$ rpki-client -vvf rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.mft File: kWov4qosIKsBxaE9I22knbfqUGI.mft (raw, json) Hash identifier: iI6EKNXmfObkQozy22DpL1/PIhzEzSxzIvPn3+p7R30= Subject key identifier: 2E:A0:91:96:C4:E9:C1:A9:1B:90:D1:EC:5E:8D:C8:73:6B:14:BF:59 Authority key identifier: 91:6A:2F:E2:AA:2C:20:AB:01:C5:A1:3D:23:6D:A4:9D:B7:EA:50:62 Certificate issuer: /CN=A912EF71/serialNumber=916A2FE2AA2C20AB01C5A13D236DA49DB7EA5062 Certificate serial: 0E20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kWov4qosIKsBxaE9I22knbfqUGI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.mft Manifest number: 0E17 Signing time: Fri 06 Jun 2025 18:21:59 +0000 Manifest this update: Fri 06 Jun 2025 18:21:58 +0000 Manifest next update: Fri 13 Jun 2025 18:21:58 +0000 Files and hashes: 1: kWov4qosIKsBxaE9I22knbfqUGI.crl (hash: ZmhPlgyo9og+68dRjBQkJyRQMmeEaxEV7gGBUZZGXco=) 2: 6877A622A9DB11E9B353AF85C4F9AE02.roa (hash: NeUqjo2VYHUQAlZoEGW65z9tYOjTgZvuRZo90c+p6gU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.crl rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kWov4qosIKsBxaE9I22knbfqUGI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Jun 2025 18:21:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3616 (0xe20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912EF71, serialNumber=916A2FE2AA2C20AB01C5A13D236DA49DB7EA5062 Validity Not Before: Jun 6 18:21:58 2025 GMT Not After : Jun 13 18:21:58 2025 GMT Subject: CN=684331c7-c4ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:76:ad:fb:ec:d0:32:06:73:b8:0d:a0:92:20: c8:92:2f:d3:e9:c1:3a:a9:ea:90:ca:dc:ff:ca:de: f2:c8:3b:24:14:15:a9:56:7a:fe:c9:6c:6e:63:c6: 18:42:9c:57:26:c2:bf:99:5c:e6:df:90:f5:08:aa: 5d:bd:27:09:7b:9e:86:3e:9f:7f:c0:cb:bd:40:3b: 7e:8f:8e:87:c5:2e:50:71:e9:cf:36:d9:f4:a3:0c: 59:9e:2c:59:ff:c3:64:91:45:bd:b0:5a:47:5b:e5: 25:1e:52:21:92:5a:1d:f4:56:14:ba:b2:0b:7b:3c: bd:9e:89:d7:65:88:4e:f6:39:f5:51:df:e7:d9:2b: 04:65:04:a0:06:b5:6c:2b:bb:88:64:31:79:50:10: 7c:0f:da:38:8c:98:dc:dc:f4:d2:ee:d2:7f:fb:7e: 5e:3a:53:4f:76:ea:04:d2:e6:ff:6e:14:73:17:42: e7:0a:59:f3:df:66:ca:23:27:8c:0d:66:8f:09:bd: 37:36:cf:e7:ef:f7:c6:49:86:1f:3b:10:68:12:e3: 26:c4:bd:2d:17:64:c5:0d:23:94:fa:3a:b7:36:b6: c4:87:39:3e:34:1c:eb:ca:b6:46:7b:89:fc:58:3c: f1:bc:b2:c6:78:44:8a:4f:90:bb:af:86:24:79:d1: cb:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:A0:91:96:C4:E9:C1:A9:1B:90:D1:EC:5E:8D:C8:73:6B:14:BF:59 X509v3 Authority Key Identifier: keyid:91:6A:2F:E2:AA:2C:20:AB:01:C5:A1:3D:23:6D:A4:9D:B7:EA:50:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kWov4qosIKsBxaE9I22knbfqUGI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:57:69:a2:ce:7a:5e:6b:f2:01:dc:6e:5f:b1:d9:f4:47:99: ae:3f:60:09:d0:a2:19:44:70:d7:5b:c7:1b:cc:20:74:39:6b: 8a:22:b9:07:86:13:4a:a0:05:9f:85:ae:05:a1:ef:a5:3e:99: bc:2c:6b:9e:05:d5:63:04:b4:6a:8b:f9:40:1e:bf:43:7b:5a: 95:f6:9a:57:e3:47:4e:c7:69:25:3f:d8:7b:52:9d:61:fd:e0: 51:91:b4:bc:46:c6:90:0b:01:bb:53:9b:b8:17:26:58:5c:1c: 93:25:38:f5:ef:ec:4a:7e:f2:1a:72:9f:b7:f0:a0:e7:15:a8: f8:ab:02:56:d8:16:77:9b:18:42:2b:70:a4:ce:26:f6:fc:59: 17:19:8c:01:a7:f7:36:87:e3:cc:4f:21:4d:cd:f7:e8:41:93: df:d3:9b:0c:7d:08:30:c5:3b:3e:7d:a0:1a:c4:7d:0a:5d:08: d5:41:d7:fe:50:b9:62:26:15:eb:d2:c8:63:0f:7c:c8:ce:f1: 5e:0f:0d:f1:59:6a:88:8b:eb:b5:ed:2b:44:9a:0b:7d:7c:d4: 70:9d:27:8d:3b:63:84:de:6c:94:3c:50:c8:a8:47:dc:23:a8: cb:1d:10:87:1b:5f:4b:77:d0:0b:b9:85:81:dc:81:4f:29:fd: 48:b3:af:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDiAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkVGNzExMTAvBgNVBAUTKDkxNkEyRkUyQUEyQzIwQUIwMUM1QTEzRDIzNkRBNDlE QjdFQTUwNjIwHhcNMjUwNjA2MTgyMTU4WhcNMjUwNjEzMTgyMTU4WjAYMRYwFAYD VQQDEw02ODQzMzFjNy1jNGJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuXat++zQMgZzuA2gkiDIki/T6cE6qeqQytz/yt7yyDskFBWpVnr+yWxuY8YY QpxXJsK/mVzm35D1CKpdvScJe56GPp9/wMu9QDt+j46HxS5QcenPNtn0owxZnixZ /8NkkUW9sFpHW+UlHlIhklod9FYUurILezy9nonXZYhO9jn1Ud/n2SsEZQSgBrVs K7uIZDF5UBB8D9o4jJjc3PTS7tJ/+35eOlNPduoE0ub/bhRzF0LnClnz32bKIyeM DWaPCb03Ns/n7/fGSYYfOxBoEuMmxL0tF2TFDSOU+jq3NrbEhzk+NBzryrZGe4n8 WDzxvLLGeESKT5C7r4YkedHLqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC6gkZbE 6cGpG5DR7F6NyHNrFL9ZMB8GA1UdIwQYMBaAFJFqL+KqLCCrAcWhPSNtpJ236lBi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRUY3MS83RUE4Mjk3Q0E5 REExMUU5OTU0MzM0ODRDNEY5QUUwMi9rV292NHFvc0lLc0J4YUU5STIya25iZnFV R0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tXb3Y0cW9zSUtzQnhhRTlJMjJrbmJmcVVHSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RUY3MS83RUE4Mjk3Q0E5REExMUU5OTU0MzM0ODRDNEY5QUUwMi9rV292NHFvc0lL c0J4YUU5STIya25iZnFVR0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJV2miznpea/IB3G5fsdn0R5muP2AJ0KIZRHDXW8cbzCB0OWuKIrkH hhNKoAWfha4Foe+lPpm8LGueBdVjBLRqi/lAHr9De1qV9ppX40dOx2klP9h7Up1h /eBRkbS8RsaQCwG7U5u4FyZYXByTJTj17+xKfvIacp+38KDnFaj4qwJW2BZ3mxhC K3Ckzib2/FkXGYwBp/c2h+PMTyFNzffoQZPf05sMfQgwxTs+faAaxH0KXQjVQdf+ ULliJhXr0shjD3zIzvFeDw3xWWqIi+u17StEmgt9fNRwnSeNO2OE3myUPFDIqEfc I6jLHRCHG19Ld9ALuYWB3IFPKf1Is6+E -----END CERTIFICATE-----Generated at Sat Jun 7 13:06:28 2025 by rpki-client