$ rpki-client -vvf rpki.apnic.net/member_repository/A915A821/239BFC64660111EABEEA0741C4F9AE02/d6E036eiOU7SRHU58T_kqNHgVsk.mft File: d6E036eiOU7SRHU58T_kqNHgVsk.mft (raw, json) Hash identifier: l3z2ikFpgiiO2Mn0ShgMElT1TyhIy8XrWSmjjLnCI8o= Subject key identifier: F2:D3:02:5F:6E:27:3A:E5:8B:26:78:AB:7F:D6:75:65:FA:2D:01:55 Authority key identifier: 77:A1:34:DF:A7:A2:39:4E:D2:44:75:39:F1:3F:E4:A8:D1:E0:56:C9 Certificate issuer: /CN=A915A821/serialNumber=77A134DFA7A2394ED2447539F13FE4A8D1E056C9 Certificate serial: 0A5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6E036eiOU7SRHU58T_kqNHgVsk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A821/239BFC64660111EABEEA0741C4F9AE02/d6E036eiOU7SRHU58T_kqNHgVsk.mft Manifest number: 0A58 Signing time: Sat 14 Jun 2025 19:29:45 +0000 Manifest this update: Sat 14 Jun 2025 19:29:45 +0000 Manifest next update: Sat 21 Jun 2025 19:29:45 +0000 Files and hashes: 1: d6E036eiOU7SRHU58T_kqNHgVsk.crl (hash: GV9uGmNTfg+MRK+4iW6zarU/r/qQ+gXjg3Ipi6vzClo=) 2: 4B2AAC20660211EA83A76342C4F9AE02.roa (hash: VubdDr6jpnctpYE2M5QsaGv87QGAE8y0LNTwoL81fa8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A821/239BFC64660111EABEEA0741C4F9AE02/d6E036eiOU7SRHU58T_kqNHgVsk.crl rsync://rpki.apnic.net/member_repository/A915A821/239BFC64660111EABEEA0741C4F9AE02/d6E036eiOU7SRHU58T_kqNHgVsk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6E036eiOU7SRHU58T_kqNHgVsk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 19:29:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2654 (0xa5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A821, serialNumber=77A134DFA7A2394ED2447539F13FE4A8D1E056C9 Validity Not Before: Jun 14 19:29:45 2025 GMT Not After : Jun 21 19:29:45 2025 GMT Subject: CN=684dcda9-628a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:f3:51:38:87:4a:0f:1d:68:5b:1a:a0:d7:32: 3e:72:e2:d4:45:36:88:c5:e4:08:e2:2d:dd:dc:f0: f1:60:50:aa:e9:89:ea:ec:c6:35:97:12:4b:b4:f7: c4:97:5b:11:f4:1c:1c:40:f6:5b:56:6b:10:9c:91: c3:f9:3a:f0:91:da:92:1e:5f:9c:7d:22:f0:87:b0: 6c:c7:d9:7d:30:a8:a3:e8:10:f8:ae:5f:85:48:f5: 9f:81:4f:14:f6:ba:58:11:d2:0d:aa:17:12:66:df: fa:8b:93:f4:df:4b:d1:f0:9b:6b:44:9c:0d:e0:87: 2c:84:c9:4a:b8:95:30:18:1a:32:f0:16:77:65:69: 03:90:35:f8:4f:ee:8d:f4:f5:6d:43:07:ad:a8:81: c0:c7:70:7e:97:cd:17:25:c8:a1:c0:48:23:2d:72: 1b:22:5a:3b:1f:fa:be:b2:12:46:fb:9c:7e:20:c2: 6e:fd:30:9d:80:d3:ae:77:14:7a:03:d7:17:a5:86: e0:8b:dd:8e:d8:10:6e:45:2f:30:ae:81:7a:53:7c: 99:4d:2c:aa:da:8c:62:5a:6a:a0:8a:9c:fa:57:1e: d9:b8:35:7c:b1:bc:34:6b:7c:23:11:60:7d:ec:cc: 16:f2:af:85:22:c2:30:85:4f:a8:0c:5f:29:0f:df: 26:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:D3:02:5F:6E:27:3A:E5:8B:26:78:AB:7F:D6:75:65:FA:2D:01:55 X509v3 Authority Key Identifier: keyid:77:A1:34:DF:A7:A2:39:4E:D2:44:75:39:F1:3F:E4:A8:D1:E0:56:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A821/239BFC64660111EABEEA0741C4F9AE02/d6E036eiOU7SRHU58T_kqNHgVsk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6E036eiOU7SRHU58T_kqNHgVsk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A821/239BFC64660111EABEEA0741C4F9AE02/d6E036eiOU7SRHU58T_kqNHgVsk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:66:9e:f2:5f:c3:48:2a:19:93:3a:f4:40:44:f8:3e:00:4c: 36:bd:29:21:4d:c8:96:6f:ea:06:01:91:30:49:b0:a0:b5:eb: 31:30:fd:3b:33:ec:0d:b9:4c:78:c8:55:61:43:59:01:07:5c: 38:bd:f4:43:86:78:72:6b:8a:25:0e:5a:dc:3b:ab:56:14:33: 4f:20:3d:fa:67:a9:b4:9a:3d:7b:52:d3:41:ad:bf:d1:c0:42: 48:ac:ac:5a:43:c7:f4:ca:ff:bb:78:c4:b5:03:1a:60:76:e4: d9:74:e7:00:d3:24:78:dc:28:ff:39:2a:02:5b:9c:33:83:63: bc:0a:29:2c:c3:58:48:9f:bd:a6:5c:bc:65:5d:78:fb:58:96: 53:ac:a0:04:26:4e:f6:40:c9:fc:e1:9b:98:bd:59:91:09:7b: 80:5e:fd:d6:19:51:60:20:ab:1d:b3:3d:50:cc:05:03:0a:be: 8d:a7:30:ed:5d:32:8f:18:d3:dd:eb:1c:41:ba:56:1c:74:20: db:8c:95:ee:b3:12:55:dc:8b:93:71:2d:e6:5f:f0:e9:58:76: 95:e5:3d:0a:7f:85:48:49:9c:28:5a:f9:bd:dc:b5:1a:93:65: 66:0f:f4:79:ca:c0:53:dd:0a:01:0e:63:89:a4:6d:69:9b:7e: b2:92:e8:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCl4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUE4MjExMTAvBgNVBAUTKDc3QTEzNERGQTdBMjM5NEVEMjQ0NzUzOUYxM0ZFNEE4 RDFFMDU2QzkwHhcNMjUwNjE0MTkyOTQ1WhcNMjUwNjIxMTkyOTQ1WjAYMRYwFAYD VQQDEw02ODRkY2RhOS02MjhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7PNROIdKDx1oWxqg1zI+cuLURTaIxeQI4i3d3PDxYFCq6Ynq7MY1lxJLtPfE l1sR9BwcQPZbVmsQnJHD+TrwkdqSHl+cfSLwh7Bsx9l9MKij6BD4rl+FSPWfgU8U 9rpYEdINqhcSZt/6i5P030vR8JtrRJwN4IcshMlKuJUwGBoy8BZ3ZWkDkDX4T+6N 9PVtQwetqIHAx3B+l80XJcihwEgjLXIbIlo7H/q+shJG+5x+IMJu/TCdgNOudxR6 A9cXpYbgi92O2BBuRS8wroF6U3yZTSyq2oxiWmqgipz6Vx7ZuDV8sbw0a3wjEWB9 7MwW8q+FIsIwhU+oDF8pD98mswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPLTAl9u JzrliyZ4q3/WdWX6LQFVMB8GA1UdIwQYMBaAFHehNN+nojlO0kR1OfE/5KjR4FbJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTgyMS8yMzlCRkM2NDY2 MDExMUVBQkVFQTA3NDFDNEY5QUUwMi9kNkUwMzZlaU9VN1NSSFU1OFRfa3FOSGdW c2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Q2RTAzNmVpT1U3U1JIVTU4VF9rcU5IZ1Zzay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTgyMS8yMzlCRkM2NDY2MDExMUVBQkVFQTA3NDFDNEY5QUUwMi9kNkUwMzZlaU9V N1NSSFU1OFRfa3FOSGdWc2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9Zp7yX8NIKhmTOvRARPg+AEw2vSkhTciWb+oGAZEwSbCgtesxMP07 M+wNuUx4yFVhQ1kBB1w4vfRDhnhya4olDlrcO6tWFDNPID36Z6m0mj17UtNBrb/R wEJIrKxaQ8f0yv+7eMS1AxpgduTZdOcA0yR43Cj/OSoCW5wzg2O8Ciksw1hIn72m XLxlXXj7WJZTrKAEJk72QMn84ZuYvVmRCXuAXv3WGVFgIKsdsz1QzAUDCr6NpzDt XTKPGNPd6xxBulYcdCDbjJXusxJV3IuTcS3mX/DpWHaV5T0Kf4VISZwoWvm93LUa k2VmD/R5ysBT3QoBDmOJpG1pm36ykui1 -----END CERTIFICATE-----Generated at Sun Jun 15 08:40:13 2025 by rpki-client