$ rpki-client -vvf rpki.apnic.net/member_repository/A916F338/D21117DC043F11ED939AE062C4F9AE02/cM1M0T4uN35eXDervHl-7ea2Yhs.mft File: cM1M0T4uN35eXDervHl-7ea2Yhs.mft (raw, json) Hash identifier: OuNYSvmSD5pQia1tReTXHujVTozEp3edyi0xjvTdawc= Subject key identifier: 94:0A:33:9B:B4:5B:AD:9D:37:D5:24:42:97:E5:57:1E:DA:8C:D3:47 Authority key identifier: 70:CD:4C:D1:3E:2E:37:7E:5E:5C:37:AB:BC:79:7E:ED:E6:B6:62:1B Certificate issuer: /CN=A916F338/serialNumber=70CD4CD13E2E377E5E5C37ABBC797EEDE6B6621B Certificate serial: 029E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM1M0T4uN35eXDervHl-7ea2Yhs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916F338/D21117DC043F11ED939AE062C4F9AE02/cM1M0T4uN35eXDervHl-7ea2Yhs.mft Manifest number: 0299 Signing time: Fri 13 Jun 2025 01:04:41 +0000 Manifest this update: Fri 13 Jun 2025 01:04:40 +0000 Manifest next update: Fri 20 Jun 2025 01:04:40 +0000 Files and hashes: 1: cM1M0T4uN35eXDervHl-7ea2Yhs.crl (hash: 2OvnmAKqoX0AxMwYcMG7g3NOpUenjLgkvJtS3BzO6As=) 2: BA5354A4044211EDBB686665C4F9AE02.roa (hash: 5D+EMadPUYOYtPY3WxKsOuXfJZW+RJaKdKnGQtm9R6c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916F338/D21117DC043F11ED939AE062C4F9AE02/cM1M0T4uN35eXDervHl-7ea2Yhs.crl rsync://rpki.apnic.net/member_repository/A916F338/D21117DC043F11ED939AE062C4F9AE02/cM1M0T4uN35eXDervHl-7ea2Yhs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM1M0T4uN35eXDervHl-7ea2Yhs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 01:04:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 670 (0x29e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916F338, serialNumber=70CD4CD13E2E377E5E5C37ABBC797EEDE6B6621B Validity Not Before: Jun 13 01:04:40 2025 GMT Not After : Jun 20 01:04:40 2025 GMT Subject: CN=684b7929-abb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:4d:e1:97:92:5a:41:cb:2a:54:af:8d:38:ec: de:4d:bc:96:0f:a7:a7:44:5b:1e:ae:6a:9f:15:56: a2:aa:c4:e3:0d:ab:4b:54:36:20:3e:9d:fc:d4:d3: d2:e0:cf:37:3d:a8:6b:cb:69:7f:4b:98:ed:25:02: ad:93:12:ca:3b:23:23:2c:53:05:c8:e1:c5:0a:dc: 49:9f:ff:73:d8:03:fb:ae:49:b2:4a:47:37:2f:31: 02:a1:d2:63:e8:8c:b5:87:22:75:f9:99:31:74:5f: 01:41:7e:8c:eb:c7:29:d2:1f:10:bc:99:00:14:c0: d6:c2:09:60:1d:06:4c:0d:28:dc:5d:53:f7:e9:21: 0a:95:f4:b4:9f:22:5c:33:6e:50:a2:6e:3a:95:24: 76:e3:4a:dc:93:2e:25:5d:fb:ae:a9:33:8c:b8:88: da:43:00:a9:45:18:29:35:0b:03:a3:55:92:90:9b: 32:97:23:b7:cc:4f:d5:2c:04:73:f7:65:f9:36:61: 39:7e:5c:04:ff:36:88:02:2e:5b:f6:ce:ee:b8:f2: 3c:a4:be:d6:a5:1d:74:c6:8f:8c:83:b6:3e:6e:c5: 46:03:e2:d2:f8:1e:fa:f0:ab:4a:7c:fe:14:d0:0f: 4f:ac:27:ed:08:00:96:f1:80:24:7d:fb:5d:49:48: fb:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:0A:33:9B:B4:5B:AD:9D:37:D5:24:42:97:E5:57:1E:DA:8C:D3:47 X509v3 Authority Key Identifier: keyid:70:CD:4C:D1:3E:2E:37:7E:5E:5C:37:AB:BC:79:7E:ED:E6:B6:62:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916F338/D21117DC043F11ED939AE062C4F9AE02/cM1M0T4uN35eXDervHl-7ea2Yhs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM1M0T4uN35eXDervHl-7ea2Yhs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F338/D21117DC043F11ED939AE062C4F9AE02/cM1M0T4uN35eXDervHl-7ea2Yhs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:c4:63:ad:61:04:9c:f3:97:24:68:c8:44:34:eb:2e:1e:87: 33:fe:0f:ce:d5:03:63:4a:a8:b2:dc:fe:62:ed:40:3e:41:d4: 52:6e:3d:4f:6b:9e:8e:48:05:47:a6:a6:7d:b1:fe:ec:92:c8: e5:43:af:6f:5b:63:31:a5:61:56:af:64:4c:a4:ad:db:b0:68: 79:0e:5e:41:80:27:a2:81:e0:20:02:2f:3c:eb:cb:76:48:72: 96:18:a1:e9:2a:65:51:31:ac:4c:a5:5e:b3:d6:43:d1:0e:14: b9:1c:ee:6b:90:7a:c1:3d:d3:fa:03:7b:70:bf:0b:ee:c5:e0: 1e:94:f8:00:f3:87:bc:07:8c:cf:72:19:57:1b:d1:3e:eb:0d: 8e:22:ce:5c:99:85:e5:05:56:a4:9d:a3:98:da:e8:2e:ea:fc: bb:cd:9b:4b:c3:ff:10:72:23:90:04:53:ec:ea:e7:85:67:82: ae:1f:c3:23:73:d6:e1:f5:72:de:ae:59:60:d7:ea:20:6b:bb: 8f:4c:ab:ba:a9:fd:36:98:7d:66:59:8b:22:d8:72:80:42:bf: 51:8c:d9:77:7e:60:83:29:4e:c7:d4:ab:9c:b4:4c:79:4c:6b: ef:f7:d7:35:a4:97:43:5a:f5:31:22:bf:38:c3:f5:cd:0c:c6: b6:45:a4:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAp4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkYzMzgxMTAvBgNVBAUTKDcwQ0Q0Q0QxM0UyRTM3N0U1RTVDMzdBQkJDNzk3RUVE RTZCNjYyMUIwHhcNMjUwNjEzMDEwNDQwWhcNMjUwNjIwMDEwNDQwWjAYMRYwFAYD VQQDEw02ODRiNzkyOS1hYmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxU3hl5JaQcsqVK+NOOzeTbyWD6enRFsermqfFVaiqsTjDatLVDYgPp381NPS 4M83Pahry2l/S5jtJQKtkxLKOyMjLFMFyOHFCtxJn/9z2AP7rkmySkc3LzECodJj 6Iy1hyJ1+ZkxdF8BQX6M68cp0h8QvJkAFMDWwglgHQZMDSjcXVP36SEKlfS0nyJc M25Qom46lSR240rcky4lXfuuqTOMuIjaQwCpRRgpNQsDo1WSkJsylyO3zE/VLARz 92X5NmE5flwE/zaIAi5b9s7uuPI8pL7WpR10xo+Mg7Y+bsVGA+LS+B768KtKfP4U 0A9PrCftCACW8YAkfftdSUj7XwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJQKM5u0 W62dN9UkQpflVx7ajNNHMB8GA1UdIwQYMBaAFHDNTNE+Ljd+Xlw3q7x5fu3mtmIb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RjMzOC9EMjExMTdEQzA0 M0YxMUVEOTM5QUUwNjJDNEY5QUUwMi9jTTFNMFQ0dU4zNWVYRGVydkhsLTdlYTJZ aHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NNMU0wVDR1TjM1ZVhEZXJ2SGwtN2VhMllocy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RjMzOC9EMjExMTdEQzA0M0YxMUVEOTM5QUUwNjJDNEY5QUUwMi9jTTFNMFQ0dU4z NWVYRGVydkhsLTdlYTJZaHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUxGOtYQSc85ckaMhENOsuHocz/g/O1QNjSqiy3P5i7UA+QdRSbj1P a56OSAVHpqZ9sf7sksjlQ69vW2MxpWFWr2RMpK3bsGh5Dl5BgCeigeAgAi8868t2 SHKWGKHpKmVRMaxMpV6z1kPRDhS5HO5rkHrBPdP6A3twvwvuxeAelPgA84e8B4zP chlXG9E+6w2OIs5cmYXlBVaknaOY2ugu6vy7zZtLw/8QciOQBFPs6ueFZ4KuH8Mj c9bh9XLerllg1+oga7uPTKu6qf02mH1mWYsi2HKAQr9RjNl3fmCDKU7H1KuctEx5 TGvv99c1pJdDWvUxIr84w/XNDMa2RaQI -----END CERTIFICATE-----Generated at Sat Jun 14 19:08:43 2025 by rpki-client