$ rpki-client -vvf rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.mft File: cRYXAC2fDJ62W07dYfehyR_NuD4.mft (raw, json) Hash identifier: 37kXuFQBs7sblAcZ2opkNBBsAeLgXRQmwv93wQaUftw= Subject key identifier: 38:F9:FD:24:A7:12:15:72:11:5E:19:9B:06:13:CD:8E:CD:42:75:BD Authority key identifier: 71:16:17:00:2D:9F:0C:9E:B6:5B:4E:DD:61:F7:A1:C9:1F:CD:B8:3E Certificate issuer: /CN=A919C6E7/serialNumber=711617002D9F0C9EB65B4EDD61F7A1C91FCDB83E Certificate serial: 9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRYXAC2fDJ62W07dYfehyR_NuD4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.mft Manifest number: 99 Signing time: Fri 13 Jun 2025 05:14:26 +0000 Manifest this update: Fri 13 Jun 2025 05:14:26 +0000 Manifest next update: Fri 20 Jun 2025 05:14:25 +0000 Files and hashes: 1: cRYXAC2fDJ62W07dYfehyR_NuD4.crl (hash: ZizvFf2eqL/EzD4KYmLKFNj5MLZpG/JvQx8jLYecoKY=) 2: 73EF25545DDE11EFBCDB7463C4F9AE02.roa (hash: JrlJ2EvGFrH8+I8VUWwxgID9iYwpW3LVV5yISMkbZ08=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.crl rsync://rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRYXAC2fDJ62W07dYfehyR_NuD4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 05:14:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 154 (0x9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C6E7, serialNumber=711617002D9F0C9EB65B4EDD61F7A1C91FCDB83E Validity Not Before: Jun 13 05:14:26 2025 GMT Not After : Jun 20 05:14:25 2025 GMT Subject: CN=684bb3b2-5876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ca:3a:95:38:db:d5:07:f7:4e:8d:b8:c1:37: 2d:f4:92:0d:23:75:95:3f:43:56:70:cb:1e:6f:b9: ad:a1:60:90:7f:92:2e:e5:bf:5e:4a:35:58:ca:a9: ee:77:ba:86:d8:71:a9:ce:67:4d:a8:24:f0:b1:21: f7:89:24:c5:d1:f0:9a:7d:65:de:85:a4:bd:b0:c8: 42:7d:88:e4:cc:fc:b8:0a:f0:e2:b0:21:23:02:ff: a0:29:f5:08:b3:13:df:c9:3b:8c:82:af:07:2c:9d: f6:a7:3e:fa:eb:af:5e:9c:0f:58:6c:49:d0:03:d0: 8b:02:b7:a7:fd:d4:37:28:d8:ea:d5:ea:ef:85:d8: 59:ba:64:5b:f4:13:6f:61:b7:34:71:1d:e4:3f:88: c0:8a:98:66:17:a2:9c:25:f5:d9:99:c1:20:9f:ea: 81:6b:9b:47:e1:95:59:cf:db:7c:0e:bd:4c:45:88: 34:1b:d9:b3:77:d1:96:63:21:b4:50:59:ee:9f:fa: 61:63:61:46:9c:d9:ad:be:1d:7a:6e:7f:f4:9c:4b: 0d:b8:88:81:43:17:4d:19:ca:b3:ea:54:c8:51:6c: 86:94:e3:d9:27:c9:12:6a:a3:b4:f5:7a:e1:47:e3: 8a:c5:1a:df:67:b1:f1:41:4d:26:14:4a:fc:33:b4: d0:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:F9:FD:24:A7:12:15:72:11:5E:19:9B:06:13:CD:8E:CD:42:75:BD X509v3 Authority Key Identifier: keyid:71:16:17:00:2D:9F:0C:9E:B6:5B:4E:DD:61:F7:A1:C9:1F:CD:B8:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRYXAC2fDJ62W07dYfehyR_NuD4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:16:45:83:17:65:42:53:d9:80:9b:3c:bd:66:44:01:7b:af: 01:1f:7f:1e:f4:8d:e7:d9:8d:18:0f:29:96:30:37:16:9c:d3: 08:29:11:84:b3:80:9c:b1:81:39:7f:79:16:cb:fb:35:f3:c6: 90:0d:c4:8e:4a:4e:58:7f:99:e8:2e:b8:b9:3e:8e:aa:04:e8: 83:50:99:73:ac:4a:a6:b4:9b:3e:31:32:45:65:69:03:96:a9: c5:07:4b:5e:0e:f2:d0:f0:ee:f4:b1:bf:cc:1c:06:58:12:79: d2:54:f4:36:7e:9f:72:7f:9c:9a:8c:f3:43:7c:8d:c3:2d:18: 16:b2:ee:c9:3f:8d:f7:0b:c6:5d:72:4d:96:b0:69:d1:b7:ae: ec:22:ba:c5:75:66:81:16:b6:a1:8d:bb:4f:37:20:39:35:9e: 3a:ae:ad:35:06:c6:aa:94:0e:84:33:29:da:d6:ef:54:45:93: 00:bb:d5:33:96:95:3c:e4:84:cf:c3:63:5f:37:9b:23:b0:a6: 49:e3:6f:82:da:f1:32:c7:4d:db:05:40:58:5a:66:13:0e:2a: a7:57:90:ef:94:92:fe:86:84:ab:ca:38:fa:56:ac:9a:31:7d: 06:f6:ed:e2:c8:ad:d7:06:d6:38:aa:1b:13:88:6d:82:a5:7f: e0:0b:a6:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM2RTcxMTAvBgNVBAUTKDcxMTYxNzAwMkQ5RjBDOUVCNjVCNEVERDYxRjdBMUM5 MUZDREI4M0UwHhcNMjUwNjEzMDUxNDI2WhcNMjUwNjIwMDUxNDI1WjAYMRYwFAYD VQQDEw02ODRiYjNiMi01ODc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlco6lTjb1Qf3To24wTct9JINI3WVP0NWcMseb7mtoWCQf5Iu5b9eSjVYyqnu d7qG2HGpzmdNqCTwsSH3iSTF0fCafWXehaS9sMhCfYjkzPy4CvDisCEjAv+gKfUI sxPfyTuMgq8HLJ32pz76669enA9YbEnQA9CLAren/dQ3KNjq1ervhdhZumRb9BNv Ybc0cR3kP4jAiphmF6KcJfXZmcEgn+qBa5tH4ZVZz9t8Dr1MRYg0G9mzd9GWYyG0 UFnun/phY2FGnNmtvh16bn/0nEsNuIiBQxdNGcqz6lTIUWyGlOPZJ8kSaqO09Xrh R+OKxRrfZ7HxQU0mFEr8M7TQKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDj5/SSn EhVyEV4ZmwYTzY7NQnW9MB8GA1UdIwQYMBaAFHEWFwAtnwyetltO3WH3ockfzbg+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzZFNy9FNEEwQ0NBRTVE REQxMUVGODMwREY1NjFDNEY5QUUwMi9jUllYQUMyZkRKNjJXMDdkWWZlaHlSX051 RDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NSWVhBQzJmREo2MlcwN2RZZmVoeVJfTnVENC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzZFNy9FNEEwQ0NBRTVEREQxMUVGODMwREY1NjFDNEY5QUUwMi9jUllYQUMyZkRK NjJXMDdkWWZlaHlSX051RDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtFkWDF2VCU9mAmzy9ZkQBe68BH38e9I3n2Y0YDymWMDcWnNMIKRGE s4CcsYE5f3kWy/s188aQDcSOSk5Yf5noLri5Po6qBOiDUJlzrEqmtJs+MTJFZWkD lqnFB0teDvLQ8O70sb/MHAZYEnnSVPQ2fp9yf5yajPNDfI3DLRgWsu7JP433C8Zd ck2WsGnRt67sIrrFdWaBFrahjbtPNyA5NZ46rq01BsaqlA6EMyna1u9URZMAu9Uz lpU85ITPw2NfN5sjsKZJ42+C2vEyx03bBUBYWmYTDiqnV5DvlJL+hoSryjj6Vqya MX0G9u3iyK3XBtY4qhsTiG2CpX/gC6at -----END CERTIFICATE-----Generated at Sat Jun 14 17:35:22 2025 by rpki-client