$ rpki-client -vvf rpki.apnic.net/member_repository/A913E62B/61B35616240411F0A4D07273C4F9AE02/8uBzCSl2BY65hlYUFDf4-2i3IV0.mft File: 8uBzCSl2BY65hlYUFDf4-2i3IV0.mft (raw, json) Hash identifier: yK84D5pqSdoZ8mUEfx9Xol5U1t82nU/1phOodmlYG4M= Subject key identifier: 30:92:70:A1:02:71:3E:B9:5F:2E:93:F5:26:7A:51:5A:33:C4:35:2D Authority key identifier: F2:E0:73:09:29:76:05:8E:B9:86:56:14:14:37:F8:FB:68:B7:21:5D Certificate issuer: /CN=A913E62B/serialNumber=F2E073092976058EB98656141437F8FB68B7215D Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8uBzCSl2BY65hlYUFDf4-2i3IV0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E62B/61B35616240411F0A4D07273C4F9AE02/8uBzCSl2BY65hlYUFDf4-2i3IV0.mft Manifest number: 1C Signing time: Tue 17 Jun 2025 06:47:26 +0000 Manifest this update: Tue 17 Jun 2025 06:47:25 +0000 Manifest next update: Tue 24 Jun 2025 06:47:25 +0000 Files and hashes: 1: 8uBzCSl2BY65hlYUFDf4-2i3IV0.crl (hash: 2i54ROr8EfGiy2lEbw4+gOLdXNfXJ49iOM+ivabxmBc=) 2: CFED56A4240411F0B73CB374C4F9AE02.roa (hash: Zn3nz0esus3n+Qr7MjHUDFZOowDDsYzs6GVur4c4Gdw=) 3: CF53E5E6240411F0B73CB374C4F9AE02.roa (hash: aGXXY3h8pMjRmE6vJ9+0EmvsUGymYki2tMrN0LjTaWE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E62B/61B35616240411F0A4D07273C4F9AE02/8uBzCSl2BY65hlYUFDf4-2i3IV0.crl rsync://rpki.apnic.net/member_repository/A913E62B/61B35616240411F0A4D07273C4F9AE02/8uBzCSl2BY65hlYUFDf4-2i3IV0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8uBzCSl2BY65hlYUFDf4-2i3IV0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 06:47:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E62B, serialNumber=F2E073092976058EB98656141437F8FB68B7215D Validity Not Before: Jun 17 06:47:25 2025 GMT Not After : Jun 24 06:47:25 2025 GMT Subject: CN=68510f7e-73b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:78:a5:2c:a7:9f:29:b0:60:08:48:83:de:80: b7:b6:0f:80:df:73:77:82:d6:2d:b9:dd:41:e0:87: 7e:31:8d:af:a0:f2:ab:69:f3:47:45:ae:b3:5c:b1: 2e:e6:e0:7d:ad:8e:c2:11:96:62:34:0e:ab:cb:09: 64:14:00:d9:04:16:19:20:f6:d1:b4:1e:31:0d:cf: 83:c7:26:49:ad:ed:05:b0:18:03:36:ea:c6:da:59: fd:83:97:9b:82:9d:b6:b8:2c:2f:13:2f:36:2b:46: e4:a2:ce:0e:ad:a5:93:0c:26:49:ad:69:43:9b:33: 16:7d:b6:b1:de:ef:07:52:af:47:c4:fd:99:00:4d: 4f:3e:67:e3:05:99:cf:0f:17:6e:47:c3:6a:dc:c0: 7c:4f:4e:59:0c:71:0a:dc:df:29:60:d4:91:48:48: ae:91:c5:4f:b3:2b:a7:d7:c2:b7:e3:26:a6:d7:ac: de:4d:1c:37:23:ca:1b:68:a7:91:ac:68:56:e0:41: a4:62:ca:41:38:06:43:74:3c:45:56:77:b3:f3:db: 1b:0b:08:60:34:ca:5d:c6:e5:a3:e9:92:5e:71:89: 0e:eb:f7:2c:2f:f1:20:cb:11:bb:4d:59:1f:c4:89: f9:92:7c:aa:6f:97:5e:34:0a:56:ef:ec:1e:80:ca: 07:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:92:70:A1:02:71:3E:B9:5F:2E:93:F5:26:7A:51:5A:33:C4:35:2D X509v3 Authority Key Identifier: keyid:F2:E0:73:09:29:76:05:8E:B9:86:56:14:14:37:F8:FB:68:B7:21:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E62B/61B35616240411F0A4D07273C4F9AE02/8uBzCSl2BY65hlYUFDf4-2i3IV0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8uBzCSl2BY65hlYUFDf4-2i3IV0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E62B/61B35616240411F0A4D07273C4F9AE02/8uBzCSl2BY65hlYUFDf4-2i3IV0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:33:e7:f1:fd:7a:5f:36:a4:0d:63:d4:c2:81:56:63:71:61: 64:f1:b5:eb:c4:7e:b0:28:a5:4d:b5:8e:8f:04:3e:1a:e2:de: 96:22:a8:3f:b2:c6:61:63:e5:00:37:cb:93:25:bc:22:cd:9a: f9:d3:37:90:bc:c8:2f:f1:17:ad:d9:d0:8f:ae:65:7e:21:6a: 2c:26:9f:87:14:34:d4:8d:37:39:8d:55:8c:7c:a7:a5:8e:57: e7:a1:76:50:e1:2c:c1:51:d8:f0:15:28:c0:46:b7:56:c6:2d: 39:e6:05:48:95:0e:44:32:8b:3f:ea:b6:4f:11:17:83:a2:b0: 43:c4:60:77:11:0f:3f:73:73:ea:07:dd:01:48:4b:8a:ae:03: 76:3e:39:dc:17:a7:df:80:ce:dd:09:55:8f:42:d3:9b:58:4d: 85:a1:69:fd:1d:ca:45:16:e9:ca:72:88:22:31:ba:f6:ef:b1: f2:24:21:44:7f:14:b4:fe:80:f8:17:28:de:1d:b4:9c:8e:24: 4e:3b:20:75:fe:75:fe:71:97:05:b0:e9:9e:8f:50:a6:a9:a7: c3:82:10:cf:94:9f:17:2d:38:75:e3:e0:12:5e:ff:4c:5d:30: 60:4e:72:91:99:ed:db:7a:84:12:67:a8:ba:5c:3a:4e:71:6e: 2a:a6:68:fa -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RTYyQjExMC8GA1UEBRMoRjJFMDczMDkyOTc2MDU4RUI5ODY1NjE0MTQzN0Y4RkI2 OEI3MjE1RDAeFw0yNTA2MTcwNjQ3MjVaFw0yNTA2MjQwNjQ3MjVaMBgxFjAUBgNV BAMTDTY4NTEwZjdlLTczYjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDkeKUsp58psGAISIPegLe2D4Dfc3eC1i253UHgh34xja+g8qtp80dFrrNcsS7m 4H2tjsIRlmI0DqvLCWQUANkEFhkg9tG0HjENz4PHJkmt7QWwGAM26sbaWf2Dl5uC nba4LC8TLzYrRuSizg6tpZMMJkmtaUObMxZ9trHe7wdSr0fE/ZkATU8+Z+MFmc8P F25Hw2rcwHxPTlkMcQrc3ylg1JFISK6RxU+zK6fXwrfjJqbXrN5NHDcjyhtop5Gs aFbgQaRiykE4BkN0PEVWd7Pz2xsLCGA0yl3G5aPpkl5xiQ7r9ywv8SDLEbtNWR/E ifmSfKpvl140Clbv7B6AygcdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUMJJwoQJx PrlfLpP1JnpRWjPENS0wHwYDVR0jBBgwFoAU8uBzCSl2BY65hlYUFDf4+2i3IV0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNFNjJCLzYxQjM1NjE2MjQw NDExRjBBNEQwNzI3M0M0RjlBRTAyLzh1QnpDU2wyQlk2NWhsWVVGRGY0LTJpM0lW MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOHVCekNTbDJCWTY1aGxZVUZEZjQtMmkzSVYwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNF NjJCLzYxQjM1NjE2MjQwNDExRjBBNEQwNzI3M0M0RjlBRTAyLzh1QnpDU2wyQlk2 NWhsWVVGRGY0LTJpM0lWMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFUz5/H9el82pA1j1MKBVmNxYWTxtevEfrAopU21jo8EPhri3pYiqD+y xmFj5QA3y5MlvCLNmvnTN5C8yC/xF63Z0I+uZX4haiwmn4cUNNSNNzmNVYx8p6WO V+ehdlDhLMFR2PAVKMBGt1bGLTnmBUiVDkQyiz/qtk8RF4OisEPEYHcRDz9zc+oH 3QFIS4quA3Y+OdwXp9+Azt0JVY9C05tYTYWhaf0dykUW6cpyiCIxuvbvsfIkIUR/ FLT+gPgXKN4dtJyOJE47IHX+df5xlwWw6Z6PUKapp8OCEM+UnxctOHXj4BJe/0xd MGBOcpGZ7dt6hBJnqLpcOk5xbiqmaPo= -----END CERTIFICATE-----Generated at Wed Jun 18 13:20:12 2025 by rpki-client