$ rpki-client -vvf rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.mft File: rCjcKlVLTjOaOZyWQrTOAmio37A.mft (raw, json) Hash identifier: 46bd5mCyfmUraS1GGfKq8m4n/O7xQ8d87PHwLVlgsMc= Subject key identifier: C3:C2:94:4A:86:86:AF:EF:45:B9:22:E3:BF:FD:97:3F:76:8E:62:E8 Authority key identifier: AC:28:DC:2A:55:4B:4E:33:9A:39:9C:96:42:B4:CE:02:68:A8:DF:B0 Certificate issuer: /CN=A915EA46/serialNumber=AC28DC2A554B4E339A399C9642B4CE0268A8DFB0 Certificate serial: 72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCjcKlVLTjOaOZyWQrTOAmio37A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.mft Manifest number: 71 Signing time: Fri 13 Jun 2025 05:45:30 +0000 Manifest this update: Fri 13 Jun 2025 05:45:29 +0000 Manifest next update: Fri 20 Jun 2025 05:45:29 +0000 Files and hashes: 1: rCjcKlVLTjOaOZyWQrTOAmio37A.crl (hash: BHR+2EKeZTeJthLauXSXKl9T/v+dQszGAzQvc2vJ8k4=) 2: A1E99A4E9C1211EFB233147EC4F9AE02.roa (hash: 3ye2avJW3DGdXLpGllemApGuBs5Hg/Dy3+TFvLk8rE8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.crl rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCjcKlVLTjOaOZyWQrTOAmio37A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 05:45:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 114 (0x72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915EA46, serialNumber=AC28DC2A554B4E339A399C9642B4CE0268A8DFB0 Validity Not Before: Jun 13 05:45:29 2025 GMT Not After : Jun 20 05:45:29 2025 GMT Subject: CN=684bbaf9-e806 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b2:08:e0:f4:50:39:b2:0a:21:30:85:a2:9d: 95:c8:94:51:c6:69:90:e9:7b:52:46:e5:89:e1:2c: 5a:eb:7c:d0:9e:30:0d:b3:01:11:55:03:5b:1b:19: 8c:57:2d:47:2a:33:7c:73:9a:3b:e3:b3:48:02:ba: 48:72:cd:69:18:6e:33:57:93:a5:d5:e3:45:98:2f: f3:aa:8c:80:30:ef:d4:d9:e2:e4:e1:c5:58:18:41: cb:a0:34:81:90:81:67:2a:ef:9b:48:01:f6:d9:fb: 49:87:d5:48:7c:6b:60:a5:7c:65:3b:c0:ef:30:60: 66:af:ec:d9:28:58:3c:ab:5c:f9:6c:34:b6:bb:e0: ad:6e:d1:89:20:dd:52:5d:59:2f:5d:c3:d4:3c:c3: ff:1a:2a:64:60:a4:03:65:a5:da:ba:b4:22:b5:52: 30:cc:ab:ce:87:26:9a:52:86:00:2f:23:50:f3:c7: c9:d1:29:d5:74:0e:12:30:5b:c0:27:90:71:61:14: 8c:3c:99:64:bb:31:3f:5a:a9:06:cd:3a:ee:9b:68: f1:14:a6:ab:f7:50:93:f1:c6:54:61:4c:53:78:54: c3:d0:2f:f1:44:c0:c0:93:c0:c7:54:2b:41:62:02: 04:4b:fa:ab:05:e9:04:c3:59:09:14:bf:1b:04:40: dc:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:C2:94:4A:86:86:AF:EF:45:B9:22:E3:BF:FD:97:3F:76:8E:62:E8 X509v3 Authority Key Identifier: keyid:AC:28:DC:2A:55:4B:4E:33:9A:39:9C:96:42:B4:CE:02:68:A8:DF:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCjcKlVLTjOaOZyWQrTOAmio37A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:8a:b3:f4:50:30:53:39:16:75:44:a5:36:f9:f3:2a:0d:27: 06:f1:1c:26:08:eb:0e:7a:75:0f:62:ed:0a:d6:68:f4:95:2d: d3:13:25:52:31:16:b4:85:2e:8b:af:29:08:95:1f:1e:8c:1d: 91:f1:d5:57:e7:5e:cc:21:01:1d:50:61:79:e4:be:18:6e:09: 94:cd:ae:bc:d0:55:e1:82:d9:c4:d3:40:20:e8:cf:36:2a:0f: 60:81:f9:58:62:18:85:79:55:d9:9c:d9:27:eb:dc:96:cb:b3: bd:ed:db:fc:c7:f0:38:9b:db:f2:bd:49:6f:a3:b8:3a:f5:d6: 6f:37:76:02:e3:eb:ca:99:28:5e:a3:5c:32:39:5d:7f:da:0d: 9e:4c:b9:ff:09:83:14:a6:8c:49:d0:04:66:ab:d1:90:53:e7: f1:17:93:20:90:ba:53:23:3f:f1:e1:9b:5c:90:d9:29:72:48: 87:fb:1e:65:49:94:3e:be:db:25:d7:3a:b2:a4:5a:11:58:24: 1b:7d:fe:b4:ea:de:5f:05:b4:00:01:63:86:7b:ed:78:37:8d: da:82:b0:68:3b:dd:07:84:77:69:9e:96:10:bf:f0:71:56:af: 12:9a:21:fa:8c:ef:11:a8:57:58:00:86:82:e6:4f:9c:c3:7f: 0e:67:61:84 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RUE0NjExMC8GA1UEBRMoQUMyOERDMkE1NTRCNEUzMzlBMzk5Qzk2NDJCNENFMDI2 OEE4REZCMDAeFw0yNTA2MTMwNTQ1MjlaFw0yNTA2MjAwNTQ1MjlaMBgxFjAUBgNV BAMTDTY4NGJiYWY5LWU4MDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFsgjg9FA5sgohMIWinZXIlFHGaZDpe1JG5YnhLFrrfNCeMA2zARFVA1sbGYxX LUcqM3xzmjvjs0gCukhyzWkYbjNXk6XV40WYL/OqjIAw79TZ4uThxVgYQcugNIGQ gWcq75tIAfbZ+0mH1Uh8a2ClfGU7wO8wYGav7NkoWDyrXPlsNLa74K1u0Ykg3VJd WS9dw9Q8w/8aKmRgpANlpdq6tCK1UjDMq86HJppShgAvI1Dzx8nRKdV0DhIwW8An kHFhFIw8mWS7MT9aqQbNOu6baPEUpqv3UJPxxlRhTFN4VMPQL/FEwMCTwMdUK0Fi AgRL+qsF6QTDWQkUvxsEQNxZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUw8KUSoaG r+9FuSLjv/2XP3aOYugwHwYDVR0jBBgwFoAUrCjcKlVLTjOaOZyWQrTOAmio37Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVFQTQ2L0RCREEyQ0M0OUMx MTExRUY5MkZCQTk3Q0M0RjlBRTAyL3JDamNLbFZMVGpPYU9aeVdRclRPQW1pbzM3 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvckNqY0tsVkxUak9hT1p5V1FyVE9BbWlvMzdBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVF QTQ2L0RCREEyQ0M0OUMxMTExRUY5MkZCQTk3Q0M0RjlBRTAyL3JDamNLbFZMVGpP YU9aeVdRclRPQW1pbzM3QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAeKs/RQMFM5FnVEpTb58yoNJwbxHCYI6w56dQ9i7QrWaPSVLdMTJVIx FrSFLouvKQiVHx6MHZHx1VfnXswhAR1QYXnkvhhuCZTNrrzQVeGC2cTTQCDozzYq D2CB+VhiGIV5Vdmc2Sfr3JbLs73t2/zH8Dib2/K9SW+juDr11m83dgLj68qZKF6j XDI5XX/aDZ5Muf8JgxSmjEnQBGar0ZBT5/EXkyCQulMjP/Hhm1yQ2SlySIf7HmVJ lD6+2yXXOrKkWhFYJBt9/rTq3l8FtAABY4Z77Xg3jdqCsGg73QeEd2melhC/8HFW rxKaIfqM7xGoV1gAhoLmT5zDfw5nYYQ= -----END CERTIFICATE-----Generated at Sat Jun 14 19:02:51 2025 by rpki-client