$ rpki-client -vvf rpki.apnic.net/member_repository/A916B73C/CBD6211CF64811EEA4A6FE0EC4F9AE02/E8ct8cUeLKIRyldmUWjPfHx0cpI.mft File: E8ct8cUeLKIRyldmUWjPfHx0cpI.mft (raw, json) Hash identifier: daYUwibSpqR7tqsN488pKxMS2LmD1GYxZkwl2ZbKmYQ= Subject key identifier: 85:06:59:90:DE:0D:E5:35:A8:26:8C:50:6E:DC:5E:F7:1C:1D:C4:A8 Authority key identifier: 13:C7:2D:F1:C5:1E:2C:A2:11:CA:57:66:51:68:CF:7C:7C:74:72:92 Certificate issuer: /CN=A916B73C/serialNumber=13C72DF1C51E2CA211CA57665168CF7C7C747292 Certificate serial: E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8ct8cUeLKIRyldmUWjPfHx0cpI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B73C/CBD6211CF64811EEA4A6FE0EC4F9AE02/E8ct8cUeLKIRyldmUWjPfHx0cpI.mft Manifest number: DF Signing time: Sun 15 Jun 2025 04:39:13 +0000 Manifest this update: Sun 15 Jun 2025 04:39:12 +0000 Manifest next update: Sun 22 Jun 2025 04:39:12 +0000 Files and hashes: 1: E8ct8cUeLKIRyldmUWjPfHx0cpI.crl (hash: EagmpZUToElXESBc48Ns4mrciS+TwC8CQvu9Rl0mYVI=) 2: 7D211148F64911EEBE36B826C4F9AE02.roa (hash: 6fS8of5qHdeb+UJ2vn+0LaqC6SoyuJivSRtsNyhZhrE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B73C/CBD6211CF64811EEA4A6FE0EC4F9AE02/E8ct8cUeLKIRyldmUWjPfHx0cpI.crl rsync://rpki.apnic.net/member_repository/A916B73C/CBD6211CF64811EEA4A6FE0EC4F9AE02/E8ct8cUeLKIRyldmUWjPfHx0cpI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8ct8cUeLKIRyldmUWjPfHx0cpI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 04:39:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 226 (0xe2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B73C, serialNumber=13C72DF1C51E2CA211CA57665168CF7C7C747292 Validity Not Before: Jun 15 04:39:12 2025 GMT Not After : Jun 22 04:39:12 2025 GMT Subject: CN=684e4e70-1689 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:88:e8:9c:9b:95:d2:0b:a6:63:1e:dd:2a:f4: b6:59:f5:48:1c:44:3a:02:ae:73:02:7b:5c:a9:9c: b8:c5:f5:93:19:08:70:72:25:26:68:bd:3a:e7:b7: 4a:e6:bf:58:26:8f:29:72:b6:35:e0:ab:e6:2b:5b: ef:93:d3:c3:79:43:a0:7f:aa:9e:74:93:4a:24:7e: a2:e3:50:a0:04:6b:01:e6:4e:43:9e:0b:9c:99:fc: 96:77:e7:ad:22:71:84:c6:ea:01:6f:4d:9d:96:3d: 39:dd:da:94:f4:65:6a:f7:2b:37:cd:c5:98:02:19: 68:51:bb:a8:5d:2a:d8:56:b6:6e:38:96:5c:37:fc: 95:aa:b2:d6:d9:69:0d:fa:9b:02:a9:6a:3a:d2:55: 22:0d:50:32:db:c3:73:a5:c5:69:41:30:f3:29:8c: ae:21:df:51:7c:8a:65:10:98:26:81:74:81:ed:18: 1e:14:58:e6:2f:5e:fe:5b:ba:59:71:af:34:a8:c3: 7c:84:cc:b7:d3:11:f6:48:09:77:ba:ca:6f:9c:b8: b0:12:2e:b5:45:19:3b:60:c9:90:1e:23:4b:f0:c6: 76:1c:94:d0:4e:26:79:9e:1f:80:8b:89:97:36:5f: e4:ef:39:81:43:55:74:de:63:1f:0b:30:3b:7c:a2: 96:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:06:59:90:DE:0D:E5:35:A8:26:8C:50:6E:DC:5E:F7:1C:1D:C4:A8 X509v3 Authority Key Identifier: keyid:13:C7:2D:F1:C5:1E:2C:A2:11:CA:57:66:51:68:CF:7C:7C:74:72:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B73C/CBD6211CF64811EEA4A6FE0EC4F9AE02/E8ct8cUeLKIRyldmUWjPfHx0cpI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8ct8cUeLKIRyldmUWjPfHx0cpI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B73C/CBD6211CF64811EEA4A6FE0EC4F9AE02/E8ct8cUeLKIRyldmUWjPfHx0cpI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:93:9a:f4:36:2d:16:a4:1d:06:31:e1:58:3e:f0:e1:bc:30: 40:f9:96:e5:24:7f:d3:f2:c3:10:17:0c:b2:23:54:ed:88:0a: 2a:ca:46:90:ab:db:f0:ce:38:79:c3:28:26:c3:ad:76:fb:40: 02:7e:f6:a4:18:5c:33:b2:97:76:c6:96:71:0e:30:cb:94:a3: 83:4f:36:81:07:d8:cb:43:76:9d:fe:f4:69:75:f7:47:6d:81: e5:35:13:f2:52:25:ae:d4:49:90:b6:17:dd:7c:96:2c:f8:69: b5:df:e5:25:59:78:b5:85:4f:25:ac:19:f9:67:32:0d:39:5a: b4:b4:2a:df:ef:ef:92:0b:73:10:75:01:f5:e9:e4:d5:1b:4f: b8:37:50:a3:ef:6b:98:1d:00:d2:3e:58:a9:7a:b8:87:a2:ce: ff:ed:a5:b2:bc:f4:6e:49:1d:9c:dc:aa:20:e0:0c:ad:9d:68: bb:9c:16:be:c7:13:0d:14:11:ed:a9:3c:78:23:e3:3e:7b:20: a5:53:4f:54:c5:1e:5c:a5:46:88:b3:5b:93:ea:87:11:ee:9d: 17:50:25:d7:89:30:b4:bf:11:72:92:1a:71:97:dd:fe:d9:bd: 60:5a:59:b4:46:c5:33:38:89:8e:de:23:40:48:b6:9b:78:74: ce:ff:bd:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI3M0MxMTAvBgNVBAUTKDEzQzcyREYxQzUxRTJDQTIxMUNBNTc2NjUxNjhDRjdD N0M3NDcyOTIwHhcNMjUwNjE1MDQzOTEyWhcNMjUwNjIyMDQzOTEyWjAYMRYwFAYD VQQDEw02ODRlNGU3MC0xNjg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA54jonJuV0gumYx7dKvS2WfVIHEQ6Aq5zAntcqZy4xfWTGQhwciUmaL0657dK 5r9YJo8pcrY14KvmK1vvk9PDeUOgf6qedJNKJH6i41CgBGsB5k5DngucmfyWd+et InGExuoBb02dlj053dqU9GVq9ys3zcWYAhloUbuoXSrYVrZuOJZcN/yVqrLW2WkN +psCqWo60lUiDVAy28NzpcVpQTDzKYyuId9RfIplEJgmgXSB7RgeFFjmL17+W7pZ ca80qMN8hMy30xH2SAl3uspvnLiwEi61RRk7YMmQHiNL8MZ2HJTQTiZ5nh+Ai4mX Nl/k7zmBQ1V03mMfCzA7fKKWBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIUGWZDe DeU1qCaMUG7cXvccHcSoMB8GA1UdIwQYMBaAFBPHLfHFHiyiEcpXZlFoz3x8dHKS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjczQy9DQkQ2MjExQ0Y2 NDgxMUVFQTRBNkZFMEVDNEY5QUUwMi9FOGN0OGNVZUxLSVJ5bGRtVVdqUGZIeDBj cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U4Y3Q4Y1VlTEtJUnlsZG1VV2pQZkh4MGNwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjczQy9DQkQ2MjExQ0Y2NDgxMUVFQTRBNkZFMEVDNEY5QUUwMi9FOGN0OGNVZUxL SVJ5bGRtVVdqUGZIeDBjcEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyk5r0Ni0WpB0GMeFYPvDhvDBA+ZblJH/T8sMQFwyyI1TtiAoqykaQ q9vwzjh5wygmw612+0ACfvakGFwzspd2xpZxDjDLlKODTzaBB9jLQ3ad/vRpdfdH bYHlNRPyUiWu1EmQthfdfJYs+Gm13+UlWXi1hU8lrBn5ZzINOVq0tCrf7++SC3MQ dQH16eTVG0+4N1Cj72uYHQDSPliperiHos7/7aWyvPRuSR2c3Kog4AytnWi7nBa+ xxMNFBHtqTx4I+M+eyClU09UxR5cpUaIs1uT6ocR7p0XUCXXiTC0vxFykhpxl93+ 2b1gWlm0RsUzOImO3iNASLabeHTO/73I -----END CERTIFICATE-----Generated at Tue Jun 17 01:25:41 2025 by rpki-client