$ rpki-client -vvf rpki.apnic.net/member_repository/A914DC55/CCBE1BA6176211EC81A0D11EC4F9AE02/84WJ-EZKpakWmfgIZJ7FNoMbAEo.mft File: 84WJ-EZKpakWmfgIZJ7FNoMbAEo.mft (raw, json) Hash identifier: 5ig/8yCkEf1/vHOQp64rZMcF/Yie+829YbTvb0sqPCw= Subject key identifier: E2:29:92:15:81:D0:B1:28:66:9E:27:F4:EE:A0:E5:47:B5:AF:B7:61 Authority key identifier: F3:85:89:F8:46:4A:A5:A9:16:99:F8:08:64:9E:C5:36:83:1B:00:4A Certificate issuer: /CN=A914DC55/serialNumber=F38589F8464AA5A91699F808649EC536831B004A Certificate serial: 0511 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84WJ-EZKpakWmfgIZJ7FNoMbAEo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DC55/CCBE1BA6176211EC81A0D11EC4F9AE02/84WJ-EZKpakWmfgIZJ7FNoMbAEo.mft Manifest number: 0501 Signing time: Sat 14 Jun 2025 23:26:18 +0000 Manifest this update: Sat 14 Jun 2025 23:26:18 +0000 Manifest next update: Sat 21 Jun 2025 23:26:18 +0000 Files and hashes: 1: 84WJ-EZKpakWmfgIZJ7FNoMbAEo.crl (hash: 6h7xqkHce2heCDBc87f8AvWcuWV2fyok2aGP+UctYnc=) 2: 4F1B63805A0A11ECAEA43C36C4F9AE02.roa (hash: u5W11dVoRw3toGEIJUHd861OTITZBp585qmJEJVveAI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DC55/CCBE1BA6176211EC81A0D11EC4F9AE02/84WJ-EZKpakWmfgIZJ7FNoMbAEo.crl rsync://rpki.apnic.net/member_repository/A914DC55/CCBE1BA6176211EC81A0D11EC4F9AE02/84WJ-EZKpakWmfgIZJ7FNoMbAEo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84WJ-EZKpakWmfgIZJ7FNoMbAEo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 23:26:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1297 (0x511) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DC55, serialNumber=F38589F8464AA5A91699F808649EC536831B004A Validity Not Before: Jun 14 23:26:18 2025 GMT Not After : Jun 21 23:26:18 2025 GMT Subject: CN=684e051a-fa4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:90:70:62:9e:ec:dd:bd:e7:8c:3e:11:db:e5: 29:03:a5:5c:be:c0:03:f1:39:b7:51:25:2a:a3:47: ed:85:a8:d5:ea:77:44:c2:96:6f:b3:e4:b3:7b:e8: b8:3c:fc:ce:92:26:af:ae:0b:0e:db:01:d7:1e:3c: 19:f5:e8:9e:5d:00:18:51:66:aa:fd:ee:c7:fa:83: f6:a9:df:45:be:fc:b1:bd:64:0e:7e:d2:77:a1:cb: 63:56:23:57:77:ef:4b:96:4c:f5:e6:49:79:c9:0e: 88:ba:ea:4c:06:8b:11:2c:cc:22:7a:6a:4e:6b:a7: b2:6b:56:0d:26:12:0d:f0:50:49:3c:97:bf:dd:05: 08:9b:7c:cd:f9:a0:d7:ec:26:17:02:e0:92:8b:f5: a3:79:8c:10:b2:8d:b1:92:c0:97:dd:d6:5e:b6:f0: da:c2:a6:ef:19:a8:c9:88:32:21:c5:70:52:8e:3d: fd:4a:5f:e1:8a:45:0f:88:b7:52:9f:e0:95:15:17: 40:de:84:2f:9a:c9:27:95:60:e8:cd:35:d7:97:e2: ff:61:a8:07:08:7b:4c:21:95:fc:20:bf:54:d7:ed: b5:96:eb:c6:ec:3f:27:ca:c3:23:61:6b:12:70:65: 7b:3a:29:e5:03:f2:6c:8d:70:9f:42:43:96:33:a7: 53:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:29:92:15:81:D0:B1:28:66:9E:27:F4:EE:A0:E5:47:B5:AF:B7:61 X509v3 Authority Key Identifier: keyid:F3:85:89:F8:46:4A:A5:A9:16:99:F8:08:64:9E:C5:36:83:1B:00:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DC55/CCBE1BA6176211EC81A0D11EC4F9AE02/84WJ-EZKpakWmfgIZJ7FNoMbAEo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84WJ-EZKpakWmfgIZJ7FNoMbAEo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DC55/CCBE1BA6176211EC81A0D11EC4F9AE02/84WJ-EZKpakWmfgIZJ7FNoMbAEo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:44:0d:01:85:5a:bb:6c:3f:c3:eb:8d:d1:9c:25:fc:9f:8b: 70:03:b2:e0:d9:40:19:65:cb:fd:b1:4a:bb:20:4a:62:b2:b0: c7:d3:2e:69:3e:8c:6a:4f:04:05:68:39:ee:0a:61:90:43:c3: bd:ae:4e:cf:e3:56:f6:e3:6e:96:8c:83:bc:aa:de:5b:86:6c: 8a:a5:f9:14:c8:a0:0d:62:ba:11:c2:ae:86:fd:b4:ef:b4:14: 87:ee:fe:a4:3f:f9:68:8f:ad:d6:30:dc:26:cb:09:1c:55:09: 72:bf:66:58:62:23:ac:df:4b:42:bc:db:cc:dd:5c:40:75:b7: 67:6d:ef:8e:ca:2e:1f:09:9f:6c:32:27:4a:f4:4c:c7:06:20: 36:f2:1f:f3:92:4e:09:f5:3d:11:f7:16:4d:64:f4:51:c4:49: 6d:7d:6b:4e:df:6d:89:f7:57:4b:ef:23:3b:fd:48:8c:66:74: 6a:c9:49:c6:60:95:36:0a:90:5c:c5:f6:5d:94:e7:84:8a:d5: 61:1b:73:bf:f6:70:62:7e:f0:99:62:0e:0a:42:39:3c:41:2c: ad:f6:d7:6a:b1:89:c5:af:40:da:25:b1:e7:03:09:28:24:2f: e7:8e:6d:cc:6d:7a:5e:2d:40:40:50:56:2c:46:c4:b6:37:70: d1:48:6f:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NERDNTUxMTAvBgNVBAUTKEYzODU4OUY4NDY0QUE1QTkxNjk5RjgwODY0OUVDNTM2 ODMxQjAwNEEwHhcNMjUwNjE0MjMyNjE4WhcNMjUwNjIxMjMyNjE4WjAYMRYwFAYD VQQDEw02ODRlMDUxYS1mYTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp5BwYp7s3b3njD4R2+UpA6VcvsAD8Tm3USUqo0fthajV6ndEwpZvs+Sze+i4 PPzOkiavrgsO2wHXHjwZ9eieXQAYUWaq/e7H+oP2qd9FvvyxvWQOftJ3octjViNX d+9Llkz15kl5yQ6IuupMBosRLMwiempOa6eya1YNJhIN8FBJPJe/3QUIm3zN+aDX 7CYXAuCSi/WjeYwQso2xksCX3dZetvDawqbvGajJiDIhxXBSjj39Sl/hikUPiLdS n+CVFRdA3oQvmsknlWDozTXXl+L/YagHCHtMIZX8IL9U1+21luvG7D8nysMjYWsS cGV7OinlA/JsjXCfQkOWM6dTCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOIpkhWB 0LEoZp4n9O6g5Ue1r7dhMB8GA1UdIwQYMBaAFPOFifhGSqWpFpn4CGSexTaDGwBK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REM1NS9DQ0JFMUJBNjE3 NjIxMUVDODFBMEQxMUVDNEY5QUUwMi84NFdKLUVaS3Bha1dtZmdJWko3Rk5vTWJB RW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg0V0otRVpLcGFrV21mZ0laSjdGTm9NYkFFby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 REM1NS9DQ0JFMUJBNjE3NjIxMUVDODFBMEQxMUVDNEY5QUUwMi84NFdKLUVaS3Bh a1dtZmdJWko3Rk5vTWJBRW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApRA0BhVq7bD/D643RnCX8n4twA7Lg2UAZZcv9sUq7IEpisrDH0y5p PoxqTwQFaDnuCmGQQ8O9rk7P41b2426WjIO8qt5bhmyKpfkUyKANYroRwq6G/bTv tBSH7v6kP/loj63WMNwmywkcVQlyv2ZYYiOs30tCvNvM3VxAdbdnbe+Oyi4fCZ9s MidK9EzHBiA28h/zkk4J9T0R9xZNZPRRxEltfWtO322J91dL7yM7/UiMZnRqyUnG YJU2CpBcxfZdlOeEitVhG3O/9nBifvCZYg4KQjk8QSyt9tdqsYnFr0DaJbHnAwko JC/njm3MbXpeLUBAUFYsRsS2N3DRSG8k -----END CERTIFICATE-----Generated at Mon Jun 16 14:48:55 2025 by rpki-client