$ rpki-client -vvf rpki.apnic.net/member_repository/A913D1F2/99F7A34AD2CD11ED80607722C4F9AE02/anm3A54zvprmacUWEDfghAEXYgo.mft File: anm3A54zvprmacUWEDfghAEXYgo.mft (raw, json) Hash identifier: NU5KXq9OO5d8sitiu/TdnzGfd17WVHpGoSZ1bdoyd+I= Subject key identifier: 1E:52:7A:A1:23:AA:44:61:2D:3A:5A:F0:63:93:12:BE:F2:FB:E0:3D Authority key identifier: 6A:79:B7:03:9E:33:BE:9A:E6:69:C5:16:10:37:E0:84:01:17:62:0A Certificate issuer: /CN=A913D1F2/serialNumber=6A79B7039E33BE9AE669C5161037E0840117620A Certificate serial: 01B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/anm3A54zvprmacUWEDfghAEXYgo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D1F2/99F7A34AD2CD11ED80607722C4F9AE02/anm3A54zvprmacUWEDfghAEXYgo.mft Manifest number: 01A8 Signing time: Tue 17 Jun 2025 02:29:53 +0000 Manifest this update: Tue 17 Jun 2025 02:29:53 +0000 Manifest next update: Tue 24 Jun 2025 02:29:53 +0000 Files and hashes: 1: anm3A54zvprmacUWEDfghAEXYgo.crl (hash: g1F7TtfM8EkpPSJY3Z4UCExtzavfdnO9cTMsa/9TPX0=) 2: B7A19306B43111EEB373D20BC4F9AE02.roa (hash: p03IaXdoucRW+JeB0a3V5wQ0r6Xuoboe4Qb2cXTY05U=) 3: B48D2B70087E11EF81D62A76C4F9AE02.roa (hash: DxzDukY3WjBeIpnNW+7kygBvoj2I4tKyrrqWBJti0pE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D1F2/99F7A34AD2CD11ED80607722C4F9AE02/anm3A54zvprmacUWEDfghAEXYgo.crl rsync://rpki.apnic.net/member_repository/A913D1F2/99F7A34AD2CD11ED80607722C4F9AE02/anm3A54zvprmacUWEDfghAEXYgo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/anm3A54zvprmacUWEDfghAEXYgo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 02:29:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 435 (0x1b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D1F2, serialNumber=6A79B7039E33BE9AE669C5161037E0840117620A Validity Not Before: Jun 17 02:29:53 2025 GMT Not After : Jun 24 02:29:53 2025 GMT Subject: CN=6850d321-1977 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f3:d7:65:4f:04:27:35:58:4b:1e:9a:65:09: 5e:5a:43:5d:ef:69:a2:8b:af:47:e8:b8:52:cf:e3: 88:14:9a:82:e4:29:8b:a9:f2:7d:5e:2a:f3:bf:d0: c0:73:fe:9f:c2:15:77:46:19:c9:7c:e3:e6:da:12: 94:59:ec:71:cd:23:e3:52:b1:94:03:dc:08:5b:28: 38:ef:e5:c3:43:2b:e4:56:9b:fc:73:04:5e:91:c5: 5c:e2:54:7f:4f:69:82:74:a2:84:7d:26:42:55:f3: 2b:9d:74:fb:0e:14:d4:a5:e0:87:94:0b:e1:50:2f: ed:0c:3b:50:11:6f:23:2d:e1:34:b4:f4:6e:72:e0: e5:c5:2b:e0:33:98:76:e1:01:b5:34:b7:11:43:54: dd:15:e9:74:2d:16:cd:03:c2:10:65:d7:a1:32:dd: 61:4c:da:d6:1f:07:9f:f3:19:9b:26:56:00:03:67: 09:8a:78:93:91:e9:b5:16:19:b3:94:6c:73:95:6a: 8d:c4:fd:18:05:8d:d5:ec:6e:d7:06:6b:c9:f0:6d: 81:65:25:60:a9:91:df:96:52:fb:61:f9:aa:1a:b2: f8:2a:b8:cf:28:79:22:17:25:0e:53:cc:55:30:4d: 31:b9:dc:7d:40:1a:c5:4d:dd:1b:a3:4f:0a:18:c1: e9:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:52:7A:A1:23:AA:44:61:2D:3A:5A:F0:63:93:12:BE:F2:FB:E0:3D X509v3 Authority Key Identifier: keyid:6A:79:B7:03:9E:33:BE:9A:E6:69:C5:16:10:37:E0:84:01:17:62:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D1F2/99F7A34AD2CD11ED80607722C4F9AE02/anm3A54zvprmacUWEDfghAEXYgo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/anm3A54zvprmacUWEDfghAEXYgo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D1F2/99F7A34AD2CD11ED80607722C4F9AE02/anm3A54zvprmacUWEDfghAEXYgo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:f5:e6:94:76:fb:69:ca:87:87:e4:90:6d:27:b2:42:ce:8c: c7:f1:cc:e5:de:fc:16:5f:00:26:37:c4:9d:92:fa:f6:22:ca: 45:5a:2b:9a:19:ab:f0:83:ba:72:ce:90:d7:17:6d:a3:c9:05: d6:f2:6e:ab:b9:c0:7c:c6:1a:e2:2a:3f:7a:a4:d7:e7:a9:6f: a1:5a:61:f7:b0:23:79:0f:5e:c0:01:03:41:ed:a6:6f:6c:94: 04:03:ba:2a:ae:63:c2:34:7a:d4:5f:47:2f:65:25:46:be:cf: 61:b5:2b:f0:b0:b3:f8:58:0e:3b:4c:26:b9:00:57:28:ca:e4: dd:9c:c1:7a:8d:5a:24:c3:29:0d:eb:f9:95:50:0e:fb:4f:eb: 05:78:8a:96:e4:4d:97:db:a9:43:9c:ff:87:14:09:d9:37:90: 78:50:2e:24:10:f4:8d:da:da:b2:6c:06:27:4e:f0:16:82:74: c0:d6:ae:84:78:e8:f2:2d:62:bf:5a:b9:86:9d:df:dc:9b:16: 35:f0:65:dc:b8:62:5a:9c:32:1f:35:1b:4d:a4:d9:dc:e8:23: 8e:c5:30:44:d8:04:19:28:de:fb:9e:2a:57:35:2c:d9:c2:59: 88:95:d6:8b:10:10:94:07:85:50:7c:cb:99:b1:63:13:94:63: fb:2e:47:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0QxRjIxMTAvBgNVBAUTKDZBNzlCNzAzOUUzM0JFOUFFNjY5QzUxNjEwMzdFMDg0 MDExNzYyMEEwHhcNMjUwNjE3MDIyOTUzWhcNMjUwNjI0MDIyOTUzWjAYMRYwFAYD VQQDEw02ODUwZDMyMS0xOTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwfPXZU8EJzVYSx6aZQleWkNd72mii69H6LhSz+OIFJqC5CmLqfJ9Xirzv9DA c/6fwhV3RhnJfOPm2hKUWexxzSPjUrGUA9wIWyg47+XDQyvkVpv8cwRekcVc4lR/ T2mCdKKEfSZCVfMrnXT7DhTUpeCHlAvhUC/tDDtQEW8jLeE0tPRucuDlxSvgM5h2 4QG1NLcRQ1TdFel0LRbNA8IQZdehMt1hTNrWHwef8xmbJlYAA2cJiniTkem1Fhmz lGxzlWqNxP0YBY3V7G7XBmvJ8G2BZSVgqZHfllL7YfmqGrL4KrjPKHkiFyUOU8xV ME0xudx9QBrFTd0bo08KGMHpKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB5SeqEj qkRhLTpa8GOTEr7y++A9MB8GA1UdIwQYMBaAFGp5twOeM76a5mnFFhA34IQBF2IK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDFGMi85OUY3QTM0QUQy Q0QxMUVEODA2MDc3MjJDNEY5QUUwMi9hbm0zQTU0enZwcm1hY1VXRURmZ2hBRVhZ Z28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FubTNBNTR6dnBybWFjVVdFRGZnaEFFWFlnby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDFGMi85OUY3QTM0QUQyQ0QxMUVEODA2MDc3MjJDNEY5QUUwMi9hbm0zQTU0enZw cm1hY1VXRURmZ2hBRVhZZ28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC09eaUdvtpyoeH5JBtJ7JCzozH8czl3vwWXwAmN8Sdkvr2IspFWiua Gavwg7pyzpDXF22jyQXW8m6rucB8xhriKj96pNfnqW+hWmH3sCN5D17AAQNB7aZv bJQEA7oqrmPCNHrUX0cvZSVGvs9htSvwsLP4WA47TCa5AFcoyuTdnMF6jVokwykN 6/mVUA77T+sFeIqW5E2X26lDnP+HFAnZN5B4UC4kEPSN2tqybAYnTvAWgnTA1q6E eOjyLWK/WrmGnd/cmxY18GXcuGJanDIfNRtNpNnc6COOxTBE2AQZKN77nipXNSzZ wlmIldaLEBCUB4VQfMuZsWMTlGP7Lkcn -----END CERTIFICATE-----Generated at Tue Jun 17 16:29:21 2025 by rpki-client