$ rpki-client -vvf rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.mft File: u6lOqRCj8jLfn98s1OOiejSZa3A.mft (raw, json) Hash identifier: YtzjoXm1LDmVz69maBRItyO10hjSpsGXtz+4/6HMQhA= Subject key identifier: DD:C1:2F:D2:CB:1C:21:27:2C:C6:A4:A8:F0:95:B3:F3:EA:4E:24:92 Authority key identifier: BB:A9:4E:A9:10:A3:F2:32:DF:9F:DF:2C:D4:E3:A2:7A:34:99:6B:70 Certificate issuer: /CN=A917BEB0/serialNumber=BBA94EA910A3F232DF9FDF2CD4E3A27A34996B70 Certificate serial: 043E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6lOqRCj8jLfn98s1OOiejSZa3A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.mft Manifest number: 043A Signing time: Sun 15 Jun 2025 00:02:46 +0000 Manifest this update: Sun 15 Jun 2025 00:02:45 +0000 Manifest next update: Sun 22 Jun 2025 00:02:45 +0000 Files and hashes: 1: u6lOqRCj8jLfn98s1OOiejSZa3A.crl (hash: dEZ3CPtfVTBEH2umrF+RLUsvsNmu0zXeqNtSEtYK56Q=) 2: 4AEAB70C615D11ECAC75D44DC4F9AE02.roa (hash: WnBbCr/LbqKLlPeho3+8ztfmsdCgc5oHEWwkG3+ywSQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.crl rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6lOqRCj8jLfn98s1OOiejSZa3A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 00:02:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1086 (0x43e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BEB0, serialNumber=BBA94EA910A3F232DF9FDF2CD4E3A27A34996B70 Validity Not Before: Jun 15 00:02:45 2025 GMT Not After : Jun 22 00:02:45 2025 GMT Subject: CN=684e0da5-2ac8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b9:34:d7:17:86:3a:9e:4c:fa:c9:cb:d1:cd: af:b9:2d:e3:05:fd:79:6b:3e:b4:8e:d9:ec:03:3a: 51:15:ce:56:b7:75:07:58:dc:e7:1a:9a:fc:b4:a2: 90:0b:55:b5:df:90:8b:36:bb:da:b7:2f:c6:3d:fa: d5:aa:09:b9:28:b1:4e:07:55:55:ae:b5:cf:4c:56: 41:2b:e3:1e:01:64:19:b5:89:c9:cc:7d:93:ac:af: 70:0f:64:08:3a:cd:6e:c6:0f:0b:2e:f1:7e:0b:39: 7f:54:5f:14:4d:22:18:c2:13:f5:ec:f2:77:04:c1: 09:0d:1a:2c:4a:d4:cb:99:48:f2:5f:f1:2f:a7:59: 2f:ea:a7:8d:17:4b:12:37:6e:ff:f3:f9:61:cc:c1: 98:b5:70:ae:08:0a:fd:56:3d:1a:00:bd:06:c4:e6: 62:4e:5f:ac:f9:5c:45:15:5c:12:c0:c4:38:f4:e2: ae:d2:cf:ec:53:62:8c:13:93:92:a4:99:59:da:5d: 2a:12:44:2a:af:eb:52:96:ec:42:06:92:02:a9:b5: 8a:f9:b7:6f:c8:25:98:07:aa:3b:a4:5b:1e:63:98: df:9e:fe:9e:59:22:60:fc:4a:a5:5b:9e:75:78:44: 80:1a:3c:70:37:37:28:13:ce:6c:09:72:c3:35:63: 32:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:C1:2F:D2:CB:1C:21:27:2C:C6:A4:A8:F0:95:B3:F3:EA:4E:24:92 X509v3 Authority Key Identifier: keyid:BB:A9:4E:A9:10:A3:F2:32:DF:9F:DF:2C:D4:E3:A2:7A:34:99:6B:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6lOqRCj8jLfn98s1OOiejSZa3A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:08:64:8c:fc:c3:8d:e4:33:b9:bf:c8:b0:b4:c4:1d:6e:f9: 9d:20:12:40:a9:35:e8:9e:71:5b:26:ab:7c:1f:22:09:6d:e9: 24:58:1f:76:5e:07:19:b8:00:53:16:06:6f:77:a1:3f:80:00: 19:82:21:1a:16:f3:be:63:af:f8:c7:3a:e0:fb:53:bf:91:fb: af:e3:26:d0:e4:24:d5:45:27:99:f3:85:61:64:ed:06:0b:b0: 79:4f:c0:14:80:e0:df:3b:3b:c2:dd:31:4e:1e:2f:09:c8:cf: 9e:ab:97:94:ff:b9:08:e9:56:8e:c7:71:fd:8b:1c:33:56:df: 96:15:75:a3:9c:72:76:58:37:d1:b8:0d:3c:de:fb:9d:32:4a: 47:c3:4d:32:c6:6f:8c:f7:5c:71:68:67:d3:26:3d:95:02:37: 01:2c:a8:39:6c:23:c0:79:43:3f:29:9b:0a:12:c8:90:f0:08: 64:eb:96:2b:92:9a:b4:c7:ab:4e:cb:c2:10:b0:1d:b8:c1:b1: fe:77:ca:99:0f:94:f8:f6:eb:7e:46:6d:1f:56:78:25:7c:6e: 66:dc:2f:7c:7e:72:45:f6:64:f8:32:bb:8d:16:8d:b5:69:6c: 9b:7d:54:ba:1f:20:59:16:5a:31:65:67:18:f4:6c:56:4c:c7: c2:34:8a:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBD4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JFQjAxMTAvBgNVBAUTKEJCQTk0RUE5MTBBM0YyMzJERjlGREYyQ0Q0RTNBMjdB MzQ5OTZCNzAwHhcNMjUwNjE1MDAwMjQ1WhcNMjUwNjIyMDAwMjQ1WjAYMRYwFAYD VQQDEw02ODRlMGRhNS0yYWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAubk01xeGOp5M+snL0c2vuS3jBf15az60jtnsAzpRFc5Wt3UHWNznGpr8tKKQ C1W135CLNrvaty/GPfrVqgm5KLFOB1VVrrXPTFZBK+MeAWQZtYnJzH2TrK9wD2QI Os1uxg8LLvF+Czl/VF8UTSIYwhP17PJ3BMEJDRosStTLmUjyX/Evp1kv6qeNF0sS N27/8/lhzMGYtXCuCAr9Vj0aAL0GxOZiTl+s+VxFFVwSwMQ49OKu0s/sU2KME5OS pJlZ2l0qEkQqr+tSluxCBpICqbWK+bdvyCWYB6o7pFseY5jfnv6eWSJg/EqlW551 eESAGjxwNzcoE85sCXLDNWMywQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN3BL9LL HCEnLMakqPCVs/PqTiSSMB8GA1UdIwQYMBaAFLupTqkQo/Iy35/fLNTjono0mWtw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkVCMC8xODExM0Q0NDYx NUIxMUVDQkQ5OUQxNENDNEY5QUUwMi91NmxPcVJDajhqTGZuOThzMU9PaWVqU1ph M0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U2bE9xUkNqOGpMZm45OHMxT09pZWpTWmEzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkVCMC8xODExM0Q0NDYxNUIxMUVDQkQ5OUQxNENDNEY5QUUwMi91NmxPcVJDajhq TGZuOThzMU9PaWVqU1phM0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAECGSM/MON5DO5v8iwtMQdbvmdIBJAqTXonnFbJqt8HyIJbekkWB92 XgcZuABTFgZvd6E/gAAZgiEaFvO+Y6/4xzrg+1O/kfuv4ybQ5CTVRSeZ84VhZO0G C7B5T8AUgODfOzvC3TFOHi8JyM+eq5eU/7kI6VaOx3H9ixwzVt+WFXWjnHJ2WDfR uA083vudMkpHw00yxm+M91xxaGfTJj2VAjcBLKg5bCPAeUM/KZsKEsiQ8Ahk65Yr kpq0x6tOy8IQsB24wbH+d8qZD5T49ut+Rm0fVnglfG5m3C98fnJF9mT4MruNFo21 aWybfVS6HyBZFloxZWcY9GxWTMfCNIoW -----END CERTIFICATE-----Generated at Sun Jun 15 09:38:10 2025 by rpki-client