$ rpki-client -vvf rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft File: cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft (raw, json) Hash identifier: xNAGeEI0EDmkNYFmxNrFrIwwh/UMFHYmtOKLVqg2dIg= Subject key identifier: FF:A1:C4:6B:90:1C:20:5E:E7:E4:2A:55:F8:CE:09:F0:05:8B:C6:8D Authority key identifier: 70:45:A7:18:BB:EB:28:9F:18:D1:F9:30:FA:33:2D:63:32:D9:55:5E Certificate issuer: /CN=A918B936/serialNumber=7045A718BBEB289F18D1F930FA332D6332D9555E Certificate serial: 210E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft Manifest number: 210E Signing time: Wed 18 Jun 2025 15:56:52 +0000 Manifest this update: Wed 18 Jun 2025 15:56:52 +0000 Manifest next update: Wed 25 Jun 2025 15:56:52 +0000 Files and hashes: 1: cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.crl (hash: +pbfS6pRmOzFveBilFvwCt4wrUN8VM1eogfkA00QqyI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.crl rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 15:56:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8462 (0x210e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B936, serialNumber=7045A718BBEB289F18D1F930FA332D6332D9555E Validity Not Before: Jun 18 15:56:52 2025 GMT Not After : Jun 25 15:56:52 2025 GMT Subject: CN=6852e1c4-41ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e6:8b:21:be:6e:60:09:0a:9c:a3:27:34:a6: b8:3e:9f:3d:7e:27:7e:46:4f:da:97:c3:c1:78:ff: 3b:51:89:f2:fe:5f:11:3e:18:bf:f2:22:e0:74:7d: 2c:e8:9b:40:87:17:13:f9:08:56:d2:5e:6f:9d:39: 4c:d0:6b:61:35:aa:99:a2:92:7b:e7:ba:69:87:59: 89:99:c1:ae:95:17:22:5f:41:57:c1:37:99:c2:e8: 76:56:cd:c7:23:34:6f:5d:0a:2d:5d:8e:89:12:8f: e7:8c:77:5d:41:80:9e:a4:51:9f:b9:17:d7:fc:2b: 89:18:67:8d:81:e4:3d:ca:76:88:34:09:05:f6:28: 3e:d2:ba:10:9e:78:55:95:45:e3:02:81:44:d7:0a: 5e:36:11:a9:86:b1:50:c5:9f:49:75:e6:b1:36:0b: 52:27:30:83:e9:58:99:66:49:c2:4e:b7:1e:76:6b: 9e:e8:df:f7:ee:83:7f:fd:0e:8c:72:eb:4e:d6:a9: 6b:6a:95:22:37:fe:13:ac:29:86:64:f2:a8:72:e3: ec:88:a3:c4:9e:8e:cd:a7:b8:cc:74:6a:87:58:af: de:9f:14:b8:1b:c0:58:13:04:cd:a7:9b:9c:e5:dc: 48:a5:c2:74:e6:34:f5:be:5e:ea:5e:60:62:b9:07: c1:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:A1:C4:6B:90:1C:20:5E:E7:E4:2A:55:F8:CE:09:F0:05:8B:C6:8D X509v3 Authority Key Identifier: keyid:70:45:A7:18:BB:EB:28:9F:18:D1:F9:30:FA:33:2D:63:32:D9:55:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:5c:11:48:2a:c9:27:ae:b2:a2:a4:76:db:17:1a:7d:32:41: 8b:66:17:c1:dc:28:38:dc:f7:f0:10:46:5f:e0:bc:ec:5c:10: 44:e8:02:d5:b3:5b:9f:9f:47:93:ab:c3:a7:c1:b4:55:ab:8b: 83:e4:cd:be:a1:dd:f7:5a:b1:66:69:ea:21:74:08:d0:c9:99: 4c:d9:5b:4a:ab:e3:44:1f:20:68:55:26:97:03:6f:d2:6a:d5: 92:e6:83:e4:4f:6e:72:6c:da:58:ea:1b:66:ea:a1:92:f9:de: 97:e6:3d:f7:c0:d0:17:a1:48:35:12:7f:ec:ee:79:a1:e9:29: c0:33:f6:57:cb:98:4b:1a:2c:a4:91:8a:b9:f9:a7:9c:04:99: b9:fe:aa:5b:75:f5:0c:57:c7:e5:ad:5a:4b:3b:71:f7:61:ee: ce:ba:10:ef:f5:c1:a3:71:ee:32:4b:dc:8e:77:77:df:f2:5b: 80:06:f5:22:67:36:10:2b:b9:0f:ed:ce:63:95:4a:dd:b4:b1: 41:8e:33:18:7d:52:e7:c3:71:c4:d2:f8:20:c8:f3:41:c9:ae: 51:6d:06:c9:2a:14:86:71:e7:db:f7:68:e6:09:e6:ed:92:0d: 7c:4e:71:58:87:d5:88:3c:8e:94:4b:5d:88:34:4f:98:7a:e5: 59:91:93:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIQ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEI5MzYxMTAvBgNVBAUTKDcwNDVBNzE4QkJFQjI4OUYxOEQxRjkzMEZBMzMyRDYz MzJEOTU1NUUwHhcNMjUwNjE4MTU1NjUyWhcNMjUwNjI1MTU1NjUyWjAYMRYwFAYD VQQDEw02ODUyZTFjNC00MWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAueaLIb5uYAkKnKMnNKa4Pp89fid+Rk/al8PBeP87UYny/l8RPhi/8iLgdH0s 6JtAhxcT+QhW0l5vnTlM0GthNaqZopJ757pph1mJmcGulRciX0FXwTeZwuh2Vs3H IzRvXQotXY6JEo/njHddQYCepFGfuRfX/CuJGGeNgeQ9ynaINAkF9ig+0roQnnhV lUXjAoFE1wpeNhGphrFQxZ9JdeaxNgtSJzCD6ViZZknCTrcedmue6N/37oN//Q6M cutO1qlrapUiN/4TrCmGZPKocuPsiKPEno7Np7jMdGqHWK/enxS4G8BYEwTNp5uc 5dxIpcJ05jT1vl7qXmBiuQfBFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP+hxGuQ HCBe5+QqVfjOCfAFi8aNMB8GA1UdIwQYMBaAFHBFpxi76yifGNH5MPozLWMy2VVe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjkzNi80MDc1MTIxQUYw Q0QxMUU1QTQ0MzJFNzRDNEY5QUUwMi9jRVduR0x2cktKOFkwZmt3LWpNdFl6TFpW VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2NFV25HTHZyS0o4WTBma3ctak10WXpMWlZWNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjkzNi80MDc1MTIxQUYwQ0QxMUU1QTQ0MzJFNzRDNEY5QUUwMi9jRVduR0x2cktK OFkwZmt3LWpNdFl6TFpWVjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJXBFIKsknrrKipHbbFxp9MkGLZhfB3Cg43PfwEEZf4LzsXBBE6ALV s1ufn0eTq8OnwbRVq4uD5M2+od33WrFmaeohdAjQyZlM2VtKq+NEHyBoVSaXA2/S atWS5oPkT25ybNpY6htm6qGS+d6X5j33wNAXoUg1En/s7nmh6SnAM/ZXy5hLGiyk kYq5+aecBJm5/qpbdfUMV8flrVpLO3H3Ye7OuhDv9cGjce4yS9yOd3ff8luABvUi ZzYQK7kP7c5jlUrdtLFBjjMYfVLnw3HE0vggyPNBya5RbQbJKhSGcefb92jmCebt kg18TnFYh9WIPI6US12INE+YeuVZkZNh -----END CERTIFICATE-----Generated at Fri Jun 20 07:14:37 2025 by rpki-client