$ rpki-client -vvf rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.mft File: 0e69FiTc3lGUEO1dZObVE5hLd9A.mft (raw, json) Hash identifier: r8SJM7chX4ijF0NUn08tlVjtC7Q2pMovqmDiBd+0asA= Subject key identifier: A1:2C:DF:B9:89:AD:FE:F6:D7:15:CA:BC:C9:E4:35:86:74:FC:A4:3D Authority key identifier: D1:EE:BD:16:24:DC:DE:51:94:10:ED:5D:64:E6:D5:13:98:4B:77:D0 Certificate issuer: /CN=A913F2BD/serialNumber=D1EEBD1624DCDE519410ED5D64E6D513984B77D0 Certificate serial: B3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0e69FiTc3lGUEO1dZObVE5hLd9A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.mft Manifest number: B2 Signing time: Tue 17 Jun 2025 04:55:17 +0000 Manifest this update: Tue 17 Jun 2025 04:55:17 +0000 Manifest next update: Tue 24 Jun 2025 04:55:17 +0000 Files and hashes: 1: 0e69FiTc3lGUEO1dZObVE5hLd9A.crl (hash: wxCdOsv03vfDPi87BYYQJ7QXFIgaJy9bq95BX/Qz4io=) 2: D0B078FA389611EF909AF237C4F9AE02.roa (hash: AFifu1YP8FleMFw0L6x+s4qXy39ubAWolO6tvcH8Ipg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.crl rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0e69FiTc3lGUEO1dZObVE5hLd9A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 04:55:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 179 (0xb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F2BD, serialNumber=D1EEBD1624DCDE519410ED5D64E6D513984B77D0 Validity Not Before: Jun 17 04:55:17 2025 GMT Not After : Jun 24 04:55:17 2025 GMT Subject: CN=6850f535-03ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:0e:e0:e6:a8:fd:1e:e9:9b:a7:26:3f:70:8a: 61:e8:c0:09:3e:48:89:4b:f3:12:1e:50:07:38:05: 95:96:91:0a:bd:cb:2e:93:31:27:ba:47:fd:e2:f8: 91:56:cd:b3:15:88:51:31:58:ff:08:18:b5:e9:5d: 90:ab:5b:bd:60:a3:24:ad:c0:07:bb:1e:b1:23:b0: 06:80:72:a8:eb:d4:79:da:8d:81:db:14:f9:e6:5e: 0f:f0:b8:8a:05:61:ba:8c:c4:67:61:48:e4:71:3f: 88:bb:48:78:37:91:d9:12:bb:02:70:29:05:38:cd: a1:cf:75:51:6b:6a:28:53:4a:d2:46:f8:20:d4:87: d2:a8:15:59:cd:7c:62:21:a2:e7:d1:be:cd:d7:50: 5a:1a:ef:1a:9c:64:ae:fd:b1:a9:5f:66:ad:91:aa: 2c:00:3a:8c:3d:f6:6e:dc:78:85:ab:1c:87:67:42: a1:03:3e:ef:78:f9:30:71:62:de:4c:41:35:22:0a: ee:28:11:0b:fa:9f:64:5b:60:3a:7d:cf:fb:33:e3: 12:38:f6:e4:8b:85:55:e4:90:69:b6:fb:ae:59:4a: d8:04:2c:f8:49:76:fd:70:65:87:1e:9c:29:64:41: da:b0:97:16:14:7a:74:d3:48:93:7d:5e:f0:26:f4: 05:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:2C:DF:B9:89:AD:FE:F6:D7:15:CA:BC:C9:E4:35:86:74:FC:A4:3D X509v3 Authority Key Identifier: keyid:D1:EE:BD:16:24:DC:DE:51:94:10:ED:5D:64:E6:D5:13:98:4B:77:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0e69FiTc3lGUEO1dZObVE5hLd9A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:8e:8e:e9:a6:eb:85:9e:1c:6b:f4:71:3a:c7:a5:23:8f:78: 52:7c:05:ec:ee:d7:60:d2:58:fd:37:d3:e1:26:f3:ad:80:15: 52:9b:6f:bd:34:ce:f8:2f:82:f1:33:d9:b6:5b:05:3a:06:11: a7:93:60:8a:15:09:ea:2b:61:55:6d:ca:cc:05:e1:3f:12:6a: a0:6b:51:f4:e2:91:e3:a6:12:aa:ca:9f:4c:b9:a7:57:7f:92: 30:a7:fc:fb:8a:ea:49:88:63:43:cb:04:a8:34:f7:45:d4:2e: 6d:17:6f:91:3c:09:9c:84:21:3e:c1:79:73:fc:88:c4:8a:5c: 2c:ef:5a:53:5c:50:2e:be:4e:fd:89:15:56:d3:b0:d0:3b:4a: af:7f:65:c0:da:c3:7e:33:55:fc:78:f4:69:0c:69:95:67:21: d4:9b:1e:14:a7:e4:e0:38:34:8e:d3:61:54:78:26:c8:95:f3: e1:97:57:00:73:80:05:dc:a6:c4:3d:4e:ca:26:36:2c:a5:8e: 04:67:6b:60:78:de:c4:71:f4:80:31:d5:c0:ae:6c:e2:98:e3: a7:bc:fd:d5:f6:d2:be:c8:72:f3:57:b5:f0:dc:05:9b:c9:8e: c3:82:e4:e0:a4:ff:7e:29:57:b5:c1:49:14:d5:90:f0:91:7c: b7:44:e2:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YyQkQxMTAvBgNVBAUTKEQxRUVCRDE2MjREQ0RFNTE5NDEwRUQ1RDY0RTZENTEz OTg0Qjc3RDAwHhcNMjUwNjE3MDQ1NTE3WhcNMjUwNjI0MDQ1NTE3WjAYMRYwFAYD VQQDEw02ODUwZjUzNS0wM2FkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwA7g5qj9HumbpyY/cIph6MAJPkiJS/MSHlAHOAWVlpEKvcsukzEnukf94viR Vs2zFYhRMVj/CBi16V2Qq1u9YKMkrcAHux6xI7AGgHKo69R52o2B2xT55l4P8LiK BWG6jMRnYUjkcT+Iu0h4N5HZErsCcCkFOM2hz3VRa2ooU0rSRvgg1IfSqBVZzXxi IaLn0b7N11BaGu8anGSu/bGpX2atkaosADqMPfZu3HiFqxyHZ0KhAz7vePkwcWLe TEE1IgruKBEL+p9kW2A6fc/7M+MSOPbki4VV5JBptvuuWUrYBCz4SXb9cGWHHpwp ZEHasJcWFHp000iTfV7wJvQFBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKEs37mJ rf721xXKvMnkNYZ0/KQ9MB8GA1UdIwQYMBaAFNHuvRYk3N5RlBDtXWTm1ROYS3fQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjJCRC8zRUUyNzY3NjM4 OTYxMUVGOUVERTgxMzZDNEY5QUUwMi8wZTY5RmlUYzNsR1VFTzFkWk9iVkU1aExk OUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzBlNjlGaVRjM2xHVUVPMWRaT2JWRTVoTGQ5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjJCRC8zRUUyNzY3NjM4OTYxMUVGOUVERTgxMzZDNEY5QUUwMi8wZTY5RmlUYzNs R1VFTzFkWk9iVkU1aExkOUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5jo7ppuuFnhxr9HE6x6Ujj3hSfAXs7tdg0lj9N9PhJvOtgBVSm2+9 NM74L4LxM9m2WwU6BhGnk2CKFQnqK2FVbcrMBeE/Emqga1H04pHjphKqyp9MuadX f5Iwp/z7iupJiGNDywSoNPdF1C5tF2+RPAmchCE+wXlz/IjEilws71pTXFAuvk79 iRVW07DQO0qvf2XA2sN+M1X8ePRpDGmVZyHUmx4Up+TgODSO02FUeCbIlfPhl1cA c4AF3KbEPU7KJjYspY4EZ2tgeN7EcfSAMdXArmzimOOnvP3V9tK+yHLzV7Xw3AWb yY7DguTgpP9+KVe1wUkU1ZDwkXy3ROKg -----END CERTIFICATE-----Generated at Thu Jun 19 02:59:18 2025 by rpki-client