$ rpki-client -vvf rpki.apnic.net/member_repository/A918F0E2/348DE1CEA25E11EFA38D9375C4F9AE02/PeqLG7hy3RJspkfMN1wgdgJAw4U.mft File: PeqLG7hy3RJspkfMN1wgdgJAw4U.mft (raw, json) Hash identifier: vg/VtwDE1Ap3xnSTfj9RzzptCtLYwULMpBt/SrpxbSA= Subject key identifier: 07:0B:6D:C6:1F:24:F4:C3:75:6B:4C:A5:BB:EA:CB:03:40:90:9B:02 Authority key identifier: 3D:EA:8B:1B:B8:72:DD:12:6C:A6:47:CC:37:5C:20:76:02:40:C3:85 Certificate issuer: /CN=A918F0E2/serialNumber=3DEA8B1BB872DD126CA647CC375C20760240C385 Certificate serial: 70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PeqLG7hy3RJspkfMN1wgdgJAw4U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F0E2/348DE1CEA25E11EFA38D9375C4F9AE02/PeqLG7hy3RJspkfMN1wgdgJAw4U.mft Manifest number: 6F Signing time: Sun 15 Jun 2025 06:00:09 +0000 Manifest this update: Sun 15 Jun 2025 06:00:09 +0000 Manifest next update: Sun 22 Jun 2025 06:00:08 +0000 Files and hashes: 1: PeqLG7hy3RJspkfMN1wgdgJAw4U.crl (hash: +zj6VpeZRKmLLnAY8YbyAk7psdLAW6Bv1GcV8dTOv5I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F0E2/348DE1CEA25E11EFA38D9375C4F9AE02/PeqLG7hy3RJspkfMN1wgdgJAw4U.crl rsync://rpki.apnic.net/member_repository/A918F0E2/348DE1CEA25E11EFA38D9375C4F9AE02/PeqLG7hy3RJspkfMN1wgdgJAw4U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PeqLG7hy3RJspkfMN1wgdgJAw4U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 06:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 112 (0x70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F0E2, serialNumber=3DEA8B1BB872DD126CA647CC375C20760240C385 Validity Not Before: Jun 15 06:00:09 2025 GMT Not After : Jun 22 06:00:08 2025 GMT Subject: CN=684e6169-20fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9c:28:38:3c:57:91:ff:6e:81:f8:8d:7a:c3: 2a:ba:9b:67:db:d4:3d:59:9f:65:88:0f:7c:1b:49: 6a:37:07:64:7f:61:ae:e2:71:c4:1a:e6:b4:60:88: f7:9c:e3:bd:34:02:93:21:32:e3:6d:4e:42:56:2a: a9:33:aa:b6:d4:7d:cf:fa:1c:be:bf:79:4f:3d:0d: 8a:36:15:d9:4f:83:b8:a7:8d:f5:65:c6:35:ed:33: 51:3a:9e:60:e3:b5:43:74:c9:ff:a4:08:4c:5e:e8: 4f:e9:c3:c5:ab:b7:4c:5f:26:98:5b:e8:d5:75:76: ce:9f:14:99:27:7d:a3:07:97:f7:a3:1c:e6:8e:9d: 0f:81:e4:10:18:2a:fa:df:7a:40:89:a0:1b:93:e5: fa:d9:59:f7:66:00:a4:d9:b9:d7:21:8c:4c:7c:33: 4d:cd:62:ac:fb:6e:2b:73:08:bd:97:46:79:16:bf: a2:66:a7:7d:ba:f6:bb:a9:cb:49:55:8b:c6:32:d1: d2:f3:b3:71:43:e7:23:13:cf:24:c1:4f:2d:c8:25: 91:38:7b:84:94:49:95:eb:6b:53:5d:f5:fc:5a:6a: 3a:51:18:70:ec:ee:01:9e:12:18:06:97:ed:c6:3d: ed:11:9f:e8:24:7d:08:08:00:5c:2b:9c:f0:9f:2c: ce:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:0B:6D:C6:1F:24:F4:C3:75:6B:4C:A5:BB:EA:CB:03:40:90:9B:02 X509v3 Authority Key Identifier: keyid:3D:EA:8B:1B:B8:72:DD:12:6C:A6:47:CC:37:5C:20:76:02:40:C3:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F0E2/348DE1CEA25E11EFA38D9375C4F9AE02/PeqLG7hy3RJspkfMN1wgdgJAw4U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PeqLG7hy3RJspkfMN1wgdgJAw4U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F0E2/348DE1CEA25E11EFA38D9375C4F9AE02/PeqLG7hy3RJspkfMN1wgdgJAw4U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:b5:77:8d:e7:b2:9c:f5:e6:14:f4:db:74:84:7a:03:7c:0e: 92:79:16:4a:71:34:ec:82:02:0a:7e:62:50:28:24:3c:95:60: eb:58:d0:af:4d:fc:a1:b5:ea:7e:84:4a:ff:3d:b3:52:94:62: 10:b6:cf:a3:c4:16:bf:f0:7a:e2:2d:c2:f8:a8:ab:ce:ad:8a: 4f:ce:9d:89:01:08:c9:e1:6a:f9:e6:33:a9:51:9a:ae:b9:60: 1e:ab:69:eb:db:84:7c:a0:ad:a5:35:df:62:8a:d6:4c:2c:95: 44:b2:df:53:b5:99:2e:01:07:89:ce:ba:cf:92:ad:40:2b:e3: 2d:d0:76:10:98:ac:31:c1:15:d7:5b:ff:7d:74:3c:ac:d6:89: fc:79:df:8c:76:5b:37:f7:25:70:54:62:bd:44:87:ae:0d:18: 61:d0:6d:fd:93:04:f3:8b:c0:77:ea:8f:cc:b7:a7:88:36:23: da:54:7a:3e:50:b3:59:61:1d:dc:02:66:8c:50:f9:97:11:07: 0d:c5:39:dc:06:9a:f7:7b:96:fb:54:0d:a9:34:98:aa:1a:91: 67:24:2c:48:7d:55:95:a6:79:aa:70:46:c7:47:2a:76:a7:5c: 9f:e4:a0:de:a7:83:54:ce:b8:e0:8d:db:4f:82:7c:53:52:8e: 44:31:36:00 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RjBFMjExMC8GA1UEBRMoM0RFQThCMUJCODcyREQxMjZDQTY0N0NDMzc1QzIwNzYw MjQwQzM4NTAeFw0yNTA2MTUwNjAwMDlaFw0yNTA2MjIwNjAwMDhaMBgxFjAUBgNV BAMTDTY4NGU2MTY5LTIwZmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqnCg4PFeR/26B+I16wyq6m2fb1D1Zn2WID3wbSWo3B2R/Ya7iccQa5rRgiPec 4700ApMhMuNtTkJWKqkzqrbUfc/6HL6/eU89DYo2FdlPg7injfVlxjXtM1E6nmDj tUN0yf+kCExe6E/pw8Wrt0xfJphb6NV1ds6fFJknfaMHl/ejHOaOnQ+B5BAYKvrf ekCJoBuT5frZWfdmAKTZudchjEx8M03NYqz7bitzCL2XRnkWv6Jmp3269rupy0lV i8Yy0dLzs3FD5yMTzyTBTy3IJZE4e4SUSZXra1Nd9fxaajpRGHDs7gGeEhgGl+3G Pe0Rn+gkfQgIAFwrnPCfLM5JAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUBwttxh8k 9MN1a0ylu+rLA0CQmwIwHwYDVR0jBBgwFoAUPeqLG7hy3RJspkfMN1wgdgJAw4Uw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThGMEUyLzM0OERFMUNFQTI1 RTExRUZBMzhEOTM3NUM0RjlBRTAyL1BlcUxHN2h5M1JKc3BrZk1OMXdnZGdKQXc0 VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUGVxTEc3aHkzUkpzcGtmTU4xd2dkZ0pBdzRVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThG MEUyLzM0OERFMUNFQTI1RTExRUZBMzhEOTM3NUM0RjlBRTAyL1BlcUxHN2h5M1JK c3BrZk1OMXdnZGdKQXc0VS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEG1d43nspz15hT023SEegN8DpJ5FkpxNOyCAgp+YlAoJDyVYOtY0K9N /KG16n6ESv89s1KUYhC2z6PEFr/weuItwvioq86tik/OnYkBCMnhavnmM6lRmq65 YB6raevbhHygraU132KK1kwslUSy31O1mS4BB4nOus+SrUAr4y3QdhCYrDHBFddb /310PKzWifx534x2Wzf3JXBUYr1Eh64NGGHQbf2TBPOLwHfqj8y3p4g2I9pUej5Q s1lhHdwCZoxQ+ZcRBw3FOdwGmvd7lvtUDak0mKoakWckLEh9VZWmeapwRsdHKnan XJ/koN6ng1TOuOCN20+CfFNSjkQxNgA= -----END CERTIFICATE-----Generated at Tue Jun 17 04:44:59 2025 by rpki-client