$ rpki-client -vvf rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.mft File: A_8GV8Ds-HOYMDP3xsZIizN4nEM.mft (raw, json) Hash identifier: p148qqcdL+p1x5VY5Iekmkjj+UHxaMlioVEQubetFaM= Subject key identifier: 50:B1:BD:C4:F6:D6:C0:84:82:57:84:35:55:15:0D:E6:86:22:7B:5E Authority key identifier: 03:FF:06:57:C0:EC:F8:73:98:30:33:F7:C6:C6:48:8B:33:78:9C:43 Certificate issuer: /CN=A918CFAD/serialNumber=03FF0657C0ECF873983033F7C6C6488B33789C43 Certificate serial: E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_8GV8Ds-HOYMDP3xsZIizN4nEM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.mft Manifest number: E3 Signing time: Sun 15 Jun 2025 04:34:22 +0000 Manifest this update: Sun 15 Jun 2025 04:34:22 +0000 Manifest next update: Sun 22 Jun 2025 04:34:22 +0000 Files and hashes: 1: A_8GV8Ds-HOYMDP3xsZIizN4nEM.crl (hash: lt22rnAW5qPdLxsttdsxZH0QfnqOaSU+0jkZDGGPYak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.crl rsync://rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_8GV8Ds-HOYMDP3xsZIizN4nEM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 227 (0xe3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918CFAD, serialNumber=03FF0657C0ECF873983033F7C6C6488B33789C43 Validity Not Before: Jun 15 04:34:22 2025 GMT Not After : Jun 22 04:34:22 2025 GMT Subject: CN=684e4d4e-da28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:aa:1c:4b:40:da:7b:f7:0f:7e:f5:b3:19:63: 4b:2d:80:05:04:92:a5:f5:b9:e5:17:f0:b6:91:4a: ff:8b:51:1e:e9:f1:9d:cd:06:9b:1f:90:6d:59:80: 4e:6c:a0:6c:ce:97:61:80:2b:56:b3:88:4f:a2:79: cf:c2:c4:6d:e4:79:90:bd:5d:69:cf:47:62:e1:c4: c1:1b:2f:03:42:f0:88:c3:8f:15:c5:7e:e0:2a:e4: 5d:99:3b:9f:4f:69:a2:32:12:90:bc:31:05:1e:d3: 3a:49:a9:70:65:43:48:16:ba:83:48:12:59:5d:3a: f6:2d:88:86:b4:8a:67:b6:32:39:c7:76:8a:f4:bb: 0c:ef:a0:a4:cb:09:ac:85:62:89:2c:c4:07:65:22: b1:54:48:f1:2f:05:f2:ed:31:67:28:3e:09:6f:98: 0c:91:ec:62:3a:93:6a:9c:ef:1f:58:17:be:5c:26: 68:b0:66:38:70:a3:be:4c:6f:7b:a5:c6:2a:94:2e: 60:86:a3:b5:e8:21:6a:8b:ce:9e:97:54:5d:59:61: 58:d7:34:8a:33:a3:89:d2:63:fd:cf:e5:19:78:d9: 21:32:ae:82:2f:5f:04:db:5c:56:e3:49:01:e3:2f: ea:29:9a:09:30:a8:a3:2b:75:1c:38:b9:64:db:3a: 34:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:B1:BD:C4:F6:D6:C0:84:82:57:84:35:55:15:0D:E6:86:22:7B:5E X509v3 Authority Key Identifier: keyid:03:FF:06:57:C0:EC:F8:73:98:30:33:F7:C6:C6:48:8B:33:78:9C:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_8GV8Ds-HOYMDP3xsZIizN4nEM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:e6:b7:50:5e:55:54:f1:67:70:0a:37:c7:ee:c7:cd:43:62: ab:d1:af:cc:4f:ef:d8:af:48:32:c5:42:61:04:71:16:23:1e: af:51:92:5d:32:7c:d3:9e:64:71:88:cf:2b:94:66:37:4f:15: 49:41:90:33:a7:9d:2a:30:16:cf:7f:f1:0d:d8:40:a6:fc:6d: 9b:7a:87:d2:c4:e5:e9:02:8c:f3:2a:ec:1d:84:10:ff:bc:f9: 06:aa:00:90:b9:b6:55:1d:4c:1d:e6:f3:63:06:1f:82:3b:50: 3a:f2:72:b7:7c:31:c3:17:ed:4e:54:49:80:42:0c:09:b4:ae: 7e:38:8f:ce:9a:9c:dc:70:ed:02:e4:2b:bc:2d:af:f5:64:46: 9b:3d:3a:26:5f:ab:41:a7:9a:e8:8a:75:da:5d:eb:f9:62:21: 0a:95:b5:67:12:7b:16:71:7b:8d:e3:42:cf:b9:ba:64:5f:7d: 7d:0c:55:83:68:76:cc:8e:43:e2:fa:11:0a:d7:8a:fe:b2:ce: 38:00:d7:63:4d:dd:02:08:e1:8f:13:22:ff:56:d8:36:9e:2b: 50:2d:0d:51:dc:61:87:83:10:cf:ff:15:f5:47:1c:df:61:cb: 21:7d:92:aa:5d:16:79:3b:25:fa:79:0c:19:84:32:2b:d6:c9: a3:9f:05:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OENGQUQxMTAvBgNVBAUTKDAzRkYwNjU3QzBFQ0Y4NzM5ODMwMzNGN0M2QzY0ODhC MzM3ODlDNDMwHhcNMjUwNjE1MDQzNDIyWhcNMjUwNjIyMDQzNDIyWjAYMRYwFAYD VQQDEw02ODRlNGQ0ZS1kYTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyqocS0Dae/cPfvWzGWNLLYAFBJKl9bnlF/C2kUr/i1Ee6fGdzQabH5BtWYBO bKBszpdhgCtWs4hPonnPwsRt5HmQvV1pz0di4cTBGy8DQvCIw48VxX7gKuRdmTuf T2miMhKQvDEFHtM6SalwZUNIFrqDSBJZXTr2LYiGtIpntjI5x3aK9LsM76Ckywms hWKJLMQHZSKxVEjxLwXy7TFnKD4Jb5gMkexiOpNqnO8fWBe+XCZosGY4cKO+TG97 pcYqlC5ghqO16CFqi86el1RdWWFY1zSKM6OJ0mP9z+UZeNkhMq6CL18E21xW40kB 4y/qKZoJMKijK3UcOLlk2zo0xwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFCxvcT2 1sCEgleENVUVDeaGInteMB8GA1UdIwQYMBaAFAP/BlfA7PhzmDAz98bGSIszeJxD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0ZBRC81NjFENjYyRUVB MDQxMUVFOTJEMTA2MTFDNEY5QUUwMi9BXzhHVjhEcy1IT1lNRFAzeHNaSWl6TjRu RU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FfOEdWOERzLUhPWU1EUDN4c1pJaXpONG5FTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Q0ZBRC81NjFENjYyRUVBMDQxMUVFOTJEMTA2MTFDNEY5QUUwMi9BXzhHVjhEcy1I T1lNRFAzeHNaSWl6TjRuRU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAp5rdQXlVU8WdwCjfH7sfNQ2Kr0a/MT+/Yr0gyxUJhBHEWIx6vUZJd MnzTnmRxiM8rlGY3TxVJQZAzp50qMBbPf/EN2ECm/G2beofSxOXpAozzKuwdhBD/ vPkGqgCQubZVHUwd5vNjBh+CO1A68nK3fDHDF+1OVEmAQgwJtK5+OI/OmpzccO0C 5Cu8La/1ZEabPTomX6tBp5roinXaXev5YiEKlbVnEnsWcXuN40LPubpkX319DFWD aHbMjkPi+hEK14r+ss44ANdjTd0CCOGPEyL/Vtg2nitQLQ1R3GGHgxDP/xX1Rxzf YcshfZKqXRZ5OyX6eQwZhDIr1smjnwWX -----END CERTIFICATE-----Generated at Sun Jun 15 08:38:14 2025 by rpki-client