$ rpki-client -vvf rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.mft File: t0SkTltlPmx6kM9gNOANz9iUfWA.mft (raw, json) Hash identifier: VUv+kYSaNrJ0gBuEvGuGCSstVflg6+91FHE00h5bDPc= Subject key identifier: 6D:2C:51:43:8A:7B:D8:58:8E:92:E0:9F:B5:26:3C:97:A5:86:47:88 Authority key identifier: B7:44:A4:4E:5B:65:3E:6C:7A:90:CF:60:34:E0:0D:CF:D8:94:7D:60 Certificate issuer: /CN=A914EBE5/serialNumber=B744A44E5B653E6C7A90CF6034E00DCFD8947D60 Certificate serial: 1869 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0SkTltlPmx6kM9gNOANz9iUfWA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.mft Manifest number: 1858 Signing time: Sat 14 Jun 2025 16:27:38 +0000 Manifest this update: Sat 14 Jun 2025 16:27:37 +0000 Manifest next update: Sat 21 Jun 2025 16:27:37 +0000 Files and hashes: 1: t0SkTltlPmx6kM9gNOANz9iUfWA.crl (hash: kv5O52TN3rdBIG1+uTsc+YrpJfcdwdJTvm9FQGQ4NMk=) 2: 253B1382106C11F08D824C19C4F9AE02.roa (hash: k9TDuPE5aOqFzmvoIPDe+G9DbuyOrQuREAeCHC4kW88=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.crl rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0SkTltlPmx6kM9gNOANz9iUfWA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 16:27:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6249 (0x1869) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EBE5, serialNumber=B744A44E5B653E6C7A90CF6034E00DCFD8947D60 Validity Not Before: Jun 14 16:27:37 2025 GMT Not After : Jun 21 16:27:37 2025 GMT Subject: CN=684da2f9-8366 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:73:9d:dc:ea:e6:be:23:44:57:84:0a:ed:b4: ff:23:e9:92:e7:0e:39:09:bc:72:43:e7:d6:84:6b: 9c:77:d8:ac:33:d3:9c:81:32:a3:3d:92:c2:21:cb: 82:83:d1:72:5c:0d:0e:55:bc:ba:7f:b8:28:a8:2a: c3:b6:b2:cd:6e:9d:a7:a0:91:ae:a6:dd:3d:eb:6b: f5:b8:82:bd:f2:22:b2:98:a2:73:55:d8:d0:38:17: 21:7b:a0:dc:99:3a:c5:2f:aa:73:d5:3f:be:29:21: c7:b1:19:42:3f:21:4c:fe:1d:c4:3e:1f:00:e9:3c: d7:a8:8e:c9:3e:10:3f:48:bb:1e:d4:fb:7a:2a:4c: 73:47:60:af:95:04:a5:e0:eb:7a:8a:ea:06:5e:1c: be:fe:21:30:46:04:d8:e8:13:29:98:ef:ee:ff:68: 87:20:92:7b:ab:17:ad:78:8b:72:9d:5d:b5:c6:d7: f6:03:a1:30:2d:2d:e4:96:94:7b:63:f8:28:d0:5e: db:85:4b:0a:9c:9d:c5:22:53:81:35:d5:0c:c0:c5: b0:5a:98:c2:6c:b0:65:65:85:87:5d:eb:56:0a:4f: b5:fb:e7:4a:e8:ac:ea:33:7f:60:45:3a:4c:78:a2: af:af:e4:af:b8:c8:44:fc:cd:c7:e0:cb:ba:0e:fe: 4e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:2C:51:43:8A:7B:D8:58:8E:92:E0:9F:B5:26:3C:97:A5:86:47:88 X509v3 Authority Key Identifier: keyid:B7:44:A4:4E:5B:65:3E:6C:7A:90:CF:60:34:E0:0D:CF:D8:94:7D:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0SkTltlPmx6kM9gNOANz9iUfWA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:26:1d:b1:e8:01:fc:9b:67:f7:c7:50:59:a3:f0:d7:00:f5: 5e:14:5f:b9:13:5f:6b:80:71:9b:55:11:98:80:89:59:10:3a: 44:6f:ae:65:cf:87:f9:5f:e6:d3:12:d8:76:c1:04:16:52:5e: 94:21:59:54:b4:b4:f3:6e:16:3d:3c:e3:cf:ce:a7:c4:bd:d0: b6:87:f0:ba:ae:3e:22:78:95:cd:b3:0a:14:f0:c8:9e:52:fa: c5:8c:14:cd:70:98:31:a8:9c:ec:5f:ac:23:f2:35:8e:26:75: bc:ca:fc:26:09:e2:32:14:3d:6e:26:0b:5e:47:77:cf:12:05: ed:da:07:8a:c8:d3:eb:1f:6b:d4:5f:73:b2:24:de:bd:3c:92: e9:8e:db:a9:69:9c:d8:ee:39:88:71:56:5c:3a:5e:51:cd:58: 5a:4e:b0:76:aa:60:17:b1:1a:f1:3b:f1:c3:39:84:82:60:8a: e3:f7:3d:a9:44:cc:69:9f:50:51:63:66:a4:28:e3:4e:0d:3e: fc:80:fe:7c:a5:67:c2:d1:61:d3:29:97:d5:74:38:ce:9a:bc: 3d:97:59:e9:09:5a:d6:2e:dd:33:01:7e:06:27:7a:90:d1:ec: 55:ea:e6:fe:87:db:bf:e4:9f:49:bc:ff:68:42:c9:8c:8d:ec: bc:49:2c:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGGkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVCRTUxMTAvBgNVBAUTKEI3NDRBNDRFNUI2NTNFNkM3QTkwQ0Y2MDM0RTAwRENG RDg5NDdENjAwHhcNMjUwNjE0MTYyNzM3WhcNMjUwNjIxMTYyNzM3WjAYMRYwFAYD VQQDEw02ODRkYTJmOS04MzY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/HOd3OrmviNEV4QK7bT/I+mS5w45CbxyQ+fWhGucd9isM9OcgTKjPZLCIcuC g9FyXA0OVby6f7goqCrDtrLNbp2noJGupt0962v1uIK98iKymKJzVdjQOBche6Dc mTrFL6pz1T++KSHHsRlCPyFM/h3EPh8A6TzXqI7JPhA/SLse1Pt6KkxzR2CvlQSl 4Ot6iuoGXhy+/iEwRgTY6BMpmO/u/2iHIJJ7qxeteItynV21xtf2A6EwLS3klpR7 Y/go0F7bhUsKnJ3FIlOBNdUMwMWwWpjCbLBlZYWHXetWCk+1++dK6KzqM39gRTpM eKKvr+SvuMhE/M3H4Mu6Dv5OEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG0sUUOK e9hYjpLgn7UmPJelhkeIMB8GA1UdIwQYMBaAFLdEpE5bZT5sepDPYDTgDc/YlH1g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUJFNS82NEM1MjcwOEE5 NUYxMUU3OUFENEU3MzRDNEY5QUUwMi90MFNrVGx0bFBteDZrTTlnTk9BTno5aVVm V0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3QwU2tUbHRsUG14NmtNOWdOT0FOejlpVWZXQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUJFNS82NEM1MjcwOEE5NUYxMUU3OUFENEU3MzRDNEY5QUUwMi90MFNrVGx0bFBt eDZrTTlnTk9BTno5aVVmV0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4Jh2x6AH8m2f3x1BZo/DXAPVeFF+5E19rgHGbVRGYgIlZEDpEb65l z4f5X+bTEth2wQQWUl6UIVlUtLTzbhY9POPPzqfEvdC2h/C6rj4ieJXNswoU8Mie UvrFjBTNcJgxqJzsX6wj8jWOJnW8yvwmCeIyFD1uJgteR3fPEgXt2geKyNPrH2vU X3OyJN69PJLpjtupaZzY7jmIcVZcOl5RzVhaTrB2qmAXsRrxO/HDOYSCYIrj9z2p RMxpn1BRY2akKONODT78gP58pWfC0WHTKZfVdDjOmrw9l1npCVrWLt0zAX4GJ3qQ 0exV6ub+h9u/5J9JvP9oQsmMjey8SSzT -----END CERTIFICATE-----Generated at Sat Jun 14 19:38:37 2025 by rpki-client