$ rpki-client -vvf rpki.apnic.net/member_repository/A917336A/8F5A93565AEA11EF94E93D6EC4F9AE02/IdPtIffN68fQDxu3oJURuVze_iM.mft File: IdPtIffN68fQDxu3oJURuVze_iM.mft (raw, json) Hash identifier: 7LMIxsgmdbrI1El+Vk91a34qwv3BN59pfechIm/nCW8= Subject key identifier: 91:55:01:F5:88:51:1C:1B:3B:68:7D:27:C7:9A:DF:88:63:AF:77:AE Authority key identifier: 21:D3:ED:21:F7:CD:EB:C7:D0:0F:1B:B7:A0:95:11:B9:5C:DE:FE:23 Certificate issuer: /CN=A917336A/serialNumber=21D3ED21F7CDEBC7D00F1BB7A09511B95CDEFE23 Certificate serial: A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IdPtIffN68fQDxu3oJURuVze_iM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917336A/8F5A93565AEA11EF94E93D6EC4F9AE02/IdPtIffN68fQDxu3oJURuVze_iM.mft Manifest number: 9F Signing time: Sun 15 Jun 2025 05:22:13 +0000 Manifest this update: Sun 15 Jun 2025 05:22:12 +0000 Manifest next update: Sun 22 Jun 2025 05:22:12 +0000 Files and hashes: 1: IdPtIffN68fQDxu3oJURuVze_iM.crl (hash: 90c37gU1UufZJoJYT3bO/SM50ATny8nS7gPbnIlZNAE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917336A/8F5A93565AEA11EF94E93D6EC4F9AE02/IdPtIffN68fQDxu3oJURuVze_iM.crl rsync://rpki.apnic.net/member_repository/A917336A/8F5A93565AEA11EF94E93D6EC4F9AE02/IdPtIffN68fQDxu3oJURuVze_iM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IdPtIffN68fQDxu3oJURuVze_iM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 05:22:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 167 (0xa7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917336A, serialNumber=21D3ED21F7CDEBC7D00F1BB7A09511B95CDEFE23 Validity Not Before: Jun 15 05:22:12 2025 GMT Not After : Jun 22 05:22:12 2025 GMT Subject: CN=684e5884-6b20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:30:f0:54:d1:a1:82:4f:11:9f:73:34:b2:a0: d2:10:57:d8:8e:c9:57:d2:20:af:80:af:e5:47:d6: 0d:ec:06:e6:aa:64:9d:ae:3f:20:e9:57:62:e6:78: 45:8f:73:87:4d:ae:30:6a:1e:14:dd:3d:31:50:56: 14:11:80:9c:85:0c:be:a1:66:8b:45:58:0e:18:8a: 3f:09:66:78:46:9d:4a:e8:c2:f3:46:81:c6:61:22: 5d:5c:a4:f1:f3:04:15:2c:ae:19:0a:79:cc:4f:f9: e4:d0:13:ff:c8:41:61:aa:91:7d:8b:d0:0e:14:c3: c2:f0:be:2c:4a:73:df:06:52:b3:a1:2e:5c:96:0a: 0d:a0:49:25:9f:98:b0:04:23:07:fd:3f:45:1b:9c: 50:9d:0f:b5:f1:5e:f7:e0:b8:e6:86:48:02:79:c8: 3e:c7:b9:90:9c:22:8a:ca:08:05:dc:5c:40:66:2b: 5e:49:53:01:55:f5:4f:b1:e5:66:bb:90:90:9a:37: f9:34:ef:55:ca:bc:39:52:c9:4e:ae:f7:fc:f4:3d: e1:ac:b4:d6:4e:d6:42:a9:1c:42:84:13:e3:c5:c3: e7:65:f5:c5:db:0c:8e:21:12:15:42:04:61:c3:1f: 50:8d:0c:e2:02:4b:b6:7d:c5:a2:b3:30:d3:3c:93: ba:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:55:01:F5:88:51:1C:1B:3B:68:7D:27:C7:9A:DF:88:63:AF:77:AE X509v3 Authority Key Identifier: keyid:21:D3:ED:21:F7:CD:EB:C7:D0:0F:1B:B7:A0:95:11:B9:5C:DE:FE:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917336A/8F5A93565AEA11EF94E93D6EC4F9AE02/IdPtIffN68fQDxu3oJURuVze_iM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IdPtIffN68fQDxu3oJURuVze_iM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917336A/8F5A93565AEA11EF94E93D6EC4F9AE02/IdPtIffN68fQDxu3oJURuVze_iM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:9d:36:c8:27:c6:11:ee:67:3c:cb:fd:ac:64:03:ab:f1:4f: 0e:07:1b:f9:4a:e5:5b:2f:f0:a8:a0:1d:6e:f6:60:f7:1a:75: 79:6b:46:f3:8b:95:7d:75:da:60:1d:6e:f1:79:93:bd:b1:98: a3:38:06:18:8c:d4:25:33:6e:7b:f7:a7:f5:46:8d:19:af:06: 41:0c:c2:7f:7a:7f:d4:a5:a2:10:ba:57:3e:33:c9:46:06:7a: 6b:6c:16:b2:f9:fc:0e:94:8d:75:3c:6d:14:8f:6a:07:c7:67: df:b8:bc:e1:f3:64:a2:8c:a5:5e:e9:87:21:d5:a1:4b:f6:bb: 69:5a:6a:b5:d0:ad:16:24:bd:bd:3e:2b:3c:4f:81:72:47:a0: bd:aa:d0:d4:be:c8:52:a5:97:9c:9b:e6:31:1b:ee:cf:e5:53: d5:cd:c1:21:be:ff:92:8c:f6:1d:f8:70:06:bf:2d:2f:68:1d: 6e:4a:06:67:77:b6:7a:d5:a3:2e:7b:9a:09:87:fc:70:48:a4: 7e:84:6f:e8:7c:de:7d:c5:93:45:4e:3c:10:e8:47:43:52:94: 8b:00:e9:82:be:30:0c:a2:76:30:a3:4d:83:78:e7:77:27:88: 72:5f:6b:74:73:b3:5d:62:79:be:e2:a1:1b:30:17:03:c0:61: 78:09:ef:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzMzNkExMTAvBgNVBAUTKDIxRDNFRDIxRjdDREVCQzdEMDBGMUJCN0EwOTUxMUI5 NUNERUZFMjMwHhcNMjUwNjE1MDUyMjEyWhcNMjUwNjIyMDUyMjEyWjAYMRYwFAYD VQQDEw02ODRlNTg4NC02YjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1DDwVNGhgk8Rn3M0sqDSEFfYjslX0iCvgK/lR9YN7AbmqmSdrj8g6Vdi5nhF j3OHTa4wah4U3T0xUFYUEYCchQy+oWaLRVgOGIo/CWZ4Rp1K6MLzRoHGYSJdXKTx 8wQVLK4ZCnnMT/nk0BP/yEFhqpF9i9AOFMPC8L4sSnPfBlKzoS5clgoNoEkln5iw BCMH/T9FG5xQnQ+18V734LjmhkgCecg+x7mQnCKKyggF3FxAZiteSVMBVfVPseVm u5CQmjf5NO9Vyrw5UslOrvf89D3hrLTWTtZCqRxChBPjxcPnZfXF2wyOIRIVQgRh wx9QjQziAku2fcWiszDTPJO6PQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJFVAfWI URwbO2h9J8ea34hjr3euMB8GA1UdIwQYMBaAFCHT7SH3zevH0A8bt6CVEblc3v4j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzM2QS84RjVBOTM1NjVB RUExMUVGOTRFOTNENkVDNEY5QUUwMi9JZFB0SWZmTjY4ZlFEeHUzb0pVUnVWemVf aU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lkUHRJZmZONjhmUUR4dTNvSlVSdVZ6ZV9pTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzM2QS84RjVBOTM1NjVBRUExMUVGOTRFOTNENkVDNEY5QUUwMi9JZFB0SWZmTjY4 ZlFEeHUzb0pVUnVWemVfaU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCinTbIJ8YR7mc8y/2sZAOr8U8OBxv5SuVbL/CooB1u9mD3GnV5a0bz i5V9ddpgHW7xeZO9sZijOAYYjNQlM25796f1Ro0ZrwZBDMJ/en/UpaIQulc+M8lG BnprbBay+fwOlI11PG0Uj2oHx2ffuLzh82SijKVe6Ych1aFL9rtpWmq10K0WJL29 Pis8T4FyR6C9qtDUvshSpZecm+YxG+7P5VPVzcEhvv+SjPYd+HAGvy0vaB1uSgZn d7Z61aMue5oJh/xwSKR+hG/ofN59xZNFTjwQ6EdDUpSLAOmCvjAMonYwo02DeOd3 J4hyX2t0c7NdYnm+4qEbMBcDwGF4Ce9x -----END CERTIFICATE-----Generated at Mon Jun 16 10:36:58 2025 by rpki-client