$ rpki-client -vvf rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft File: _zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft (raw, json) Hash identifier: DXykHbwWt9nB5R2CkkigOOhesIRlUqbATbCt57Mjxko= Subject key identifier: 38:6B:E2:61:1B:10:B4:23:21:FE:5D:EC:F3:CF:9D:C3:00:4C:A2:6A Authority key identifier: FF:32:78:A3:AD:58:B1:8A:54:6E:3F:ED:CD:53:78:40:52:77:67:A8 Certificate issuer: /CN=A914A8CB/serialNumber=FF3278A3AD58B18A546E3FEDCD537840527767A8 Certificate serial: 1B30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft Manifest number: 1B18 Signing time: Fri 20 Jun 2025 16:19:53 +0000 Manifest this update: Fri 20 Jun 2025 16:19:53 +0000 Manifest next update: Fri 27 Jun 2025 16:19:53 +0000 Files and hashes: 1: _zJ4o61YsYpUbj_tzVN4QFJ3Z6g.crl (hash: 9eQUZKsD4pkLr4fAQk8GmDJuVElwxQk+2dxTuzO4CYw=) 2: 90C8D27021C211E786829418C4F9AE02.roa (hash: SG/JJrCv6+bEqjSz1EdPiULof9NKJsxI6no6f7rqWm0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.crl rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Jun 2025 16:19:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6960 (0x1b30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A8CB, serialNumber=FF3278A3AD58B18A546E3FEDCD537840527767A8 Validity Not Before: Jun 20 16:19:53 2025 GMT Not After : Jun 27 16:19:53 2025 GMT Subject: CN=68558a29-bed8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:95:b8:21:7e:3f:b6:ab:0b:9f:a8:12:ad:16: ae:de:3b:dd:a0:2b:ac:4d:2d:dd:30:9e:58:00:aa: f3:76:11:19:48:5c:d1:61:fa:b5:b9:c9:38:d1:81: 56:d5:ec:06:97:23:49:1f:85:43:63:12:21:05:6d: c2:8b:7f:04:5b:1d:6c:e4:39:a7:2e:41:2f:14:df: 21:3b:ab:7d:0b:8a:da:04:9f:f5:29:32:16:9d:65: 33:66:75:ed:44:71:92:e8:f1:10:27:a4:90:d7:e7: b2:f2:5c:48:12:31:7e:3e:45:70:35:1b:45:67:12: f4:70:9c:aa:ff:06:72:11:a0:cc:df:15:2d:3a:ba: c2:a1:41:4f:d2:1a:70:f0:ed:93:ba:90:fc:13:08: 10:57:78:05:84:73:36:58:13:f4:14:a5:58:78:36: 73:48:99:3a:66:f7:f5:78:e1:fa:84:47:90:99:3d: c4:28:a4:89:d4:93:38:d6:93:43:e4:23:5b:dd:e2: 10:7c:bd:f6:8b:93:1d:eb:9d:88:80:f6:13:5f:61: ca:56:30:b4:93:c9:2e:6e:50:02:66:8d:8f:42:87: 54:92:c2:a1:31:df:ea:34:3c:67:64:db:95:fe:54: 04:e9:2e:65:91:74:80:eb:cb:ae:76:e7:7d:33:db: 1b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:6B:E2:61:1B:10:B4:23:21:FE:5D:EC:F3:CF:9D:C3:00:4C:A2:6A X509v3 Authority Key Identifier: keyid:FF:32:78:A3:AD:58:B1:8A:54:6E:3F:ED:CD:53:78:40:52:77:67:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:73:e5:23:68:bb:ef:76:60:be:f6:d9:12:19:da:76:5a:0c: 82:ec:8b:be:ee:1c:ee:0e:00:99:5c:5d:f5:43:79:27:b3:c7: d4:71:a7:63:9a:2e:30:73:c2:6f:78:c1:97:87:79:0b:6e:0c: 31:69:39:7a:5f:38:e9:b7:e6:92:b5:c3:72:79:15:84:f7:cb: 2a:0d:47:e6:9d:70:f7:a8:86:97:ef:ac:8d:2e:b2:0d:0b:2e: 5c:09:02:ce:64:06:88:22:05:62:95:6a:78:e4:bb:e2:8b:4a: f1:ad:27:a8:a8:91:2b:6a:02:62:fc:fb:e3:5a:b8:68:b8:23: d3:ba:7d:59:39:03:5a:bd:0c:57:fb:d8:b3:05:54:6a:0c:e5: 3b:34:50:4f:9c:74:b1:0d:05:1c:f4:4a:02:e7:d4:79:ac:91: a2:92:a3:9f:b4:f9:ef:73:fb:3a:a5:74:8f:0e:43:68:8f:fc: 70:33:8c:de:43:cb:1e:64:4a:e0:ad:21:9e:7f:8c:a8:c9:c3: 1a:26:97:1c:3e:7a:63:02:ea:fc:1e:cd:f7:23:a4:31:55:4d: 72:f5:d0:66:88:d2:0d:5c:3a:25:57:a1:41:6a:96:ae:1c:23: 31:ac:45:ae:46:d3:e8:a0:d6:98:25:15:03:01:3f:1b:cb:ef: a0:36:98:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGzAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE4Q0IxMTAvBgNVBAUTKEZGMzI3OEEzQUQ1OEIxOEE1NDZFM0ZFRENENTM3ODQw NTI3NzY3QTgwHhcNMjUwNjIwMTYxOTUzWhcNMjUwNjI3MTYxOTUzWjAYMRYwFAYD VQQDEw02ODU1OGEyOS1iZWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArpW4IX4/tqsLn6gSrRau3jvdoCusTS3dMJ5YAKrzdhEZSFzRYfq1uck40YFW 1ewGlyNJH4VDYxIhBW3Ci38EWx1s5DmnLkEvFN8hO6t9C4raBJ/1KTIWnWUzZnXt RHGS6PEQJ6SQ1+ey8lxIEjF+PkVwNRtFZxL0cJyq/wZyEaDM3xUtOrrCoUFP0hpw 8O2TupD8EwgQV3gFhHM2WBP0FKVYeDZzSJk6Zvf1eOH6hEeQmT3EKKSJ1JM41pND 5CNb3eIQfL32i5Md652IgPYTX2HKVjC0k8kublACZo2PQodUksKhMd/qNDxnZNuV /lQE6S5lkXSA68uudud9M9sb3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDhr4mEb ELQjIf5d7PPPncMATKJqMB8GA1UdIwQYMBaAFP8yeKOtWLGKVG4/7c1TeEBSd2eo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QThDQi9DOEIwRjRGMjIx QzExMUU3OTU0RTg3MTdDNEY5QUUwMi9feko0bzYxWXNZcFVial90elZONFFGSjNa NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL196SjRvNjFZc1lwVWJqX3R6Vk40UUZKM1o2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QThDQi9DOEIwRjRGMjIxQzExMUU3OTU0RTg3MTdDNEY5QUUwMi9feko0bzYxWXNZ cFVial90elZONFFGSjNaNmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByc+UjaLvvdmC+9tkSGdp2WgyC7Iu+7hzuDgCZXF31Q3kns8fUcadj mi4wc8JveMGXh3kLbgwxaTl6Xzjpt+aStcNyeRWE98sqDUfmnXD3qIaX76yNLrIN Cy5cCQLOZAaIIgVilWp45Lvii0rxrSeoqJEragJi/PvjWrhouCPTun1ZOQNavQxX +9izBVRqDOU7NFBPnHSxDQUc9EoC59R5rJGikqOftPnvc/s6pXSPDkNoj/xwM4ze Q8seZErgrSGef4yoycMaJpccPnpjAur8Hs33I6QxVU1y9dBmiNINXDolV6FBapau HCMxrEWuRtPooNaYJRUDAT8by++gNpgp -----END CERTIFICATE-----Generated at Sat Jun 21 01:08:10 2025 by rpki-client