$ rpki-client -vvf rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.mft File: -0toP7pNtqwaWsUIgH_H6klsXsU.mft (raw, json) Hash identifier: 6v6bZAnb4CJ1sk581EdAABag/OEiXvGFX9HqwXQ+6P8= Subject key identifier: F8:2F:9D:01:9F:3D:90:A3:A7:88:5C:18:7D:68:C1:8E:E8:93:C3:A6 Authority key identifier: FB:4B:68:3F:BA:4D:B6:AC:1A:5A:C5:08:80:7F:C7:EA:49:6C:5E:C5 Certificate issuer: /CN=A918B759/serialNumber=FB4B683FBA4DB6AC1A5AC508807FC7EA496C5EC5 Certificate serial: 3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0toP7pNtqwaWsUIgH_H6klsXsU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.mft Manifest number: 3E Signing time: Fri 13 Jun 2025 06:25:14 +0000 Manifest this update: Fri 13 Jun 2025 06:25:14 +0000 Manifest next update: Fri 20 Jun 2025 06:25:14 +0000 Files and hashes: 1: -0toP7pNtqwaWsUIgH_H6klsXsU.crl (hash: iWaRKDFOvrapeYIwqDtHN6LfV0bW4FJSDgYQSK7aTZY=) 2: 44DE35D0EBE011EFB534ED7AC4F9AE02.roa (hash: 0+vRm59ex9NMyreeXhWeUcmkTmPtMjioToFn5xjtXJU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.crl rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0toP7pNtqwaWsUIgH_H6klsXsU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 06:25:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63 (0x3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B759, serialNumber=FB4B683FBA4DB6AC1A5AC508807FC7EA496C5EC5 Validity Not Before: Jun 13 06:25:14 2025 GMT Not After : Jun 20 06:25:14 2025 GMT Subject: CN=684bc44a-59ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:cb:68:25:a5:36:d3:2c:57:0b:a2:fb:75:11: 4c:61:2f:81:92:22:a0:ed:01:75:47:2f:3d:f1:c9: 28:03:0c:18:d6:1b:6f:b2:99:59:34:32:ca:2d:cc: 77:80:a7:41:df:c6:04:31:e7:af:42:2e:da:29:7a: 7a:8a:4e:a7:d1:cb:43:1e:bc:e7:0b:51:32:22:67: 6b:4a:65:0c:9e:eb:6a:f9:88:e5:5c:ae:d6:92:64: 10:a4:07:ce:06:19:f2:11:7b:0b:2d:75:dc:f6:fe: 82:dc:f1:23:d6:a3:f3:22:02:e2:17:17:17:3c:2f: 8e:e4:0e:82:91:3f:3e:d0:df:aa:ba:e5:15:1e:0c: ea:87:1c:42:9b:8a:d6:ef:24:c7:41:d7:15:0b:53: 98:01:b6:dd:6d:4a:2d:75:92:98:d7:c8:9e:04:44: 99:04:a0:ec:e7:44:d9:5d:2b:d4:b1:71:69:fc:77: 17:4e:e4:07:ca:a3:d9:1a:1f:8f:c7:44:1e:a5:ed: 82:a3:35:5e:27:71:6d:df:00:38:2f:6f:da:94:a6: e6:4b:17:9a:ca:ec:1b:f8:fb:d9:9c:d5:c4:d6:b6: 90:01:6a:47:82:9d:e2:47:4a:c7:c4:58:b1:f3:dd: 38:57:03:c4:da:83:5d:69:a7:ab:7a:24:2f:54:28: 45:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:2F:9D:01:9F:3D:90:A3:A7:88:5C:18:7D:68:C1:8E:E8:93:C3:A6 X509v3 Authority Key Identifier: keyid:FB:4B:68:3F:BA:4D:B6:AC:1A:5A:C5:08:80:7F:C7:EA:49:6C:5E:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0toP7pNtqwaWsUIgH_H6klsXsU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:de:49:09:36:3b:b8:73:7d:fa:e6:37:18:3f:26:7d:62:e2: b6:5a:53:50:f7:71:70:53:85:cb:c9:5c:a9:8a:28:67:af:ac: 42:e7:60:b1:6c:a3:4e:a8:12:44:d3:d5:37:b2:14:66:ef:bb: 30:c1:d2:93:e2:f5:71:20:01:15:e6:be:58:a2:3e:e7:40:4c: 37:b9:3f:7f:a0:85:c0:78:a0:cb:9b:19:cc:41:ec:a2:1c:04: 39:9d:d9:65:4d:7b:44:d5:9c:1b:15:2e:9b:67:06:c5:88:de: f7:89:bb:7b:7d:14:fe:59:89:4b:dd:da:dc:2f:a4:76:6a:29: dc:3e:aa:12:2b:f2:f1:bd:0c:77:f8:e7:04:1c:30:08:d5:f8: 07:c9:55:1b:b8:dc:cf:ca:57:a2:d5:90:7e:f9:f0:bc:8e:03: 0b:24:96:a6:85:ed:f4:62:a2:82:9d:56:35:db:79:13:b0:8c: c7:be:c5:46:c5:39:92:c1:b2:73:78:b7:04:bc:9f:f1:c1:a0: 86:1d:ed:1b:2b:ce:0c:47:8f:eb:6b:14:e1:af:75:b2:81:06: 01:f4:49:71:ce:79:dc:29:34:9c:71:31:16:a9:44:ff:83:a0: 75:8b:10:d3:c3:5b:75:66:c7:ca:62:fd:6e:03:99:6c:73:5f: ba:d2:96:fe -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 Qjc1OTExMC8GA1UEBRMoRkI0QjY4M0ZCQTREQjZBQzFBNUFDNTA4ODA3RkM3RUE0 OTZDNUVDNTAeFw0yNTA2MTMwNjI1MTRaFw0yNTA2MjAwNjI1MTRaMBgxFjAUBgNV BAMTDTY4NGJjNDRhLTU5Y2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9y2glpTbTLFcLovt1EUxhL4GSIqDtAXVHLz3xySgDDBjWG2+ymVk0MsotzHeA p0HfxgQx569CLtopenqKTqfRy0MevOcLUTIiZ2tKZQye62r5iOVcrtaSZBCkB84G GfIRewstddz2/oLc8SPWo/MiAuIXFxc8L47kDoKRPz7Q36q65RUeDOqHHEKbitbv JMdB1xULU5gBtt1tSi11kpjXyJ4ERJkEoOznRNldK9SxcWn8dxdO5AfKo9kaH4/H RB6l7YKjNV4ncW3fADgvb9qUpuZLF5rK7Bv4+9mc1cTWtpABakeCneJHSsfEWLHz 3ThXA8Tag11pp6t6JC9UKEW/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+C+dAZ89 kKOniFwYfWjBjuiTw6YwHwYDVR0jBBgwFoAU+0toP7pNtqwaWsUIgH/H6klsXsUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThCNzU5LzY5QzNCRUU2RUI2 NDExRUZBOUEyQzI2MUM0RjlBRTAyLy0wdG9QN3BOdHF3YVdzVUlnSF9INmtsc1hz VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLTB0b1A3cE50cXdhV3NVSWdIX0g2a2xzWHNVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThC NzU5LzY5QzNCRUU2RUI2NDExRUZBOUEyQzI2MUM0RjlBRTAyLy0wdG9QN3BOdHF3 YVdzVUlnSF9INmtsc1hzVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG3eSQk2O7hzffrmNxg/Jn1i4rZaU1D3cXBThcvJXKmKKGevrELnYLFs o06oEkTT1TeyFGbvuzDB0pPi9XEgARXmvliiPudATDe5P3+ghcB4oMubGcxB7KIc BDmd2WVNe0TVnBsVLptnBsWI3veJu3t9FP5ZiUvd2twvpHZqKdw+qhIr8vG9DHf4 5wQcMAjV+AfJVRu43M/KV6LVkH758LyOAwsklqaF7fRiooKdVjXbeROwjMe+xUbF OZLBsnN4twS8n/HBoIYd7RsrzgxHj+trFOGvdbKBBgH0SXHOedwpNJxxMRapRP+D oHWLENPDW3Vmx8pi/W4DmWxzX7rSlv4= -----END CERTIFICATE-----Generated at Sat Jun 14 19:35:17 2025 by rpki-client