$ rpki-client -vvf rpki.apnic.net/member_repository/A916DC7C/A4C14628554911EF82B5D36FC4F9AE02/CKtUearwyEilFC1v5NyZFitFwzc.mft File: CKtUearwyEilFC1v5NyZFitFwzc.mft (raw, json) Hash identifier: b6ioZJfFsn6QuB9uKZK6AtrGVdd/gHMVanunzaAsopE= Subject key identifier: 85:C3:F0:F8:05:34:39:C7:8A:6A:6D:C9:9A:3B:DA:68:58:4E:C6:1C Authority key identifier: 08:AB:54:79:AA:F0:C8:48:A5:14:2D:6F:E4:DC:99:16:2B:45:C3:37 Certificate issuer: /CN=A916DC7C/serialNumber=08AB5479AAF0C848A5142D6FE4DC99162B45C337 Certificate serial: A5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CKtUearwyEilFC1v5NyZFitFwzc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DC7C/A4C14628554911EF82B5D36FC4F9AE02/CKtUearwyEilFC1v5NyZFitFwzc.mft Manifest number: A3 Signing time: Sun 15 Jun 2025 00:35:59 +0000 Manifest this update: Sun 15 Jun 2025 00:35:58 +0000 Manifest next update: Sun 22 Jun 2025 00:35:58 +0000 Files and hashes: 1: CKtUearwyEilFC1v5NyZFitFwzc.crl (hash: yuOzKBFV9zJyrwN6JFaTvk8kB5y0k86Z8Lf2eQipFlg=) 2: 710957A8559411EFA07E1C5AC4F9AE02.roa (hash: kCmrnMtq0oO23W6srUkZmhxFZ7143rIIMei/dep36jM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DC7C/A4C14628554911EF82B5D36FC4F9AE02/CKtUearwyEilFC1v5NyZFitFwzc.crl rsync://rpki.apnic.net/member_repository/A916DC7C/A4C14628554911EF82B5D36FC4F9AE02/CKtUearwyEilFC1v5NyZFitFwzc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CKtUearwyEilFC1v5NyZFitFwzc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 00:35:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165 (0xa5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DC7C, serialNumber=08AB5479AAF0C848A5142D6FE4DC99162B45C337 Validity Not Before: Jun 15 00:35:58 2025 GMT Not After : Jun 22 00:35:58 2025 GMT Subject: CN=684e156e-e629 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:73:c3:40:13:85:67:a3:db:a0:5c:0a:23:3b: 6c:44:b2:d9:f6:75:0d:57:79:f4:3f:fa:a2:ca:a8: ab:c3:90:bf:aa:f5:e4:a8:b5:06:ed:1c:39:59:07: cd:36:af:a5:f1:f8:de:4a:83:0b:d1:32:4f:e7:81: c6:49:39:50:f6:80:84:50:c8:5e:92:ec:fb:6b:56: 6b:f3:56:3e:b1:af:ba:2f:fa:68:bc:f6:03:04:b0: a0:27:ac:8f:09:da:98:12:92:05:ab:a8:93:f6:28: 9e:fd:34:f8:38:ba:70:76:6b:17:69:57:ef:11:58: 20:83:44:2e:19:cb:e2:18:b7:4b:69:d8:56:73:4f: 96:6d:ee:d3:9c:c4:8b:79:0c:a3:45:51:d9:b2:e9: 1b:22:f6:c9:7f:2f:52:41:4b:45:96:3f:68:56:27: 43:b8:ed:75:62:34:ed:8d:9c:0b:d3:63:dd:a6:fd: a1:70:d2:04:dd:8d:b9:ea:e4:85:30:cc:82:5d:b1: 46:6f:84:f5:64:07:6a:32:a9:66:31:ea:a2:9b:50: 95:ec:2d:2d:eb:2d:47:83:06:a5:75:8c:57:8e:84: 73:ad:6e:c9:c8:16:2f:2f:ad:77:d1:fd:6f:99:cb: 04:9f:71:68:9a:55:c9:c9:d4:76:0a:a5:8c:5d:7e: 0a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:C3:F0:F8:05:34:39:C7:8A:6A:6D:C9:9A:3B:DA:68:58:4E:C6:1C X509v3 Authority Key Identifier: keyid:08:AB:54:79:AA:F0:C8:48:A5:14:2D:6F:E4:DC:99:16:2B:45:C3:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DC7C/A4C14628554911EF82B5D36FC4F9AE02/CKtUearwyEilFC1v5NyZFitFwzc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CKtUearwyEilFC1v5NyZFitFwzc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DC7C/A4C14628554911EF82B5D36FC4F9AE02/CKtUearwyEilFC1v5NyZFitFwzc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:05:eb:d7:37:19:f8:2e:e8:8c:be:a6:31:45:0c:d6:40:f6: a7:65:e0:1b:d0:11:27:a1:15:bc:9c:e3:db:9a:ab:8f:3e:d2: cd:70:16:27:8a:74:45:ea:bd:04:f5:7d:48:9f:64:70:d2:cd: 04:8d:f9:37:4e:f4:47:23:f8:f0:6e:a6:ed:dc:bb:7b:7c:03: e9:69:c1:3f:83:76:8e:6f:f7:09:da:d4:81:28:91:a0:55:62: 7d:3c:20:31:b3:8b:91:18:2e:e6:5e:8a:72:03:66:20:dc:cc: 48:4b:e1:48:74:29:b8:00:ca:59:ed:e9:a0:aa:c4:11:b3:29: e0:26:89:bf:43:88:c4:94:6e:32:31:61:a9:7d:cd:8b:01:c2: c8:f0:de:81:aa:a8:6b:c9:29:cb:9c:0a:04:41:ef:a1:b4:42: db:17:a6:88:8f:27:db:4b:7b:4b:21:82:cf:a0:18:e9:90:5a: b7:5c:d9:60:b2:50:f7:ee:f4:09:36:d5:59:95:2d:5d:4d:68: af:a8:8f:0d:e8:89:50:c5:0c:bf:74:52:4c:98:af:2e:51:c3: ea:bc:d2:e7:c8:9c:61:19:86:5d:aa:89:ec:21:73:b0:b3:a6: aa:cb:56:92:4b:ae:a0:60:6d:97:b2:15:90:ca:f6:21:37:37: d3:7f:6a:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRDN0MxMTAvBgNVBAUTKDA4QUI1NDc5QUFGMEM4NDhBNTE0MkQ2RkU0REM5OTE2 MkI0NUMzMzcwHhcNMjUwNjE1MDAzNTU4WhcNMjUwNjIyMDAzNTU4WjAYMRYwFAYD VQQDEw02ODRlMTU2ZS1lNjI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoHPDQBOFZ6PboFwKIztsRLLZ9nUNV3n0P/qiyqirw5C/qvXkqLUG7Rw5WQfN Nq+l8fjeSoML0TJP54HGSTlQ9oCEUMhekuz7a1Zr81Y+sa+6L/povPYDBLCgJ6yP CdqYEpIFq6iT9iie/TT4OLpwdmsXaVfvEVggg0QuGcviGLdLadhWc0+Wbe7TnMSL eQyjRVHZsukbIvbJfy9SQUtFlj9oVidDuO11YjTtjZwL02Pdpv2hcNIE3Y256uSF MMyCXbFGb4T1ZAdqMqlmMeqim1CV7C0t6y1HgwaldYxXjoRzrW7JyBYvL6130f1v mcsEn3FomlXJydR2CqWMXX4KTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIXD8PgF NDnHimptyZo72mhYTsYcMB8GA1UdIwQYMBaAFAirVHmq8MhIpRQtb+TcmRYrRcM3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REM3Qy9BNEMxNDYyODU1 NDkxMUVGODJCNUQzNkZDNEY5QUUwMi9DS3RVZWFyd3lFaWxGQzF2NU55WkZpdEZ3 emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0NLdFVlYXJ3eUVpbEZDMXY1TnlaRml0Rnd6Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 REM3Qy9BNEMxNDYyODU1NDkxMUVGODJCNUQzNkZDNEY5QUUwMi9DS3RVZWFyd3lF aWxGQzF2NU55WkZpdEZ3emMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwBevXNxn4LuiMvqYxRQzWQPanZeAb0BEnoRW8nOPbmquPPtLNcBYn inRF6r0E9X1In2Rw0s0Ejfk3TvRHI/jwbqbt3Lt7fAPpacE/g3aOb/cJ2tSBKJGg VWJ9PCAxs4uRGC7mXopyA2Yg3MxIS+FIdCm4AMpZ7emgqsQRsyngJom/Q4jElG4y MWGpfc2LAcLI8N6BqqhrySnLnAoEQe+htELbF6aIjyfbS3tLIYLPoBjpkFq3XNlg slD37vQJNtVZlS1dTWivqI8N6IlQxQy/dFJMmK8uUcPqvNLnyJxhGYZdqonsIXOw s6aqy1aSS66gYG2XshWQyvYhNzfTf2r3 -----END CERTIFICATE-----Generated at Mon Jun 16 15:36:59 2025 by rpki-client