$ rpki-client -vvf rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.mft File: ihHrdksVeFOdbtOykDv2H0wIAHw.mft (raw, json) Hash identifier: LY1OD4dGaglycXMGjsEMzMvj15MgJB+GIUKNu+wTJ34= Subject key identifier: 72:38:9E:95:A3:77:16:9F:73:23:08:99:54:9D:62:F7:16:25:A5:FC Authority key identifier: 8A:11:EB:76:4B:15:78:53:9D:6E:D3:B2:90:3B:F6:1F:4C:08:00:7C Certificate issuer: /CN=A914CC0F/serialNumber=8A11EB764B1578539D6ED3B2903BF61F4C08007C Certificate serial: 19 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ihHrdksVeFOdbtOykDv2H0wIAHw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.mft Manifest number: 19 Signing time: Fri 20 Jun 2025 20:04:46 +0000 Manifest this update: Fri 20 Jun 2025 20:04:46 +0000 Manifest next update: Fri 27 Jun 2025 20:04:46 +0000 Files and hashes: 1: ihHrdksVeFOdbtOykDv2H0wIAHw.crl (hash: SisVtGyhCMDWfKVrQBm3ydKE3dSjRujSrjN26Wcek4o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.crl rsync://rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ihHrdksVeFOdbtOykDv2H0wIAHw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Jun 2025 20:04:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CC0F, serialNumber=8A11EB764B1578539D6ED3B2903BF61F4C08007C Validity Not Before: Jun 20 20:04:46 2025 GMT Not After : Jun 27 20:04:46 2025 GMT Subject: CN=6855bede-d68e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d0:fe:e8:d8:51:e6:41:20:ef:3e:f4:d2:dc: df:b0:07:e3:eb:3c:94:4e:0c:be:34:7d:86:e0:a8: e9:22:34:dc:6b:4f:69:c1:ed:e4:a0:9a:f0:77:c2: d0:b2:5f:5d:ec:19:d4:a3:ee:8e:ae:b2:49:f2:c1: 74:b8:d5:42:8a:71:b7:f5:fa:16:ab:3c:88:96:d5: b5:6b:ff:f1:cb:08:42:75:99:4b:90:a7:ab:d6:d5: 10:86:96:14:2d:9b:13:6a:d4:9c:ee:1a:49:60:df: 16:25:7a:70:59:ef:f2:b3:3b:9c:cf:91:dd:72:70: 9b:8b:ac:8a:95:c6:ed:f9:f3:8f:12:ca:a2:2b:f2: cd:aa:e9:16:2e:f6:1e:65:ab:c3:a5:26:8a:f2:2d: a2:59:19:29:44:a3:8e:62:83:f1:4a:81:cf:7b:4e: 42:a7:e1:32:1b:ed:6d:0c:12:cf:eb:e5:52:92:b6: d3:7c:5c:50:67:06:d0:14:8a:6c:27:b6:75:1b:77: 83:0d:88:8f:4f:88:fd:b6:dd:ad:90:67:50:d4:ff: 58:b9:91:59:8b:6e:a2:31:9d:7f:93:1f:75:0d:d0: 84:7a:07:7f:78:22:46:e4:2f:8f:56:ad:79:f0:2f: 63:76:76:23:01:c1:6c:64:17:32:63:00:c1:f7:7e: c6:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:38:9E:95:A3:77:16:9F:73:23:08:99:54:9D:62:F7:16:25:A5:FC X509v3 Authority Key Identifier: keyid:8A:11:EB:76:4B:15:78:53:9D:6E:D3:B2:90:3B:F6:1F:4C:08:00:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ihHrdksVeFOdbtOykDv2H0wIAHw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:c2:07:1b:07:f9:a9:27:eb:c8:fe:ee:da:36:bb:ba:53:78: 33:c8:9e:c0:7a:c1:6a:4f:9b:0f:79:17:0d:ec:0d:19:4b:0f: 1d:32:7b:bd:46:4b:0f:1c:0f:21:7b:0b:ca:ab:70:ba:81:29: 17:01:e0:b1:0b:72:28:b4:81:38:5f:7b:7f:a4:3e:ea:37:6d: 2f:b0:fd:85:2a:e5:2e:0d:7d:1b:f7:5c:57:3d:88:53:12:0b: 91:dd:a6:2e:47:0e:50:ef:50:e9:69:c5:71:46:6a:a8:b4:31: cd:7a:df:12:56:38:ef:9b:f6:c8:46:89:79:ef:c1:07:3a:73: 5a:43:2c:9a:ac:a0:15:29:b3:44:ae:e5:77:00:c3:3c:69:5c: f8:0a:f4:c5:f5:19:d4:9a:7a:eb:91:06:99:ec:24:1a:63:fc: 6e:07:f5:10:d8:7f:b7:42:c9:84:c7:14:23:ac:a8:a2:00:1e: 15:2c:f2:4b:82:77:97:cd:58:52:9f:7b:82:98:2b:67:bc:da: e3:84:fa:be:d0:03:1a:b5:8c:d5:b1:ed:3a:f0:b0:55:4c:77: 71:f0:e4:42:58:cc:16:56:37:3e:f9:2c:41:26:fa:5c:54:80: 15:b5:8a:4d:e0:54:a2:a2:ea:78:fc:71:1d:13:e7:48:c1:8e: ab:ae:c1:90 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 Q0MwRjExMC8GA1UEBRMoOEExMUVCNzY0QjE1Nzg1MzlENkVEM0IyOTAzQkY2MUY0 QzA4MDA3QzAeFw0yNTA2MjAyMDA0NDZaFw0yNTA2MjcyMDA0NDZaMBgxFjAUBgNV BAMTDTY4NTViZWRlLWQ2OGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDK0P7o2FHmQSDvPvTS3N+wB+PrPJRODL40fYbgqOkiNNxrT2nB7eSgmvB3wtCy X13sGdSj7o6usknywXS41UKKcbf1+harPIiW1bVr//HLCEJ1mUuQp6vW1RCGlhQt mxNq1JzuGklg3xYlenBZ7/KzO5zPkd1ycJuLrIqVxu35848SyqIr8s2q6RYu9h5l q8OlJoryLaJZGSlEo45ig/FKgc97TkKn4TIb7W0MEs/r5VKSttN8XFBnBtAUimwn tnUbd4MNiI9PiP223a2QZ1DU/1i5kVmLbqIxnX+TH3UN0IR6B394IkbkL49WrXnw L2N2diMBwWxkFzJjAMH3fsa3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUcjielaN3 Fp9zIwiZVJ1i9xYlpfwwHwYDVR0jBBgwFoAUihHrdksVeFOdbtOykDv2H0wIAHww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRDQzBGLzQ5RTk5NkM0MkM2 MjExRjBBOUIxQzY1QUM0RjlBRTAyL2loSHJka3NWZUZPZGJ0T3lrRHYySDB3SUFI dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvaWhIcmRrc1ZlRk9kYnRPeWtEdjJIMHdJQUh3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRD QzBGLzQ5RTk5NkM0MkM2MjExRjBBOUIxQzY1QUM0RjlBRTAyL2loSHJka3NWZUZP ZGJ0T3lrRHYySDB3SUFIdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMDCBxsH+akn68j+7to2u7pTeDPInsB6wWpPmw95Fw3sDRlLDx0ye71G Sw8cDyF7C8qrcLqBKRcB4LELcii0gThfe3+kPuo3bS+w/YUq5S4NfRv3XFc9iFMS C5Hdpi5HDlDvUOlpxXFGaqi0Mc163xJWOO+b9shGiXnvwQc6c1pDLJqsoBUps0Su 5XcAwzxpXPgK9MX1GdSaeuuRBpnsJBpj/G4H9RDYf7dCyYTHFCOsqKIAHhUs8kuC d5fNWFKfe4KYK2e82uOE+r7QAxq1jNWx7TrwsFVMd3Hw5EJYzBZWNz75LEEm+lxU gBW1ik3gVKKi6nj8cR0T50jBjquuwZA= -----END CERTIFICATE-----Generated at Sat Jun 21 10:11:40 2025 by rpki-client