$ rpki-client -vvf rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft File: r-cn5CCdzfgnYldLXjPICDeHoY8.mft (raw, json) Hash identifier: ovBphrfCsE4Qg3/2jU0mD1ztcelkflABl1+N4Kz8eK4= Subject key identifier: 91:B1:D7:A0:44:5F:F2:7E:49:01:BB:FD:4F:3D:DE:60:09:93:D5:E4 Authority key identifier: AF:E7:27:E4:20:9D:CD:F8:27:62:57:4B:5E:33:C8:08:37:87:A1:8F Certificate issuer: /CN=A915AE5F/serialNumber=AFE727E4209DCDF82762574B5E33C8083787A18F Certificate serial: 1EB0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft Manifest number: 1E4F Signing time: Sat 14 Jun 2025 16:03:02 +0000 Manifest this update: Sat 14 Jun 2025 16:03:01 +0000 Manifest next update: Sat 21 Jun 2025 16:03:01 +0000 Files and hashes: 1: r-cn5CCdzfgnYldLXjPICDeHoY8.crl (hash: 7u89ZuxdPTRCQZzSF+QtD588YmaT5wbVPon9N/Zr1WM=) 2: 7EFB8A6E885311E6BDE50A80C4F9AE02.roa (hash: WKYh+NxnsT3X7rLjv5qUGFM6/m1tIHkeIZefmgprnPs=) 3: D80B013A172011EEB3A9C124C4F9AE02.roa (hash: i+bH68t7yKzy0Rw6D9wkVEOs5mv50GBBoWxW4vThyQY=) 4: CF946690E5E711EE89AF4E5AC4F9AE02.roa (hash: Hy5wV1LNqpxbM5ijt7NUzM7tVBcEJ4OJJPk557Hpy8c=) 5: 882AC358E1F511EE9188A919C4F9AE02.roa (hash: 7XnoI3SWGKSLq9zz7HLNS32aw+KK++smhLaAOQ+1lDo=) 6: 5C6A7BE6E1F511EEA08A5519C4F9AE02.roa (hash: T6jmHSx80+1QapW6ywMYadpctCcOQDce4QIxekTXdlo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.crl rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 16:03:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7856 (0x1eb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915AE5F, serialNumber=AFE727E4209DCDF82762574B5E33C8083787A18F Validity Not Before: Jun 14 16:03:01 2025 GMT Not After : Jun 21 16:03:01 2025 GMT Subject: CN=684d9d36-2659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:94:85:15:0a:e1:dc:85:82:6c:fa:82:f3:27: 4d:4f:03:13:b0:68:65:69:30:0c:84:34:67:df:d1: f6:f5:1a:38:b6:f2:e0:43:95:8d:01:f4:19:41:96: 0c:21:23:0b:f8:a5:0c:7f:a2:84:ee:d4:c9:d5:fe: de:38:a0:b9:04:d9:6e:ff:49:29:99:af:42:3c:28: 54:0d:c7:63:eb:fb:cb:74:e3:36:a3:70:b6:bb:55: e3:56:ab:8d:33:4b:97:8e:c4:5b:7c:a7:1c:69:b9: 10:d5:4a:1b:46:70:ac:d7:23:d2:cf:a2:fc:00:e1: bb:4e:6b:d4:dd:3b:80:7b:90:2b:0f:6c:c0:08:2a: 52:54:7c:72:15:4c:d1:ad:2c:c6:e1:08:8c:e1:25: a4:46:de:8e:48:67:c2:d3:be:59:06:fd:d3:48:20: 65:43:f9:6d:ba:72:93:d8:3b:f1:fa:d2:37:b5:80: 07:22:b4:ef:d6:e3:48:15:82:ee:09:fa:c0:c0:d2: d3:c9:3f:59:f1:70:7f:c8:12:e5:ba:fc:02:96:f8: 4b:0d:fe:7b:5c:7f:b8:ba:cf:02:9b:1e:5a:89:e7: a6:76:f7:c4:44:13:5f:33:a3:23:39:32:2d:81:3f: b8:58:f3:d3:50:23:e4:a7:2f:37:b6:fc:52:f6:70: 95:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:B1:D7:A0:44:5F:F2:7E:49:01:BB:FD:4F:3D:DE:60:09:93:D5:E4 X509v3 Authority Key Identifier: keyid:AF:E7:27:E4:20:9D:CD:F8:27:62:57:4B:5E:33:C8:08:37:87:A1:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:57:30:0b:6f:e5:6b:7a:1b:3a:45:33:a8:5c:27:94:3b:27: dd:34:4e:e6:96:c0:57:40:0f:ab:75:b4:e6:81:c3:f8:64:63: 0c:8b:22:4a:d0:a2:aa:6f:75:8a:4e:ef:1f:2f:dd:fa:6e:5b: 66:08:93:80:d3:65:e6:00:83:b6:18:28:0f:95:01:d1:67:53: 3e:9c:9c:00:b7:9e:bb:9d:59:4e:8e:4e:05:74:56:60:7e:ba: 4d:6e:d9:ed:87:4a:6c:d7:b3:f9:48:56:7b:6f:bd:e5:3b:f5: 88:eb:c8:2f:86:23:56:9a:14:e1:94:5a:66:ae:86:c2:eb:a1: 85:33:eb:5c:ee:24:48:19:53:82:e4:b9:36:ae:9c:bc:7d:e5: 7a:86:a8:09:bf:f7:14:89:3a:8e:48:4d:9a:9c:f9:a3:b4:7f: 50:f5:6c:aa:cf:c7:bd:68:71:94:fc:bc:d4:59:2e:86:34:54: b0:77:bf:7d:f3:8a:e4:cf:ef:8c:be:15:bd:cc:ed:87:4d:f1: 22:5a:22:eb:0e:fe:6d:87:d8:83:25:ca:d6:f7:1b:a7:9a:56: 96:6b:9b:00:23:6f:b0:90:5a:ec:ff:81:56:c7:21:10:c1:33: 6d:a5:d8:5e:6d:59:4e:c8:e0:3f:98:d8:41:34:7a:03:24:fa: dc:ce:8c:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHrAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUFFNUYxMTAvBgNVBAUTKEFGRTcyN0U0MjA5RENERjgyNzYyNTc0QjVFMzNDODA4 Mzc4N0ExOEYwHhcNMjUwNjE0MTYwMzAxWhcNMjUwNjIxMTYwMzAxWjAYMRYwFAYD VQQDEw02ODRkOWQzNi0yNjU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7pSFFQrh3IWCbPqC8ydNTwMTsGhlaTAMhDRn39H29Ro4tvLgQ5WNAfQZQZYM ISML+KUMf6KE7tTJ1f7eOKC5BNlu/0kpma9CPChUDcdj6/vLdOM2o3C2u1XjVquN M0uXjsRbfKccabkQ1UobRnCs1yPSz6L8AOG7TmvU3TuAe5ArD2zACCpSVHxyFUzR rSzG4QiM4SWkRt6OSGfC075ZBv3TSCBlQ/ltunKT2Dvx+tI3tYAHIrTv1uNIFYLu CfrAwNLTyT9Z8XB/yBLluvwClvhLDf57XH+4us8Cmx5aieemdvfERBNfM6MjOTIt gT+4WPPTUCPkpy83tvxS9nCVYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJGx16BE X/J+SQG7/U893mAJk9XkMB8GA1UdIwQYMBaAFK/nJ+Qgnc34J2JXS14zyAg3h6GP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QUU1Ri84Qjc5QjY3ODg4 NTExMUU2QTY5MkRFNzhDNEY5QUUwMi9yLWNuNUNDZHpmZ25ZbGRMWGpQSUNEZUhv WTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ItY241Q0NkemZnbllsZExYalBJQ0RlSG9ZOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QUU1Ri84Qjc5QjY3ODg4NTExMUU2QTY5MkRFNzhDNEY5QUUwMi9yLWNuNUNDZHpm Z25ZbGRMWGpQSUNEZUhvWTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDGVzALb+Vrehs6RTOoXCeUOyfdNE7mlsBXQA+rdbTmgcP4ZGMMiyJK 0KKqb3WKTu8fL936bltmCJOA02XmAIO2GCgPlQHRZ1M+nJwAt567nVlOjk4FdFZg frpNbtnth0ps17P5SFZ7b73lO/WI68gvhiNWmhThlFpmrobC66GFM+tc7iRIGVOC 5Lk2rpy8feV6hqgJv/cUiTqOSE2anPmjtH9Q9Wyqz8e9aHGU/LzUWS6GNFSwd799 84rkz++MvhW9zO2HTfEiWiLrDv5th9iDJcrW9xunmlaWa5sAI2+wkFrs/4FWxyEQ wTNtpdhebVlOyOA/mNhBNHoDJPrczoyV -----END CERTIFICATE-----Generated at Sun Jun 15 08:03:07 2025 by rpki-client