$ rpki-client -vvf rpki.apnic.net/member_repository/A913D125/FE778EC8CC1011EF87396A6EC4F9AE02/Ae2EH7lRqvolkYDvkpnk02_ffD0.mft File: Ae2EH7lRqvolkYDvkpnk02_ffD0.mft (raw, json) Hash identifier: fr3vgSgHWxGX1KSMHyj+Y5dBZZexaAOISzQx4m7O1bQ= Subject key identifier: F0:36:DD:72:34:7B:F5:7A:8F:4D:7B:4B:C0:C7:03:9B:56:1F:7D:43 Authority key identifier: 01:ED:84:1F:B9:51:AA:FA:25:91:80:EF:92:99:E4:D3:6F:DF:7C:3D Certificate issuer: /CN=A913D125/serialNumber=01ED841FB951AAFA259180EF9299E4D36FDF7C3D Certificate serial: 54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae2EH7lRqvolkYDvkpnk02_ffD0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D125/FE778EC8CC1011EF87396A6EC4F9AE02/Ae2EH7lRqvolkYDvkpnk02_ffD0.mft Manifest number: 54 Signing time: Tue 17 Jun 2025 06:06:18 +0000 Manifest this update: Tue 17 Jun 2025 06:06:17 +0000 Manifest next update: Tue 24 Jun 2025 06:06:17 +0000 Files and hashes: 1: Ae2EH7lRqvolkYDvkpnk02_ffD0.crl (hash: qqs7sm6UcqPv7eRMyS3lFWx4U4Ik2WAsuh1n5M/UPxo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D125/FE778EC8CC1011EF87396A6EC4F9AE02/Ae2EH7lRqvolkYDvkpnk02_ffD0.crl rsync://rpki.apnic.net/member_repository/A913D125/FE778EC8CC1011EF87396A6EC4F9AE02/Ae2EH7lRqvolkYDvkpnk02_ffD0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae2EH7lRqvolkYDvkpnk02_ffD0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 06:06:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 84 (0x54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D125, serialNumber=01ED841FB951AAFA259180EF9299E4D36FDF7C3D Validity Not Before: Jun 17 06:06:17 2025 GMT Not After : Jun 24 06:06:17 2025 GMT Subject: CN=685105da-19a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a3:0d:c6:50:45:69:50:77:c5:ac:6d:fb:ea: 1a:67:43:c0:6f:b2:1e:28:6b:81:73:5d:66:a7:73: e9:79:1a:6a:f3:45:07:e6:8a:72:e8:ff:c3:76:3a: 6c:cd:54:95:28:33:38:f3:6e:68:67:3a:3e:36:bd: f3:97:86:a0:8f:81:5e:43:f8:65:f6:31:85:b7:b7: 5f:d3:2d:96:aa:a6:c0:c1:43:bb:a8:6d:ff:15:3a: 51:cb:fd:bb:85:ce:95:6f:ef:25:76:65:95:1e:f6: b5:71:7c:70:26:8e:86:2f:f3:f2:95:b2:8a:f5:07: 6e:ed:29:ed:ab:e6:7c:ab:d7:bf:39:c9:e9:e6:b1: a9:ab:c8:b2:08:cc:52:aa:19:c1:ba:08:98:01:32: 32:3d:a3:8c:c9:9d:6a:58:b0:f3:64:d0:9d:38:50: 96:b9:02:a7:6e:29:d1:ae:70:24:95:a7:98:b7:59: 88:3d:e1:c9:8d:c6:c8:40:7e:b4:e2:e8:65:e9:1e: e3:44:05:d4:e2:ad:fc:41:73:ba:9b:ff:45:05:eb: db:7d:cd:d0:d3:44:b3:f2:d2:ef:d4:c9:6e:42:e6: b1:1a:c0:09:a5:6d:df:33:01:ca:c6:24:56:01:e1: 5d:8c:d5:24:1b:04:8e:e3:95:b0:52:8d:9b:60:d9: d2:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:36:DD:72:34:7B:F5:7A:8F:4D:7B:4B:C0:C7:03:9B:56:1F:7D:43 X509v3 Authority Key Identifier: keyid:01:ED:84:1F:B9:51:AA:FA:25:91:80:EF:92:99:E4:D3:6F:DF:7C:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D125/FE778EC8CC1011EF87396A6EC4F9AE02/Ae2EH7lRqvolkYDvkpnk02_ffD0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae2EH7lRqvolkYDvkpnk02_ffD0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D125/FE778EC8CC1011EF87396A6EC4F9AE02/Ae2EH7lRqvolkYDvkpnk02_ffD0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:c7:d3:dc:16:ef:69:65:e2:24:82:05:42:27:08:65:4f:6e: ff:30:40:7a:ce:02:33:91:3f:e1:ea:06:6e:07:bb:fc:1b:50: 13:03:9a:7d:68:e4:9d:90:92:a7:10:b6:84:f8:25:19:e1:17: 72:f3:d5:66:f5:8a:ac:60:18:dc:6f:94:7c:84:c7:a8:ff:08: db:a4:e4:6d:be:56:b9:b5:4c:41:90:1b:34:42:fa:03:da:2f: f5:99:9f:ed:51:49:c4:31:7e:25:44:a4:c9:65:90:f7:2c:3c: 5d:b5:cb:35:b6:1f:c8:bd:84:04:cd:de:60:d1:d8:8a:8b:f4: 62:41:e1:35:d1:88:98:c6:1f:6a:27:5c:e5:79:6a:a3:45:85: 2e:09:aa:a9:ec:bc:cb:1d:26:5e:b2:06:76:bc:a2:bb:45:74: 61:83:17:52:a9:1e:a3:0e:43:8b:5c:35:bf:ab:00:50:49:ec: 31:45:57:2f:0a:81:8b:7f:59:db:6a:2c:f3:73:10:63:fd:09: 12:79:49:08:7a:10:54:cd:de:dc:9d:0f:26:69:c9:da:c2:ab: 48:3a:6c:f3:af:ac:f1:5c:a8:29:5a:8c:34:40:68:89:ca:69: 7c:33:8f:e9:84:0d:4c:59:04:a1:55:e1:99:0f:db:69:ad:8f: b4:49:68:bf -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RDEyNTExMC8GA1UEBRMoMDFFRDg0MUZCOTUxQUFGQTI1OTE4MEVGOTI5OUU0RDM2 RkRGN0MzRDAeFw0yNTA2MTcwNjA2MTdaFw0yNTA2MjQwNjA2MTdaMBgxFjAUBgNV BAMTDTY4NTEwNWRhLTE5YTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCow3GUEVpUHfFrG376hpnQ8Bvsh4oa4FzXWanc+l5GmrzRQfminLo/8N2OmzN VJUoMzjzbmhnOj42vfOXhqCPgV5D+GX2MYW3t1/TLZaqpsDBQ7uobf8VOlHL/buF zpVv7yV2ZZUe9rVxfHAmjoYv8/KVsor1B27tKe2r5nyr1785yenmsamryLIIzFKq GcG6CJgBMjI9o4zJnWpYsPNk0J04UJa5AqduKdGucCSVp5i3WYg94cmNxshAfrTi 6GXpHuNEBdTirfxBc7qb/0UF69t9zdDTRLPy0u/UyW5C5rEawAmlbd8zAcrGJFYB 4V2M1SQbBI7jlbBSjZtg2dLRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU8DbdcjR7 9XqPTXtLwMcDm1YffUMwHwYDVR0jBBgwFoAUAe2EH7lRqvolkYDvkpnk02/ffD0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNEMTI1L0ZFNzc4RUM4Q0Mx MDExRUY4NzM5NkE2RUM0RjlBRTAyL0FlMkVIN2xScXZvbGtZRHZrcG5rMDJfZmZE MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQWUyRUg3bFJxdm9sa1lEdmtwbmswMl9mZkQwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNE MTI1L0ZFNzc4RUM4Q0MxMDExRUY4NzM5NkE2RUM0RjlBRTAyL0FlMkVIN2xScXZv bGtZRHZrcG5rMDJfZmZEMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAK3H09wW72ll4iSCBUInCGVPbv8wQHrOAjORP+HqBm4Hu/wbUBMDmn1o 5J2QkqcQtoT4JRnhF3Lz1Wb1iqxgGNxvlHyEx6j/CNuk5G2+Vrm1TEGQGzRC+gPa L/WZn+1RScQxfiVEpMllkPcsPF21yzW2H8i9hATN3mDR2IqL9GJB4TXRiJjGH2on XOV5aqNFhS4JqqnsvMsdJl6yBna8ortFdGGDF1KpHqMOQ4tcNb+rAFBJ7DFFVy8K gYt/WdtqLPNzEGP9CRJ5SQh6EFTN3tydDyZpydrCq0g6bPOvrPFcqClajDRAaInK aXwzj+mEDUxZBKFV4ZkP22mtj7RJaL8= -----END CERTIFICATE-----Generated at Wed Jun 18 11:32:33 2025 by rpki-client