$ rpki-client -vvf rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/enhVXghERXV_vNAN3R10w2nLoLA.mft File: enhVXghERXV_vNAN3R10w2nLoLA.mft (raw, json) Hash identifier: QmBYVaQIMFjWYHgK38eqD3Wq9JnRjgVP+qhBA7cKbdM= Subject key identifier: BD:17:D0:B1:51:79:14:06:C0:03:30:9B:B9:6F:CD:44:92:4B:9D:A2 Authority key identifier: 7A:78:55:5E:08:44:45:75:7F:BC:D0:0D:DD:1D:74:C3:69:CB:A0:B0 Certificate issuer: /CN=A914E6AA/serialNumber=7A78555E084445757FBCD00DDD1D74C369CBA0B0 Certificate serial: 0155 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/enhVXghERXV_vNAN3R10w2nLoLA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/enhVXghERXV_vNAN3R10w2nLoLA.mft Manifest number: 0903 Signing time: Wed 18 Jun 2025 22:44:13 +0000 Manifest this update: Wed 18 Jun 2025 22:44:12 +0000 Manifest next update: Wed 25 Jun 2025 22:44:12 +0000 Files and hashes: 1: enhVXghERXV_vNAN3R10w2nLoLA.crl (hash: 5qm5xSLtoRdSI/arQDgUgzevY3Zg04PLs5TjJ2pDDdA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/enhVXghERXV_vNAN3R10w2nLoLA.crl rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/enhVXghERXV_vNAN3R10w2nLoLA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/enhVXghERXV_vNAN3R10w2nLoLA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 22:44:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 341 (0x155) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E6AA, serialNumber=7A78555E084445757FBCD00DDD1D74C369CBA0B0 Validity Not Before: Jun 18 22:44:12 2025 GMT Not After : Jun 25 22:44:12 2025 GMT Subject: CN=6853413d-6e0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:82:d8:91:70:2b:a6:7c:cd:0f:a9:0a:f7:60: c6:45:5e:3a:52:9e:f5:2e:79:79:48:f3:10:1f:ec: d9:94:ac:cc:6d:50:bd:29:b1:97:bc:c5:62:d2:2b: e8:c8:4c:82:a0:20:9c:9e:3e:16:8d:f6:35:0e:e1: 98:b1:01:1a:34:28:04:5f:b0:45:c0:2c:48:b5:53: 28:a8:f5:27:3e:76:21:7f:f7:b0:2f:4a:4b:a1:06: f2:2e:fa:63:8a:33:29:ed:3d:07:17:4d:3f:e1:02: ff:e6:ec:6c:5f:7a:51:d8:95:80:1b:a8:f0:2c:f8: 37:4b:03:7c:cf:10:3d:82:df:75:e0:d7:f4:32:09: 64:70:42:24:26:e1:a1:a7:59:58:f1:56:90:55:e8: 96:0e:9a:43:8c:46:a6:0a:98:e7:2e:a3:96:e8:f9: e7:55:30:e7:7a:70:b1:05:c7:5a:aa:16:2e:43:8b: e4:a1:62:1d:23:92:9f:39:4b:00:d1:ab:aa:d7:0f: 72:7a:0f:d1:53:ea:bb:04:3c:b2:7e:17:ac:38:2f: a3:96:0b:a5:8a:f9:15:39:a9:ad:c3:7f:b4:33:d4: cf:3c:57:14:5d:b4:8c:aa:42:f1:ef:39:6b:a8:fd: db:1e:18:73:ac:e7:a7:f3:c2:54:b4:69:76:86:cb: ad:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:17:D0:B1:51:79:14:06:C0:03:30:9B:B9:6F:CD:44:92:4B:9D:A2 X509v3 Authority Key Identifier: keyid:7A:78:55:5E:08:44:45:75:7F:BC:D0:0D:DD:1D:74:C3:69:CB:A0:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/enhVXghERXV_vNAN3R10w2nLoLA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/enhVXghERXV_vNAN3R10w2nLoLA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/enhVXghERXV_vNAN3R10w2nLoLA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:9a:4b:bd:4c:46:3b:c2:3c:34:ac:dc:bf:d0:f4:fd:da:49: 24:8b:7b:01:8d:04:e5:53:0a:4b:36:45:5c:b0:d4:38:1e:25: 55:ad:e0:ff:34:21:10:35:10:06:bf:be:08:ee:bc:5d:f7:f4: 1b:ee:97:a6:84:d8:b7:c7:ba:6a:39:ba:ac:77:07:48:08:9a: c9:52:a2:d5:95:39:ed:18:46:e0:f9:af:ca:3c:d5:25:3d:59: 41:db:7b:da:ce:59:ea:b8:87:9e:95:fd:5a:63:7b:0c:e2:9c: 83:63:87:f0:c0:d8:64:f2:67:00:ec:45:61:64:22:bb:dc:3d: 58:d8:4f:a4:4d:6a:20:1d:fc:b7:4a:33:ad:62:35:9f:7b:31: 64:c2:2e:61:71:bb:2e:8a:66:2f:44:59:fe:da:3b:0c:91:b1: ff:55:f4:d4:6f:45:32:78:5c:04:f7:a5:a4:0c:5d:13:9b:61: 1d:d7:96:22:3e:1e:93:de:26:29:55:0f:1f:c1:c6:5d:e0:e0: ea:2b:51:70:c8:9e:a7:7c:94:88:74:17:0a:dc:a0:79:7e:cb: d0:92:56:a7:68:58:15:9a:5f:da:5d:f3:4e:56:b6:8e:ce:fc: 95:28:f5:3e:d5:73:9f:a7:e9:b9:39:17:68:b4:92:51:07:70: 6b:a8:e6:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU2QUExMTAvBgNVBAUTKDdBNzg1NTVFMDg0NDQ1NzU3RkJDRDAwREREMUQ3NEMz NjlDQkEwQjAwHhcNMjUwNjE4MjI0NDEyWhcNMjUwNjI1MjI0NDEyWjAYMRYwFAYD VQQDEw02ODUzNDEzZC02ZTBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyILYkXArpnzND6kK92DGRV46Up71Lnl5SPMQH+zZlKzMbVC9KbGXvMVi0ivo yEyCoCCcnj4WjfY1DuGYsQEaNCgEX7BFwCxItVMoqPUnPnYhf/ewL0pLoQbyLvpj ijMp7T0HF00/4QL/5uxsX3pR2JWAG6jwLPg3SwN8zxA9gt914Nf0MglkcEIkJuGh p1lY8VaQVeiWDppDjEamCpjnLqOW6PnnVTDnenCxBcdaqhYuQ4vkoWIdI5KfOUsA 0auq1w9yeg/RU+q7BDyyfhesOC+jlgulivkVOamtw3+0M9TPPFcUXbSMqkLx7zlr qP3bHhhzrOen88JUtGl2hsutUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL0X0LFR eRQGwAMwm7lvzUSSS52iMB8GA1UdIwQYMBaAFHp4VV4IREV1f7zQDd0ddMNpy6Cw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTZBQS84RURCMTA3RUFE QTgxMUVCQTdDOUY1NjdDNEY5QUUwMi9lbmhWWGdoRVJYVl92TkFOM1IxMHcybkxv TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VuaFZYZ2hFUlhWX3ZOQU4zUjEwdzJuTG9MQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTZBQS84RURCMTA3RUFEQTgxMUVCQTdDOUY1NjdDNEY5QUUwMi9lbmhWWGdoRVJY Vl92TkFOM1IxMHcybkxvTEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0mku9TEY7wjw0rNy/0PT92kkki3sBjQTlUwpLNkVcsNQ4HiVVreD/ NCEQNRAGv74I7rxd9/Qb7pemhNi3x7pqObqsdwdICJrJUqLVlTntGEbg+a/KPNUl PVlB23vazlnquIeelf1aY3sM4pyDY4fwwNhk8mcA7EVhZCK73D1Y2E+kTWogHfy3 SjOtYjWfezFkwi5hcbsuimYvRFn+2jsMkbH/VfTUb0UyeFwE96WkDF0Tm2Ed15Yi Ph6T3iYpVQ8fwcZd4ODqK1FwyJ6nfJSIdBcK3KB5fsvQklanaFgVml/aXfNOVraO zvyVKPU+1XOfp+m5ORdotJJRB3BrqOaa -----END CERTIFICATE-----Generated at Thu Jun 19 05:58:39 2025 by rpki-client