$ rpki-client -vvf rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.mft File: 3OubbYP7AtxF6SA1OKXIr2-UH6k.mft (raw, json) Hash identifier: QYXEknXNeQKM/aklBpdMTWv2Gn333ibk5Qc3qkU9POQ= Subject key identifier: 44:1E:27:98:6C:7E:C2:ED:D0:CC:A2:63:28:71:0E:A0:94:70:31:E3 Authority key identifier: DC:EB:9B:6D:83:FB:02:DC:45:E9:20:35:38:A5:C8:AF:6F:94:1F:A9 Certificate issuer: /CN=A918D2CA/serialNumber=DCEB9B6D83FB02DC45E9203538A5C8AF6F941FA9 Certificate serial: 0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OubbYP7AtxF6SA1OKXIr2-UH6k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.mft Manifest number: 0D Signing time: Fri 13 Jun 2025 06:58:12 +0000 Manifest this update: Fri 13 Jun 2025 06:58:12 +0000 Manifest next update: Fri 20 Jun 2025 06:58:12 +0000 Files and hashes: 1: 3OubbYP7AtxF6SA1OKXIr2-UH6k.crl (hash: cIJL1schCpwNophxVv+Xpu4HoAj+zstujckEi4yeu1k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.crl rsync://rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OubbYP7AtxF6SA1OKXIr2-UH6k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 06:58:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D2CA, serialNumber=DCEB9B6D83FB02DC45E9203538A5C8AF6F941FA9 Validity Not Before: Jun 13 06:58:12 2025 GMT Not After : Jun 20 06:58:12 2025 GMT Subject: CN=684bcc04-c4e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:ce:4e:3d:21:68:4a:36:fb:99:21:4e:89:8a: be:c8:75:d3:47:47:4e:bb:d9:ea:4a:fb:d9:5c:68: 42:4b:12:29:cf:06:e6:4a:e0:2b:f5:f0:26:8c:06: 11:1f:da:f6:99:47:ec:ea:0b:a2:29:1d:9b:88:32: 46:94:43:34:87:c5:d9:f1:0f:47:56:b3:96:36:52: 80:f5:ae:22:ba:3d:52:f7:40:0c:80:5d:8c:81:41: a5:a3:70:40:dd:47:b4:58:b7:3e:84:4a:e2:4d:f0: 1e:76:29:c5:32:5e:5f:9a:4c:76:68:b0:7e:32:bb: 49:c7:0f:c9:a0:05:49:2e:27:d9:54:28:13:c4:21: 57:0c:f9:4c:8c:2b:31:e1:b1:c1:d7:c0:6c:b5:35: 9b:75:02:e7:19:d8:d3:a6:8c:ae:26:41:71:91:f9: 28:01:95:f3:dc:dd:9c:5c:20:78:aa:c5:97:64:35: e1:1d:2a:37:92:17:b1:18:b8:14:3e:0d:e1:71:0e: e2:52:e4:18:83:3c:dc:a7:00:71:67:c8:63:63:f8: ff:71:f6:78:a6:74:8c:0c:f2:ce:76:2c:d9:cf:0f: a8:01:53:56:f7:da:d0:8a:d6:a6:d7:25:0d:3c:c5: 1c:cd:98:3d:b9:d3:57:ff:6d:d9:ba:98:bc:80:36: bf:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:1E:27:98:6C:7E:C2:ED:D0:CC:A2:63:28:71:0E:A0:94:70:31:E3 X509v3 Authority Key Identifier: keyid:DC:EB:9B:6D:83:FB:02:DC:45:E9:20:35:38:A5:C8:AF:6F:94:1F:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OubbYP7AtxF6SA1OKXIr2-UH6k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:0e:79:7b:53:81:7f:79:40:c1:a3:d0:8f:0d:25:41:f7:c4: 2a:e2:7f:d5:ac:4c:9e:5b:a3:93:20:ed:29:7b:fd:1f:d0:34: aa:86:f3:03:60:c3:96:a5:db:d4:4c:2b:b5:bd:0a:7e:70:63: f1:21:da:58:cb:75:7a:06:0e:fa:2a:9d:c1:d1:af:bb:6c:e5: 19:99:14:c6:a3:16:05:69:0b:80:ad:78:af:46:a4:aa:ca:59: 75:63:05:ef:21:52:43:d0:67:fc:d8:16:ca:b6:26:c1:65:2e: 15:a9:66:b7:2e:d0:08:c9:88:ac:42:b3:d4:06:b2:67:eb:c4: fb:4a:c7:10:fb:07:23:ca:4d:ab:1e:ca:a9:bd:77:12:05:1a: 73:89:3b:2d:60:52:13:2f:5f:90:9d:f0:6c:c7:93:4e:e2:ef: 92:12:e4:56:36:30:59:43:28:5c:fa:22:80:dc:a8:bd:91:ef: 8e:20:e6:60:1a:7c:4b:f0:92:ec:5c:de:ef:25:e0:5a:51:c5: ea:0e:8d:d7:c3:9c:e7:21:2f:c6:f7:18:cd:a5:4b:95:9e:66: 46:77:37:c2:4d:d4:01:cf:1c:b1:95:1a:8a:07:a8:6a:39:10: a8:f4:d2:18:4c:75:2b:bc:2a:8d:7e:88:64:57:bb:d8:9a:5f: 7d:9b:bd:e7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RDJDQTExMC8GA1UEBRMoRENFQjlCNkQ4M0ZCMDJEQzQ1RTkyMDM1MzhBNUM4QUY2 Rjk0MUZBOTAeFw0yNTA2MTMwNjU4MTJaFw0yNTA2MjAwNjU4MTJaMBgxFjAUBgNV BAMTDTY4NGJjYzA0LWM0ZTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDszk49IWhKNvuZIU6Jir7IddNHR0672epK+9lcaEJLEinPBuZK4Cv18CaMBhEf 2vaZR+zqC6IpHZuIMkaUQzSHxdnxD0dWs5Y2UoD1riK6PVL3QAyAXYyBQaWjcEDd R7RYtz6ESuJN8B52KcUyXl+aTHZosH4yu0nHD8mgBUkuJ9lUKBPEIVcM+UyMKzHh scHXwGy1NZt1AucZ2NOmjK4mQXGR+SgBlfPc3ZxcIHiqxZdkNeEdKjeSF7EYuBQ+ DeFxDuJS5BiDPNynAHFnyGNj+P9x9nimdIwM8s52LNnPD6gBU1b32tCK1qbXJQ08 xRzNmD2501f/bdm6mLyANr8xAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURB4nmGx+ wu3QzKJjKHEOoJRwMeMwHwYDVR0jBBgwFoAU3OubbYP7AtxF6SA1OKXIr2+UH6kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThEMkNBLzEyMzg0QURFMzU0 NzExRjA4MTAzQkUyNEM0RjlBRTAyLzNPdWJiWVA3QXR4RjZTQTFPS1hJcjItVUg2 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM091YmJZUDdBdHhGNlNBMU9LWElyMi1VSDZrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThE MkNBLzEyMzg0QURFMzU0NzExRjA4MTAzQkUyNEM0RjlBRTAyLzNPdWJiWVA3QXR4 RjZTQTFPS1hJcjItVUg2ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEUOeXtTgX95QMGj0I8NJUH3xCrif9WsTJ5bo5Mg7Sl7/R/QNKqG8wNg w5al29RMK7W9Cn5wY/Eh2ljLdXoGDvoqncHRr7ts5RmZFMajFgVpC4CteK9GpKrK WXVjBe8hUkPQZ/zYFsq2JsFlLhWpZrcu0AjJiKxCs9QGsmfrxPtKxxD7ByPKTase yqm9dxIFGnOJOy1gUhMvX5Cd8GzHk07i75IS5FY2MFlDKFz6IoDcqL2R744g5mAa fEvwkuxc3u8l4FpRxeoOjdfDnOchL8b3GM2lS5WeZkZ3N8JN1AHPHLGVGooHqGo5 EKj00hhMdSu8Ko1+iGRXu9iaX32bvec= -----END CERTIFICATE-----Generated at Sun Jun 15 08:44:48 2025 by rpki-client