$ rpki-client -vvf rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.mft File: 7DuQw0iG_Qko4xJUYfu0FSvpkTc.mft (raw, json) Hash identifier: aA7hZrj2FxC5Uczr6hM3lSqzwzxIgdvJKN2CgKIBrUQ= Subject key identifier: 02:BA:75:F6:2E:E1:BA:67:26:AE:FA:17:39:4E:32:14:23:24:1E:9B Authority key identifier: EC:3B:90:C3:48:86:FD:09:28:E3:12:54:61:FB:B4:15:2B:E9:91:37 Certificate issuer: /CN=A918D7D0/serialNumber=EC3B90C34886FD0928E3125461FBB4152BE99137 Certificate serial: 0C5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DuQw0iG_Qko4xJUYfu0FSvpkTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.mft Manifest number: 145A Signing time: Sat 14 Jun 2025 18:12:20 +0000 Manifest this update: Sat 14 Jun 2025 18:12:20 +0000 Manifest next update: Sat 21 Jun 2025 18:12:20 +0000 Files and hashes: 1: 7DuQw0iG_Qko4xJUYfu0FSvpkTc.crl (hash: svRLAqx1TN68uiipvVz9j0CXffHHdE2ktvy3FjXcKGc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.crl rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DuQw0iG_Qko4xJUYfu0FSvpkTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 18:12:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3164 (0xc5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D7D0, serialNumber=EC3B90C34886FD0928E3125461FBB4152BE99137 Validity Not Before: Jun 14 18:12:20 2025 GMT Not After : Jun 21 18:12:20 2025 GMT Subject: CN=684dbb84-4a91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:cc:fc:c6:35:bb:7f:a7:41:ba:f5:16:9a:52: b1:d6:ba:d1:f5:d7:a2:b1:91:0f:7e:df:14:86:fa: 28:7f:b5:b2:40:aa:ef:18:32:03:63:85:32:82:41: 7f:83:82:7a:8b:d9:f1:94:c3:0a:ac:74:b2:a4:e2: 95:b3:a2:87:f3:88:1e:cd:9d:71:67:ca:1c:21:79: f0:b5:15:ff:40:ce:86:42:48:b5:52:b8:6b:0b:e5: 70:c8:f0:a9:db:ce:30:3e:a4:f7:a9:9c:1e:47:30: a8:cf:12:28:16:7b:20:0c:88:87:ec:f6:b6:99:39: e0:5a:81:68:34:da:f1:47:31:f0:30:d8:c7:11:e8: a7:c9:d7:95:0e:a7:5c:b9:06:91:5d:43:89:e4:d1: 35:ec:b0:c2:7a:69:33:33:21:8d:80:e2:a1:1d:85: ad:2b:30:79:db:31:e6:5b:7e:23:e7:d1:7f:0c:e5: cb:75:c1:60:f1:00:96:42:35:1d:bf:bf:3d:39:59: d0:2f:4b:e8:52:ac:8b:3d:9b:3a:66:55:3a:d3:bc: 72:db:cb:48:67:f8:97:3a:84:11:48:05:45:a3:52: 80:59:d2:c5:9c:c4:fa:9d:f0:3a:e9:bc:89:82:c8: 66:91:58:6f:51:66:10:0f:e5:a4:ec:c6:d6:b2:e4: c2:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:BA:75:F6:2E:E1:BA:67:26:AE:FA:17:39:4E:32:14:23:24:1E:9B X509v3 Authority Key Identifier: keyid:EC:3B:90:C3:48:86:FD:09:28:E3:12:54:61:FB:B4:15:2B:E9:91:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DuQw0iG_Qko4xJUYfu0FSvpkTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:29:00:e8:9e:d8:fb:86:68:96:36:43:66:aa:2e:65:0c:a8: a0:36:f4:44:15:d5:50:42:7a:52:2c:b6:b2:0c:8d:30:90:1e: 3d:36:f1:f7:5d:90:20:aa:af:d7:3b:5e:84:50:c6:ca:dc:61: 1a:16:2a:79:a0:e5:05:ff:0a:56:62:c1:6c:a3:ea:0c:d1:5e: bf:e7:c2:7b:90:ad:aa:8d:14:e0:ab:07:a6:b1:7b:94:07:9f: 52:cb:ce:f7:cd:c0:06:17:f3:fb:51:95:e4:b2:4f:49:f9:68: 51:d4:7d:da:3d:3e:9b:66:16:7a:0a:7f:0a:bc:06:72:4a:ca: a5:18:db:bd:22:c9:61:88:1d:d9:76:d9:e3:20:f1:66:19:c1: 33:e7:cc:a4:63:8b:64:19:5f:e3:b1:b4:47:f6:3a:eb:63:67: fd:4d:92:65:0e:9c:4f:a6:ff:1a:79:79:81:45:97:8e:10:94: 91:84:2a:aa:94:7c:d3:9f:cf:bd:26:2a:2b:b4:29:d5:c1:c7: 4c:a8:f7:bf:b8:32:8a:aa:72:a9:f0:c6:36:88:22:8f:f3:cd: 6b:a2:37:53:b2:e8:db:2c:2f:37:7b:e3:8d:0a:74:2b:54:ba: a1:2b:4b:5c:5e:b3:cc:ce:c2:a5:9c:59:e9:18:c7:86:1a:7f: 40:93:87:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ3RDAxMTAvBgNVBAUTKEVDM0I5MEMzNDg4NkZEMDkyOEUzMTI1NDYxRkJCNDE1 MkJFOTkxMzcwHhcNMjUwNjE0MTgxMjIwWhcNMjUwNjIxMTgxMjIwWjAYMRYwFAYD VQQDEw02ODRkYmI4NC00YTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Mz8xjW7f6dBuvUWmlKx1rrR9deisZEPft8Uhvoof7WyQKrvGDIDY4UygkF/ g4J6i9nxlMMKrHSypOKVs6KH84gezZ1xZ8ocIXnwtRX/QM6GQki1UrhrC+VwyPCp 284wPqT3qZweRzCozxIoFnsgDIiH7Pa2mTngWoFoNNrxRzHwMNjHEeinydeVDqdc uQaRXUOJ5NE17LDCemkzMyGNgOKhHYWtKzB52zHmW34j59F/DOXLdcFg8QCWQjUd v789OVnQL0voUqyLPZs6ZlU607xy28tIZ/iXOoQRSAVFo1KAWdLFnMT6nfA66byJ gshmkVhvUWYQD+Wk7MbWsuTC/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAK6dfYu 4bpnJq76FzlOMhQjJB6bMB8GA1UdIwQYMBaAFOw7kMNIhv0JKOMSVGH7tBUr6ZE3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDdEMC85ODJCMkQ1QTAw ODIxMUVBQjcxRjRBMkJDNEY5QUUwMi83RHVRdzBpR19Ra280eEpVWWZ1MEZTdnBr VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdEdVF3MGlHX1FrbzR4SlVZZnUwRlN2cGtUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDdEMC85ODJCMkQ1QTAwODIxMUVBQjcxRjRBMkJDNEY5QUUwMi83RHVRdzBpR19R a280eEpVWWZ1MEZTdnBrVGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpKQDontj7hmiWNkNmqi5lDKigNvREFdVQQnpSLLayDI0wkB49NvH3 XZAgqq/XO16EUMbK3GEaFip5oOUF/wpWYsFso+oM0V6/58J7kK2qjRTgqwemsXuU B59Sy873zcAGF/P7UZXksk9J+WhR1H3aPT6bZhZ6Cn8KvAZySsqlGNu9IslhiB3Z dtnjIPFmGcEz58ykY4tkGV/jsbRH9jrrY2f9TZJlDpxPpv8aeXmBRZeOEJSRhCqq lHzTn8+9JiortCnVwcdMqPe/uDKKqnKp8MY2iCKP881rojdTsujbLC83e+ONCnQr VLqhK0tcXrPMzsKlnFnpGMeGGn9Ak4dU -----END CERTIFICATE-----Generated at Sun Jun 15 05:00:59 2025 by rpki-client