$ rpki-client -vvf rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/cM0ClgpxFOH9f9syrJqj6NKuv0E.mft File: cM0ClgpxFOH9f9syrJqj6NKuv0E.mft (raw, json) Hash identifier: XBQ2VqyzNNz6RQWPbOXwpTkgAy7B5HUXvzyi7QmKxOY= Subject key identifier: 8F:20:32:71:16:71:7A:96:5F:7D:AE:6B:53:E1:EC:37:9A:27:35:8D Authority key identifier: 70:CD:02:96:0A:71:14:E1:FD:7F:DB:32:AC:9A:A3:E8:D2:AE:BF:41 Certificate issuer: /CN=A916EF5E/serialNumber=70CD02960A7114E1FD7FDB32AC9AA3E8D2AEBF41 Certificate serial: 1639 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM0ClgpxFOH9f9syrJqj6NKuv0E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/cM0ClgpxFOH9f9syrJqj6NKuv0E.mft Manifest number: 25F6 Signing time: Sat 14 Jun 2025 16:40:03 +0000 Manifest this update: Sat 14 Jun 2025 16:40:03 +0000 Manifest next update: Sat 21 Jun 2025 16:40:03 +0000 Files and hashes: 1: cM0ClgpxFOH9f9syrJqj6NKuv0E.crl (hash: 8ZGP2VV8GYa7tfsFFjdk7cessqAYyPVLHiD5bMp9Gdw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/cM0ClgpxFOH9f9syrJqj6NKuv0E.crl rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/cM0ClgpxFOH9f9syrJqj6NKuv0E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM0ClgpxFOH9f9syrJqj6NKuv0E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 16:40:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5689 (0x1639) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916EF5E, serialNumber=70CD02960A7114E1FD7FDB32AC9AA3E8D2AEBF41 Validity Not Before: Jun 14 16:40:03 2025 GMT Not After : Jun 21 16:40:03 2025 GMT Subject: CN=684da5e3-e29a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:8a:49:bc:c2:bc:13:44:92:94:ec:15:57:a5: 64:78:d0:f8:12:f0:b4:84:1d:54:27:44:8b:d4:2a: e3:fd:c1:9e:b5:26:92:c4:40:0d:99:c0:eb:b6:7d: 08:56:2e:f0:63:86:38:f0:25:80:28:9a:c8:ec:e6: 7d:5c:1b:a3:9f:08:22:a5:93:83:4d:0e:2c:92:98: 84:4d:1c:1e:cb:82:34:f0:5c:65:18:c1:79:ad:9b: bb:cf:c4:ad:76:76:9e:9a:5d:1b:2d:dc:09:cb:2a: 32:c8:38:b5:8c:2d:12:e9:82:d7:b4:0b:66:9a:6d: ba:a6:ff:10:6b:de:54:08:56:32:08:58:b9:ba:2a: 9d:69:83:16:2c:70:6b:48:17:12:c0:68:e4:4a:8c: 50:9e:86:e7:52:a5:33:a0:8c:d6:84:d5:ce:5c:fd: 5d:a8:38:66:f0:f7:dd:1b:34:9d:c5:56:63:03:6a: b7:2b:b7:f3:bb:6b:01:ab:a8:41:5d:36:4a:5d:39: 4b:50:20:ec:ed:39:1d:ff:37:6b:2e:49:d6:65:70: f2:50:02:12:25:a9:25:14:91:48:a5:0c:02:29:48: 7a:26:37:49:76:89:78:9e:0c:a4:ca:e5:b7:39:63: 92:ad:04:11:ef:26:b0:29:8d:09:78:27:43:ca:ba: d1:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:20:32:71:16:71:7A:96:5F:7D:AE:6B:53:E1:EC:37:9A:27:35:8D X509v3 Authority Key Identifier: keyid:70:CD:02:96:0A:71:14:E1:FD:7F:DB:32:AC:9A:A3:E8:D2:AE:BF:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/cM0ClgpxFOH9f9syrJqj6NKuv0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM0ClgpxFOH9f9syrJqj6NKuv0E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/cM0ClgpxFOH9f9syrJqj6NKuv0E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:5a:39:c4:ff:0b:a0:d1:31:96:72:8d:b9:02:9d:86:2f:58: 40:a9:61:d8:15:4f:f5:78:1e:ae:12:3b:2b:9c:ca:0c:f3:0e: a0:dc:ad:a2:cf:48:89:2f:e7:33:3d:1e:1b:6e:2c:bd:e1:d0: 9a:50:d5:d2:d6:12:81:21:3a:41:d0:df:b6:e7:54:c0:76:b7: 39:ec:41:cd:fa:34:3a:bf:dc:cc:61:64:e7:69:25:18:cd:d8: 9a:a0:fe:f1:9a:c7:e5:aa:a1:d3:2d:60:9c:24:ec:d8:23:2b: 83:54:d8:94:72:41:ae:04:66:0d:7b:55:7e:ec:1c:74:9c:4f: 96:f4:50:4d:ac:ae:47:f5:d8:e5:2b:f8:57:f2:82:04:f9:39: dd:5d:26:b1:d0:f1:b5:4b:12:61:be:13:ee:b4:32:24:5d:aa: 16:cc:65:80:a4:94:b6:95:ab:77:31:22:b1:56:d9:b2:2e:98: f4:96:e3:ec:73:28:19:26:ff:5b:f7:1d:58:41:1d:58:73:3c: 0a:55:b7:46:42:fa:99:b6:1f:c1:2b:0f:e6:9f:92:9c:bd:bb: 15:77:ac:ae:c1:ab:35:ea:e6:eb:d2:06:23:7a:00:f5:19:37: db:24:33:ab:6b:6c:15:62:f2:dd:de:67:8b:5c:b9:94:b2:aa: 2d:6f:4a:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFjkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVGNUUxMTAvBgNVBAUTKDcwQ0QwMjk2MEE3MTE0RTFGRDdGREIzMkFDOUFBM0U4 RDJBRUJGNDEwHhcNMjUwNjE0MTY0MDAzWhcNMjUwNjIxMTY0MDAzWjAYMRYwFAYD VQQDEw02ODRkYTVlMy1lMjlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnIpJvMK8E0SSlOwVV6VkeND4EvC0hB1UJ0SL1Crj/cGetSaSxEANmcDrtn0I Vi7wY4Y48CWAKJrI7OZ9XBujnwgipZODTQ4skpiETRwey4I08FxlGMF5rZu7z8St dnaeml0bLdwJyyoyyDi1jC0S6YLXtAtmmm26pv8Qa95UCFYyCFi5uiqdaYMWLHBr SBcSwGjkSoxQnobnUqUzoIzWhNXOXP1dqDhm8PfdGzSdxVZjA2q3K7fzu2sBq6hB XTZKXTlLUCDs7Tkd/zdrLknWZXDyUAISJaklFJFIpQwCKUh6JjdJdol4ngykyuW3 OWOSrQQR7yawKY0JeCdDyrrRUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI8gMnEW cXqWX32ua1Ph7DeaJzWNMB8GA1UdIwQYMBaAFHDNApYKcRTh/X/bMqyao+jSrr9B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUY1RS9GMzhEQ0Y4QTEw NkIxMUU4QjhDQTAyMEJDNEY5QUUwMi9jTTBDbGdweEZPSDlmOXN5ckpxajZOS3V2 MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NNMENsZ3B4Rk9IOWY5c3lySnFqNk5LdXYwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUY1RS9GMzhEQ0Y4QTEwNkIxMUU4QjhDQTAyMEJDNEY5QUUwMi9jTTBDbGdweEZP SDlmOXN5ckpxajZOS3V2MEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6WjnE/wug0TGWco25Ap2GL1hAqWHYFU/1eB6uEjsrnMoM8w6g3K2i z0iJL+czPR4bbiy94dCaUNXS1hKBITpB0N+251TAdrc57EHN+jQ6v9zMYWTnaSUY zdiaoP7xmsflqqHTLWCcJOzYIyuDVNiUckGuBGYNe1V+7Bx0nE+W9FBNrK5H9djl K/hX8oIE+TndXSax0PG1SxJhvhPutDIkXaoWzGWApJS2lat3MSKxVtmyLpj0luPs cygZJv9b9x1YQR1YczwKVbdGQvqZth/BKw/mn5KcvbsVd6yuwas16ubr0gYjegD1 GTfbJDOra2wVYvLd3meLXLmUsqotb0rw -----END CERTIFICATE-----Generated at Sat Jun 14 19:28:56 2025 by rpki-client