEBRMoQTQ3NEYwOEM3RjNGNDg4RDVCOTBFMTI5OUEzNDlGRjI1 MURERTExRjAeFw0yNTA2MTcwNzAxNDhaFw0yNTA2MjQwNzAxNDhaMBgxFjAUBgNV BAMTDTY4NTExMmRkLTFiMmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCXMh3z/stkvK4nwrbONrcFQIy0N2QZrNytZlemrBNJ3NEo+lo6ntuAgzT4pzvc xMWE9qc+oj17izNomsuSDPLA6AIUlosMTc9NFkNIXbrZTUt53PxbLbvWs08S/sj/ vzbg3d412NpKBJcP2dT/HO7KxaBcQuSD9sVN8ArGnmxjfGa4v8t/0atBPirk54ib 4sykvT4gm6W/jJyNo2GIBMCjSw2L25VrLOBQuj/WPoKe2QvitP2rm1vLqAj3E6lj 1IACPyOwB+014/pZe7FB3DkjhXCH6ut6JZL7S2+3vvFxm5FgC7T+aNzrG6OBwEaT E2vyN2N0fBv1mUB+UIycz4ljAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUbASus8ew JDuwxMPC5rkbhQqFNuAwHwYDVR0jBBgwFoAUpHTwjH8/SI1bkOEpmjSf8lHd4R8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNEMENBL0I3ODg3M0EyNDVC ODExRjA4NEYzNkM1RkM0RjlBRTAyL3BIVHdqSDhfU0kxYmtPRXBtalNmOGxIZDRS OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcEhUd2pIOF9TSTFia09FcG1qU2Y4bEhkNFI4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNE MENBL0I3ODg3M0EyNDVCODExRjA4NEYzNkM1RkM0RjlBRTAyL3BIVHdqSDhfU0kx YmtPRXBtalNmOGxIZDRSOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACR8//6rUc0J53M7u27x07LI+f6wPZPhEGjyTnduvGxzww2QFJlWU8xP CBfbQRqQjwFRtqzkCpGgwqZjL9Qvk4N31iQ9rgyEdB1Wj/aRw/CoSXpINBVccwjv BKSH49x/UONWI/GAfwpD7hjOegWqFvthSRcOQkbRVc+nWsYG9737yX4rSki7pK5f m5WnMlgG8gw/IMqDeWEXvMLOZI4fUVx/4IGESXCR3fUH764j8LhY2gU4EF0CGbl+ 4vkn/vzBF3YY2OnNPAF+4tBl5nIefvM430tS7X/EFaAxQ2ksvyb2K1LSB1tBGM7x uOMjmvmbgDBs3YIqRDDz8+jty7gAFU0= -----END CERTIFICATE-----Generated at Tue Jun 17 09:28:10 2025 by rpki-client