$ rpki-client -vvf rpki.apnic.net/member_repository/A914AE22/B178439E1BBF11EAB6A74F71C4F9AE02/cmIg2YvMfcZqPM83Z36go9sJDaQ.mft File: cmIg2YvMfcZqPM83Z36go9sJDaQ.mft (raw, json) Hash identifier: CUNL45rLfnmu/lQmP5cO45H493h7/nzaaRQWEpgoST4= Subject key identifier: 9B:CD:26:A8:8E:0A:C2:64:7B:66:EB:2A:D7:EA:75:9B:57:DD:C1:D8 Authority key identifier: 72:62:20:D9:8B:CC:7D:C6:6A:3C:CF:37:67:7E:A0:A3:DB:09:0D:A4 Certificate issuer: /CN=A914AE22/serialNumber=726220D98BCC7DC66A3CCF37677EA0A3DB090DA4 Certificate serial: 0BE1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cmIg2YvMfcZqPM83Z36go9sJDaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914AE22/B178439E1BBF11EAB6A74F71C4F9AE02/cmIg2YvMfcZqPM83Z36go9sJDaQ.mft Manifest number: 0BD8 Signing time: Sat 14 Jun 2025 18:41:40 +0000 Manifest this update: Sat 14 Jun 2025 18:41:40 +0000 Manifest next update: Sat 21 Jun 2025 18:41:40 +0000 Files and hashes: 1: cmIg2YvMfcZqPM83Z36go9sJDaQ.crl (hash: n0dC3tW2BnFTAJ61y+SlO4BGuIwv9xgOlfjjQ0COyQw=) 2: 2CD5AAF8060311EBBE15EA18C4F9AE02.roa (hash: vtoSKlT7or456eJjA8slT3V02xUjwJUVTYQRDOjaj2Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914AE22/B178439E1BBF11EAB6A74F71C4F9AE02/cmIg2YvMfcZqPM83Z36go9sJDaQ.crl rsync://rpki.apnic.net/member_repository/A914AE22/B178439E1BBF11EAB6A74F71C4F9AE02/cmIg2YvMfcZqPM83Z36go9sJDaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cmIg2YvMfcZqPM83Z36go9sJDaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 18:41:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3041 (0xbe1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914AE22, serialNumber=726220D98BCC7DC66A3CCF37677EA0A3DB090DA4 Validity Not Before: Jun 14 18:41:40 2025 GMT Not After : Jun 21 18:41:40 2025 GMT Subject: CN=684dc264-c776 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:64:72:5b:ca:e8:40:a8:69:c8:02:d0:34:f6: fb:e3:2a:40:8d:2d:a8:3c:5b:06:ac:55:07:de:4c: 17:9a:77:65:32:d9:34:3b:2e:d4:4f:5c:34:ae:97: 22:8f:b3:57:76:b5:84:42:84:72:8a:c2:97:06:bc: 27:e7:2b:39:c1:5d:cc:c5:02:d8:07:6c:37:81:01: 7d:12:4e:49:76:e0:26:4e:a1:44:b5:65:78:77:fa: f6:e6:1f:d6:fc:67:53:81:ee:ff:4a:3f:76:71:6c: 68:6c:17:9c:98:b0:3e:fc:0e:a3:0d:53:da:87:9f: a8:36:87:a9:1e:66:65:b9:2a:0b:7a:ad:27:3e:f4: ce:68:57:ee:9a:b5:68:41:fe:c3:0c:24:09:25:8c: e6:b1:07:b2:d3:a6:a6:2c:f6:de:d3:ff:8d:41:2e: 8b:fc:71:be:db:ad:b2:3a:73:20:d9:f0:d9:7c:d4: 4a:bf:39:2e:f9:79:ee:a0:b4:ce:cd:d6:f1:90:fd: f7:32:4d:87:80:b1:51:2a:d3:70:f5:6a:d3:5b:fd: 46:eb:17:6b:b5:21:4e:e5:6b:71:a2:19:14:ca:b9: 5a:ef:8d:69:65:70:34:52:e4:b1:4c:3c:bc:82:21: af:a2:1e:b4:02:43:e5:46:a2:b4:74:e4:f3:3a:7e: ba:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:CD:26:A8:8E:0A:C2:64:7B:66:EB:2A:D7:EA:75:9B:57:DD:C1:D8 X509v3 Authority Key Identifier: keyid:72:62:20:D9:8B:CC:7D:C6:6A:3C:CF:37:67:7E:A0:A3:DB:09:0D:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914AE22/B178439E1BBF11EAB6A74F71C4F9AE02/cmIg2YvMfcZqPM83Z36go9sJDaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cmIg2YvMfcZqPM83Z36go9sJDaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914AE22/B178439E1BBF11EAB6A74F71C4F9AE02/cmIg2YvMfcZqPM83Z36go9sJDaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:50:b6:60:ba:21:d6:65:04:a2:42:7b:d4:e4:2b:87:b9:6c: b9:d3:c0:69:b2:c1:af:75:b7:26:28:dd:be:61:0f:61:84:9e: 88:00:c7:ee:5e:e5:1d:5f:71:d0:d3:39:02:2b:2c:e1:60:e8: ed:27:cf:23:07:7d:10:cf:de:73:a2:ed:2a:6e:94:ec:dc:aa: 92:6a:e9:be:83:6d:32:f8:45:e9:cf:3d:67:16:09:00:55:4c: dd:da:a2:b8:72:42:97:fd:99:95:72:7d:fa:d1:61:0d:97:3f: 23:94:21:34:a1:25:40:a4:33:b0:a2:be:be:f2:70:a8:2d:74: 8c:da:af:a8:26:ef:c1:93:1f:01:9e:2d:26:94:55:15:f4:71: db:a4:97:b5:7e:0a:02:95:d0:98:e2:3a:09:c6:0d:6d:64:36: 69:7f:0c:74:50:1a:5e:58:55:f1:c2:82:d3:df:b2:99:97:c1: 47:21:3e:73:a1:d4:db:3a:de:c9:1e:16:08:f2:a8:09:97:2a: b9:3f:2d:3a:c7:ab:19:39:61:76:fc:6f:fa:9c:f7:c5:80:28: 7a:cf:f9:6d:27:07:71:31:a1:af:61:10:aa:74:c6:cf:47:f5: de:ff:f6:56:cc:bf:87:8a:5c:73:3b:43:18:50:95:e6:b5:06: 53:71:04:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC+EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEFFMjIxMTAvBgNVBAUTKDcyNjIyMEQ5OEJDQzdEQzY2QTNDQ0YzNzY3N0VBMEEz REIwOTBEQTQwHhcNMjUwNjE0MTg0MTQwWhcNMjUwNjIxMTg0MTQwWjAYMRYwFAYD VQQDEw02ODRkYzI2NC1jNzc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwWRyW8roQKhpyALQNPb74ypAjS2oPFsGrFUH3kwXmndlMtk0Oy7UT1w0rpci j7NXdrWEQoRyisKXBrwn5ys5wV3MxQLYB2w3gQF9Ek5JduAmTqFEtWV4d/r25h/W /GdTge7/Sj92cWxobBecmLA+/A6jDVPah5+oNoepHmZluSoLeq0nPvTOaFfumrVo Qf7DDCQJJYzmsQey06amLPbe0/+NQS6L/HG+262yOnMg2fDZfNRKvzku+XnuoLTO zdbxkP33Mk2HgLFRKtNw9WrTW/1G6xdrtSFO5WtxohkUyrla741pZXA0UuSxTDy8 giGvoh60AkPlRqK0dOTzOn663QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJvNJqiO CsJke2brKtfqdZtX3cHYMB8GA1UdIwQYMBaAFHJiINmLzH3GajzPN2d+oKPbCQ2k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QUUyMi9CMTc4NDM5RTFC QkYxMUVBQjZBNzRGNzFDNEY5QUUwMi9jbUlnMll2TWZjWnFQTTgzWjM2Z285c0pE YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NtSWcyWXZNZmNacVBNODNaMzZnbzlzSkRhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QUUyMi9CMTc4NDM5RTFCQkYxMUVBQjZBNzRGNzFDNEY5QUUwMi9jbUlnMll2TWZj WnFQTTgzWjM2Z285c0pEYVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZULZguiHWZQSiQnvU5CuHuWy508BpssGvdbcmKN2+YQ9hhJ6IAMfu XuUdX3HQ0zkCKyzhYOjtJ88jB30Qz95zou0qbpTs3KqSaum+g20y+EXpzz1nFgkA VUzd2qK4ckKX/ZmVcn360WENlz8jlCE0oSVApDOwor6+8nCoLXSM2q+oJu/Bkx8B ni0mlFUV9HHbpJe1fgoCldCY4joJxg1tZDZpfwx0UBpeWFXxwoLT37KZl8FHIT5z odTbOt7JHhYI8qgJlyq5Py06x6sZOWF2/G/6nPfFgCh6z/ltJwdxMaGvYRCqdMbP R/Xe//ZWzL+HilxzO0MYUJXmtQZTcQTG -----END CERTIFICATE-----Generated at Sun Jun 15 10:22:19 2025 by rpki-client