$ rpki-client -vvf rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.mft File: DEft4wSONabm6MsM5E_IQ3Jx6z0.mft (raw, json) Hash identifier: BN0wl8yPoVv9EujIRN9u//ja0o8x0ZPMRtWzwi8ot0s= Subject key identifier: B1:3E:7B:50:0B:A0:3A:81:52:21:0B:49:83:9F:50:3C:C3:4E:D0:07 Authority key identifier: 0C:47:ED:E3:04:8E:35:A6:E6:E8:CB:0C:E4:4F:C8:43:72:71:EB:3D Certificate issuer: /CN=A917B51E/serialNumber=0C47EDE3048E35A6E6E8CB0CE44FC8437271EB3D Certificate serial: 079B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEft4wSONabm6MsM5E_IQ3Jx6z0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.mft Manifest number: 0792 Signing time: Sat 14 Jun 2025 21:09:34 +0000 Manifest this update: Sat 14 Jun 2025 21:09:34 +0000 Manifest next update: Sat 21 Jun 2025 21:09:34 +0000 Files and hashes: 1: DEft4wSONabm6MsM5E_IQ3Jx6z0.crl (hash: 7cYaTyP+u4bBrCXIDnimSZa4q1TNRvrKaR5pR/IVCJY=) 2: EFA17F260FEA11EB8FA8CB2AC4F9AE02.roa (hash: jLCgtQuVltt3/VZJ3eAvwdfbtQsE4HY8zDX+9B0R7hY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.crl rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEft4wSONabm6MsM5E_IQ3Jx6z0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 21:09:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1947 (0x79b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B51E, serialNumber=0C47EDE3048E35A6E6E8CB0CE44FC8437271EB3D Validity Not Before: Jun 14 21:09:34 2025 GMT Not After : Jun 21 21:09:34 2025 GMT Subject: CN=684de50e-7b50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:27:63:65:b8:5e:12:e3:77:fc:fe:37:12:fe: 68:14:94:f6:7f:09:10:21:b6:ec:ce:9d:c6:7c:ed: e2:b4:d6:01:10:5f:99:9f:c8:f8:00:dd:40:74:03: ea:09:6a:3e:71:15:8d:f3:7c:86:70:59:ad:ec:0c: 3d:1b:af:c5:fb:3c:9f:31:8e:96:93:e5:74:ee:16: 11:f6:95:d1:f9:39:64:cd:c3:6f:ba:65:69:6e:e5: 82:a9:d1:c3:30:a9:10:5c:de:66:63:ec:74:a1:d2: cf:c0:f7:db:9a:21:39:38:52:21:05:8b:99:bb:e5: a9:2d:d2:0e:fe:8a:aa:42:e5:24:04:82:66:11:2e: b7:1b:d1:a2:c0:7d:1b:ce:d5:88:d3:d0:ab:d6:4b: cf:52:6e:3d:52:ed:c2:89:6a:d1:13:a0:0d:78:12: 90:c9:9b:c6:5e:58:9d:6e:fd:0c:73:5b:b4:11:48: ea:df:b4:cb:06:4b:5b:a7:d7:5e:fd:02:b5:5a:e5: af:8e:f3:1d:ef:ea:59:bd:ab:18:ac:ab:24:ba:37: 24:f0:a2:a4:10:55:8f:ab:a0:7f:64:de:63:a8:b9: e3:a9:34:58:1b:e7:78:4b:d1:2e:60:1e:ea:19:3d: 13:75:c0:d9:6b:f3:f9:7e:83:18:66:be:ac:66:e4: df:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:3E:7B:50:0B:A0:3A:81:52:21:0B:49:83:9F:50:3C:C3:4E:D0:07 X509v3 Authority Key Identifier: keyid:0C:47:ED:E3:04:8E:35:A6:E6:E8:CB:0C:E4:4F:C8:43:72:71:EB:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEft4wSONabm6MsM5E_IQ3Jx6z0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:49:0b:64:2a:e5:a7:76:d9:c6:a0:0d:8d:e6:c3:09:89:8c: 7f:29:a0:5d:e0:1d:2c:a5:72:5d:c5:84:36:a1:a7:00:51:52: d0:c4:04:28:0a:b4:fe:fc:64:48:6d:6e:90:31:dd:34:ad:15: 0f:46:5f:9b:9d:c8:ab:c4:71:2a:80:2b:93:01:aa:e0:58:af: fb:79:98:89:97:c6:a8:cb:80:f7:38:4f:e4:8f:cd:d8:f9:cf: 2f:c7:37:9c:05:f0:01:25:a0:00:7a:1c:22:4e:0c:b1:11:2c: da:ef:8d:7a:2e:e5:90:68:34:a8:64:e8:26:b7:11:3d:f5:e9: 47:fb:51:c0:43:d0:8a:82:cf:9f:f8:e3:b8:56:df:e0:7a:ee: 9e:3c:6b:3b:7c:d8:14:ed:84:92:a5:e0:5e:c7:9f:17:82:87: 00:e9:45:70:94:2f:16:0d:4b:5d:86:af:83:68:73:ab:d3:15: 82:a6:94:71:49:e3:b5:57:78:03:dd:30:55:b0:02:b7:de:f7: 57:48:e7:4c:93:ec:2a:eb:80:6c:99:85:99:38:92:ac:78:77: 5a:3d:0c:95:0f:5c:21:1f:a1:fb:68:9d:94:d3:83:e4:ba:1b: 0c:fd:6b:69:01:2e:70:f5:2a:97:49:90:4c:18:77:70:88:d3: 9b:e9:bc:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I1MUUxMTAvBgNVBAUTKDBDNDdFREUzMDQ4RTM1QTZFNkU4Q0IwQ0U0NEZDODQz NzI3MUVCM0QwHhcNMjUwNjE0MjEwOTM0WhcNMjUwNjIxMjEwOTM0WjAYMRYwFAYD VQQDEw02ODRkZTUwZS03YjUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArydjZbheEuN3/P43Ev5oFJT2fwkQIbbszp3GfO3itNYBEF+Zn8j4AN1AdAPq CWo+cRWN83yGcFmt7Aw9G6/F+zyfMY6Wk+V07hYR9pXR+TlkzcNvumVpbuWCqdHD MKkQXN5mY+x0odLPwPfbmiE5OFIhBYuZu+WpLdIO/oqqQuUkBIJmES63G9GiwH0b ztWI09Cr1kvPUm49Uu3CiWrRE6ANeBKQyZvGXlidbv0Mc1u0EUjq37TLBktbp9de /QK1WuWvjvMd7+pZvasYrKskujck8KKkEFWPq6B/ZN5jqLnjqTRYG+d4S9EuYB7q GT0TdcDZa/P5foMYZr6sZuTf8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLE+e1AL oDqBUiELSYOfUDzDTtAHMB8GA1UdIwQYMBaAFAxH7eMEjjWm5ujLDORPyENyces9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjUxRS81OUNERDU0QTBG RTkxMUVCOUYzMEM3MjVDNEY5QUUwMi9ERWZ0NHdTT05hYm02TXNNNUVfSVEzSng2 ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RFZnQ0d1NPTmFibTZNc001RV9JUTNKeDZ6MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjUxRS81OUNERDU0QTBGRTkxMUVCOUYzMEM3MjVDNEY5QUUwMi9ERWZ0NHdTT05h Ym02TXNNNUVfSVEzSng2ejAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvSQtkKuWndtnGoA2N5sMJiYx/KaBd4B0spXJdxYQ2oacAUVLQxAQo CrT+/GRIbW6QMd00rRUPRl+bncirxHEqgCuTAargWK/7eZiJl8aoy4D3OE/kj83Y +c8vxzecBfABJaAAehwiTgyxESza7416LuWQaDSoZOgmtxE99elH+1HAQ9CKgs+f +OO4Vt/geu6ePGs7fNgU7YSSpeBex58XgocA6UVwlC8WDUtdhq+DaHOr0xWCppRx SeO1V3gD3TBVsAK33vdXSOdMk+wq64BsmYWZOJKseHdaPQyVD1whH6H7aJ2U04Pk uhsM/WtpAS5w9SqXSZBMGHdwiNOb6bzF -----END CERTIFICATE-----Generated at Sun Jun 15 17:58:35 2025 by rpki-client