$ rpki-client -vvf rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.mft File: PdeY67rvfndLLyx3rvsipM171oY.mft (raw, json) Hash identifier: CXNfTP/jGYAJXzsCo2kU2rhlnwE887HvmM4kU0cx1j8= Subject key identifier: 20:E5:D0:D6:21:4D:64:6B:72:B8:EB:FD:30:D3:54:3C:2B:76:72:6C Authority key identifier: 3D:D7:98:EB:BA:EF:7E:77:4B:2F:2C:77:AE:FB:22:A4:CD:7B:D6:86 Certificate issuer: /CN=A918C0AE/serialNumber=3DD798EBBAEF7E774B2F2C77AEFB22A4CD7BD686 Certificate serial: 0706 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdeY67rvfndLLyx3rvsipM171oY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.mft Manifest number: 06FA Signing time: Mon 16 Jun 2025 21:38:55 +0000 Manifest this update: Mon 16 Jun 2025 21:38:54 +0000 Manifest next update: Mon 23 Jun 2025 21:38:54 +0000 Files and hashes: 1: PdeY67rvfndLLyx3rvsipM171oY.crl (hash: NGZjSxP8PAl06VdWAoKvTcjwkTDU244vIissECNt4IM=) 2: 23D40B5049BC11EB98F78F66C4F9AE02.roa (hash: bE6+fF3Z2aJLcDObD8suz2TxAd7cotS0UZ/nrStzxDQ=) 3: 246D53F049BC11EB98F78F66C4F9AE02.roa (hash: EjFNRenEr22lcCVrIFxeoH925N5NhrGgL+Mz7mHjB8Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.crl rsync://rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdeY67rvfndLLyx3rvsipM171oY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 21:38:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1798 (0x706) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C0AE, serialNumber=3DD798EBBAEF7E774B2F2C77AEFB22A4CD7BD686 Validity Not Before: Jun 16 21:38:54 2025 GMT Not After : Jun 23 21:38:54 2025 GMT Subject: CN=68508eef-5e2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ce:f6:a1:1d:58:83:22:d7:24:06:28:92:39: 5a:66:a6:b6:22:1a:4b:22:3d:44:5b:9b:5f:12:f4: 8a:2f:3a:b5:74:5d:ce:d5:00:e6:76:01:e5:d6:48: 47:2e:d9:4f:bc:54:33:58:51:4f:fa:7d:e8:c5:aa: e0:33:b2:8a:a0:5b:93:97:ca:7a:ab:70:ba:31:36: a9:d7:31:1b:7a:d4:6f:f4:e9:cf:ec:53:c1:12:a6: 51:3b:d0:ff:94:b6:4d:17:c5:38:e0:da:73:e0:ce: c6:be:6b:a0:d5:57:b0:d5:1e:ca:89:74:89:35:d4: 66:5f:89:28:cb:1a:4a:46:8d:0a:51:b8:42:07:2f: 19:4c:6e:32:7c:32:05:76:39:3b:18:41:d7:4e:fc: f7:01:bb:d8:cf:9d:f2:27:3c:de:7f:e9:0b:6f:47: a2:d0:dd:6f:f0:cd:0b:bf:0f:47:c8:df:8b:96:b2: 0c:23:ca:7f:68:3e:a2:8b:0d:2e:3e:33:fc:bb:09: 81:33:d7:d9:84:cc:ff:a0:86:f7:51:b6:ab:92:8a: 7c:cc:cf:cf:ec:68:c4:1b:fb:36:0b:17:bb:d7:f7: 64:96:0b:ac:e3:3c:f7:b3:c8:ea:f2:7c:0c:3a:87: 89:16:9b:07:92:bf:fe:96:8d:20:c9:ca:c7:6c:1c: f8:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:E5:D0:D6:21:4D:64:6B:72:B8:EB:FD:30:D3:54:3C:2B:76:72:6C X509v3 Authority Key Identifier: keyid:3D:D7:98:EB:BA:EF:7E:77:4B:2F:2C:77:AE:FB:22:A4:CD:7B:D6:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdeY67rvfndLLyx3rvsipM171oY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:90:8c:91:c1:49:85:69:86:87:73:96:cb:f3:4f:ee:e7:1e: d4:a1:92:ec:9b:87:4a:ff:6d:fe:b2:d5:02:86:e1:db:f5:ef: 55:1a:ef:cd:ce:42:7d:08:15:35:78:d3:19:e6:2a:69:38:00: 88:6c:88:b9:3b:e9:f4:19:f5:7e:2f:a6:f2:ec:dd:ea:41:00: 99:3c:43:03:90:39:9d:80:c5:40:7c:2b:f4:33:b7:d1:a8:14: c8:a9:7d:22:03:34:af:be:0e:07:30:c8:0c:e5:25:44:60:48: b0:aa:38:a5:bc:84:8b:bd:f9:a4:e5:0f:d5:27:dd:e2:f1:7c: 12:12:eb:72:59:99:3a:24:ed:22:3c:e3:f4:fe:17:18:29:6d: a4:23:04:a7:c2:5c:86:59:67:16:e6:42:19:ed:05:43:c3:b3: 52:19:3a:b4:46:a4:3c:7d:14:ff:61:d4:5e:59:32:81:f6:65: e5:ff:a5:2f:73:f6:bd:ef:a9:f7:df:00:1a:92:cb:72:2c:70: 7b:37:0c:8a:bb:e3:3d:c9:90:2b:b1:bb:90:4a:3c:ec:a1:ef: ab:d0:8d:ef:74:c5:a8:ba:74:4f:ba:1a:30:29:64:9c:ef:8d: ef:d5:4d:6e:cb:f1:b8:5f:42:86:30:59:11:d7:8e:5b:69:f3: 8e:a9:a9:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBwYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEMwQUUxMTAvBgNVBAUTKDNERDc5OEVCQkFFRjdFNzc0QjJGMkM3N0FFRkIyMkE0 Q0Q3QkQ2ODYwHhcNMjUwNjE2MjEzODU0WhcNMjUwNjIzMjEzODU0WjAYMRYwFAYD VQQDEw02ODUwOGVlZi01ZTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxc72oR1YgyLXJAYokjlaZqa2IhpLIj1EW5tfEvSKLzq1dF3O1QDmdgHl1khH LtlPvFQzWFFP+n3oxargM7KKoFuTl8p6q3C6MTap1zEbetRv9OnP7FPBEqZRO9D/ lLZNF8U44Npz4M7Gvmug1Vew1R7KiXSJNdRmX4koyxpKRo0KUbhCBy8ZTG4yfDIF djk7GEHXTvz3AbvYz53yJzzef+kLb0ei0N1v8M0Lvw9HyN+LlrIMI8p/aD6iiw0u PjP8uwmBM9fZhMz/oIb3Ubarkop8zM/P7GjEG/s2Cxe71/dklgus4zz3s8jq8nwM OoeJFpsHkr/+lo0gycrHbBz4QwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCDl0NYh TWRrcrjr/TDTVDwrdnJsMB8GA1UdIwQYMBaAFD3XmOu67353Sy8sd677IqTNe9aG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzBBRS8wMUYwMDU5QTQ5 QkExMUVCOUMxMUQ0NjNDNEY5QUUwMi9QZGVZNjdydmZuZExMeXgzcnZzaXBNMTcx b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BkZVk2N3J2Zm5kTEx5eDNydnNpcE0xNzFvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzBBRS8wMUYwMDU5QTQ5QkExMUVCOUMxMUQ0NjNDNEY5QUUwMi9QZGVZNjdydmZu ZExMeXgzcnZzaXBNMTcxb1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBokIyRwUmFaYaHc5bL80/u5x7UoZLsm4dK/23+stUChuHb9e9VGu/N zkJ9CBU1eNMZ5ippOACIbIi5O+n0GfV+L6by7N3qQQCZPEMDkDmdgMVAfCv0M7fR qBTIqX0iAzSvvg4HMMgM5SVEYEiwqjilvISLvfmk5Q/VJ93i8XwSEutyWZk6JO0i POP0/hcYKW2kIwSnwlyGWWcW5kIZ7QVDw7NSGTq0RqQ8fRT/YdReWTKB9mXl/6Uv c/a976n33wAakstyLHB7NwyKu+M9yZArsbuQSjzsoe+r0I3vdMWounRPuhowKWSc 743v1U1uy/G4X0KGMFkR145bafOOqalU -----END CERTIFICATE-----Generated at Tue Jun 17 20:16:38 2025 by rpki-client