$ rpki-client -vvf rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.mft File: ds0CHgwoHaX-ZNh4A1U4CIiaEWc.mft (raw, json) Hash identifier: w/DQQLDuc1S8nsbzpi20aRtD6ZyxuapoZXbyH5gM+wE= Subject key identifier: 8F:7B:B7:9D:F9:AB:9D:59:5A:8E:65:A9:10:F5:3F:21:2F:82:78:B7 Authority key identifier: 76:CD:02:1E:0C:28:1D:A5:FE:64:D8:78:03:55:38:08:88:9A:11:67 Certificate issuer: /CN=A919DC79/serialNumber=76CD021E0C281DA5FE64D87803553808889A1167 Certificate serial: 0BAD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.mft Manifest number: 0BA1 Signing time: Sat 14 Jun 2025 18:50:49 +0000 Manifest this update: Sat 14 Jun 2025 18:50:48 +0000 Manifest next update: Sat 21 Jun 2025 18:50:48 +0000 Files and hashes: 1: ds0CHgwoHaX-ZNh4A1U4CIiaEWc.crl (hash: 790zHPCsetL95L9ZtMeii1CFU+rfP35VwxPpsWhseEY=) 2: FB5C375499DB11EBBC50C376C4F9AE02.roa (hash: 5Tmm0+rmyNGdrIMpYadnPDVCCaqTEqx1NCKBxNGJPGM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.crl rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 18:50:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2989 (0xbad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DC79, serialNumber=76CD021E0C281DA5FE64D87803553808889A1167 Validity Not Before: Jun 14 18:50:48 2025 GMT Not After : Jun 21 18:50:48 2025 GMT Subject: CN=684dc488-9843 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1f:b4:96:6d:26:0b:ef:df:c9:fc:b0:ed:86: 1d:f9:14:ff:c7:73:d8:ae:1b:ba:6e:dd:49:87:0e: 22:ba:b4:0c:ee:8f:8b:0b:9f:4a:94:e6:b0:b0:5d: 95:37:77:3a:e9:61:cd:7f:d8:b4:5b:3d:2b:1e:22: 34:76:2e:6f:e3:0c:44:0e:ea:dd:fe:d5:f0:3b:a4: 1e:c7:1a:d3:4d:09:c7:b7:77:a3:bd:70:9e:46:63: 3c:e1:68:a9:e9:4e:24:79:0d:71:1e:d8:9b:9e:ec: 2d:3c:6f:30:21:0c:21:7a:18:14:af:6a:6a:90:8d: c9:f6:b9:59:71:95:8f:81:71:10:c6:97:9d:bd:07: 40:eb:df:31:2c:25:5a:89:52:33:fd:29:3c:1a:97: d5:f2:ff:c6:58:01:85:58:de:11:67:98:f4:44:b6: c5:11:94:23:d7:27:20:e9:6e:7f:66:93:0a:c2:b0: c1:04:fe:fd:dd:78:31:e5:1f:e5:1e:1e:bd:1d:66: 32:74:fd:b1:52:9c:e1:10:d3:9c:5b:15:25:c7:73: 4b:83:b9:26:12:c2:53:c3:a8:33:0e:e9:6a:a7:84: 1d:17:59:74:82:e5:90:38:52:1f:bd:03:58:5d:34: 74:10:b9:5a:17:1e:ee:80:38:60:69:c7:fa:38:7a: 3b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:7B:B7:9D:F9:AB:9D:59:5A:8E:65:A9:10:F5:3F:21:2F:82:78:B7 X509v3 Authority Key Identifier: keyid:76:CD:02:1E:0C:28:1D:A5:FE:64:D8:78:03:55:38:08:88:9A:11:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:03:74:23:f0:16:dc:86:3c:6c:32:89:90:9c:08:8d:1e:21: 78:9a:59:2f:2c:53:34:cd:d4:55:1f:97:62:29:5e:a7:4b:c8: 43:b1:3a:dd:ef:31:e8:43:dc:a9:67:8e:86:f6:a6:d1:4a:32: 1e:af:90:d4:59:19:19:7d:85:c8:b0:91:87:13:0e:57:82:a1: 42:9f:12:ba:00:fa:01:02:0a:09:be:f1:29:9b:35:25:e4:8b: bc:45:92:51:5a:ff:44:22:77:a3:41:2a:24:cf:36:fd:c9:c5: 24:9e:f2:ad:58:45:33:a9:30:63:e2:ae:1f:49:13:fc:3a:b1: 55:25:c2:de:ac:3d:d6:f8:63:04:bb:53:cd:b7:87:17:36:61: 11:73:4c:7a:e8:6b:9f:85:b1:5d:31:6c:69:4b:66:d5:c3:a8: 03:b8:cb:63:4a:07:4c:a3:63:79:e1:4f:e6:07:b3:36:87:3b: 34:bc:16:d4:92:2c:aa:45:04:61:11:96:66:b5:1e:a1:79:0e: d3:e2:cd:be:43:a5:46:38:1e:d5:21:72:73:99:d9:09:b9:b2: 89:6d:84:07:c9:b2:52:5f:4a:c9:bf:79:dd:a8:50:44:57:70: 7e:bf:97:a6:e4:d4:e6:30:af:89:73:33:12:5c:8c:d5:ca:2b: ad:2a:6d:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC60wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURDNzkxMTAvBgNVBAUTKDc2Q0QwMjFFMEMyODFEQTVGRTY0RDg3ODAzNTUzODA4 ODg5QTExNjcwHhcNMjUwNjE0MTg1MDQ4WhcNMjUwNjIxMTg1MDQ4WjAYMRYwFAYD VQQDEw02ODRkYzQ4OC05ODQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvB+0lm0mC+/fyfyw7YYd+RT/x3PYrhu6bt1Jhw4iurQM7o+LC59KlOawsF2V N3c66WHNf9i0Wz0rHiI0di5v4wxEDurd/tXwO6QexxrTTQnHt3ejvXCeRmM84Wip 6U4keQ1xHtibnuwtPG8wIQwhehgUr2pqkI3J9rlZcZWPgXEQxpedvQdA698xLCVa iVIz/Sk8GpfV8v/GWAGFWN4RZ5j0RLbFEZQj1ycg6W5/ZpMKwrDBBP793Xgx5R/l Hh69HWYydP2xUpzhENOcWxUlx3NLg7kmEsJTw6gzDulqp4QdF1l0guWQOFIfvQNY XTR0ELlaFx7ugDhgacf6OHo74QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI97t535 q51ZWo5lqRD1PyEvgni3MB8GA1UdIwQYMBaAFHbNAh4MKB2l/mTYeANVOAiImhFn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REM3OS9BNjNGOTNENjI3 Q0UxMUVBOEU0MDdFNUJDNEY5QUUwMi9kczBDSGd3b0hhWC1aTmg0QTFVNENJaWFF V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RzMENIZ3dvSGFYLVpOaDRBMVU0Q0lpYUVXYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REM3OS9BNjNGOTNENjI3Q0UxMUVBOEU0MDdFNUJDNEY5QUUwMi9kczBDSGd3b0hh WC1aTmg0QTFVNENJaWFFV2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDGA3Qj8BbchjxsMomQnAiNHiF4mlkvLFM0zdRVH5diKV6nS8hDsTrd 7zHoQ9ypZ46G9qbRSjIer5DUWRkZfYXIsJGHEw5XgqFCnxK6APoBAgoJvvEpmzUl 5Iu8RZJRWv9EInejQSokzzb9ycUknvKtWEUzqTBj4q4fSRP8OrFVJcLerD3W+GME u1PNt4cXNmERc0x66GufhbFdMWxpS2bVw6gDuMtjSgdMo2N54U/mB7M2hzs0vBbU kiyqRQRhEZZmtR6heQ7T4s2+Q6VGOB7VIXJzmdkJubKJbYQHybJSX0rJv3ndqFBE V3B+v5em5NTmMK+JczMSXIzVyiutKm3S -----END CERTIFICATE-----Generated at Sun Jun 15 07:19:29 2025 by rpki-client