$ rpki-client -vvf rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft File: aTtxpbXaYFTff5wNN5z1IMHI8pE.mft (raw, json) Hash identifier: 8ulkA6OLgb5M8HBE2ZPjnJqLAEL1O2SbEcjBIWF3nSk= Subject key identifier: CF:CD:0A:44:0D:C0:39:F7:24:5C:1D:69:A5:A3:E7:D3:59:BD:7C:AD Authority key identifier: 69:3B:71:A5:B5:DA:60:54:DF:7F:9C:0D:37:9C:F5:20:C1:C8:F2:91 Certificate issuer: /CN=A917DB52/serialNumber=693B71A5B5DA6054DF7F9C0D379CF520C1C8F291 Certificate serial: 07E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTtxpbXaYFTff5wNN5z1IMHI8pE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft Manifest number: 07DD Signing time: Thu 12 Jun 2025 20:46:33 +0000 Manifest this update: Thu 12 Jun 2025 20:46:32 +0000 Manifest next update: Thu 19 Jun 2025 20:46:32 +0000 Files and hashes: 1: aTtxpbXaYFTff5wNN5z1IMHI8pE.crl (hash: fDxaWkBBX8R5PGq+8KCexUhCH7mWhIlzuOLmDoZCRsY=) 2: D7A207C2F33611EAA449F44CC4F9AE02.roa (hash: /kcNu2DzvPjb/K+Cuz9Luoiid37N2ZQdhRNxbuzcd2Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.crl rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTtxpbXaYFTff5wNN5z1IMHI8pE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 20:46:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2022 (0x7e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DB52, serialNumber=693B71A5B5DA6054DF7F9C0D379CF520C1C8F291 Validity Not Before: Jun 12 20:46:32 2025 GMT Not After : Jun 19 20:46:32 2025 GMT Subject: CN=684b3ca9-8ed4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:89:fd:47:e1:3a:48:2c:76:d4:5a:f1:b5:da: 28:38:ab:8b:32:b4:13:18:cc:cd:6b:9e:4b:9a:35: 9b:05:ae:20:11:31:b5:b0:50:8d:8c:92:23:6e:5a: 4e:39:9f:d2:8b:20:5d:c8:78:ee:ff:2b:ea:d7:d1: bc:29:64:0a:76:bd:ae:98:11:74:c8:4d:be:31:55: 95:be:73:a9:b7:b4:da:f6:48:bb:e5:21:bb:6d:16: 4d:1a:81:8e:58:78:36:3d:f9:de:78:4f:5d:2c:5a: 7d:7f:65:b8:fa:e1:8e:15:0b:1c:e7:09:6f:71:6f: 7a:d6:7d:d3:ae:ab:27:cd:37:35:31:36:54:24:c4: 8b:11:3b:24:36:f1:6e:54:02:8a:d2:54:2f:e3:7a: 95:6e:b4:81:10:2a:dd:bb:82:97:e7:b4:cc:9e:ea: 6d:e1:10:c7:87:5d:3e:f0:bb:4e:02:ea:88:29:3f: 27:1d:18:a7:fe:1d:53:00:ee:8c:88:f1:7f:c1:cc: a7:f1:ab:c7:b6:8f:91:8d:e2:cb:63:0d:91:ea:3a: 94:f8:4c:ba:4d:d4:dc:83:e8:b5:d3:19:f2:ad:e4: f4:d7:8d:6d:7b:96:7a:da:62:cf:a2:c2:1e:1a:58: 81:18:bd:eb:08:27:3c:44:21:e3:73:b8:d2:d3:cb: 81:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:CD:0A:44:0D:C0:39:F7:24:5C:1D:69:A5:A3:E7:D3:59:BD:7C:AD X509v3 Authority Key Identifier: keyid:69:3B:71:A5:B5:DA:60:54:DF:7F:9C:0D:37:9C:F5:20:C1:C8:F2:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTtxpbXaYFTff5wNN5z1IMHI8pE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:32:21:b7:4f:e9:6b:26:2e:07:bd:11:c9:3e:49:5a:1c:56: de:ae:65:46:24:c8:4b:99:ec:2e:77:1c:a2:4b:f0:a0:75:b3: 92:6f:6d:3d:3d:b6:3d:17:69:27:fd:20:cf:b0:6d:0c:f0:a4: 10:fd:99:9b:63:da:39:d0:da:32:be:16:ff:2f:74:84:db:42: de:b4:f0:2b:b0:d7:2e:56:7c:7d:01:d0:1e:ff:a2:af:82:8f: 23:f7:a6:6c:e3:d0:2f:79:12:ad:ff:ba:7c:c1:44:a6:9e:d3: 3f:1c:4e:6b:b9:34:d1:f0:e2:d2:08:2d:92:9a:ac:84:3c:5b: 59:16:ef:9e:2b:1d:a3:16:e1:0b:31:06:8c:59:a2:53:f5:86: 6b:4d:1a:f0:97:4d:a1:d1:1c:ea:6c:24:ef:91:b8:4b:7c:05: 64:47:2e:ee:33:49:99:19:84:27:44:2c:e2:5a:13:07:28:bd: f9:b4:8b:e7:cf:68:08:0d:2c:49:58:58:0a:1b:75:49:9c:20: 23:51:da:c0:fc:fa:5c:06:27:74:c2:e2:fa:ef:14:08:26:b7: f9:92:c0:33:7f:7e:d0:b5:c5:e9:94:7f:35:ef:ed:76:3e:6a: ca:6b:9c:55:d4:3b:06:5e:8a:10:3d:0a:34:a1:4a:df:d9:cc: 57:f2:eb:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0RCNTIxMTAvBgNVBAUTKDY5M0I3MUE1QjVEQTYwNTRERjdGOUMwRDM3OUNGNTIw QzFDOEYyOTEwHhcNMjUwNjEyMjA0NjMyWhcNMjUwNjE5MjA0NjMyWjAYMRYwFAYD VQQDEw02ODRiM2NhOS04ZWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyIn9R+E6SCx21FrxtdooOKuLMrQTGMzNa55LmjWbBa4gETG1sFCNjJIjblpO OZ/SiyBdyHju/yvq19G8KWQKdr2umBF0yE2+MVWVvnOpt7Ta9ki75SG7bRZNGoGO WHg2PfneeE9dLFp9f2W4+uGOFQsc5wlvcW961n3TrqsnzTc1MTZUJMSLETskNvFu VAKK0lQv43qVbrSBECrdu4KX57TMnupt4RDHh10+8LtOAuqIKT8nHRin/h1TAO6M iPF/wcyn8avHto+RjeLLYw2R6jqU+Ey6TdTcg+i10xnyreT0141te5Z62mLPosIe GliBGL3rCCc8RCHjc7jS08uBHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM/NCkQN wDn3JFwdaaWj59NZvXytMB8GA1UdIwQYMBaAFGk7caW12mBU33+cDTec9SDByPKR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3REI1Mi80NUY1NTZCRUYy ODAxMUVBODcxQkFENkFDNEY5QUUwMi9hVHR4cGJYYVlGVGZmNXdOTjV6MUlNSEk4 cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FUdHhwYlhhWUZUZmY1d05ONXoxSU1ISThwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 REI1Mi80NUY1NTZCRUYyODAxMUVBODcxQkFENkFDNEY5QUUwMi9hVHR4cGJYYVlG VGZmNXdOTjV6MUlNSEk4cEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4MiG3T+lrJi4HvRHJPklaHFbermVGJMhLmewudxyiS/CgdbOSb209 PbY9F2kn/SDPsG0M8KQQ/ZmbY9o50Noyvhb/L3SE20LetPArsNcuVnx9AdAe/6Kv go8j96Zs49AveRKt/7p8wUSmntM/HE5ruTTR8OLSCC2SmqyEPFtZFu+eKx2jFuEL MQaMWaJT9YZrTRrwl02h0RzqbCTvkbhLfAVkRy7uM0mZGYQnRCziWhMHKL35tIvn z2gIDSxJWFgKG3VJnCAjUdrA/PpcBid0wuL67xQIJrf5ksAzf37QtcXplH817+12 PmrKa5xV1DsGXooQPQo0oUrf2cxX8uu8 -----END CERTIFICATE-----Generated at Sat Jun 14 19:38:33 2025 by rpki-client