$ rpki-client -vvf rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft File: CrbdJlFcU-zFsEYrTEddWn5aVTc.mft (raw, json) Hash identifier: W1emU7IeSzm+mPLjsQTNUNdLQMhR4MEqrVyydrXPJG8= Subject key identifier: 62:11:18:BB:E6:81:45:16:99:06:C1:BE:E6:A3:39:81:B1:A6:6A:9F Authority key identifier: 0A:B6:DD:26:51:5C:53:EC:C5:B0:46:2B:4C:47:5D:5A:7E:5A:55:37 Certificate issuer: /CN=A918E4B7/serialNumber=0AB6DD26515C53ECC5B0462B4C475D5A7E5A5537 Certificate serial: 0521 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft Manifest number: 04FE Signing time: Sat 14 Jun 2025 23:29:01 +0000 Manifest this update: Sat 14 Jun 2025 23:29:00 +0000 Manifest next update: Sat 21 Jun 2025 23:29:00 +0000 Files and hashes: 1: CrbdJlFcU-zFsEYrTEddWn5aVTc.crl (hash: avWAxjazw21gP7heXUBV6/8xFM0c6LgF86uoVLjp2xQ=) 2: BAA1B454654411EFACBF7956C4F9AE02.roa (hash: /oWh6sDf6JMhXVQFfiBK5T8ylerkJmv9WJJdVtYkSIU=) 3: 17A651BCA40E11EEAAB83671C4F9AE02.roa (hash: hF9MKD/FwgF9cY8hvh9m1ZRU6ZbNvnTiLbcgCIT5wPc=) 4: 16D4DB82A40E11EEAAB83671C4F9AE02.roa (hash: 9aBOau/kR05/ZlK4Ctxtvv3XFrOvJ/VU5zNEft0SiRE=) 5: 1ED4125C50C111EFA64C2437C4F9AE02.roa (hash: M9HaGHa7pI3ilHdh1OGWp/+WvUY2NRFrgXm0KqnYXRc=) 6: B9DEB77E654411EFACBF7956C4F9AE02.roa (hash: xYaxgWyzwtexyE7NeRo7CnQ16cP15TpfRCg28S5nmVo=) 7: ED8B1602A0D711EFB982AD62C4F9AE02.roa (hash: ERqr4ZgITrZRkOwS3AN4CJTqd2fIDLE15f/P4/QlBUI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.crl rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 23:28:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1313 (0x521) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E4B7, serialNumber=0AB6DD26515C53ECC5B0462B4C475D5A7E5A5537 Validity Not Before: Jun 14 23:29:00 2025 GMT Not After : Jun 21 23:29:00 2025 GMT Subject: CN=684e05bc-6fdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:01:7f:40:74:af:59:15:d6:29:09:ce:12:99: 56:96:cb:b6:4d:62:21:26:fc:52:fd:b3:09:05:e0: 65:a9:36:b5:68:6f:58:ce:46:8d:42:2d:06:20:de: 87:4f:d6:17:80:d6:99:32:c9:e4:ef:ba:25:ca:98: 09:cf:12:b9:1f:b5:fa:0a:68:f8:83:f6:7d:36:4d: 55:5d:dd:c6:aa:29:ee:b5:df:d1:e2:d5:86:c8:e6: 7c:4e:8d:47:b2:5d:c6:08:2c:3b:3e:be:06:ae:e8: fd:75:bb:b1:4d:4d:6d:5d:04:33:56:c1:90:03:59: da:3c:ae:95:51:71:33:47:83:98:9f:cd:b2:1f:d9: ee:54:71:ae:00:b3:bd:19:f1:d7:7e:6b:91:07:00: a2:f6:67:c4:ed:51:8d:ea:01:c8:4a:bb:b8:2b:e0: 90:88:5b:4f:2c:eb:58:98:f7:6a:00:2f:15:96:4b: b5:b7:8e:56:e5:82:07:f3:09:2e:25:23:e8:4a:c6: 2e:0f:a9:0d:70:44:19:f9:18:5e:a1:d6:f0:a3:46: 3b:bd:6c:b7:22:b4:ff:c5:67:59:8e:9d:c4:ad:70: eb:4f:7e:9c:06:67:42:27:b2:8b:f2:69:b3:ab:e0: 9b:72:a6:ee:7f:ba:9a:be:a3:b7:b1:d7:43:69:f7: 96:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:11:18:BB:E6:81:45:16:99:06:C1:BE:E6:A3:39:81:B1:A6:6A:9F X509v3 Authority Key Identifier: keyid:0A:B6:DD:26:51:5C:53:EC:C5:B0:46:2B:4C:47:5D:5A:7E:5A:55:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:0a:7b:7c:3e:79:2c:0b:6e:41:74:e2:47:73:a7:be:5f:20: 0e:9d:f8:37:aa:2e:64:1b:77:c7:61:11:93:66:95:98:23:21: 96:4b:b0:a9:f3:43:09:7b:8f:d6:24:60:ee:e8:57:ae:94:31: 92:aa:c2:80:27:7c:3d:43:45:44:eb:a0:52:4e:52:80:95:76: 59:ba:c4:31:b3:72:6d:ba:8b:d9:e2:9b:50:07:18:c3:d2:a2: 78:b2:03:d2:1f:05:79:76:10:91:6a:3f:01:14:28:32:7c:bd: da:b2:8e:98:2b:47:07:4c:75:46:9c:9a:8e:7b:d0:b6:ae:da: 58:a9:0a:67:b7:9c:8f:25:f4:39:f6:ca:6d:97:3e:8a:83:21: d0:e1:33:57:0b:44:58:a4:64:42:32:87:6b:72:c2:7f:34:34: 83:f1:cf:cb:a8:6a:27:9b:08:a7:e4:05:b2:af:27:1c:3f:18: e7:93:3f:7c:6e:cd:80:ef:88:6a:2e:07:c8:aa:92:ac:2f:40: f4:d8:e1:60:d5:8d:38:0c:47:89:21:4a:65:54:d7:fb:ff:f2: 1f:08:cc:b9:92:dd:1f:e0:39:eb:a2:05:59:8f:e7:00:37:2d: de:df:6d:cd:7a:a8:ed:05:9f:55:c4:1c:cb:29:19:51:31:1d: 14:eb:df:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU0QjcxMTAvBgNVBAUTKDBBQjZERDI2NTE1QzUzRUNDNUIwNDYyQjRDNDc1RDVB N0U1QTU1MzcwHhcNMjUwNjE0MjMyOTAwWhcNMjUwNjIxMjMyOTAwWjAYMRYwFAYD VQQDEw02ODRlMDViYy02ZmRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxAF/QHSvWRXWKQnOEplWlsu2TWIhJvxS/bMJBeBlqTa1aG9YzkaNQi0GIN6H T9YXgNaZMsnk77olypgJzxK5H7X6Cmj4g/Z9Nk1VXd3Gqinutd/R4tWGyOZ8To1H sl3GCCw7Pr4Gruj9dbuxTU1tXQQzVsGQA1naPK6VUXEzR4OYn82yH9nuVHGuALO9 GfHXfmuRBwCi9mfE7VGN6gHISru4K+CQiFtPLOtYmPdqAC8Vlku1t45W5YIH8wku JSPoSsYuD6kNcEQZ+Rheodbwo0Y7vWy3IrT/xWdZjp3ErXDrT36cBmdCJ7KL8mmz q+Cbcqbuf7qavqO3sddDafeW+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGIRGLvm gUUWmQbBvuajOYGxpmqfMB8GA1UdIwQYMBaAFAq23SZRXFPsxbBGK0xHXVp+WlU3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTRCNy9FQjMxMkYwMjFF QUExMUVDQjc1NkJGMzBDNEY5QUUwMi9DcmJkSmxGY1UtekZzRVlyVEVkZFduNWFW VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NyYmRKbEZjVS16RnNFWXJURWRkV241YVZUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTRCNy9FQjMxMkYwMjFFQUExMUVDQjc1NkJGMzBDNEY5QUUwMi9DcmJkSmxGY1Ut ekZzRVlyVEVkZFduNWFWVGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTCnt8PnksC25BdOJHc6e+XyAOnfg3qi5kG3fHYRGTZpWYIyGWS7Cp 80MJe4/WJGDu6FeulDGSqsKAJ3w9Q0VE66BSTlKAlXZZusQxs3JtuovZ4ptQBxjD 0qJ4sgPSHwV5dhCRaj8BFCgyfL3aso6YK0cHTHVGnJqOe9C2rtpYqQpnt5yPJfQ5 9sptlz6KgyHQ4TNXC0RYpGRCModrcsJ/NDSD8c/LqGonmwin5AWyryccPxjnkz98 bs2A74hqLgfIqpKsL0D02OFg1Y04DEeJIUplVNf7//IfCMy5kt0f4DnrogVZj+cA Ny3e323NeqjtBZ9VxBzLKRlRMR0U699h -----END CERTIFICATE-----Generated at Sun Jun 15 08:28:00 2025 by rpki-client