$ rpki-client -vvf rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.mft File: dKGUOXIqgzAE05VKV4ToXm6ZvME.mft (raw, json) Hash identifier: UiB3o4tXrzcaTJOPtPsw/q5nibvkp0X1bYmP4MZwSi8= Subject key identifier: 96:85:06:2C:7D:37:E3:68:A2:01:86:54:27:D6:5F:2A:B6:88:43:72 Authority key identifier: 74:A1:94:39:72:2A:83:30:04:D3:95:4A:57:84:E8:5E:6E:99:BC:C1 Certificate issuer: /CN=A914454E/serialNumber=74A19439722A833004D3954A5784E85E6E99BCC1 Certificate serial: 086A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dKGUOXIqgzAE05VKV4ToXm6ZvME.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.mft Manifest number: 086A Signing time: Mon 16 Jun 2025 20:27:18 +0000 Manifest this update: Mon 16 Jun 2025 20:27:18 +0000 Manifest next update: Mon 23 Jun 2025 20:27:18 +0000 Files and hashes: 1: dKGUOXIqgzAE05VKV4ToXm6ZvME.crl (hash: pGVwuLKNARp9ajcFJ7Q5kf/bbqJ/duu54hEKE1AYoxA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.crl rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dKGUOXIqgzAE05VKV4ToXm6ZvME.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 20:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2154 (0x86a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914454E, serialNumber=74A19439722A833004D3954A5784E85E6E99BCC1 Validity Not Before: Jun 16 20:27:18 2025 GMT Not After : Jun 23 20:27:18 2025 GMT Subject: CN=68507e26-2cac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:42:d7:44:b4:c7:79:c6:bd:97:76:f8:59:ab: cf:99:e4:5e:f8:c7:86:13:50:94:f3:c5:0b:a2:56: 8a:31:e5:46:12:17:5a:72:fa:24:59:05:ad:19:88: ae:8d:0e:6e:34:c3:1e:c4:ce:0f:b1:d6:38:83:f3: f8:23:a0:96:78:63:92:d8:3e:98:d0:ae:66:ea:c3: 7d:e6:3e:ea:9a:86:f7:9d:2e:59:a9:06:7f:ef:20: 0d:35:ea:05:cc:ed:ab:66:3a:6d:0a:d6:c8:85:06: 85:22:1e:42:5e:bb:8b:01:a7:46:ca:2b:82:bf:8a: 7a:34:df:15:41:df:c4:81:5e:74:45:d9:78:61:89: 55:93:7f:20:2e:c2:dd:87:fe:0f:28:79:4e:82:5f: bc:6e:1e:78:ba:af:1d:42:29:4b:d8:0d:7c:1d:c2: a2:79:d6:a3:ec:62:2f:4d:6a:43:7f:e1:94:89:41: e5:0d:49:fb:29:9f:a8:3e:12:03:f8:55:60:74:16: 10:27:c7:ad:a3:b0:0e:2a:83:04:88:7f:22:43:40: 76:52:48:c8:3d:5f:88:28:b4:9d:b0:09:66:77:68: c5:f0:5f:59:9e:9b:06:a7:fb:a3:c0:b3:cd:60:05: 67:08:1a:43:7e:b6:cd:80:2a:ca:79:99:e9:db:a8: 3a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:85:06:2C:7D:37:E3:68:A2:01:86:54:27:D6:5F:2A:B6:88:43:72 X509v3 Authority Key Identifier: keyid:74:A1:94:39:72:2A:83:30:04:D3:95:4A:57:84:E8:5E:6E:99:BC:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dKGUOXIqgzAE05VKV4ToXm6ZvME.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:4f:38:d7:85:2a:a2:c9:c6:f6:2f:dd:21:56:00:22:0e:3c: 84:e5:35:67:9d:60:43:1f:ae:12:ca:3a:38:c6:65:4a:24:24: 1f:9f:bd:13:47:09:b5:90:05:ff:6c:2d:93:70:82:45:f1:4e: 9f:e3:d9:45:c9:c7:fa:ac:5a:3b:f6:79:57:6f:6a:7d:fb:e3: 5e:cf:62:ed:52:6a:b0:5f:c2:2c:a6:2f:6c:53:62:e9:48:8e: d3:f1:a0:39:15:52:a7:d4:37:91:75:9e:25:7a:ca:20:b2:db: 49:f4:46:2b:c1:dc:88:48:7f:78:bd:5b:67:75:5f:e9:cc:57: 3b:74:72:16:b6:b2:f9:66:3a:9e:94:e3:82:6b:dc:a2:87:bd: 9f:10:3d:ec:b8:b6:26:3b:8d:af:aa:b2:ce:ce:28:33:a7:b7: a4:63:b2:ba:1f:0e:a9:fd:49:f8:92:c2:d1:3f:78:3c:ff:87: a4:d5:37:ed:b6:a8:54:a6:b5:77:82:20:19:97:b6:99:98:2d: ba:e4:cb:55:13:20:6e:18:8f:9f:8d:ce:cf:3e:4d:9f:1b:50: 20:ec:77:a2:d5:aa:06:8e:22:3d:f4:f7:92:bd:15:70:6f:4e: 1c:cb:20:43:b2:16:d2:c4:f4:85:bc:ce:8c:78:4d:b0:34:0f: b3:4b:88:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCGowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ1NEUxMTAvBgNVBAUTKDc0QTE5NDM5NzIyQTgzMzAwNEQzOTU0QTU3ODRFODVF NkU5OUJDQzEwHhcNMjUwNjE2MjAyNzE4WhcNMjUwNjIzMjAyNzE4WjAYMRYwFAYD VQQDEw02ODUwN2UyNi0yY2FjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAskLXRLTHeca9l3b4WavPmeRe+MeGE1CU88ULolaKMeVGEhdacvokWQWtGYiu jQ5uNMMexM4PsdY4g/P4I6CWeGOS2D6Y0K5m6sN95j7qmob3nS5ZqQZ/7yANNeoF zO2rZjptCtbIhQaFIh5CXruLAadGyiuCv4p6NN8VQd/EgV50Rdl4YYlVk38gLsLd h/4PKHlOgl+8bh54uq8dQilL2A18HcKiedaj7GIvTWpDf+GUiUHlDUn7KZ+oPhID +FVgdBYQJ8eto7AOKoMEiH8iQ0B2UkjIPV+IKLSdsAlmd2jF8F9ZnpsGp/ujwLPN YAVnCBpDfrbNgCrKeZnp26g60QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJaFBix9 N+NoogGGVCfWXyq2iENyMB8GA1UdIwQYMBaAFHShlDlyKoMwBNOVSleE6F5umbzB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDU0RS8yQUY5REJCMEM0 RDUxMUVBODAyMUE3MThDNEY5QUUwMi9kS0dVT1hJcWd6QUUwNVZLVjRUb1htNlp2 TUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RLR1VPWElxZ3pBRTA1VktWNFRvWG02WnZNRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDU0RS8yQUY5REJCMEM0RDUxMUVBODAyMUE3MThDNEY5QUUwMi9kS0dVT1hJcWd6 QUUwNVZLVjRUb1htNlp2TUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzTzjXhSqiycb2L90hVgAiDjyE5TVnnWBDH64Syjo4xmVKJCQfn70T Rwm1kAX/bC2TcIJF8U6f49lFycf6rFo79nlXb2p9++Nez2LtUmqwX8Ispi9sU2Lp SI7T8aA5FVKn1DeRdZ4lesogsttJ9EYrwdyISH94vVtndV/pzFc7dHIWtrL5Zjqe lOOCa9yih72fED3suLYmO42vqrLOzigzp7ekY7K6Hw6p/Un4ksLRP3g8/4ek1Tft tqhUprV3giAZl7aZmC265MtVEyBuGI+fjc7PPk2fG1Ag7Hei1aoGjiI99PeSvRVw b04cyyBDshbSxPSFvM6MeE2wNA+zS4iP -----END CERTIFICATE-----Generated at Tue Jun 17 23:02:20 2025 by rpki-client