$ rpki-client -vvf rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.mft File: A_TeA6HJhcNNxoJy-ddzWzP6at4.mft (raw, json) Hash identifier: 2y9CxXFcfG2s3/OdtahSusGcNrzeosZ1OGIEb63eKGc= Subject key identifier: 6E:8E:91:29:C9:93:D4:91:26:BF:BA:BC:88:D1:8C:CB:27:85:A8:96 Authority key identifier: 03:F4:DE:03:A1:C9:85:C3:4D:C6:82:72:F9:D7:73:5B:33:FA:6A:DE Certificate issuer: /CN=A911C7CD/serialNumber=03F4DE03A1C985C34DC68272F9D7735B33FA6ADE Certificate serial: 9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_TeA6HJhcNNxoJy-ddzWzP6at4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.mft Manifest number: 9A Signing time: Fri 13 Jun 2025 05:15:11 +0000 Manifest this update: Fri 13 Jun 2025 05:15:11 +0000 Manifest next update: Fri 20 Jun 2025 05:15:11 +0000 Files and hashes: 1: A_TeA6HJhcNNxoJy-ddzWzP6at4.crl (hash: TN72ZciypCwq/ROFe+Jdel2PiC0lCLQ6Up4xqrD+Bb4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.crl rsync://rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_TeA6HJhcNNxoJy-ddzWzP6at4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 05:15:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 154 (0x9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C7CD, serialNumber=03F4DE03A1C985C34DC68272F9D7735B33FA6ADE Validity Not Before: Jun 13 05:15:11 2025 GMT Not After : Jun 20 05:15:11 2025 GMT Subject: CN=684bb3df-8977 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:58:bf:a1:39:80:51:e2:98:cd:91:38:76:ed: 88:18:fa:f4:b1:fa:9d:b8:ee:5d:75:0d:5a:9c:08: fc:99:00:0b:fa:d1:e7:30:f0:04:e6:96:30:0c:28: 18:de:b6:ca:b7:95:6e:d5:9d:cf:f1:0a:58:4b:69: f8:ab:54:ee:22:8f:50:98:7a:9f:c2:ca:b3:80:b5: 7b:03:6c:b2:fd:8f:ec:6e:22:b0:fa:78:35:3d:86: 6c:71:26:8d:f8:3a:7b:17:e6:0b:32:1c:07:94:2d: ce:76:31:c0:26:3e:93:e5:97:d1:0b:21:21:0d:29: 2c:24:d3:5f:37:fb:7f:d0:cc:b5:ea:40:87:c5:c3: 32:7e:38:a6:b0:b8:5d:b9:b7:19:81:b1:2b:e7:34: 3d:5e:45:6a:30:80:2c:57:77:e0:36:4a:10:07:f5: e1:13:29:10:a4:01:76:b2:1c:65:d9:cd:f4:d6:ac: 6f:55:2a:db:c4:68:ac:84:6c:9f:60:ca:e8:3c:5d: 3c:71:7c:18:43:90:8f:2c:f0:3d:8f:aa:99:7d:28: d7:c7:9e:89:36:af:c0:3c:bc:8c:7f:2a:77:42:54: a9:24:35:66:9b:e3:7a:1f:1e:fa:c7:db:18:72:13: 0c:66:de:c0:67:cc:c2:1a:dc:1b:25:11:6c:80:9e: 35:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:8E:91:29:C9:93:D4:91:26:BF:BA:BC:88:D1:8C:CB:27:85:A8:96 X509v3 Authority Key Identifier: keyid:03:F4:DE:03:A1:C9:85:C3:4D:C6:82:72:F9:D7:73:5B:33:FA:6A:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_TeA6HJhcNNxoJy-ddzWzP6at4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:d4:c3:e9:82:6e:e2:bd:7b:c1:05:80:00:8f:c3:ba:5d:f5: 80:fd:1a:50:ed:35:e6:cd:7d:a4:b0:9e:a5:1d:9d:58:e4:24: 28:eb:a0:97:9e:c2:f4:a6:e0:09:dd:bc:5d:36:68:3b:59:6d: 7c:e6:a4:8a:0e:9b:68:6e:37:20:66:48:3a:fa:c2:a3:61:aa: 2a:fa:85:f2:21:15:a9:9c:31:74:be:2c:54:40:de:89:1e:9d: 4d:4c:c8:31:cf:d4:58:38:63:64:bf:6f:c2:e8:98:f0:51:3e: 72:4a:83:97:27:dc:ce:c8:33:c6:de:9c:ec:bb:e1:af:c1:d0: b6:3e:a0:07:d1:d7:d8:b6:03:de:ef:ab:6f:26:a4:09:fc:da: 26:58:10:f3:69:5f:18:03:24:8b:05:12:06:d7:d8:1a:3e:f0: 21:ed:4e:49:da:cc:97:6d:ab:6a:a5:b2:11:44:f5:46:00:12: 2c:c9:e4:0d:fc:de:de:74:7a:38:98:2c:cd:36:df:c9:3c:90: c2:d3:17:12:8a:9e:11:40:f1:9f:c3:69:0b:91:54:a7:1c:4b: d6:d8:95:5a:39:37:c7:aa:38:30:e5:7b:1a:8b:18:4c:f2:16: b7:be:bf:8d:f4:3f:bd:dc:bd:b4:07:68:ec:fd:5a:80:90:b9: e7:21:58:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM3Q0QxMTAvBgNVBAUTKDAzRjRERTAzQTFDOTg1QzM0REM2ODI3MkY5RDc3MzVC MzNGQTZBREUwHhcNMjUwNjEzMDUxNTExWhcNMjUwNjIwMDUxNTExWjAYMRYwFAYD VQQDEw02ODRiYjNkZi04OTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtFi/oTmAUeKYzZE4du2IGPr0sfqduO5ddQ1anAj8mQAL+tHnMPAE5pYwDCgY 3rbKt5Vu1Z3P8QpYS2n4q1TuIo9QmHqfwsqzgLV7A2yy/Y/sbiKw+ng1PYZscSaN +Dp7F+YLMhwHlC3OdjHAJj6T5ZfRCyEhDSksJNNfN/t/0My16kCHxcMyfjimsLhd ubcZgbEr5zQ9XkVqMIAsV3fgNkoQB/XhEykQpAF2shxl2c301qxvVSrbxGishGyf YMroPF08cXwYQ5CPLPA9j6qZfSjXx56JNq/APLyMfyp3QlSpJDVmm+N6Hx76x9sY chMMZt7AZ8zCGtwbJRFsgJ41LQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG6OkSnJ k9SRJr+6vIjRjMsnhaiWMB8GA1UdIwQYMBaAFAP03gOhyYXDTcaCcvnXc1sz+mre MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzdDRC9ERjBCNjg2QTVF QTIxMUVGQjE2NzcyNDNDNEY5QUUwMi9BX1RlQTZISmhjTk54b0p5LWRkeld6UDZh dDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FfVGVBNkhKaGNOTnhvSnktZGR6V3pQNmF0NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzdDRC9ERjBCNjg2QTVFQTIxMUVGQjE2NzcyNDNDNEY5QUUwMi9BX1RlQTZISmhj Tk54b0p5LWRkeld6UDZhdDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBu1MPpgm7ivXvBBYAAj8O6XfWA/RpQ7TXmzX2ksJ6lHZ1Y5CQo66CX nsL0puAJ3bxdNmg7WW185qSKDptobjcgZkg6+sKjYaoq+oXyIRWpnDF0vixUQN6J Hp1NTMgxz9RYOGNkv2/C6JjwUT5ySoOXJ9zOyDPG3pzsu+GvwdC2PqAH0dfYtgPe 76tvJqQJ/NomWBDzaV8YAySLBRIG19gaPvAh7U5J2syXbatqpbIRRPVGABIsyeQN /N7edHo4mCzNNt/JPJDC0xcSip4RQPGfw2kLkVSnHEvW2JVaOTfHqjgw5XsaixhM 8ha3vr+N9D+93L20B2js/VqAkLnnIVio -----END CERTIFICATE-----Generated at Sat Jun 14 11:29:59 2025 by rpki-client