$ rpki-client -vvf rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/0KRmavNbS2VNgYHEzRyRGu-ZRbs.mft File: 0KRmavNbS2VNgYHEzRyRGu-ZRbs.mft (raw, json) Hash identifier: IiWdOvGcDL7Uz/PK8yW8IUgjg+ErcRxwrfRgnPWFIMI= Subject key identifier: 0B:49:95:CC:F8:8E:57:C6:68:15:F6:A6:BD:9F:66:04:57:B4:7C:44 Authority key identifier: D0:A4:66:6A:F3:5B:4B:65:4D:81:81:C4:CD:1C:91:1A:EF:99:45:BB Certificate issuer: /CN=A918FE4B/serialNumber=D0A4666AF35B4B654D8181C4CD1C911AEF9945BB Certificate serial: 0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0KRmavNbS2VNgYHEzRyRGu-ZRbs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/0KRmavNbS2VNgYHEzRyRGu-ZRbs.mft Manifest number: 01D7 Signing time: Sun 15 Jun 2025 02:12:18 +0000 Manifest this update: Sun 15 Jun 2025 02:12:17 +0000 Manifest next update: Sun 22 Jun 2025 02:12:17 +0000 Files and hashes: 1: 0KRmavNbS2VNgYHEzRyRGu-ZRbs.crl (hash: Vy5wc2Vvk1PxfgaNaIeaPCFoeUN7s+NcYntsh1itLHI=) 2: EAB86CD041B411F0ACB20A83C4F9AE02.roa (hash: 4gZBSU/bOSWi/Wt8FLPy7mRAlfflMUeEyW7EU+A/yRc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/0KRmavNbS2VNgYHEzRyRGu-ZRbs.crl rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/0KRmavNbS2VNgYHEzRyRGu-ZRbs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0KRmavNbS2VNgYHEzRyRGu-ZRbs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:12:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FE4B, serialNumber=D0A4666AF35B4B654D8181C4CD1C911AEF9945BB Validity Not Before: Jun 15 02:12:17 2025 GMT Not After : Jun 22 02:12:17 2025 GMT Subject: CN=684e2c02-3d07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1b:bb:09:9a:a9:02:c7:50:a9:9b:22:f8:ae: ed:47:a4:29:56:5c:e0:81:05:3f:7b:b4:34:83:0d: 93:89:39:49:d1:9e:33:55:1d:cd:74:ba:9b:88:5d: a9:10:80:76:8e:08:03:07:b6:14:2b:8a:94:a4:01: 7e:bc:e0:48:4a:39:7d:e9:df:b5:44:46:c8:36:5b: 3e:4e:6f:f6:58:b5:34:b5:29:8f:cc:3c:f5:89:52: 23:b2:55:21:67:3c:44:99:93:4c:8e:66:72:19:d2: 75:33:3e:e1:eb:b8:65:a2:33:f1:29:31:78:2e:da: 92:ae:40:66:a9:00:b6:20:f7:e6:51:b7:58:86:36: e6:e2:3e:a2:4e:99:57:92:98:32:18:a3:8d:9f:0e: fc:f9:ed:35:bb:10:09:72:ce:ec:44:72:6f:77:ab: 73:cb:e0:fd:c8:06:b5:71:f5:4b:90:19:7b:80:3f: e2:e9:ec:72:be:52:0b:2f:35:81:63:ee:b6:60:ef: 29:b0:84:41:cb:07:04:da:a8:c7:c9:01:90:7e:8e: 33:a9:1a:69:94:1e:ac:f1:09:c9:46:6c:af:8a:ff: 15:a8:5e:d6:85:4e:dc:8b:82:34:e6:cd:f8:83:c8: fe:6e:91:96:de:5a:71:02:d5:f3:2c:d9:96:87:a4: 6a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:49:95:CC:F8:8E:57:C6:68:15:F6:A6:BD:9F:66:04:57:B4:7C:44 X509v3 Authority Key Identifier: keyid:D0:A4:66:6A:F3:5B:4B:65:4D:81:81:C4:CD:1C:91:1A:EF:99:45:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/0KRmavNbS2VNgYHEzRyRGu-ZRbs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0KRmavNbS2VNgYHEzRyRGu-ZRbs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/0KRmavNbS2VNgYHEzRyRGu-ZRbs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:36:fd:92:0f:ac:2f:ec:d8:fe:c4:e0:e8:ec:52:ec:fc:91: 58:0a:2a:a2:55:20:1d:ec:97:da:2e:53:1e:e3:79:dc:24:71: 4c:78:0f:21:e4:61:15:9c:71:a6:56:5c:d4:92:dd:12:19:1b: 10:ce:88:b4:79:96:3d:ca:32:6c:a3:93:ad:ec:ac:4a:fb:20: f4:31:50:9c:2e:80:06:56:9d:85:fb:3f:8d:9e:b1:96:d0:b7: 75:3e:5f:ae:06:d5:a9:56:88:6e:6b:6b:e2:ed:55:45:52:9e: 05:99:d3:90:09:4f:ff:3d:5d:4e:39:18:dc:4e:f0:58:3f:ec: 62:b1:81:4c:fb:74:e7:7a:6e:d7:1c:57:05:4b:37:cd:73:50: f1:56:a6:c2:6d:2c:00:f6:13:92:5e:0d:1d:ff:4c:ab:7e:bb: 46:cf:fd:b6:ea:41:53:d6:a4:76:b7:5b:d5:d4:20:bd:11:52: 25:c9:64:82:bd:cd:c4:8c:59:f7:e5:ae:e1:2c:16:65:eb:06: 0e:40:61:b3:bf:92:8f:bb:1a:99:9b:f7:a2:04:1e:5d:5b:15: 4b:92:e2:fc:de:19:91:f8:24:f9:b8:d4:5b:f1:38:a6:a1:ec: d3:3e:a2:a2:c7:a7:d4:52:4b:f0:f1:5b:97:c9:38:ae:55:68: 25:50:19:fc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RkU0QjExMC8GA1UEBRMoRDBBNDY2NkFGMzVCNEI2NTREODE4MUM0Q0QxQzkxMUFF Rjk5NDVCQjAeFw0yNTA2MTUwMjEyMTdaFw0yNTA2MjIwMjEyMTdaMBgxFjAUBgNV BAMTDTY4NGUyYzAyLTNkMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEG7sJmqkCx1CpmyL4ru1HpClWXOCBBT97tDSDDZOJOUnRnjNVHc10upuIXakQ gHaOCAMHthQripSkAX684EhKOX3p37VERsg2Wz5Ob/ZYtTS1KY/MPPWJUiOyVSFn PESZk0yOZnIZ0nUzPuHruGWiM/EpMXgu2pKuQGapALYg9+ZRt1iGNubiPqJOmVeS mDIYo42fDvz57TW7EAlyzuxEcm93q3PL4P3IBrVx9UuQGXuAP+Lp7HK+UgsvNYFj 7rZg7ymwhEHLBwTaqMfJAZB+jjOpGmmUHqzxCclGbK+K/xWoXtaFTtyLgjTmzfiD yP5ukZbeWnEC1fMs2ZaHpGpTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUC0mVzPiO V8ZoFfamvZ9mBFe0fEQwHwYDVR0jBBgwFoAU0KRmavNbS2VNgYHEzRyRGu+ZRbsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThGRTRCL0MxNDAxNkI0OEQ3 RjExRURCN0RCODU0Q0M0RjlBRTAyLzBLUm1hdk5iUzJWTmdZSEV6UnlSR3UtWlJi cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMEtSbWF2TmJTMlZOZ1lIRXpSeVJHdS1aUmJzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThG RTRCL0MxNDAxNkI0OEQ3RjExRURCN0RCODU0Q0M0RjlBRTAyLzBLUm1hdk5iUzJW TmdZSEV6UnlSR3UtWlJicy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMM2/ZIPrC/s2P7E4OjsUuz8kVgKKqJVIB3sl9ouUx7jedwkcUx4DyHk YRWccaZWXNSS3RIZGxDOiLR5lj3KMmyjk63srEr7IPQxUJwugAZWnYX7P42esZbQ t3U+X64G1alWiG5ra+LtVUVSngWZ05AJT/89XU45GNxO8Fg/7GKxgUz7dOd6btcc VwVLN81zUPFWpsJtLAD2E5JeDR3/TKt+u0bP/bbqQVPWpHa3W9XUIL0RUiXJZIK9 zcSMWfflruEsFmXrBg5AYbO/ko+7Gpmb96IEHl1bFUuS4vzeGZH4JPm41FvxOKah 7NM+oqLHp9RSS/DxW5fJOK5VaCVQGfw= -----END CERTIFICATE-----Generated at Sun Jun 15 05:55:18 2025 by rpki-client