$ rpki-client -vvf rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/cH1IYFoNhXcvkNxLEXK-8wKUoIc.mft File: cH1IYFoNhXcvkNxLEXK-8wKUoIc.mft (raw, json) Hash identifier: dYnvd706gjlGrHoYabIumsP5c78tJzX07Yh2vKJDvfA= Subject key identifier: DC:F4:0E:7E:C3:10:F4:CC:7E:B1:81:9C:FC:05:9E:74:AD:C4:DA:5E Authority key identifier: 70:7D:48:60:5A:0D:85:77:2F:90:DC:4B:11:72:BE:F3:02:94:A0:87 Certificate issuer: /CN=A919D49F/serialNumber=707D48605A0D85772F90DC4B1172BEF30294A087 Certificate serial: 106E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cH1IYFoNhXcvkNxLEXK-8wKUoIc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/cH1IYFoNhXcvkNxLEXK-8wKUoIc.mft Manifest number: 1067 Signing time: Sat 14 Jun 2025 17:18:08 +0000 Manifest this update: Sat 14 Jun 2025 17:18:08 +0000 Manifest next update: Sat 21 Jun 2025 17:18:08 +0000 Files and hashes: 1: cH1IYFoNhXcvkNxLEXK-8wKUoIc.crl (hash: bCyBJ6EuTOLjW04UgqNs0RF/sYRRyUuZnN8oFd599Hg=) 2: 74087358355111E99EC82E0AC4F9AE02.roa (hash: tyb0mMEVFvr0b00WBN86r+sNpOhKC86WXh33owud0/w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/cH1IYFoNhXcvkNxLEXK-8wKUoIc.crl rsync://rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/cH1IYFoNhXcvkNxLEXK-8wKUoIc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cH1IYFoNhXcvkNxLEXK-8wKUoIc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 17:13:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4206 (0x106e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D49F, serialNumber=707D48605A0D85772F90DC4B1172BEF30294A087 Validity Not Before: Jun 14 17:18:08 2025 GMT Not After : Jun 21 17:18:08 2025 GMT Subject: CN=684daed0-6fa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fe:13:cd:3c:b3:f1:26:4e:b6:96:1a:8c:24:8e: 38:ee:8c:28:f5:50:eb:b2:a2:8c:89:07:b3:b8:72: 32:21:85:b7:57:1c:06:38:d5:fa:0f:c4:98:fd:2e: 5c:98:59:15:25:fb:0f:6c:41:8a:82:91:97:89:65: f2:ea:18:50:84:81:7e:b2:6c:bc:fa:0a:d1:57:56: 23:1e:98:95:57:c5:c8:ed:b1:10:de:87:b0:35:59: d4:89:fc:9a:2c:2b:1d:9b:7f:d2:be:0a:fd:4e:66: fc:2d:9d:4c:0c:64:06:35:35:0f:31:00:08:7c:33: 13:63:84:e3:a3:e4:24:4b:9e:a9:df:20:01:cd:45: 6e:4e:7b:80:12:15:d3:27:a5:ea:f7:7d:6e:fe:e4: f6:04:0c:3e:3a:e2:2c:b6:37:65:35:32:32:22:9b: b3:61:ed:ff:37:ff:82:7c:32:8e:30:ba:45:fc:8c: 1c:60:26:28:a6:b8:75:d8:63:7b:db:24:8e:36:d8: 59:82:c6:20:85:06:dd:b0:01:0d:ec:db:0a:5a:04: ca:15:c8:bd:54:ce:0a:34:49:6a:99:0a:f6:28:2a: 54:2f:cd:10:e5:3b:98:b5:65:20:00:4e:88:c8:b6: 7b:ac:d8:23:72:06:22:d2:cd:4d:3e:7d:60:c6:37: ec:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:F4:0E:7E:C3:10:F4:CC:7E:B1:81:9C:FC:05:9E:74:AD:C4:DA:5E X509v3 Authority Key Identifier: keyid:70:7D:48:60:5A:0D:85:77:2F:90:DC:4B:11:72:BE:F3:02:94:A0:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/cH1IYFoNhXcvkNxLEXK-8wKUoIc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cH1IYFoNhXcvkNxLEXK-8wKUoIc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/cH1IYFoNhXcvkNxLEXK-8wKUoIc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:4e:40:8b:f7:1e:f8:9d:90:4a:0b:18:9d:60:d5:89:33:8c: 7c:a4:ca:e2:1a:46:50:33:57:99:ea:e9:ae:48:09:9e:47:dd: a6:ba:09:22:1c:6c:8b:7c:cd:b8:a4:7a:ca:cd:42:89:b6:73: 3e:47:5f:a0:97:57:92:13:ac:2a:c7:2d:ba:1c:33:40:85:38: bd:75:98:86:dd:c3:ce:3f:34:42:bc:9b:e5:ff:7b:f9:10:35: 91:fa:de:02:15:4f:b0:28:4e:55:8e:83:bd:90:b6:7e:a3:6c: c0:8d:20:0b:d0:e9:33:b5:16:a2:e4:ef:ed:73:21:a0:35:0d: b6:76:ac:cc:bf:88:f8:67:fe:22:e9:0a:96:ef:9d:ad:65:87: 14:33:a5:20:c1:c1:bb:ad:5e:d7:31:95:d1:a7:5c:bc:5f:0e: 55:8e:35:b2:80:da:09:43:23:b3:fd:4f:20:4d:4c:28:b1:e4: bc:0e:80:24:02:bf:1f:32:05:42:ec:5c:6b:46:a5:af:78:ce: 36:10:1b:b3:41:09:c0:20:e6:5e:6f:66:cb:93:43:f9:1f:d5: 42:20:aa:fd:69:ff:9b:f6:b1:f4:6e:80:13:1b:e3:d2:32:49: 80:84:08:37:3c:71:75:ce:58:31:57:a1:d7:30:a2:07:15:f6: 45:21:61:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEG4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ0OUYxMTAvBgNVBAUTKDcwN0Q0ODYwNUEwRDg1NzcyRjkwREM0QjExNzJCRUYz MDI5NEEwODcwHhcNMjUwNjE0MTcxODA4WhcNMjUwNjIxMTcxODA4WjAYMRYwFAYD VQQDEw02ODRkYWVkMC02ZmEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/hPNPLPxJk62lhqMJI447owo9VDrsqKMiQezuHIyIYW3VxwGONX6D8SY/S5c mFkVJfsPbEGKgpGXiWXy6hhQhIF+smy8+grRV1YjHpiVV8XI7bEQ3oewNVnUifya LCsdm3/Svgr9Tmb8LZ1MDGQGNTUPMQAIfDMTY4Tjo+QkS56p3yABzUVuTnuAEhXT J6Xq931u/uT2BAw+OuIstjdlNTIyIpuzYe3/N/+CfDKOMLpF/IwcYCYoprh12GN7 2ySONthZgsYghQbdsAEN7NsKWgTKFci9VM4KNElqmQr2KCpUL80Q5TuYtWUgAE6I yLZ7rNgjcgYi0s1NPn1gxjfs3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNz0Dn7D EPTMfrGBnPwFnnStxNpeMB8GA1UdIwQYMBaAFHB9SGBaDYV3L5DcSxFyvvMClKCH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDQ5Ri8wQkFDODU1NjM1 NTExMUU5OThBNTBBMEFDNEY5QUUwMi9jSDFJWUZvTmhYY3ZrTnhMRVhLLTh3S1Vv SWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NIMUlZRm9OaFhjdmtOeExFWEstOHdLVW9JYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDQ5Ri8wQkFDODU1NjM1NTExMUU5OThBNTBBMEFDNEY5QUUwMi9jSDFJWUZvTmhY Y3ZrTnhMRVhLLTh3S1VvSWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnTkCL9x74nZBKCxidYNWJM4x8pMriGkZQM1eZ6umuSAmeR92mugki HGyLfM24pHrKzUKJtnM+R1+gl1eSE6wqxy26HDNAhTi9dZiG3cPOPzRCvJvl/3v5 EDWR+t4CFU+wKE5VjoO9kLZ+o2zAjSAL0OkztRai5O/tcyGgNQ22dqzMv4j4Z/4i 6QqW752tZYcUM6UgwcG7rV7XMZXRp1y8Xw5VjjWygNoJQyOz/U8gTUwoseS8DoAk Ar8fMgVC7FxrRqWveM42EBuzQQnAIOZeb2bLk0P5H9VCIKr9af+b9rH0boATG+PS MkmAhAg3PHF1zlgxV6HXMKIHFfZFIWGl -----END CERTIFICATE-----Generated at Sat Jun 14 19:25:24 2025 by rpki-client