$ rpki-client -vvf rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.mft File: h5LeOZz2MZPdwp0w-_ClgeAk8AM.mft (raw, json) Hash identifier: Q82DRCNUevppz46w2NDmgKfWIVqX2u/MuiBGPF/PwHQ= Subject key identifier: 1A:E2:73:7F:AA:B8:3D:8D:AB:FC:A9:CE:72:85:AA:A4:5C:8C:92:3B Authority key identifier: 87:92:DE:39:9C:F6:31:93:DD:C2:9D:30:FB:F0:A5:81:E0:24:F0:03 Certificate issuer: /CN=A911A4F7/serialNumber=8792DE399CF63193DDC29D30FBF0A581E024F003 Certificate serial: 7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h5LeOZz2MZPdwp0w-_ClgeAk8AM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.mft Manifest number: 7C Signing time: Sat 07 Jun 2025 06:10:23 +0000 Manifest this update: Sat 07 Jun 2025 06:10:22 +0000 Manifest next update: Sat 14 Jun 2025 06:10:22 +0000 Files and hashes: 1: h5LeOZz2MZPdwp0w-_ClgeAk8AM.crl (hash: WraDfqz+6oA+Iy/9ctRyt/qmd+euAxX8wdPNoyrcy8U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.crl rsync://rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h5LeOZz2MZPdwp0w-_ClgeAk8AM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Jun 2025 06:10:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 124 (0x7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A4F7, serialNumber=8792DE399CF63193DDC29D30FBF0A581E024F003 Validity Not Before: Jun 7 06:10:22 2025 GMT Not After : Jun 14 06:10:22 2025 GMT Subject: CN=6843d7cf-5e59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:21:0b:10:09:87:cb:17:50:30:49:40:87:ee: 0a:3d:c1:ba:1a:5a:21:15:ca:9f:ec:22:96:f0:b6: a1:dd:4f:dc:f3:57:ff:aa:f2:7b:3e:bf:95:ce:93: 48:63:bc:42:30:56:92:77:a9:df:01:58:1d:51:53: 8d:75:41:b9:e6:dd:85:d8:79:cb:96:8e:c6:19:e6: d7:b6:69:1a:39:68:7c:2b:70:0f:35:8c:0a:34:9f: 23:44:6a:11:d7:47:17:13:43:e9:fc:2c:e2:1a:31: 9b:83:47:01:26:dc:06:1e:92:cf:d4:7d:b4:24:66: 56:d8:fd:21:f0:c3:b1:45:3f:01:98:73:4b:85:11: ae:f1:71:6b:ca:96:ab:15:43:9b:62:7f:d3:3c:65: b5:28:56:a3:f9:68:d1:c4:d9:04:95:ef:ce:80:fd: 2e:07:80:b1:e2:ee:1e:bb:19:32:1c:58:6b:a7:41: 76:c1:0f:74:b0:76:bc:90:78:55:c0:f4:ac:08:e0: b2:7f:20:c7:b5:a7:8d:d6:c2:0f:21:78:c2:d3:bc: 96:00:77:c5:47:8d:e6:d7:03:10:1b:e8:13:ba:45: b2:a1:22:04:28:8c:c2:62:2a:66:89:d3:43:6f:17: 95:f3:4c:c9:df:de:7e:a6:7a:70:56:74:a9:7b:fa: 99:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:E2:73:7F:AA:B8:3D:8D:AB:FC:A9:CE:72:85:AA:A4:5C:8C:92:3B X509v3 Authority Key Identifier: keyid:87:92:DE:39:9C:F6:31:93:DD:C2:9D:30:FB:F0:A5:81:E0:24:F0:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h5LeOZz2MZPdwp0w-_ClgeAk8AM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:58:c4:17:19:6c:78:39:bc:bd:96:6a:ad:bd:a2:0b:20:0c: 62:1a:96:e9:99:a6:29:29:00:86:03:67:8f:ab:08:18:7e:c6: 96:75:a3:14:fb:25:92:cf:a2:c7:0a:07:ad:26:cd:03:17:f8: 4b:0e:c8:d6:61:10:d6:2a:64:c9:d0:45:b7:90:04:da:ed:6c: 91:c2:f2:b0:dc:3a:ea:ea:d9:81:4b:c1:ac:ff:61:d8:05:59: 2f:14:19:91:2b:8c:ae:ae:3b:50:1c:a0:04:8e:ac:62:c1:8d: 7a:1c:7e:d5:8e:a9:ee:ff:41:e3:80:40:de:c9:24:2a:df:5e: a0:4e:5d:83:30:9e:6f:da:92:d0:ad:68:be:91:6a:ca:a4:66: be:d5:13:c8:ac:1e:82:61:ab:ee:2e:58:b8:9a:0c:12:ce:13: 24:2e:e8:37:77:ff:b8:52:40:7e:7e:73:d7:ae:00:4b:94:e8: 4a:8d:fa:7a:f1:5a:41:53:77:e0:91:b7:a1:62:fa:92:94:0f: c1:00:bb:88:b8:54:68:7e:a8:dd:26:97:35:6c:4e:73:e4:f7: dc:06:7f:e2:7c:ae:50:d4:b2:4b:81:41:f6:7b:63:47:62:c5: 45:40:e6:7b:d8:6a:94:ae:66:a0:cf:6b:54:40:c0:32:a5:80: bf:e8:46:9c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QTRGNzExMC8GA1UEBRMoODc5MkRFMzk5Q0Y2MzE5M0REQzI5RDMwRkJGMEE1ODFF MDI0RjAwMzAeFw0yNTA2MDcwNjEwMjJaFw0yNTA2MTQwNjEwMjJaMBgxFjAUBgNV BAMTDTY4NDNkN2NmLTVlNTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNIQsQCYfLF1AwSUCH7go9wboaWiEVyp/sIpbwtqHdT9zzV/+q8ns+v5XOk0hj vEIwVpJ3qd8BWB1RU411Qbnm3YXYecuWjsYZ5te2aRo5aHwrcA81jAo0nyNEahHX RxcTQ+n8LOIaMZuDRwEm3AYeks/UfbQkZlbY/SHww7FFPwGYc0uFEa7xcWvKlqsV Q5tif9M8ZbUoVqP5aNHE2QSV786A/S4HgLHi7h67GTIcWGunQXbBD3SwdryQeFXA 9KwI4LJ/IMe1p43Wwg8heMLTvJYAd8VHjebXAxAb6BO6RbKhIgQojMJiKmaJ00Nv F5XzTMnf3n6menBWdKl7+pmlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUGuJzf6q4 PY2r/KnOcoWqpFyMkjswHwYDVR0jBBgwFoAUh5LeOZz2MZPdwp0w+/ClgeAk8AMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFBNEY3L0EzREQ2QjlBODVG QzExRUZCQzIxMEY1RUM0RjlBRTAyL2g1TGVPWnoyTVpQZHdwMHctX0NsZ2VBazhB TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaDVMZU9aejJNWlBkd3Awdy1fQ2xnZUFrOEFNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFB NEY3L0EzREQ2QjlBODVGQzExRUZCQzIxMEY1RUM0RjlBRTAyL2g1TGVPWnoyTVpQ ZHdwMHctX0NsZ2VBazhBTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABhYxBcZbHg5vL2Waq29ogsgDGIalumZpikpAIYDZ4+rCBh+xpZ1oxT7 JZLPoscKB60mzQMX+EsOyNZhENYqZMnQRbeQBNrtbJHC8rDcOurq2YFLwaz/YdgF WS8UGZErjK6uO1AcoASOrGLBjXocftWOqe7/QeOAQN7JJCrfXqBOXYMwnm/aktCt aL6RasqkZr7VE8isHoJhq+4uWLiaDBLOEyQu6Dd3/7hSQH5+c9euAEuU6EqN+nrx WkFTd+CRt6Fi+pKUD8EAu4i4VGh+qN0mlzVsTnPk99wGf+J8rlDUskuBQfZ7Y0di xUVA5nvYapSuZqDPa1RAwDKlgL/oRpw= -----END CERTIFICATE-----Generated at Sun Jun 8 21:34:18 2025 by rpki-client