$ rpki-client -vvf rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.mft File: Crfzan3eThH0sBWX3w3nopqAvEQ.mft (raw, json) Hash identifier: Vsn4jPNs0gHTRRHBLt+bzASTPn2H9ezV2hopYORorbE= Subject key identifier: 1B:48:BC:79:0C:30:1F:11:A8:CD:47:28:8E:B0:0B:23:A5:DE:85:57 Authority key identifier: 0A:B7:F3:6A:7D:DE:4E:11:F4:B0:15:97:DF:0D:E7:A2:9A:80:BC:44 Certificate issuer: /CN=A917F352/serialNumber=0AB7F36A7DDE4E11F4B01597DF0DE7A29A80BC44 Certificate serial: 0115 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Crfzan3eThH0sBWX3w3nopqAvEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.mft Manifest number: 0113 Signing time: Fri 13 Jun 2025 03:51:11 +0000 Manifest this update: Fri 13 Jun 2025 03:51:10 +0000 Manifest next update: Fri 20 Jun 2025 03:51:10 +0000 Files and hashes: 1: Crfzan3eThH0sBWX3w3nopqAvEQ.crl (hash: 5v28rEh2ujyoP6sj5S9eTtvI1YDLeuRzLGWgEaxcwRA=) 2: 8FE6CF86A1FB11EE9773325BC4F9AE02.roa (hash: 7+HziPW8bdU4fmbvKj0ZUtapknCkvsD+7VoRTrV2tSY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.crl rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Crfzan3eThH0sBWX3w3nopqAvEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 03:51:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 277 (0x115) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F352, serialNumber=0AB7F36A7DDE4E11F4B01597DF0DE7A29A80BC44 Validity Not Before: Jun 13 03:51:10 2025 GMT Not After : Jun 20 03:51:10 2025 GMT Subject: CN=684ba02f-f14a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ef:c0:a9:63:4a:58:98:cf:4e:5f:91:b7:e1: 0c:b4:a6:17:1f:75:55:d2:30:45:d7:a9:f8:fd:02: da:4f:0b:44:fc:4e:3f:20:3c:12:2a:8e:e6:b5:26: c7:fa:47:2b:e4:83:86:e0:90:1f:5a:b0:af:4c:d9: f6:54:6d:a4:30:97:2f:8f:3c:a8:62:e7:33:d9:b1: ad:5d:24:33:5d:40:c2:b1:10:69:7b:00:21:f9:f7: c0:3d:c1:ae:f9:ae:3d:ae:1b:78:0d:b5:d8:39:50: fa:7b:48:9b:af:ac:24:32:ea:57:33:45:a3:11:3a: 68:10:1f:ba:3b:8c:32:1a:a2:e9:68:8e:46:5b:cc: a3:b4:b9:27:84:75:7d:92:44:95:cf:d8:86:d0:df: 48:38:8e:76:e2:8f:34:0c:2e:b0:bc:1e:78:78:62: 10:cd:6a:67:5a:2e:3f:f0:da:2a:61:6b:50:8e:ca: 0a:69:c4:51:4f:74:b1:56:7c:d9:be:3f:96:2a:86: a5:c9:0c:4a:29:8a:67:7a:67:8b:5f:50:90:46:da: ef:6f:de:b9:2e:93:68:b7:32:c9:62:06:df:79:70: 85:df:b8:0d:6c:4c:1d:4d:61:f7:aa:58:df:de:ea: e4:2c:8a:df:d5:a4:22:40:ea:8e:65:c5:e1:da:12: 54:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:48:BC:79:0C:30:1F:11:A8:CD:47:28:8E:B0:0B:23:A5:DE:85:57 X509v3 Authority Key Identifier: keyid:0A:B7:F3:6A:7D:DE:4E:11:F4:B0:15:97:DF:0D:E7:A2:9A:80:BC:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Crfzan3eThH0sBWX3w3nopqAvEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:6d:ef:ce:04:7b:71:5e:c9:82:7c:7b:cb:a2:d2:8d:da:f4: 7f:a5:2d:12:e4:ce:7d:fb:33:03:d4:1b:f1:f7:b7:7a:32:4f: a1:b2:53:86:30:0a:6b:cf:48:20:4a:2c:11:52:4c:dc:67:b3: cf:b5:b0:46:17:02:e2:c7:2e:06:a1:90:e2:20:ea:83:ed:75: a3:bb:a1:ad:aa:85:42:63:5b:2e:c4:32:8c:61:d5:c1:28:da: a3:20:c0:05:2a:fe:ea:86:61:66:11:47:49:84:09:8b:72:96: d5:11:22:58:1e:3b:b7:e6:d2:66:19:77:cd:49:d8:b4:08:94: 8c:fe:cf:7e:25:58:0f:4c:cd:6c:8b:24:c5:c7:59:2e:23:ba: 37:cf:1c:50:62:99:42:32:3b:a2:8d:21:6d:aa:35:25:fe:01: d4:d3:df:26:37:00:6f:5e:12:3c:62:b1:aa:12:56:23:84:46: 1e:a6:59:26:4a:de:ff:bf:fe:f0:38:68:c2:ac:37:e0:4f:2b: 32:fd:4d:e8:eb:97:c0:98:d5:65:e1:c9:95:63:30:66:a6:7d: 3f:2b:19:c5:23:c8:28:75:82:fd:99:b7:32:59:42:d5:89:8e: fa:52:d5:ac:94:7d:d6:43:17:37:6f:3e:0f:59:dd:7b:14:28: 83:34:44:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YzNTIxMTAvBgNVBAUTKDBBQjdGMzZBN0RERTRFMTFGNEIwMTU5N0RGMERFN0Ey OUE4MEJDNDQwHhcNMjUwNjEzMDM1MTEwWhcNMjUwNjIwMDM1MTEwWjAYMRYwFAYD VQQDEw02ODRiYTAyZi1mMTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAne/AqWNKWJjPTl+Rt+EMtKYXH3VV0jBF16n4/QLaTwtE/E4/IDwSKo7mtSbH +kcr5IOG4JAfWrCvTNn2VG2kMJcvjzyoYucz2bGtXSQzXUDCsRBpewAh+ffAPcGu +a49rht4DbXYOVD6e0ibr6wkMupXM0WjETpoEB+6O4wyGqLpaI5GW8yjtLknhHV9 kkSVz9iG0N9IOI524o80DC6wvB54eGIQzWpnWi4/8NoqYWtQjsoKacRRT3SxVnzZ vj+WKoalyQxKKYpnemeLX1CQRtrvb965LpNotzLJYgbfeXCF37gNbEwdTWH3qljf 3urkLIrf1aQiQOqOZcXh2hJUuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBtIvHkM MB8RqM1HKI6wCyOl3oVXMB8GA1UdIwQYMBaAFAq382p93k4R9LAVl98N56KagLxE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjM1Mi8zRDlEN0Y1RUEx RkIxMUVFQTM2MDkyNUFDNEY5QUUwMi9DcmZ6YW4zZVRoSDBzQldYM3czbm9wcUF2 RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NyZnphbjNlVGhIMHNCV1gzdzNub3BxQXZFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjM1Mi8zRDlEN0Y1RUExRkIxMUVFQTM2MDkyNUFDNEY5QUUwMi9DcmZ6YW4zZVRo SDBzQldYM3czbm9wcUF2RVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDJbe/OBHtxXsmCfHvLotKN2vR/pS0S5M59+zMD1Bvx97d6Mk+hslOG MAprz0ggSiwRUkzcZ7PPtbBGFwLixy4GoZDiIOqD7XWju6GtqoVCY1suxDKMYdXB KNqjIMAFKv7qhmFmEUdJhAmLcpbVESJYHju35tJmGXfNSdi0CJSM/s9+JVgPTM1s iyTFx1kuI7o3zxxQYplCMjuijSFtqjUl/gHU098mNwBvXhI8YrGqElYjhEYeplkm St7/v/7wOGjCrDfgTysy/U3o65fAmNVl4cmVYzBmpn0/KxnFI8godYL9mbcyWULV iY76UtWslH3WQxc3bz4PWd17FCiDNEQ8 -----END CERTIFICATE-----Generated at Sat Jun 14 18:11:36 2025 by rpki-client