$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED2B/04F7A58045B111EFBD598B77C4F9AE02/RevxDdQ0xSgZEpy5XhoT7ML81e0.mft File: RevxDdQ0xSgZEpy5XhoT7ML81e0.mft (raw, json) Hash identifier: Y4BaXRmK7Gy+W3EVxMKIBvmOcf0CGJEvL4SUYlpmoQ4= Subject key identifier: F5:83:C0:57:43:BA:AA:D1:73:7F:AF:6E:A4:2A:57:1A:33:EB:DD:EA Authority key identifier: 45:EB:F1:0D:D4:34:C5:28:19:12:9C:B9:5E:1A:13:EC:C2:FC:D5:ED Certificate issuer: /CN=A916ED2B/serialNumber=45EBF10DD434C52819129CB95E1A13ECC2FCD5ED Certificate serial: AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RevxDdQ0xSgZEpy5XhoT7ML81e0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916ED2B/04F7A58045B111EFBD598B77C4F9AE02/RevxDdQ0xSgZEpy5XhoT7ML81e0.mft Manifest number: AA Signing time: Sun 15 Jun 2025 05:13:46 +0000 Manifest this update: Sun 15 Jun 2025 05:13:45 +0000 Manifest next update: Sun 22 Jun 2025 05:13:45 +0000 Files and hashes: 1: RevxDdQ0xSgZEpy5XhoT7ML81e0.crl (hash: 1fVPFdaoNMPx8l6y0/Gv6kNLfNf9kCs0t3H+CQ3OGec=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916ED2B/04F7A58045B111EFBD598B77C4F9AE02/RevxDdQ0xSgZEpy5XhoT7ML81e0.crl rsync://rpki.apnic.net/member_repository/A916ED2B/04F7A58045B111EFBD598B77C4F9AE02/RevxDdQ0xSgZEpy5XhoT7ML81e0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RevxDdQ0xSgZEpy5XhoT7ML81e0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 05:13:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 170 (0xaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916ED2B, serialNumber=45EBF10DD434C52819129CB95E1A13ECC2FCD5ED Validity Not Before: Jun 15 05:13:45 2025 GMT Not After : Jun 22 05:13:45 2025 GMT Subject: CN=684e568a-a688 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7a:fb:2f:a5:0b:00:88:fd:2f:73:56:90:69: c8:d7:e2:35:db:45:86:d4:36:27:44:aa:cb:51:3b: 2f:8b:7b:cf:3b:2f:4a:8b:f7:a6:41:14:e0:83:98: 95:7b:19:d0:a9:66:fb:d7:26:29:50:47:dc:b1:38: 90:36:5b:bc:2e:ff:bc:0a:c7:04:b7:2c:76:30:51: dc:15:2f:37:d9:e6:d1:01:14:8a:49:18:7d:80:55: a8:48:e3:ba:ec:24:71:4f:3a:35:ff:60:b2:5c:79: cb:c0:73:ce:9a:d6:a7:72:6d:b8:54:8b:c4:e9:0c: fb:2d:cd:4e:7c:71:01:ba:d7:9e:38:15:39:99:d9: 34:49:7c:7b:5a:ab:4a:65:af:9f:b1:3a:57:a6:07: 51:39:9f:a8:0b:1a:e9:b8:4b:51:d8:5d:09:cc:d9: fa:52:96:58:8a:31:83:73:40:9a:83:0f:ad:1f:60: 71:42:f7:18:e8:ce:b7:1c:4c:91:0e:6d:a8:fd:b4: a5:21:5b:21:7e:9d:82:c3:65:dd:b9:51:c9:64:6a: 01:7d:65:8e:e1:dd:66:f3:64:d2:f4:59:55:5a:b4: 9f:5e:ea:a4:6f:35:fa:e8:9e:28:81:59:4d:d3:de: a4:01:86:60:e9:e4:ec:5d:82:47:fa:0e:79:50:e3: 05:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:83:C0:57:43:BA:AA:D1:73:7F:AF:6E:A4:2A:57:1A:33:EB:DD:EA X509v3 Authority Key Identifier: keyid:45:EB:F1:0D:D4:34:C5:28:19:12:9C:B9:5E:1A:13:EC:C2:FC:D5:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916ED2B/04F7A58045B111EFBD598B77C4F9AE02/RevxDdQ0xSgZEpy5XhoT7ML81e0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RevxDdQ0xSgZEpy5XhoT7ML81e0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED2B/04F7A58045B111EFBD598B77C4F9AE02/RevxDdQ0xSgZEpy5XhoT7ML81e0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:39:74:c8:49:f9:cd:bb:51:da:3e:a9:a9:37:83:e4:4d:96: e9:3a:f5:3d:40:ae:a9:85:c2:0a:8d:82:4c:71:42:8f:b5:74: 89:d4:3a:62:cc:7a:07:d6:75:46:ca:a5:bb:05:e9:90:9f:3c: 38:e8:b8:33:7a:35:e3:d4:fa:d1:bb:63:2a:2b:5c:6b:3c:37: 4b:f5:b0:df:45:5f:ab:f6:3b:34:c1:76:0a:1c:1d:c4:a9:b3: f7:f5:ff:d9:53:69:30:d7:62:9c:85:98:80:c5:e7:b6:6e:c5: 9e:9c:d1:51:80:f6:c0:32:3b:82:17:68:7b:07:cc:15:5e:47: e3:c4:cb:b7:6e:09:2c:4e:17:73:01:2f:32:00:2c:48:d0:b0: 73:9d:5a:0e:ca:df:3c:ed:ca:4c:5c:c9:86:74:09:1e:77:a0: 31:f6:af:0d:dc:bb:66:18:42:e5:c7:6b:69:f6:d2:4f:3a:1d: 19:5b:9f:69:51:9b:91:d6:f0:7e:77:0a:f8:49:d2:5b:09:0d: af:ed:dc:f7:1c:71:21:6e:fa:e5:4e:da:e3:c4:83:f5:b7:d2: cb:dd:e5:47:43:7f:10:0c:51:f0:23:e2:9b:e7:44:46:2b:fd: 2b:dd:7a:a1:d1:e6:ad:c2:8b:4b:40:2e:20:c3:39:7b:e8:76: 6c:60:33:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVEMkIxMTAvBgNVBAUTKDQ1RUJGMTBERDQzNEM1MjgxOTEyOUNCOTVFMUExM0VD QzJGQ0Q1RUQwHhcNMjUwNjE1MDUxMzQ1WhcNMjUwNjIyMDUxMzQ1WjAYMRYwFAYD VQQDEw02ODRlNTY4YS1hNjg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu3r7L6ULAIj9L3NWkGnI1+I120WG1DYnRKrLUTsvi3vPOy9Ki/emQRTgg5iV exnQqWb71yYpUEfcsTiQNlu8Lv+8CscEtyx2MFHcFS832ebRARSKSRh9gFWoSOO6 7CRxTzo1/2CyXHnLwHPOmtancm24VIvE6Qz7Lc1OfHEButeeOBU5mdk0SXx7WqtK Za+fsTpXpgdROZ+oCxrpuEtR2F0JzNn6UpZYijGDc0Cagw+tH2BxQvcY6M63HEyR Dm2o/bSlIVshfp2Cw2XduVHJZGoBfWWO4d1m82TS9FlVWrSfXuqkbzX66J4ogVlN 096kAYZg6eTsXYJH+g55UOMFywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPWDwFdD uqrRc3+vbqQqVxoz693qMB8GA1UdIwQYMBaAFEXr8Q3UNMUoGRKcuV4aE+zC/NXt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUQyQi8wNEY3QTU4MDQ1 QjExMUVGQkQ1OThCNzdDNEY5QUUwMi9SZXZ4RGRRMHhTZ1pFcHk1WGhvVDdNTDgx ZTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JldnhEZFEweFNnWkVweTVYaG9UN01MODFlMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUQyQi8wNEY3QTU4MDQ1QjExMUVGQkQ1OThCNzdDNEY5QUUwMi9SZXZ4RGRRMHhT Z1pFcHk1WGhvVDdNTDgxZTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMOXTISfnNu1HaPqmpN4PkTZbpOvU9QK6phcIKjYJMcUKPtXSJ1Dpi zHoH1nVGyqW7BemQnzw46LgzejXj1PrRu2MqK1xrPDdL9bDfRV+r9js0wXYKHB3E qbP39f/ZU2kw12KchZiAxee2bsWenNFRgPbAMjuCF2h7B8wVXkfjxMu3bgksThdz AS8yACxI0LBznVoOyt887cpMXMmGdAked6Ax9q8N3LtmGELlx2tp9tJPOh0ZW59p UZuR1vB+dwr4SdJbCQ2v7dz3HHEhbvrlTtrjxIP1t9LL3eVHQ38QDFHwI+Kb50RG K/0r3Xqh0eatwotLQC4gwzl76HZsYDMh -----END CERTIFICATE-----Generated at Mon Jun 16 22:03:43 2025 by rpki-client