$ rpki-client -vvf rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft File: _knCz373vPtEQkWD30SkczIILFk.mft (raw, json) Hash identifier: E4ipir1G4wwWrXZDkD1K3MPIXUXDzqQ3+UL6EQSRwPQ= Subject key identifier: 51:89:79:1E:EF:39:D2:1A:81:25:D6:6A:49:F7:B2:AF:99:5B:07:C7 Authority key identifier: FE:49:C2:CF:7E:F7:BC:FB:44:42:45:83:DF:44:A4:73:32:08:2C:59 Certificate issuer: /CN=A916B4A3/serialNumber=FE49C2CF7EF7BCFB44424583DF44A47332082C59 Certificate serial: 0638 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft Manifest number: 0626 Signing time: Mon 16 Jun 2025 22:27:41 +0000 Manifest this update: Mon 16 Jun 2025 22:27:40 +0000 Manifest next update: Mon 23 Jun 2025 22:27:40 +0000 Files and hashes: 1: _knCz373vPtEQkWD30SkczIILFk.crl (hash: y4kdQew08gL485W1zxBxGzBc9tM1e/sKMCBpVppwXvo=) 2: B1C90C7A20EC11EF964FFE2CC4F9AE02.roa (hash: u+IddtnEZ3PpaS5wkgvcnMQ5NxiRiCy+krC9UIm0AEs=) 3: B2602B2820EC11EF964FFE2CC4F9AE02.roa (hash: GTvoFugBA+uCvfRWo4LUswGkHyD24NgsZWWXmqE2VNc=) 4: 6A80A1DA930011EFAF2ACC48C4F9AE02.roa (hash: z3se8A09zx2Huzx3cHt2XniXO/IZyEE/vV6YRsvSpe0=) 5: 68219776A41311EBBF911855C4F9AE02.roa (hash: ItkS9hhBxUUr7QTrdN4qhsm8OMGF5bAvi1QRQ2K74xw=) 6: 3F82CC6E234E11EFAF9F0F60C4F9AE02.roa (hash: WKwWhbPawyOzgAjOsk/HfPjPqc+lQeKAyZrRcRmfwlQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.crl rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 22:27:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1592 (0x638) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B4A3, serialNumber=FE49C2CF7EF7BCFB44424583DF44A47332082C59 Validity Not Before: Jun 16 22:27:40 2025 GMT Not After : Jun 23 22:27:40 2025 GMT Subject: CN=68509a5d-3fcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:80:02:e1:90:27:ac:5c:e1:40:a9:1a:84:7c: ae:a8:1b:3e:bc:ae:90:5c:41:56:d8:1f:2a:9d:68: df:33:66:3a:6b:f4:3e:36:e8:06:58:c5:42:bd:8f: a8:cc:87:d7:e1:f0:50:19:aa:c3:b4:cb:7b:d1:c8: 01:40:bc:a1:a2:50:b0:0a:8f:fe:df:36:ba:03:ec: d6:ee:82:6c:5c:61:bb:0f:f4:89:53:6d:aa:84:74: 1a:ae:52:33:1a:ca:00:ac:03:b5:c1:bd:19:e9:10: bf:16:73:1f:c8:fb:89:d3:31:f8:74:68:55:e5:cf: d9:1b:40:d9:30:ca:dc:aa:9f:5f:4f:3b:2f:34:18: aa:d7:3a:7b:a9:e7:d7:35:e8:6b:ac:4f:d3:21:08: 79:1e:10:c6:23:db:05:8f:40:2a:f0:f6:5a:6c:37: 6b:18:56:30:47:b9:e3:7b:de:15:1f:c0:ca:5d:40: 6f:d9:34:6c:57:66:02:1f:10:59:b7:16:7e:45:5e: e1:b6:49:0e:fe:7f:65:26:8b:bc:e7:c4:22:d1:92: 6c:17:3c:33:dc:0d:77:24:cb:25:7c:59:98:e7:3b: be:ef:7f:d1:ff:a4:46:aa:ab:44:52:25:a7:38:0a: ab:d0:0b:6a:da:ca:c8:9b:36:94:c8:8c:58:db:44: 3c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:89:79:1E:EF:39:D2:1A:81:25:D6:6A:49:F7:B2:AF:99:5B:07:C7 X509v3 Authority Key Identifier: keyid:FE:49:C2:CF:7E:F7:BC:FB:44:42:45:83:DF:44:A4:73:32:08:2C:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:99:0a:7b:56:40:6a:62:21:f5:56:ee:d1:19:df:63:d2:94: dd:df:22:11:cc:99:99:e6:fe:a5:7f:22:2a:7e:fe:96:bb:6a: 5c:cb:de:ff:d3:39:e1:31:d5:8b:b7:d8:aa:e2:62:29:36:5a: b7:dc:ed:c8:de:6f:a8:0d:db:d1:8c:83:d3:fc:b4:40:85:01: db:00:47:fb:8a:ae:ac:6d:8a:32:05:2c:87:91:e4:ed:31:98: da:53:bc:c9:8c:76:10:d2:1b:b7:fb:cc:70:20:a4:49:e9:fd: cb:39:ad:e4:49:c5:d0:fa:50:42:02:29:06:8c:15:e7:37:80: fe:93:56:af:97:50:5d:12:41:92:e2:16:e8:96:5c:db:a1:69: 8d:76:ad:61:a2:38:b4:81:a2:fe:0d:58:36:be:f6:e5:8c:26: c2:da:57:bc:41:dc:0d:65:1f:68:3a:c8:23:e4:2b:08:28:6e: b5:5c:19:a0:d8:9f:0b:be:72:51:50:d2:69:e5:bb:12:71:c1: 0c:ab:32:ed:6d:67:7e:3e:7f:b0:26:6a:93:6d:65:42:93:7f: 1c:f0:1a:b4:cf:d7:7b:52:8b:e5:90:1e:97:30:48:52:18:64: f6:10:97:60:49:72:9b:be:b8:d7:45:f3:16:1d:5c:25:d8:43: 16:4a:e1:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI0QTMxMTAvBgNVBAUTKEZFNDlDMkNGN0VGN0JDRkI0NDQyNDU4M0RGNDRBNDcz MzIwODJDNTkwHhcNMjUwNjE2MjIyNzQwWhcNMjUwNjIzMjIyNzQwWjAYMRYwFAYD VQQDEw02ODUwOWE1ZC0zZmNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoIAC4ZAnrFzhQKkahHyuqBs+vK6QXEFW2B8qnWjfM2Y6a/Q+NugGWMVCvY+o zIfX4fBQGarDtMt70cgBQLyholCwCo/+3za6A+zW7oJsXGG7D/SJU22qhHQarlIz GsoArAO1wb0Z6RC/FnMfyPuJ0zH4dGhV5c/ZG0DZMMrcqp9fTzsvNBiq1zp7qefX NehrrE/TIQh5HhDGI9sFj0Aq8PZabDdrGFYwR7nje94VH8DKXUBv2TRsV2YCHxBZ txZ+RV7htkkO/n9lJou858Qi0ZJsFzwz3A13JMslfFmY5zu+73/R/6RGqqtEUiWn OAqr0Atq2srImzaUyIxY20Q8PQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFGJeR7v OdIagSXWakn3sq+ZWwfHMB8GA1UdIwQYMBaAFP5Jws9+97z7REJFg99EpHMyCCxZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjRBMy82RDYyQzhDNEEw NDIxMUVCODFCRkZEMUZDNEY5QUUwMi9fa25DejM3M3ZQdEVRa1dEMzBTa2N6SUlM RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19rbkN6MzczdlB0RVFrV0QzMFNrY3pJSUxGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjRBMy82RDYyQzhDNEEwNDIxMUVCODFCRkZEMUZDNEY5QUUwMi9fa25DejM3M3ZQ dEVRa1dEMzBTa2N6SUlMRmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQmQp7VkBqYiH1Vu7RGd9j0pTd3yIRzJmZ5v6lfyIqfv6Wu2pcy97/ 0znhMdWLt9iq4mIpNlq33O3I3m+oDdvRjIPT/LRAhQHbAEf7iq6sbYoyBSyHkeTt MZjaU7zJjHYQ0hu3+8xwIKRJ6f3LOa3kScXQ+lBCAikGjBXnN4D+k1avl1BdEkGS 4hbollzboWmNdq1hoji0gaL+DVg2vvbljCbC2le8QdwNZR9oOsgj5CsIKG61XBmg 2J8LvnJRUNJp5bsSccEMqzLtbWd+Pn+wJmqTbWVCk38c8Bq0z9d7UovlkB6XMEhS GGT2EJdgSXKbvrjXRfMWHVwl2EMWSuGn -----END CERTIFICATE-----Generated at Wed Jun 18 20:02:14 2025 by rpki-client