$ rpki-client -vvf rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft File: PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft (raw, json) Hash identifier: wF9eV3acNP0mbz3QprTfscOhn/Sk7CwBAs9s33WbVKc= Subject key identifier: 64:FD:B3:7F:7E:A5:6D:51:C9:C2:3A:A0:3D:29:5B:0C:B8:7F:1C:BD Authority key identifier: 3C:AA:EA:F1:B0:D4:BF:63:17:AE:4F:1E:54:63:79:BF:F3:46:CF:D3 Certificate issuer: /CN=A918D663/serialNumber=3CAAEAF1B0D4BF6317AE4F1E546379BFF346CFD3 Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PKrq8bDUv2MXrk8eVGN5v_NGz9M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft Manifest number: 21 Signing time: Fri 13 Jun 2025 06:45:58 +0000 Manifest this update: Fri 13 Jun 2025 06:45:58 +0000 Manifest next update: Fri 20 Jun 2025 06:45:58 +0000 Files and hashes: 1: PKrq8bDUv2MXrk8eVGN5v_NGz9M.crl (hash: +KUgjtMHB90WTHOHyyBK778kOjTuS2wYFGpbKIJIXsI=) 2: 8BACF000172811F0B074151EC4F9AE02.roa (hash: ZKoMpxvl06JDEHPwPvY04s64aILLwwH0kpQN+XzmWw8=) 3: 8C215ED6172811F0B074151EC4F9AE02.roa (hash: QaVxitn1fI1JNxNdOxFRN5URfiNEZoLOemGjg0zo0Tg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.crl rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PKrq8bDUv2MXrk8eVGN5v_NGz9M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 06:45:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D663, serialNumber=3CAAEAF1B0D4BF6317AE4F1E546379BFF346CFD3 Validity Not Before: Jun 13 06:45:58 2025 GMT Not After : Jun 20 06:45:58 2025 GMT Subject: CN=684bc926-c863 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3c:6b:2e:ec:68:94:a8:44:4e:7a:be:ae:11: 93:ca:b6:48:aa:d8:4f:ef:25:24:75:95:fd:29:e7: d5:a3:ce:ac:0d:86:b6:7a:c1:1d:c6:37:cf:27:50: bc:24:50:2a:3e:5c:8a:d4:da:04:09:bb:e8:fe:f0: db:60:0e:95:ef:b9:9c:f5:bf:55:d4:28:0e:e8:8a: cf:dd:a8:87:d5:b5:aa:cd:c2:e3:a6:60:81:05:7e: fa:28:79:45:0b:c6:45:b8:db:79:f3:a6:41:bb:51: 10:63:d0:2e:f5:75:db:83:a7:e8:42:34:82:7b:d1: 3f:0b:36:4f:ad:52:b0:51:96:94:dc:64:99:53:2f: 78:be:27:e5:ff:4e:e6:75:37:dd:1b:74:89:3f:a7: 26:b4:10:a3:85:cb:b2:8e:db:c4:eb:09:30:93:c7: 6c:39:59:8b:0f:2b:9b:53:1d:50:cd:e9:61:9d:e9: 05:6d:9b:46:5b:ec:6b:25:0c:e8:eb:c4:9c:32:6d: 6d:d7:3f:f0:6f:85:a6:ce:4f:52:50:48:c5:50:5f: ad:b6:d6:9c:27:45:91:56:67:8e:41:9e:ff:0f:3e: 98:4d:2b:69:50:5a:77:c1:8c:fe:62:5f:ee:25:df: c5:ae:c6:c3:97:2f:9e:25:fd:f0:32:80:b7:d4:83: 58:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:FD:B3:7F:7E:A5:6D:51:C9:C2:3A:A0:3D:29:5B:0C:B8:7F:1C:BD X509v3 Authority Key Identifier: keyid:3C:AA:EA:F1:B0:D4:BF:63:17:AE:4F:1E:54:63:79:BF:F3:46:CF:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PKrq8bDUv2MXrk8eVGN5v_NGz9M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:3e:bb:3a:98:6f:1d:f8:1e:31:52:08:79:6f:33:a6:df:4f: 0c:40:a7:eb:1a:44:55:4d:b5:13:a5:f9:79:6c:dc:bf:36:e2: 65:bf:f4:91:5d:f2:cd:11:56:4b:91:cc:ca:0b:2c:93:b1:1a: ca:27:5b:89:e4:66:7c:90:0b:08:fe:ac:80:38:59:24:da:b3: 51:cd:18:03:5f:a4:6a:03:33:09:8b:a0:88:4e:26:fc:d4:b7: 08:ea:c4:75:d3:5e:6d:9d:22:b3:45:fe:33:d5:84:d2:29:75: 59:2f:8c:89:91:c5:43:9e:33:d8:f0:cc:b1:27:c8:b1:b7:22: fd:64:4d:a2:11:32:5e:9a:3d:96:9c:55:be:14:a6:1d:50:e6: ca:5c:50:fe:56:0e:06:13:d4:3f:1f:be:e7:a6:07:3a:98:d7: f1:3b:e5:fa:b9:2b:cd:35:a0:65:57:18:c7:9c:6a:78:0c:da: dd:8f:af:6d:bb:ff:55:05:db:d2:c5:6d:81:c3:23:65:bf:db: 60:46:39:60:6b:b1:ea:2e:ce:e0:31:fc:f8:3d:12:ed:b0:f8: 57:8c:ba:f2:3c:85:dc:12:a7:4f:52:da:80:b9:ee:e4:59:82: 87:44:f9:b7:09:15:e9:4a:d0:09:0b:f7:87:eb:e6:8b:0e:81: 2a:b8:47:e7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RDY2MzExMC8GA1UEBRMoM0NBQUVBRjFCMEQ0QkY2MzE3QUU0RjFFNTQ2Mzc5QkZG MzQ2Q0ZEMzAeFw0yNTA2MTMwNjQ1NThaFw0yNTA2MjAwNjQ1NThaMBgxFjAUBgNV BAMTDTY4NGJjOTI2LWM4NjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEPGsu7GiUqEROer6uEZPKtkiq2E/vJSR1lf0p59WjzqwNhrZ6wR3GN88nULwk UCo+XIrU2gQJu+j+8NtgDpXvuZz1v1XUKA7ois/dqIfVtarNwuOmYIEFfvooeUUL xkW423nzpkG7URBj0C71dduDp+hCNIJ70T8LNk+tUrBRlpTcZJlTL3i+J+X/TuZ1 N90bdIk/pya0EKOFy7KO28TrCTCTx2w5WYsPK5tTHVDN6WGd6QVtm0Zb7GslDOjr xJwybW3XP/BvhabOT1JQSMVQX6221pwnRZFWZ45Bnv8PPphNK2lQWnfBjP5iX+4l 38WuxsOXL54l/fAygLfUg1ijAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZP2zf36l bVHJwjqgPSlbDLh/HL0wHwYDVR0jBBgwFoAUPKrq8bDUv2MXrk8eVGN5v/NGz9Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThENjYzLzdBQzk2NzlFMTcy MDExRjBCNzQyMjM0RUM0RjlBRTAyL1BLcnE4YkRVdjJNWHJrOGVWR041dl9OR3o5 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUEtycThiRFV2Mk1Ycms4ZVZHTjV2X05HejlNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThE NjYzLzdBQzk2NzlFMTcyMDExRjBCNzQyMjM0RUM0RjlBRTAyL1BLcnE4YkRVdjJN WHJrOGVWR041dl9OR3o5TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFE+uzqYbx34HjFSCHlvM6bfTwxAp+saRFVNtROl+Xls3L824mW/9JFd 8s0RVkuRzMoLLJOxGsonW4nkZnyQCwj+rIA4WSTas1HNGANfpGoDMwmLoIhOJvzU twjqxHXTXm2dIrNF/jPVhNIpdVkvjImRxUOeM9jwzLEnyLG3Iv1kTaIRMl6aPZac Vb4Uph1Q5spcUP5WDgYT1D8fvuemBzqY1/E75fq5K801oGVXGMecangM2t2Pr227 /1UF29LFbYHDI2W/22BGOWBrseouzuAx/Pg9Eu2w+FeMuvI8hdwSp09S2oC57uRZ godE+bcJFelK0AkL94fr5osOgSq4R+c= -----END CERTIFICATE-----Generated at Sat Jun 14 19:40:35 2025 by rpki-client