$ rpki-client -vvf rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.mft File: tVn8RKv8ItFGH3jqhnLyNzhXMVU.mft (raw, json) Hash identifier: exaoIEkN2uySiZRdDf3dzY+MSh+ckY1rFiUf5uQxaqs= Subject key identifier: 32:6A:4B:AB:95:45:E1:7D:90:5E:81:83:17:4C:E9:E6:B3:BB:3A:29 Authority key identifier: B5:59:FC:44:AB:FC:22:D1:46:1F:78:EA:86:72:F2:37:38:57:31:55 Certificate issuer: /CN=A915577F/serialNumber=B559FC44ABFC22D1461F78EA8672F23738573155 Certificate serial: 0B13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVn8RKv8ItFGH3jqhnLyNzhXMVU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.mft Manifest number: 0B0D Signing time: Thu 12 Jun 2025 19:04:49 +0000 Manifest this update: Thu 12 Jun 2025 19:04:48 +0000 Manifest next update: Thu 19 Jun 2025 19:04:48 +0000 Files and hashes: 1: tVn8RKv8ItFGH3jqhnLyNzhXMVU.crl (hash: ltQ0/KfzsBjwFTG23SaGL4v1R2t2SHU06V76Y+umF98=) 2: 741645EE422211EA937BB919C4F9AE02.roa (hash: 8YuWdPTvmVpFT/yetaaM7w5QRsz3AizZsFr+KRCuk8s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.crl rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVn8RKv8ItFGH3jqhnLyNzhXMVU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 19:04:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2835 (0xb13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915577F, serialNumber=B559FC44ABFC22D1461F78EA8672F23738573155 Validity Not Before: Jun 12 19:04:48 2025 GMT Not After : Jun 19 19:04:48 2025 GMT Subject: CN=684b24d0-285e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:14:8a:bf:5f:eb:1e:31:61:1f:b9:a3:c4:92: e2:92:aa:c6:cb:c6:df:4b:89:8e:21:a3:96:b6:83: 60:05:28:43:3b:1b:86:b4:1e:89:b2:78:e6:90:ef: 7a:a6:79:10:b1:d1:5f:40:17:88:70:d2:56:dc:d5: c5:ce:5f:57:06:bd:b1:1d:6d:fb:8d:c5:da:5f:88: 5e:52:e6:96:c4:81:04:8d:26:2c:a3:f5:d3:fb:3b: 23:be:2a:fc:23:e8:0d:00:69:24:2f:1b:2a:42:bb: 2d:1a:d6:b2:f2:19:e1:a3:ce:9b:50:40:b9:a4:d1: aa:b8:7c:fd:4a:45:0a:4d:c3:1b:43:f2:f7:fc:e8: d1:ae:ae:f4:06:8c:10:df:e8:17:53:55:e2:c4:37: 84:ce:b7:0c:ff:aa:c1:b1:2e:80:59:48:23:e3:d7: e7:55:cb:70:84:7d:36:ad:c3:69:52:3a:ec:ba:3a: f8:e3:48:5f:d5:2c:83:b7:62:4d:09:c6:5a:4e:d3: 45:9c:7c:c9:37:6d:c3:1e:df:6e:0f:46:2e:86:df: 8e:6e:4f:f1:5f:5c:88:ac:8d:b9:22:b9:69:fe:44: 23:62:c6:05:9e:41:fe:de:8b:33:1f:0b:22:3d:9c: 8d:50:4e:e8:0b:f7:91:58:2c:04:7a:3c:1b:37:39: 44:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:6A:4B:AB:95:45:E1:7D:90:5E:81:83:17:4C:E9:E6:B3:BB:3A:29 X509v3 Authority Key Identifier: keyid:B5:59:FC:44:AB:FC:22:D1:46:1F:78:EA:86:72:F2:37:38:57:31:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVn8RKv8ItFGH3jqhnLyNzhXMVU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:93:d2:38:dd:61:cb:31:c2:a7:57:c9:05:e4:04:ec:24:21: 0d:5c:aa:0b:8c:fc:e6:d8:e0:52:33:a5:3d:5b:ad:e2:23:6f: 28:db:d6:f8:e2:26:22:2a:ab:12:f3:05:38:ce:24:3a:c4:29: ef:94:b4:20:e7:c9:e5:2b:1d:b3:b6:ef:20:bd:55:31:84:5d: b6:c3:59:45:12:e8:87:71:0a:82:69:bd:07:b3:ec:df:07:f9: c7:2a:0c:19:1e:40:13:c3:dd:ca:05:35:70:85:7c:91:f3:79: 78:32:ea:5a:82:28:be:d5:ad:37:f0:b9:10:bf:c3:83:08:6d: ea:40:0b:bb:89:fe:fb:5e:45:6a:81:c9:65:82:87:19:c7:96: f4:6a:6e:c6:df:ef:6c:f5:dd:81:cd:4e:07:ed:71:20:78:9c: bb:c4:61:e4:20:b9:36:11:57:dd:62:fc:37:d6:0a:eb:43:a1: aa:58:ae:3a:fc:a1:5e:31:6b:1e:f5:bf:94:99:5e:58:ed:14: 76:20:55:50:6e:cd:6c:68:bd:ad:46:c6:ed:2c:f6:33:6c:57: de:a8:f2:e9:b4:6b:54:e7:69:e5:9b:ba:a0:32:5b:cb:64:0b: 94:2a:47:e4:0c:24:5a:cb:73:08:99:fa:58:d4:d7:81:49:e4: fd:f4:f7:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCxMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU3N0YxMTAvBgNVBAUTKEI1NTlGQzQ0QUJGQzIyRDE0NjFGNzhFQTg2NzJGMjM3 Mzg1NzMxNTUwHhcNMjUwNjEyMTkwNDQ4WhcNMjUwNjE5MTkwNDQ4WjAYMRYwFAYD VQQDEw02ODRiMjRkMC0yODVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3xSKv1/rHjFhH7mjxJLikqrGy8bfS4mOIaOWtoNgBShDOxuGtB6JsnjmkO96 pnkQsdFfQBeIcNJW3NXFzl9XBr2xHW37jcXaX4heUuaWxIEEjSYso/XT+zsjvir8 I+gNAGkkLxsqQrstGtay8hnho86bUEC5pNGquHz9SkUKTcMbQ/L3/OjRrq70BowQ 3+gXU1XixDeEzrcM/6rBsS6AWUgj49fnVctwhH02rcNpUjrsujr440hf1SyDt2JN CcZaTtNFnHzJN23DHt9uD0Yuht+Obk/xX1yIrI25Irlp/kQjYsYFnkH+3oszHwsi PZyNUE7oC/eRWCwEejwbNzlEpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDJqS6uV ReF9kF6BgxdM6eazuzopMB8GA1UdIwQYMBaAFLVZ/ESr/CLRRh946oZy8jc4VzFV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTc3Ri8xQTRGRkI4ODQy MjAxMUVBQTFDMDc3MTRDNEY5QUUwMi90Vm44Ukt2OEl0RkdIM2pxaG5MeU56aFhN VlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RWbjhSS3Y4SXRGR0gzanFobkx5TnpoWE1WVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTc3Ri8xQTRGRkI4ODQyMjAxMUVBQTFDMDc3MTRDNEY5QUUwMi90Vm44Ukt2OEl0 RkdIM2pxaG5MeU56aFhNVlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBik9I43WHLMcKnV8kF5ATsJCENXKoLjPzm2OBSM6U9W63iI28o29b4 4iYiKqsS8wU4ziQ6xCnvlLQg58nlKx2ztu8gvVUxhF22w1lFEuiHcQqCab0Hs+zf B/nHKgwZHkATw93KBTVwhXyR83l4Mupagii+1a038LkQv8ODCG3qQAu7if77XkVq gcllgocZx5b0am7G3+9s9d2BzU4H7XEgeJy7xGHkILk2EVfdYvw31grrQ6GqWK46 /KFeMWse9b+UmV5Y7RR2IFVQbs1saL2tRsbtLPYzbFfeqPLptGtU52nlm7qgMlvL ZAuUKkfkDCRay3MImfpY1NeBSeT99Pd2 -----END CERTIFICATE-----Generated at Sat Jun 14 19:31:02 2025 by rpki-client