$ rpki-client -vvf rpki.apnic.net/member_repository/A917408F/16CD9858B76E11EFACF0F865C4F9AE02/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.mft File: kQ8vQUCOE9rtfCHcRy3FxYxFiDY.mft (raw, json) Hash identifier: CCYX+hUthPR8Eq6oXlevI1xy4iIgmBmw8I93QIGGnUM= Subject key identifier: 5C:15:FE:83:09:FB:93:78:46:EA:C1:02:60:DD:97:45:F5:A2:39:44 Authority key identifier: 91:0F:2F:41:40:8E:13:DA:ED:7C:21:DC:47:2D:C5:C5:8C:45:88:36 Certificate issuer: /CN=A917408F/serialNumber=910F2F41408E13DAED7C21DC472DC5C58C458836 Certificate serial: 63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917408F/16CD9858B76E11EFACF0F865C4F9AE02/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.mft Manifest number: 61 Signing time: Fri 13 Jun 2025 06:00:59 +0000 Manifest this update: Fri 13 Jun 2025 06:00:58 +0000 Manifest next update: Fri 20 Jun 2025 06:00:58 +0000 Files and hashes: 1: kQ8vQUCOE9rtfCHcRy3FxYxFiDY.crl (hash: bh1hlhOUUZk4KoklQrh7CepwrgeAGPgADXP3EYZT/18=) 2: 9CEF2622B76E11EF8FCC9767C4F9AE02.roa (hash: 2R62YAvpAuupePKvyUwfJfetCOhCrZjNgarawDnuvxY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917408F/16CD9858B76E11EFACF0F865C4F9AE02/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.crl rsync://rpki.apnic.net/member_repository/A917408F/16CD9858B76E11EFACF0F865C4F9AE02/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 99 (0x63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917408F, serialNumber=910F2F41408E13DAED7C21DC472DC5C58C458836 Validity Not Before: Jun 13 06:00:58 2025 GMT Not After : Jun 20 06:00:58 2025 GMT Subject: CN=684bbe9b-7784 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:33:82:bc:e6:98:fe:96:0f:6e:95:f0:00:7d: d1:e7:51:fc:f6:21:8b:a2:69:ef:ab:f1:b7:69:73: ad:2a:5e:d9:c8:5d:cf:70:a9:00:7c:1a:f7:a2:9c: 58:d6:a7:ef:29:0b:40:b8:e2:fd:44:ab:86:c6:5a: d1:0d:6e:5d:f4:42:96:f9:23:2e:7a:09:43:06:34: 16:29:94:39:d6:1f:98:8b:19:4f:d6:7f:d2:b2:45: 67:24:63:83:28:e2:25:a8:6f:ea:96:7e:b2:0d:99: c0:28:47:26:31:7b:f7:8b:d4:73:bb:0f:5e:ad:3b: 77:a5:0d:e2:05:96:e9:df:1c:3a:9e:96:71:03:33: 16:6c:f7:23:b4:63:14:05:ba:75:5e:d9:c2:22:55: 31:4c:d7:6c:91:ad:4e:67:f7:02:ff:d6:6d:38:3a: 15:fd:d0:fe:f8:de:35:d1:cd:da:7d:62:5b:b6:4c: a7:83:c4:f2:3d:a4:7d:81:dd:d1:0b:de:c5:fe:dc: f9:46:61:30:0c:f5:12:db:23:c2:14:71:4d:56:7b: 35:35:fe:33:2b:07:9a:2c:55:f6:06:a3:a4:a8:81: f5:b2:cf:90:12:37:bc:d1:4d:3b:19:1a:29:de:77: 17:4d:88:39:4d:0c:2f:d9:e5:87:d5:d7:e0:25:5b: 47:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:15:FE:83:09:FB:93:78:46:EA:C1:02:60:DD:97:45:F5:A2:39:44 X509v3 Authority Key Identifier: keyid:91:0F:2F:41:40:8E:13:DA:ED:7C:21:DC:47:2D:C5:C5:8C:45:88:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917408F/16CD9858B76E11EFACF0F865C4F9AE02/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917408F/16CD9858B76E11EFACF0F865C4F9AE02/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:f4:99:b6:03:02:16:51:f9:e0:0e:19:8a:98:03:e0:5b:6b: 8f:6b:88:23:30:0a:7c:40:33:2f:f3:d9:aa:9d:1d:dc:34:7c: 8c:e0:ce:9d:71:5b:1a:f1:c6:d9:39:f1:d3:99:70:32:60:fc: 85:6a:5d:e2:51:26:67:70:34:e7:01:5c:93:10:ed:5b:ed:3e: b6:96:a2:15:17:31:31:b9:3e:28:27:f5:9a:dc:08:a5:20:57: 2c:01:99:1b:5f:0a:67:7d:43:0d:db:31:65:e1:4c:44:c9:52: b8:16:ee:71:f8:f9:f4:3d:4a:b5:95:38:47:04:85:87:d3:8e: b7:f5:c1:82:6f:f2:6b:75:6d:c0:6c:62:7d:16:ac:d9:74:2c: 26:91:3d:be:8e:7d:fd:28:0d:18:84:09:96:c1:2a:58:08:bf: ba:e5:8b:1e:f6:a7:30:1f:6d:d2:91:99:0d:db:3a:00:c6:d0: 60:ce:f3:e6:10:91:39:ad:79:5d:9a:e5:09:b1:7c:3a:26:1d: 50:0f:1e:a0:7b:32:ea:42:9e:99:6c:2e:18:68:94:9e:07:98: 78:71:5b:81:1d:a2:87:ed:df:57:9d:00:e0:0c:bc:4a:53:e8: ec:d3:ac:c3:20:e8:f8:ab:6c:06:eb:25:dd:d7:af:dd:39:22: 82:4e:e6:84 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NDA4RjExMC8GA1UEBRMoOTEwRjJGNDE0MDhFMTNEQUVEN0MyMURDNDcyREM1QzU4 QzQ1ODgzNjAeFw0yNTA2MTMwNjAwNThaFw0yNTA2MjAwNjAwNThaMBgxFjAUBgNV BAMTDTY4NGJiZTliLTc3ODQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDuM4K85pj+lg9ulfAAfdHnUfz2IYuiae+r8bdpc60qXtnIXc9wqQB8GveinFjW p+8pC0C44v1Eq4bGWtENbl30Qpb5Iy56CUMGNBYplDnWH5iLGU/Wf9KyRWckY4Mo 4iWob+qWfrINmcAoRyYxe/eL1HO7D16tO3elDeIFlunfHDqelnEDMxZs9yO0YxQF unVe2cIiVTFM12yRrU5n9wL/1m04OhX90P743jXRzdp9Ylu2TKeDxPI9pH2B3dEL 3sX+3PlGYTAM9RLbI8IUcU1WezU1/jMrB5osVfYGo6SogfWyz5ASN7zRTTsZGine dxdNiDlNDC/Z5YfV1+AlW0eDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUXBX+gwn7 k3hG6sECYN2XRfWiOUQwHwYDVR0jBBgwFoAUkQ8vQUCOE9rtfCHcRy3FxYxFiDYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc0MDhGLzE2Q0Q5ODU4Qjc2 RTExRUZBQ0YwRjg2NUM0RjlBRTAyL2tROHZRVUNPRTlydGZDSGNSeTNGeFl4RmlE WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva1E4dlFVQ09FOXJ0ZkNIY1J5M0Z4WXhGaURZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc0 MDhGLzE2Q0Q5ODU4Qjc2RTExRUZBQ0YwRjg2NUM0RjlBRTAyL2tROHZRVUNPRTly dGZDSGNSeTNGeFl4RmlEWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALH0mbYDAhZR+eAOGYqYA+Bba49riCMwCnxAMy/z2aqdHdw0fIzgzp1x Wxrxxtk58dOZcDJg/IVqXeJRJmdwNOcBXJMQ7VvtPraWohUXMTG5Pign9ZrcCKUg VywBmRtfCmd9Qw3bMWXhTETJUrgW7nH4+fQ9SrWVOEcEhYfTjrf1wYJv8mt1bcBs Yn0WrNl0LCaRPb6Off0oDRiECZbBKlgIv7rlix72pzAfbdKRmQ3bOgDG0GDO8+YQ kTmteV2a5QmxfDomHVAPHqB7MupCnplsLhholJ4HmHhxW4Edooft31edAOAMvEpT 6OzTrMMg6PirbAbrJd3Xr905IoJO5oQ= -----END CERTIFICATE-----Generated at Sat Jun 14 19:30:59 2025 by rpki-client