$ rpki-client -vvf rpki.apnic.net/member_repository/A918F1EE/EB00A8C8E75111EFBED81B0EC4F9AE02/poX1Gn3T8CbPKOIfA6FAaZ24_ow.mft File: poX1Gn3T8CbPKOIfA6FAaZ24_ow.mft (raw, json) Hash identifier: 4O7rkdqCbLwNNAFcgTXyC2AYKnLiZ5E2gXzicfhiqgk= Subject key identifier: DB:67:FE:D9:EC:9A:21:A2:7E:4C:D5:EB:D5:76:37:2C:0D:D5:02:BC Authority key identifier: A6:85:F5:1A:7D:D3:F0:26:CF:28:E2:1F:03:A1:40:69:9D:B8:FE:8C Certificate issuer: /CN=A918F1EE/serialNumber=A685F51A7DD3F026CF28E21F03A140699DB8FE8C Certificate serial: 43 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/poX1Gn3T8CbPKOIfA6FAaZ24_ow.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F1EE/EB00A8C8E75111EFBED81B0EC4F9AE02/poX1Gn3T8CbPKOIfA6FAaZ24_ow.mft Manifest number: 43 Signing time: Thu 19 Jun 2025 06:47:27 +0000 Manifest this update: Thu 19 Jun 2025 06:47:26 +0000 Manifest next update: Thu 26 Jun 2025 06:47:26 +0000 Files and hashes: 1: poX1Gn3T8CbPKOIfA6FAaZ24_ow.crl (hash: SVqAogdQPQoTJG5VkfHnDUyYSYFe+o9LFsQqrfRfsWQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F1EE/EB00A8C8E75111EFBED81B0EC4F9AE02/poX1Gn3T8CbPKOIfA6FAaZ24_ow.crl rsync://rpki.apnic.net/member_repository/A918F1EE/EB00A8C8E75111EFBED81B0EC4F9AE02/poX1Gn3T8CbPKOIfA6FAaZ24_ow.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/poX1Gn3T8CbPKOIfA6FAaZ24_ow.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 06:47:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F1EE, serialNumber=A685F51A7DD3F026CF28E21F03A140699DB8FE8C Validity Not Before: Jun 19 06:47:26 2025 GMT Not After : Jun 26 06:47:26 2025 GMT Subject: CN=6853b27f-7fa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a7:99:d3:76:3d:f9:0b:42:93:dc:ae:3d:17: d4:b4:f7:5b:0b:55:4b:c9:40:36:00:01:3a:76:0b: ae:55:91:72:d5:f9:dd:56:8e:7d:e3:30:5d:8a:27: d5:83:99:35:66:16:ab:53:ae:e6:6e:38:db:be:b6: a0:bd:b3:93:2b:61:ac:9c:f7:36:98:95:6d:1a:54: 50:35:24:8d:f0:1a:15:c6:ea:bc:60:93:f1:86:84: 70:61:db:bf:f6:8c:f8:65:6b:68:10:2e:5b:7b:30: a5:7d:7b:7d:11:53:70:c7:6b:c0:9d:6b:92:d5:5c: 6d:e9:54:34:9b:b1:49:d0:9b:e4:5c:fc:cb:58:78: e1:b5:c8:8f:b2:cc:60:c5:cb:ac:6c:54:90:03:40: 85:6b:b5:b3:8a:00:4a:d0:5b:99:fb:f1:c2:0c:0e: e6:40:1e:7e:b6:c3:bb:93:60:60:ba:35:4a:a4:be: 57:4b:86:b9:fc:e5:e5:11:44:8c:9a:7e:fd:10:6f: d2:68:67:7f:ee:a9:ae:c6:f0:b8:fa:5e:d3:b3:5d: 9c:05:83:26:93:3f:d5:e0:fa:d5:02:14:3d:74:7d: 8c:7f:97:69:cf:5e:ca:38:ce:50:93:7f:bb:cc:a5: 81:09:54:f4:8b:58:2e:73:27:f2:2a:a1:1e:0e:ca: 4e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:67:FE:D9:EC:9A:21:A2:7E:4C:D5:EB:D5:76:37:2C:0D:D5:02:BC X509v3 Authority Key Identifier: keyid:A6:85:F5:1A:7D:D3:F0:26:CF:28:E2:1F:03:A1:40:69:9D:B8:FE:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F1EE/EB00A8C8E75111EFBED81B0EC4F9AE02/poX1Gn3T8CbPKOIfA6FAaZ24_ow.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/poX1Gn3T8CbPKOIfA6FAaZ24_ow.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F1EE/EB00A8C8E75111EFBED81B0EC4F9AE02/poX1Gn3T8CbPKOIfA6FAaZ24_ow.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:72:0d:6a:45:fc:be:3d:88:5a:75:f4:4c:1a:12:9c:ac:f0: df:b7:92:36:ac:b4:45:2a:01:47:1b:bc:a7:73:d7:a0:7c:b0: 60:47:b1:f6:71:a1:1b:cd:f3:6f:d4:52:16:5b:40:5b:86:24: 4d:ec:07:08:29:82:58:92:dc:5b:e1:77:ef:1a:05:91:aa:82: f3:1d:bc:16:74:b9:59:e3:fa:42:f7:a2:0d:26:d7:9d:26:e5: 60:84:24:59:82:15:77:44:20:7a:32:55:cb:08:6a:1c:56:4f: e8:cc:db:81:8c:33:ca:0f:5e:40:06:54:87:68:62:3f:49:3a: 4b:54:a7:4e:44:aa:47:03:e6:6b:54:bd:c5:34:bf:7f:d1:6f: b4:d3:c7:85:06:05:c9:ae:b4:c6:3a:ac:da:80:8d:21:8b:66: 44:a5:04:67:35:6e:5a:68:eb:b5:b1:42:19:23:70:26:0d:a5: 8d:a5:9e:c3:af:75:f0:c7:6b:a6:c0:05:43:6b:71:f6:5b:9c: 9b:80:1b:dd:d8:94:7e:00:27:05:bf:05:c8:bf:eb:b1:b5:31: 4f:c4:03:17:57:2e:66:c6:a2:f0:81:b4:d7:c8:a3:7f:02:4c: bf:ff:98:d8:c0:e9:df:c3:45:b1:3a:bd:6e:5a:49:b8:14:17: 53:9b:3b:36 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RjFFRTExMC8GA1UEBRMoQTY4NUY1MUE3REQzRjAyNkNGMjhFMjFGMDNBMTQwNjk5 REI4RkU4QzAeFw0yNTA2MTkwNjQ3MjZaFw0yNTA2MjYwNjQ3MjZaMBgxFjAUBgNV BAMTDTY4NTNiMjdmLTdmYTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDap5nTdj35C0KT3K49F9S091sLVUvJQDYAATp2C65VkXLV+d1Wjn3jMF2KJ9WD mTVmFqtTruZuONu+tqC9s5MrYayc9zaYlW0aVFA1JI3wGhXG6rxgk/GGhHBh27/2 jPhla2gQLlt7MKV9e30RU3DHa8Cda5LVXG3pVDSbsUnQm+Rc/MtYeOG1yI+yzGDF y6xsVJADQIVrtbOKAErQW5n78cIMDuZAHn62w7uTYGC6NUqkvldLhrn85eURRIya fv0Qb9JoZ3/uqa7G8Lj6XtOzXZwFgyaTP9Xg+tUCFD10fYx/l2nPXso4zlCTf7vM pYEJVPSLWC5zJ/IqoR4Oyk5fAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU22f+2eya IaJ+TNXr1XY3LA3VArwwHwYDVR0jBBgwFoAUpoX1Gn3T8CbPKOIfA6FAaZ24/oww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThGMUVFL0VCMDBBOEM4RTc1 MTExRUZCRUQ4MUIwRUM0RjlBRTAyL3BvWDFHbjNUOENiUEtPSWZBNkZBYVoyNF9v dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcG9YMUduM1Q4Q2JQS09JZkE2RkFhWjI0X293LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThG MUVFL0VCMDBBOEM4RTc1MTExRUZCRUQ4MUIwRUM0RjlBRTAyL3BvWDFHbjNUOENi UEtPSWZBNkZBYVoyNF9vdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACdyDWpF/L49iFp19EwaEpys8N+3kjastEUqAUcbvKdz16B8sGBHsfZx oRvN82/UUhZbQFuGJE3sBwgpgliS3Fvhd+8aBZGqgvMdvBZ0uVnj+kL3og0m150m 5WCEJFmCFXdEIHoyVcsIahxWT+jM24GMM8oPXkAGVIdoYj9JOktUp05EqkcD5mtU vcU0v3/Rb7TTx4UGBcmutMY6rNqAjSGLZkSlBGc1blpo67WxQhkjcCYNpY2lnsOv dfDHa6bABUNrcfZbnJuAG93YlH4AJwW/Bci/67G1MU/EAxdXLmbGovCBtNfIo38C TL//mNjA6d/DRbE6vW5aSbgUF1ObOzY= -----END CERTIFICATE-----Generated at Thu Jun 19 11:09:05 2025 by rpki-client