$ rpki-client -vvf rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/p24FuDRU7RogkCXoPXXkBXkYksE.mft File: p24FuDRU7RogkCXoPXXkBXkYksE.mft (raw, json) Hash identifier: YFacwZqy7gPR6+NprTzdOLziH2ynxzV4bdzW5FMgZSA= Subject key identifier: 4B:AE:6F:3D:3A:8E:DA:B3:90:DA:07:54:D1:AC:70:2E:8B:4A:02:ED Authority key identifier: A7:6E:05:B8:34:54:ED:1A:20:90:25:E8:3D:75:E4:05:79:18:92:C1 Certificate issuer: /CN=A914E6AA/serialNumber=A76E05B83454ED1A209025E83D75E405791892C1 Certificate serial: 2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p24FuDRU7RogkCXoPXXkBXkYksE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/p24FuDRU7RogkCXoPXXkBXkYksE.mft Manifest number: 08F8 Signing time: Thu 12 Jun 2025 22:31:40 +0000 Manifest this update: Thu 12 Jun 2025 22:31:39 +0000 Manifest next update: Thu 19 Jun 2025 22:31:39 +0000 Files and hashes: 1: p24FuDRU7RogkCXoPXXkBXkYksE.crl (hash: G1LME9WYvB7nhrpJpeCwNUubjXWZGXCgVLEMHpYMmA8=) 2: 078192DE0E0111F08A256F7AC4F9AE02.roa (hash: LXGEYHuadccOutKJ+/tshTQpVwD3yYdPEV04BO81LG0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/p24FuDRU7RogkCXoPXXkBXkYksE.crl rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/p24FuDRU7RogkCXoPXXkBXkYksE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p24FuDRU7RogkCXoPXXkBXkYksE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 22:31:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E6AA, serialNumber=A76E05B83454ED1A209025E83D75E405791892C1 Validity Not Before: Jun 12 22:31:39 2025 GMT Not After : Jun 19 22:31:39 2025 GMT Subject: CN=684b554b-fc71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c2:f1:fc:9c:4b:58:24:b8:38:3d:0b:fd:22: e4:06:ad:3c:04:4d:5f:b7:69:6a:fc:b8:3c:be:a4: a7:13:74:8c:dc:d6:45:37:46:83:7c:04:bc:8f:26: f8:cb:2a:a4:86:5c:87:8c:f2:f7:da:9d:57:d4:20: de:84:06:13:4f:06:21:e7:19:25:43:e7:6c:b2:c5: 0b:34:09:51:ee:ee:ba:6f:f8:66:de:af:65:b0:8f: 90:5a:49:6f:49:c2:a5:e4:7e:78:d3:5f:75:b3:d9: da:90:99:11:8d:ed:ec:b1:c7:7d:bb:27:b8:bc:38: e7:86:0e:78:fd:92:6c:a6:e4:73:04:fa:39:ac:af: 24:11:f8:2e:31:2a:37:0b:fd:71:fd:57:d9:a5:2d: bb:5a:6f:7f:9d:5a:e5:54:a8:17:a1:e7:02:6d:bb: 15:d9:85:8d:66:05:8e:4d:39:63:41:1d:51:03:11: 59:b9:15:53:29:c8:44:f5:db:22:18:89:31:6b:f7: de:8f:2e:da:04:01:da:04:da:ba:42:cd:e6:11:8d: ff:48:28:83:64:0d:41:2d:01:43:52:a4:08:28:b7: 60:fe:6b:96:3a:ec:b2:16:89:cd:f3:cb:31:a9:05: 54:ee:84:f9:d8:a8:0d:e6:df:c9:a7:6a:ef:7b:b8: 2e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:AE:6F:3D:3A:8E:DA:B3:90:DA:07:54:D1:AC:70:2E:8B:4A:02:ED X509v3 Authority Key Identifier: keyid:A7:6E:05:B8:34:54:ED:1A:20:90:25:E8:3D:75:E4:05:79:18:92:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/p24FuDRU7RogkCXoPXXkBXkYksE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p24FuDRU7RogkCXoPXXkBXkYksE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/p24FuDRU7RogkCXoPXXkBXkYksE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:d3:a0:d7:2a:ea:08:5a:ec:42:2a:ff:3e:23:7b:e2:f9:34: b6:c7:29:2f:26:18:37:bf:e7:48:75:56:7d:59:b7:90:14:96: 95:29:12:a5:b5:21:08:52:8d:a0:cc:ef:2d:36:a8:1e:5d:ba: 5b:40:e0:31:55:7c:fd:7f:c2:57:6c:69:1b:ee:9c:af:20:fb: fb:80:06:57:cf:84:a3:ec:75:83:0a:89:8e:c0:b6:89:1c:11: 68:ae:92:6b:2d:ba:65:99:80:19:e6:5d:97:32:ed:34:ae:4a: 40:43:56:b8:fc:1a:94:72:bc:f4:47:ac:90:56:cc:15:44:4c: ec:1b:68:63:9b:3c:e9:9b:60:ff:56:ae:5c:3b:1a:a3:68:06: ff:5a:c8:80:af:fd:bc:c6:8d:99:50:4c:e3:b7:de:3f:a0:5d: 14:f5:9c:35:c9:86:60:17:51:a3:9d:2b:d4:4e:3a:55:cb:06: fe:be:67:e9:7f:fe:05:e7:a4:b4:1d:c0:39:2f:f5:3c:03:c1: eb:b6:0e:fe:8d:ea:d9:7f:06:80:5a:08:e7:25:15:07:4b:2a: a4:2e:5b:d3:2b:cd:e0:f9:b6:14:50:75:df:12:27:20:e6:cc: af:ec:3d:39:ee:9d:47:1e:d3:38:5f:9d:85:b2:f3:44:cc:c7: 41:4a:4a:a9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 RTZBQTExMC8GA1UEBRMoQTc2RTA1QjgzNDU0RUQxQTIwOTAyNUU4M0Q3NUU0MDU3 OTE4OTJDMTAeFw0yNTA2MTIyMjMxMzlaFw0yNTA2MTkyMjMxMzlaMBgxFjAUBgNV BAMTDTY4NGI1NTRiLWZjNzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3wvH8nEtYJLg4PQv9IuQGrTwETV+3aWr8uDy+pKcTdIzc1kU3RoN8BLyPJvjL KqSGXIeM8vfanVfUIN6EBhNPBiHnGSVD52yyxQs0CVHu7rpv+Gber2Wwj5BaSW9J wqXkfnjTX3Wz2dqQmRGN7eyxx327J7i8OOeGDnj9kmym5HME+jmsryQR+C4xKjcL /XH9V9mlLbtab3+dWuVUqBeh5wJtuxXZhY1mBY5NOWNBHVEDEVm5FVMpyET12yIY iTFr996PLtoEAdoE2rpCzeYRjf9IKINkDUEtAUNSpAgot2D+a5Y67LIWic3zyzGp BVTuhPnYqA3m38mnau97uC4xAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUS65vPTqO 2rOQ2gdU0axwLotKAu0wHwYDVR0jBBgwFoAUp24FuDRU7RogkCXoPXXkBXkYksEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRFNkFBLzhFREIxMDdFQURB ODExRUJBN0M5RjU2N0M0RjlBRTAyL3AyNEZ1RFJVN1JvZ2tDWG9QWFhrQlhrWWtz RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcDI0RnVEUlU3Um9na0NYb1BYWGtCWGtZa3NFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRF NkFBLzhFREIxMDdFQURBODExRUJBN0M5RjU2N0M0RjlBRTAyL3AyNEZ1RFJVN1Jv Z2tDWG9QWFhrQlhrWWtzRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADfToNcq6gha7EIq/z4je+L5NLbHKS8mGDe/50h1Vn1Zt5AUlpUpEqW1 IQhSjaDM7y02qB5dultA4DFVfP1/wldsaRvunK8g+/uABlfPhKPsdYMKiY7Atokc EWiukmstumWZgBnmXZcy7TSuSkBDVrj8GpRyvPRHrJBWzBVETOwbaGObPOmbYP9W rlw7GqNoBv9ayICv/bzGjZlQTOO33j+gXRT1nDXJhmAXUaOdK9ROOlXLBv6+Z+l/ /gXnpLQdwDkv9TwDweu2Dv6N6tl/BoBaCOclFQdLKqQuW9MrzeD5thRQdd8SJyDm zK/sPTnunUce0zhfnYWy80TMx0FKSqk= -----END CERTIFICATE-----Generated at Sat Jun 14 19:09:30 2025 by rpki-client