$ rpki-client -vvf rpki.apnic.net/member_repository/A916B7FC/CF8E301603A711F0A7FF9C87C4F9AE02/Ym10UmNzXXYYZJvVMYyB-6it3MA.mft File: Ym10UmNzXXYYZJvVMYyB-6it3MA.mft (raw, json) Hash identifier: Om2TH74WK5vzBUBEqvFHnfKTTYMeHvVavI409w92cFA= Subject key identifier: A7:D6:52:65:CD:32:5A:38:15:5C:F0:E8:7C:5C:4A:15:39:D2:D5:1A Authority key identifier: 62:6D:74:52:63:73:5D:76:18:64:9B:D5:31:8C:81:FB:A8:AD:DC:C0 Certificate issuer: /CN=A916B7FC/serialNumber=626D745263735D7618649BD5318C81FBA8ADDCC0 Certificate serial: 2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ym10UmNzXXYYZJvVMYyB-6it3MA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B7FC/CF8E301603A711F0A7FF9C87C4F9AE02/Ym10UmNzXXYYZJvVMYyB-6it3MA.mft Manifest number: 2E Signing time: Fri 13 Jun 2025 06:36:27 +0000 Manifest this update: Fri 13 Jun 2025 06:36:27 +0000 Manifest next update: Fri 20 Jun 2025 06:36:27 +0000 Files and hashes: 1: Ym10UmNzXXYYZJvVMYyB-6it3MA.crl (hash: w1ZQB7XpGsYrCEEaDWP5E8Hk7EvmXZY/A775sQ3vr6U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B7FC/CF8E301603A711F0A7FF9C87C4F9AE02/Ym10UmNzXXYYZJvVMYyB-6it3MA.crl rsync://rpki.apnic.net/member_repository/A916B7FC/CF8E301603A711F0A7FF9C87C4F9AE02/Ym10UmNzXXYYZJvVMYyB-6it3MA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ym10UmNzXXYYZJvVMYyB-6it3MA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 06:36:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B7FC, serialNumber=626D745263735D7618649BD5318C81FBA8ADDCC0 Validity Not Before: Jun 13 06:36:27 2025 GMT Not After : Jun 20 06:36:27 2025 GMT Subject: CN=684bc6eb-529e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:32:8b:31:01:5a:3a:e6:38:15:8b:0d:56:43: 2c:1f:90:0a:73:8e:82:58:2c:b5:86:ca:4d:c8:66: f2:d6:c8:78:b8:ee:89:b3:e5:ae:39:60:67:13:5f: b9:ac:db:a7:12:0a:dd:b5:a3:b3:aa:dc:6a:04:d4: fa:7a:14:09:98:e9:0b:b2:d9:a7:86:24:94:4d:fb: bf:20:a7:43:37:bb:c3:19:0d:3e:ee:42:49:26:6a: dd:35:cf:6a:c0:d8:d3:8c:b6:71:e6:3a:d7:19:22: 3f:7f:96:b8:d6:9d:48:3b:b6:4a:0a:2b:fa:7c:08: 03:90:96:78:62:e7:bd:e8:a9:2a:6d:b7:63:1f:34: 86:29:14:e4:00:d2:ef:83:05:c6:8a:05:0a:1e:fa: a7:3c:9f:97:bc:c6:2a:3a:35:47:1a:25:5d:45:61: ac:0e:bf:31:82:42:cb:88:1b:ba:89:67:f4:a3:01: a4:05:8b:0a:9a:87:96:a5:23:96:73:c0:6a:03:73: d3:1b:d2:7a:f9:b8:06:b5:99:61:49:2c:65:7b:66: b5:75:1b:aa:e5:03:dd:d0:53:bc:40:b9:0a:70:f0: 8d:06:58:a3:0c:83:28:69:2b:c0:a2:23:17:39:80: 7d:09:85:1c:ba:45:24:3d:5f:6c:e9:e3:c2:94:b5: 44:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:D6:52:65:CD:32:5A:38:15:5C:F0:E8:7C:5C:4A:15:39:D2:D5:1A X509v3 Authority Key Identifier: keyid:62:6D:74:52:63:73:5D:76:18:64:9B:D5:31:8C:81:FB:A8:AD:DC:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B7FC/CF8E301603A711F0A7FF9C87C4F9AE02/Ym10UmNzXXYYZJvVMYyB-6it3MA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ym10UmNzXXYYZJvVMYyB-6it3MA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B7FC/CF8E301603A711F0A7FF9C87C4F9AE02/Ym10UmNzXXYYZJvVMYyB-6it3MA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:83:56:6d:08:28:e3:f7:8a:45:cf:67:0b:7d:5e:f3:34:d5: 93:d8:3b:6e:71:35:6d:29:3e:a3:90:87:23:89:6e:5d:a6:26: e5:3f:0d:fe:39:1e:40:69:b9:0c:bc:13:db:49:c0:f2:91:0a: 14:4b:14:33:17:6b:c9:fc:81:a7:31:b2:09:50:56:ef:45:82: f1:a4:9d:ee:48:03:cf:4e:ce:bf:19:75:39:95:f0:d6:b1:db: 69:bc:22:07:34:54:66:88:65:90:1e:9c:5e:0e:bc:cf:fd:cd: 53:4f:12:0d:bc:a9:4b:f1:e1:ba:c5:eb:9e:6c:95:75:5f:ce: ff:47:c6:a7:70:41:19:6b:9d:2b:d7:d0:63:c0:24:e3:59:08: c3:82:7e:b2:8f:f8:be:da:ee:7e:f1:c0:8d:44:8c:12:33:9f: e9:c7:37:e9:cf:e2:41:a4:98:a0:c9:39:c4:20:bb:e1:f2:bc: 36:c8:92:a3:63:43:f2:9e:b7:59:07:c8:e2:2a:fe:00:68:6e: e4:3e:1b:a2:f5:fe:92:7c:00:9b:ea:4a:dd:d4:d3:54:68:c0: 09:24:6b:98:eb:b8:09:9f:18:49:66:09:c8:ca:42:b5:31:0d: 54:6b:78:48:f0:d4:21:9a:66:97:64:aa:1a:5c:dc:62:4f:4b: 91:c9:cc:03 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 QjdGQzExMC8GA1UEBRMoNjI2RDc0NTI2MzczNUQ3NjE4NjQ5QkQ1MzE4QzgxRkJB OEFERENDMDAeFw0yNTA2MTMwNjM2MjdaFw0yNTA2MjAwNjM2MjdaMBgxFjAUBgNV BAMTDTY4NGJjNmViLTUyOWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMMosxAVo65jgViw1WQywfkApzjoJYLLWGyk3IZvLWyHi47omz5a45YGcTX7ms 26cSCt21o7Oq3GoE1Pp6FAmY6Quy2aeGJJRN+78gp0M3u8MZDT7uQkkmat01z2rA 2NOMtnHmOtcZIj9/lrjWnUg7tkoKK/p8CAOQlnhi573oqSptt2MfNIYpFOQA0u+D BcaKBQoe+qc8n5e8xio6NUcaJV1FYawOvzGCQsuIG7qJZ/SjAaQFiwqah5alI5Zz wGoDc9Mb0nr5uAa1mWFJLGV7ZrV1G6rlA93QU7xAuQpw8I0GWKMMgyhpK8CiIxc5 gH0JhRy6RSQ9X2zp48KUtUS7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUp9ZSZc0y WjgVXPDofFxKFTnS1RowHwYDVR0jBBgwFoAUYm10UmNzXXYYZJvVMYyB+6it3MAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZCN0ZDL0NGOEUzMDE2MDNB NzExRjBBN0ZGOUM4N0M0RjlBRTAyL1ltMTBVbU56WFhZWVpKdlZNWXlCLTZpdDNN QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWW0xMFVtTnpYWFlZWkp2Vk1ZeUItNml0M01BLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZC N0ZDL0NGOEUzMDE2MDNBNzExRjBBN0ZGOUM4N0M0RjlBRTAyL1ltMTBVbU56WFhZ WVpKdlZNWXlCLTZpdDNNQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC+DVm0IKOP3ikXPZwt9XvM01ZPYO25xNW0pPqOQhyOJbl2mJuU/Df45 HkBpuQy8E9tJwPKRChRLFDMXa8n8gacxsglQVu9FgvGkne5IA89Ozr8ZdTmV8Nax 22m8Igc0VGaIZZAenF4OvM/9zVNPEg28qUvx4brF655slXVfzv9HxqdwQRlrnSvX 0GPAJONZCMOCfrKP+L7a7n7xwI1EjBIzn+nHN+nP4kGkmKDJOcQgu+HyvDbIkqNj Q/Ket1kHyOIq/gBobuQ+G6L1/pJ8AJvqSt3U01RowAkka5jruAmfGElmCcjKQrUx DVRreEjw1CGaZpdkqhpc3GJPS5HJzAM= -----END CERTIFICATE-----Generated at Sat Jun 14 17:56:22 2025 by rpki-client