$ rpki-client -vvf rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.mft File: 4Kttl3Jl2w1cWNQzoos8wgUaDCk.mft (raw, json) Hash identifier: vI+CT7reyIzfxhtO4Hly5h4T0c4ex+adTdKtUEG1ADE= Subject key identifier: 2D:70:02:AC:9A:9E:44:84:BD:EE:F4:82:BF:14:9B:44:AA:E7:CC:0B Authority key identifier: E0:AB:6D:97:72:65:DB:0D:5C:58:D4:33:A2:8B:3C:C2:05:1A:0C:29 Certificate issuer: /CN=A917A93E/serialNumber=E0AB6D977265DB0D5C58D433A28B3CC2051A0C29 Certificate serial: 6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Kttl3Jl2w1cWNQzoos8wgUaDCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.mft Manifest number: 66 Signing time: Fri 13 Jun 2025 06:01:08 +0000 Manifest this update: Fri 13 Jun 2025 06:01:08 +0000 Manifest next update: Fri 20 Jun 2025 06:01:08 +0000 Files and hashes: 1: 4Kttl3Jl2w1cWNQzoos8wgUaDCk.crl (hash: gB2j5keepEBrjUy7ZsC4QlLbL/RsD2iNC/MmF35VHU8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.crl rsync://rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Kttl3Jl2w1cWNQzoos8wgUaDCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 06:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 106 (0x6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A93E, serialNumber=E0AB6D977265DB0D5C58D433A28B3CC2051A0C29 Validity Not Before: Jun 13 06:01:08 2025 GMT Not After : Jun 20 06:01:08 2025 GMT Subject: CN=684bbea4-e8ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:00:52:9a:b2:e1:f1:fe:1f:58:db:bf:7d:33: 79:68:68:be:9f:85:79:42:6e:ba:55:bd:8a:c2:72: 5a:e9:f1:00:6f:e1:a7:97:ed:7c:c9:35:bb:ac:11: df:9e:7f:88:b0:24:1a:df:b7:f2:45:b8:91:e2:8d: 46:2f:c2:d3:2a:08:fc:8e:cc:62:d9:df:58:6e:6d: 97:a6:c3:68:33:34:fa:dc:e5:da:e8:61:e6:28:22: ac:76:78:36:c2:5d:88:63:34:85:7b:6e:26:a2:52: bf:2d:01:73:ea:90:f8:6c:de:bd:2d:1f:98:db:fc: be:bf:d8:b7:02:c7:ae:ea:a5:93:66:8c:54:58:72: 97:07:19:2f:bd:cd:fc:ac:28:f2:62:4f:87:ca:64: 05:5c:fd:31:bc:f9:b6:c6:78:aa:c6:73:1e:af:3e: 62:88:1c:be:a0:d4:2c:47:d4:a0:ef:69:bd:fb:a0: 6d:13:db:17:6c:0b:17:15:c7:7e:98:e8:b3:d1:02: be:7b:5c:59:de:89:5d:97:08:05:3f:ad:00:58:73: b2:53:e3:26:0f:16:74:dc:82:b4:7d:eb:50:3b:28: 80:ee:7c:d6:06:32:79:5d:87:77:f7:4d:bc:ff:0a: ad:bd:eb:7a:fa:c4:91:ed:26:db:89:71:c1:9d:84: 2c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:70:02:AC:9A:9E:44:84:BD:EE:F4:82:BF:14:9B:44:AA:E7:CC:0B X509v3 Authority Key Identifier: keyid:E0:AB:6D:97:72:65:DB:0D:5C:58:D4:33:A2:8B:3C:C2:05:1A:0C:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Kttl3Jl2w1cWNQzoos8wgUaDCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:a1:80:10:f1:fc:80:32:e1:51:11:d6:93:6c:27:c3:37:8d: ad:9c:62:4b:11:e7:63:6e:f7:87:bd:16:ef:b4:35:37:ff:6f: 46:f0:7d:ba:88:f6:d0:89:df:c7:cb:05:77:df:a9:43:67:dd: 17:43:97:bc:9d:fe:08:d2:8e:a0:96:05:58:ea:1a:b1:d4:3e: aa:cd:21:b9:32:8a:4a:20:9a:93:63:13:b4:d4:7b:2e:1f:62: a3:99:58:ca:c5:b4:42:95:3a:53:bc:7d:b8:25:b0:2a:d9:90: 2b:f2:33:42:64:96:cd:14:10:57:ed:47:5d:25:9e:20:76:83: c4:07:87:23:f3:36:41:ea:7c:bc:c2:ed:4a:b0:15:c0:29:0d: 1c:d3:07:26:80:5f:37:a6:52:5e:00:aa:f8:28:a0:30:59:29: b1:d8:b7:50:62:d9:5a:5d:1d:e7:a2:87:45:60:87:c3:d3:45: 43:ca:0b:ee:e3:b7:05:3d:2a:c8:fe:dd:4e:ab:e6:30:b1:99: e2:88:0e:f1:ee:c1:c6:be:02:38:d3:f4:d5:f8:74:73:b5:f1: 98:cc:50:bc:61:3b:d3:cc:6c:53:ea:a8:f2:92:3c:0f:c8:27: e3:89:33:cd:f7:89:e3:73:fd:eb:75:20:eb:b6:11:06:28:21: 8d:aa:a2:2c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBajANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QTkzRTExMC8GA1UEBRMoRTBBQjZEOTc3MjY1REIwRDVDNThENDMzQTI4QjNDQzIw NTFBMEMyOTAeFw0yNTA2MTMwNjAxMDhaFw0yNTA2MjAwNjAxMDhaMBgxFjAUBgNV BAMTDTY4NGJiZWE0LWU4ZWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2AFKasuHx/h9Y2799M3loaL6fhXlCbrpVvYrCclrp8QBv4aeX7XzJNbusEd+e f4iwJBrft/JFuJHijUYvwtMqCPyOzGLZ31hubZemw2gzNPrc5droYeYoIqx2eDbC XYhjNIV7biaiUr8tAXPqkPhs3r0tH5jb/L6/2LcCx67qpZNmjFRYcpcHGS+9zfys KPJiT4fKZAVc/TG8+bbGeKrGcx6vPmKIHL6g1CxH1KDvab37oG0T2xdsCxcVx36Y 6LPRAr57XFneiV2XCAU/rQBYc7JT4yYPFnTcgrR961A7KIDufNYGMnldh3f3Tbz/ Cq2963r6xJHtJtuJccGdhCz1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULXACrJqe RIS97vSCvxSbRKrnzAswHwYDVR0jBBgwFoAU4Kttl3Jl2w1cWNQzoos8wgUaDCkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdBOTNFLzQ3MUIzNzI4Qjc5 QTExRUY4RUM0OTk1MUM0RjlBRTAyLzRLdHRsM0psMncxY1dOUXpvb3M4d2dVYURD ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNEt0dGwzSmwydzFjV05Rem9vczh3Z1VhRENrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdB OTNFLzQ3MUIzNzI4Qjc5QTExRUY4RUM0OTk1MUM0RjlBRTAyLzRLdHRsM0psMncx Y1dOUXpvb3M4d2dVYURDay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB2hgBDx/IAy4VER1pNsJ8M3ja2cYksR52Nu94e9Fu+0NTf/b0bwfbqI 9tCJ38fLBXffqUNn3RdDl7yd/gjSjqCWBVjqGrHUPqrNIbkyikogmpNjE7TUey4f YqOZWMrFtEKVOlO8fbglsCrZkCvyM0Jkls0UEFftR10lniB2g8QHhyPzNkHqfLzC 7UqwFcApDRzTByaAXzemUl4AqvgooDBZKbHYt1Bi2VpdHeeih0Vgh8PTRUPKC+7j twU9Ksj+3U6r5jCxmeKIDvHuwca+AjjT9NX4dHO18ZjMULxhO9PMbFPqqPKSPA/I J+OJM833ieNz/et1IOu2EQYoIY2qoiw= -----END CERTIFICATE-----Generated at Sun Jun 15 08:46:04 2025 by rpki-client