$ rpki-client -vvf rpki.apnic.net/member_repository/A918FF9D/CF86D58A9FE511EABB863A80C4F9AE02/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.mft File: pf5RKdSB7RoA5V6ZzjDgCLY9bO4.mft (raw, json) Hash identifier: iLkPbVt37LdHU5+1Sl+TH+6CaAr3+muJjYgucqYBq6M= Subject key identifier: A8:D1:65:CE:A6:3E:BB:73:30:C9:80:DB:4B:B0:60:3C:11:B1:95:E9 Authority key identifier: A5:FE:51:29:D4:81:ED:1A:00:E5:5E:99:CE:30:E0:08:B6:3D:6C:EE Certificate issuer: /CN=A918FF9D/serialNumber=A5FE5129D481ED1A00E55E99CE30E008B63D6CEE Certificate serial: 0937 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FF9D/CF86D58A9FE511EABB863A80C4F9AE02/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.mft Manifest number: 0931 Signing time: Mon 16 Jun 2025 20:04:57 +0000 Manifest this update: Mon 16 Jun 2025 20:04:57 +0000 Manifest next update: Mon 23 Jun 2025 20:04:57 +0000 Files and hashes: 1: pf5RKdSB7RoA5V6ZzjDgCLY9bO4.crl (hash: 8inQ00+EJjZwNpi1dgOV2cBneimP91NBBvTd5djAStA=) 2: 2A1AD3BA9FE711EAAFA97B81C4F9AE02.roa (hash: McDtUaMk7e01xsshJ/22xBrdGiD8USZ0rSk/8TzyXxM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FF9D/CF86D58A9FE511EABB863A80C4F9AE02/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.crl rsync://rpki.apnic.net/member_repository/A918FF9D/CF86D58A9FE511EABB863A80C4F9AE02/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 20:04:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2359 (0x937) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FF9D, serialNumber=A5FE5129D481ED1A00E55E99CE30E008B63D6CEE Validity Not Before: Jun 16 20:04:57 2025 GMT Not After : Jun 23 20:04:57 2025 GMT Subject: CN=685078e9-9579 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:3a:9f:71:8e:c3:92:2f:b3:e0:1d:f2:cb:4c: 07:47:bc:fb:0d:76:81:3b:e5:12:1d:ff:2b:16:45: 0b:c5:91:85:7f:30:83:26:d7:9a:23:cc:e3:d6:a9: 4e:f6:22:48:04:f6:66:9b:bf:54:da:67:b9:aa:7a: 9d:c5:37:9f:d3:8c:d9:47:f3:46:6a:b9:db:43:da: 82:51:8e:c8:ec:1f:8f:28:2d:22:56:9a:6d:ae:49: 51:6b:aa:7f:34:e2:23:21:34:5d:fc:82:87:9c:63: 0d:a7:37:e8:7c:d9:c8:67:be:8b:e0:7c:d0:6f:2e: 1f:fe:83:d3:11:26:d6:68:3e:cf:48:a9:b7:72:4c: 90:02:e7:dd:fd:03:06:d9:72:49:66:55:b5:69:13: cf:7d:7d:47:22:f1:79:88:91:d8:de:54:e3:13:a7: 4d:60:8e:fc:93:bd:f4:b6:a7:ab:6e:39:ae:90:9a: 27:8b:82:46:33:12:6b:37:9e:8b:e1:13:cc:64:59: 92:94:0f:78:66:ef:61:0c:a4:0c:d2:65:8b:a7:98: af:f4:71:75:00:8e:a0:c8:3b:40:57:e0:86:65:53: 8b:1e:c4:e4:c1:45:b4:6a:27:3b:b0:73:dc:1a:02: 20:a5:e3:a1:95:64:12:a5:95:0a:54:fd:a2:40:81: da:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:D1:65:CE:A6:3E:BB:73:30:C9:80:DB:4B:B0:60:3C:11:B1:95:E9 X509v3 Authority Key Identifier: keyid:A5:FE:51:29:D4:81:ED:1A:00:E5:5E:99:CE:30:E0:08:B6:3D:6C:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FF9D/CF86D58A9FE511EABB863A80C4F9AE02/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FF9D/CF86D58A9FE511EABB863A80C4F9AE02/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:12:81:a0:97:14:0b:1d:e8:c2:e7:08:e9:5a:6b:f3:f7:33: 49:21:ea:9b:84:a7:f5:25:aa:f3:70:60:cb:4a:e1:69:a7:b0: a2:37:c8:b0:16:f1:fe:2b:69:7f:a8:2c:b7:a4:66:fe:96:29: b9:ac:24:75:29:aa:9d:89:6d:34:2f:d5:c1:98:a8:7a:9b:9c: 26:8a:2b:10:94:4b:32:bf:ba:dd:13:ca:dd:c1:19:2a:4b:a0: 44:20:3d:cd:c3:7c:be:07:fa:c9:69:94:fe:77:93:4a:60:51: 9c:26:d5:14:11:1a:ad:86:f4:30:f2:d0:0d:5e:ec:54:77:0e: 1f:84:66:c3:be:e9:fe:29:48:f8:cc:3b:b3:d6:23:28:11:91: 28:78:ed:f6:c6:1a:b9:49:bf:4a:88:08:12:e1:12:ac:5f:3b: 8b:64:fd:89:a9:3d:d7:72:11:01:8a:0f:d7:ec:01:73:f2:14: ab:36:53:d8:fd:d3:13:ba:39:22:8d:11:d8:fa:38:e1:35:e2: 96:88:42:a0:a9:67:a4:54:c9:0a:de:49:da:3f:47:2e:43:0d: 1f:43:25:41:8e:0d:59:73:8e:cd:4e:1e:25:43:9c:12:40:80: ea:14:8b:8f:26:68:c5:59:c9:cb:95:bc:cf:98:48:84:8a:bb: 1f:18:57:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCTcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZGOUQxMTAvBgNVBAUTKEE1RkU1MTI5RDQ4MUVEMUEwMEU1NUU5OUNFMzBFMDA4 QjYzRDZDRUUwHhcNMjUwNjE2MjAwNDU3WhcNMjUwNjIzMjAwNDU3WjAYMRYwFAYD VQQDEw02ODUwNzhlOS05NTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+DqfcY7Dki+z4B3yy0wHR7z7DXaBO+USHf8rFkULxZGFfzCDJteaI8zj1qlO 9iJIBPZmm79U2me5qnqdxTef04zZR/NGarnbQ9qCUY7I7B+PKC0iVpptrklRa6p/ NOIjITRd/IKHnGMNpzfofNnIZ76L4HzQby4f/oPTESbWaD7PSKm3ckyQAufd/QMG 2XJJZlW1aRPPfX1HIvF5iJHY3lTjE6dNYI78k730tqerbjmukJoni4JGMxJrN56L 4RPMZFmSlA94Zu9hDKQM0mWLp5iv9HF1AI6gyDtAV+CGZVOLHsTkwUW0aic7sHPc GgIgpeOhlWQSpZUKVP2iQIHaTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKjRZc6m PrtzMMmA20uwYDwRsZXpMB8GA1UdIwQYMBaAFKX+USnUge0aAOVemc4w4Ai2PWzu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkY5RC9DRjg2RDU4QTlG RTUxMUVBQkI4NjNBODBDNEY5QUUwMi9wZjVSS2RTQjdSb0E1VjZaempEZ0NMWTli TzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BmNVJLZFNCN1JvQTVWNlp6akRnQ0xZOWJPNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RkY5RC9DRjg2RDU4QTlGRTUxMUVBQkI4NjNBODBDNEY5QUUwMi9wZjVSS2RTQjdS b0E1VjZaempEZ0NMWTliTzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYEoGglxQLHejC5wjpWmvz9zNJIeqbhKf1JarzcGDLSuFpp7CiN8iw FvH+K2l/qCy3pGb+lim5rCR1KaqdiW00L9XBmKh6m5wmiisQlEsyv7rdE8rdwRkq S6BEID3Nw3y+B/rJaZT+d5NKYFGcJtUUERqthvQw8tANXuxUdw4fhGbDvun+KUj4 zDuz1iMoEZEoeO32xhq5Sb9KiAgS4RKsXzuLZP2JqT3XchEBig/X7AFz8hSrNlPY /dMTujkijRHY+jjhNeKWiEKgqWekVMkK3knaP0cuQw0fQyVBjg1Zc47NTh4lQ5wS QIDqFIuPJmjFWcnLlbzPmEiEirsfGFek -----END CERTIFICATE-----Generated at Wed Jun 18 08:44:35 2025 by rpki-client