$ rpki-client -vvf rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft File: 67t1Ysakn7ft5XQSvB_61I4a-0k.mft (raw, json) Hash identifier: s7gGGKlT2FmwNus8xKLdNbgFxbs72CKS43w/bpXYryM= Subject key identifier: 23:6D:AC:7E:8D:9D:B8:B0:FC:34:19:4F:76:63:81:F6:DE:77:A8:74 Authority key identifier: EB:BB:75:62:C6:A4:9F:B7:ED:E5:74:12:BC:1F:FA:D4:8E:1A:FB:49 Certificate issuer: /CN=A914FE87/serialNumber=EBBB7562C6A49FB7EDE57412BC1FFAD48E1AFB49 Certificate serial: 0452 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft Manifest number: 044B Signing time: Sat 14 Jun 2025 23:59:15 +0000 Manifest this update: Sat 14 Jun 2025 23:59:15 +0000 Manifest next update: Sat 21 Jun 2025 23:59:15 +0000 Files and hashes: 1: 67t1Ysakn7ft5XQSvB_61I4a-0k.crl (hash: ELAJFGAR3WiKwrWk/wr8NwxQclDbQg0DoxtbwvjV+e8=) 2: 9F9CEB425CB911ECAEF7AE14C4F9AE02.roa (hash: 6uFvpip5xKUGRghNdeTpeBy3R93KivQ5uvgIzsfjzEI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.crl rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 23:59:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1106 (0x452) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914FE87, serialNumber=EBBB7562C6A49FB7EDE57412BC1FFAD48E1AFB49 Validity Not Before: Jun 14 23:59:15 2025 GMT Not After : Jun 21 23:59:15 2025 GMT Subject: CN=684e0cd3-1244 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e1:3d:ed:b2:32:c3:55:16:09:0a:8e:50:49: 68:ac:ab:67:79:03:6e:69:2b:1c:1f:04:ce:5b:eb: 1a:89:83:4d:63:00:79:47:f8:7d:b3:a9:50:24:64: 37:3e:e8:d8:2f:88:58:4f:77:2f:1a:22:e2:73:1f: d8:61:8f:a9:21:5f:11:77:af:61:b7:7e:96:d8:34: 98:41:20:67:d9:1c:fb:f1:19:5e:08:f3:c9:82:92: 12:d6:69:ae:ee:ea:dc:8d:9f:42:c5:1f:76:fa:65: 12:e7:7b:9e:77:32:1c:77:66:f3:14:12:d1:f8:d1: ee:0b:c6:17:fc:fe:dc:d8:57:4e:67:dd:92:dc:bc: eb:89:46:28:0c:ca:71:76:0b:f1:75:77:18:4a:36: a6:4d:e2:61:ce:24:32:8f:d9:b7:c3:a6:3d:a3:8e: 7d:04:4d:e6:56:77:6b:cf:91:c4:81:b2:18:5e:5b: 64:13:d7:47:e3:5e:d5:39:02:2c:97:99:49:5c:f9: 68:72:12:6b:cb:73:99:3d:61:cb:c0:2c:33:e1:71: df:ce:eb:2f:e6:f9:bf:c9:bf:fa:fc:70:c1:83:50: 7b:7c:d8:c9:3e:02:63:60:4b:85:de:55:99:de:74: e3:fb:f6:a5:73:82:1a:2e:32:44:07:cf:62:98:db: 4a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:6D:AC:7E:8D:9D:B8:B0:FC:34:19:4F:76:63:81:F6:DE:77:A8:74 X509v3 Authority Key Identifier: keyid:EB:BB:75:62:C6:A4:9F:B7:ED:E5:74:12:BC:1F:FA:D4:8E:1A:FB:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:2a:00:72:25:92:15:8e:07:42:c7:57:4e:31:03:48:b8:38: d9:99:6e:f1:79:8b:06:22:51:9a:c9:95:e1:ef:b7:f0:08:b6: 6d:df:ef:79:65:a8:f3:6b:14:a5:ac:6c:dd:a4:7a:d5:3e:16: 43:9e:ef:2f:55:3f:d0:f3:6d:31:cc:dc:63:3b:b8:39:77:a2: 9d:a0:a4:19:13:4d:a8:3b:74:75:dd:ef:80:53:19:3b:b4:ff: 36:1b:11:b4:6a:db:a1:3b:b1:f9:c6:fd:c7:85:9b:b2:cc:22: b1:8a:51:3c:0b:03:72:fe:86:75:04:c2:06:9f:70:e3:2b:cd: a9:98:b1:9c:8b:a9:8d:f1:47:d3:74:62:2d:c1:07:58:4b:8e: fe:38:47:99:22:f7:f9:6c:2e:a6:ac:6d:ad:b4:67:04:ca:98: ae:7d:42:ae:e9:b3:ce:55:70:a3:e7:41:f3:50:9a:9f:a0:a2: bb:69:54:c8:26:37:74:cf:f0:3a:28:5c:67:25:ce:b2:86:9f: 83:15:7d:b8:1e:8d:3a:1f:2a:d4:eb:46:13:81:bf:a7:f8:ea: a1:8b:e1:4f:e5:66:2f:ab:48:ca:33:40:eb:a7:13:f3:96:4f: 86:87:eb:74:db:eb:40:b7:ed:2e:64:4b:16:ad:78:6d:f2:b6: 34:76:59:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEZFODcxMTAvBgNVBAUTKEVCQkI3NTYyQzZBNDlGQjdFREU1NzQxMkJDMUZGQUQ0 OEUxQUZCNDkwHhcNMjUwNjE0MjM1OTE1WhcNMjUwNjIxMjM1OTE1WjAYMRYwFAYD VQQDEw02ODRlMGNkMy0xMjQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqeE97bIyw1UWCQqOUElorKtneQNuaSscHwTOW+saiYNNYwB5R/h9s6lQJGQ3 PujYL4hYT3cvGiLicx/YYY+pIV8Rd69ht36W2DSYQSBn2Rz78RleCPPJgpIS1mmu 7urcjZ9CxR92+mUS53uedzIcd2bzFBLR+NHuC8YX/P7c2FdOZ92S3LzriUYoDMpx dgvxdXcYSjamTeJhziQyj9m3w6Y9o459BE3mVndrz5HEgbIYXltkE9dH417VOQIs l5lJXPlochJry3OZPWHLwCwz4XHfzusv5vm/yb/6/HDBg1B7fNjJPgJjYEuF3lWZ 3nTj+/alc4IaLjJEB89imNtKHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCNtrH6N nbiw/DQZT3Zjgfbed6h0MB8GA1UdIwQYMBaAFOu7dWLGpJ+37eV0Erwf+tSOGvtJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RkU4Ny80RTE0MDFFNjVD QjYxMUVDQTc3MTE4MEVDNEY5QUUwMi82N3QxWXNha243ZnQ1WFFTdkJfNjFJNGEt MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY3dDFZc2FrbjdmdDVYUVN2Ql82MUk0YS0way5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RkU4Ny80RTE0MDFFNjVDQjYxMUVDQTc3MTE4MEVDNEY5QUUwMi82N3QxWXNha243 ZnQ1WFFTdkJfNjFJNGEtMGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5KgByJZIVjgdCx1dOMQNIuDjZmW7xeYsGIlGayZXh77fwCLZt3+95 ZajzaxSlrGzdpHrVPhZDnu8vVT/Q820xzNxjO7g5d6KdoKQZE02oO3R13e+AUxk7 tP82GxG0atuhO7H5xv3HhZuyzCKxilE8CwNy/oZ1BMIGn3DjK82pmLGci6mN8UfT dGItwQdYS47+OEeZIvf5bC6mrG2ttGcEypiufUKu6bPOVXCj50HzUJqfoKK7aVTI Jjd0z/A6KFxnJc6yhp+DFX24Ho06HyrU60YTgb+n+Oqhi+FP5WYvq0jKM0DrpxPz lk+Gh+t02+tAt+0uZEsWrXht8rY0dlmP -----END CERTIFICATE-----Generated at Sun Jun 15 09:58:24 2025 by rpki-client