$ rpki-client -vvf rpki.apnic.net/member_repository/A912F515/3D3CA30874A711EF8EA2C53DC4F9AE02/-1rPvPn87wNLipO9MZ5iBELWZn8.mft File: -1rPvPn87wNLipO9MZ5iBELWZn8.mft (raw, json) Hash identifier: n5LBMyn5ia+VNtQK/z2Rc3UEvhuQ2lavWq9JHj8IDkI= Subject key identifier: 92:1D:F6:92:FE:A3:5A:86:DD:88:6D:9D:A8:03:A9:B8:37:F8:2C:DD Authority key identifier: FB:5A:CF:BC:F9:FC:EF:03:4B:8A:93:BD:31:9E:62:04:42:D6:66:7F Certificate issuer: /CN=A912F515/serialNumber=FB5ACFBCF9FCEF034B8A93BD319E620442D6667F Certificate serial: 92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-1rPvPn87wNLipO9MZ5iBELWZn8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F515/3D3CA30874A711EF8EA2C53DC4F9AE02/-1rPvPn87wNLipO9MZ5iBELWZn8.mft Manifest number: 8F Signing time: Sun 15 Jun 2025 05:36:32 +0000 Manifest this update: Sun 15 Jun 2025 05:36:32 +0000 Manifest next update: Sun 22 Jun 2025 05:36:32 +0000 Files and hashes: 1: -1rPvPn87wNLipO9MZ5iBELWZn8.crl (hash: RLpo4mhbX2s+AZ/JhRZYmeHlA/jKb0j/QC1EV8v1sqU=) 2: 6A8E3C9474A811EFA3123A41C4F9AE02.roa (hash: apEkxffopCeqovMKL+kWef8zz6F2P5gxUW9hlBfV7TM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F515/3D3CA30874A711EF8EA2C53DC4F9AE02/-1rPvPn87wNLipO9MZ5iBELWZn8.crl rsync://rpki.apnic.net/member_repository/A912F515/3D3CA30874A711EF8EA2C53DC4F9AE02/-1rPvPn87wNLipO9MZ5iBELWZn8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-1rPvPn87wNLipO9MZ5iBELWZn8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 146 (0x92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F515, serialNumber=FB5ACFBCF9FCEF034B8A93BD319E620442D6667F Validity Not Before: Jun 15 05:36:32 2025 GMT Not After : Jun 22 05:36:32 2025 GMT Subject: CN=684e5be0-09ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:84:30:cc:22:24:43:e0:3f:fe:17:8e:6e:13: ca:64:94:53:b5:41:e9:d9:fd:cd:fd:6a:37:61:f4: 2a:c8:6c:ac:7e:83:37:84:29:09:e8:20:8b:8c:0e: 7d:5c:4f:74:59:27:e2:65:49:de:db:5f:c1:98:01: 78:de:3c:b4:a3:31:48:76:36:65:0c:71:25:99:37: db:e0:48:88:b4:d8:c0:7d:b3:83:0d:fe:67:e4:28: 83:28:1b:74:27:35:fb:f9:67:a7:84:5d:1e:bb:b4: da:ff:5a:24:e0:a1:69:cd:9e:71:aa:dd:71:9b:d0: 5f:4b:68:cd:66:71:65:9b:96:91:01:a4:40:d1:d3: 83:97:16:c8:d6:c4:67:6e:dd:d2:79:8f:cf:29:ff: 05:0c:ad:76:06:b1:25:6f:7d:83:ee:cc:30:56:e6: 13:59:51:24:b4:51:0f:c2:b9:87:fd:ff:ae:2c:87: 94:3b:96:b6:31:3b:fb:db:cd:28:ff:79:d0:c1:7c: 6c:ba:6c:bc:bc:47:82:eb:ea:44:43:24:9a:dd:ea: 4b:7d:f7:e8:c1:d2:3b:11:71:4f:c4:b5:de:20:4b: 88:77:26:7a:74:1f:5e:06:ee:a7:49:05:cd:55:ad: 2d:a7:10:17:0f:ae:05:38:2d:13:28:3b:e2:29:94: 49:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:1D:F6:92:FE:A3:5A:86:DD:88:6D:9D:A8:03:A9:B8:37:F8:2C:DD X509v3 Authority Key Identifier: keyid:FB:5A:CF:BC:F9:FC:EF:03:4B:8A:93:BD:31:9E:62:04:42:D6:66:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F515/3D3CA30874A711EF8EA2C53DC4F9AE02/-1rPvPn87wNLipO9MZ5iBELWZn8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-1rPvPn87wNLipO9MZ5iBELWZn8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F515/3D3CA30874A711EF8EA2C53DC4F9AE02/-1rPvPn87wNLipO9MZ5iBELWZn8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:5c:ee:31:05:8e:b7:a4:90:84:0f:18:74:43:68:73:c9:44: 4c:f7:90:56:2e:5d:ef:d6:30:57:3f:bf:98:f5:a0:3b:6e:2e: c7:2b:6a:02:08:a7:2d:c4:d7:ab:d4:bc:94:d8:b8:93:14:4b: 6c:aa:22:13:11:a5:f1:ea:28:c3:25:9c:20:c1:06:73:40:f3: 9a:09:b1:22:6a:52:78:d7:ec:99:a3:ae:6b:34:6f:a6:a3:fd: 4e:04:40:5b:53:4c:7b:a9:44:e6:83:04:6a:d0:1e:e9:e5:54: ff:2b:ec:e0:06:64:7d:fb:30:92:36:cc:31:0d:ea:0c:d6:e2: 4d:52:f3:c5:89:72:01:60:2c:26:b4:ab:a1:cc:9d:a3:dd:3f: 71:b8:87:ed:42:cd:4d:74:5c:ba:f8:d4:c8:6c:2f:8d:07:83: 5e:cd:28:bf:be:1e:1e:ca:54:84:e8:59:6e:3e:62:ed:38:af: b1:ef:9a:05:ed:0f:40:a7:3e:cc:a0:71:e0:e9:c6:5f:19:4b: 14:4f:60:77:0f:cf:69:7f:1e:99:13:44:1d:1c:95:87:2b:9e: b5:e3:df:da:ad:c3:98:26:7c:47:9b:bf:54:36:ef:dd:28:f7: 21:f3:11:b8:e8:6a:b3:14:dd:7f:02:dd:f1:a6:cc:90:6d:59: 98:6c:65:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkY1MTUxMTAvBgNVBAUTKEZCNUFDRkJDRjlGQ0VGMDM0QjhBOTNCRDMxOUU2MjA0 NDJENjY2N0YwHhcNMjUwNjE1MDUzNjMyWhcNMjUwNjIyMDUzNjMyWjAYMRYwFAYD VQQDEw02ODRlNWJlMC0wOWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxIQwzCIkQ+A//heObhPKZJRTtUHp2f3N/Wo3YfQqyGysfoM3hCkJ6CCLjA59 XE90WSfiZUne21/BmAF43jy0ozFIdjZlDHElmTfb4EiItNjAfbODDf5n5CiDKBt0 JzX7+WenhF0eu7Ta/1ok4KFpzZ5xqt1xm9BfS2jNZnFlm5aRAaRA0dODlxbI1sRn bt3SeY/PKf8FDK12BrElb32D7swwVuYTWVEktFEPwrmH/f+uLIeUO5a2MTv7280o /3nQwXxsumy8vEeC6+pEQySa3epLfffowdI7EXFPxLXeIEuIdyZ6dB9eBu6nSQXN Va0tpxAXD64FOC0TKDviKZRJXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJId9pL+ o1qG3YhtnagDqbg3+CzdMB8GA1UdIwQYMBaAFPtaz7z5/O8DS4qTvTGeYgRC1mZ/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjUxNS8zRDNDQTMwODc0 QTcxMUVGOEVBMkM1M0RDNEY5QUUwMi8tMXJQdlBuODd3TkxpcE85TVo1aUJFTFda bjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy0xclB2UG44N3dOTGlwTzlNWjVpQkVMV1puOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjUxNS8zRDNDQTMwODc0QTcxMUVGOEVBMkM1M0RDNEY5QUUwMi8tMXJQdlBuODd3 TkxpcE85TVo1aUJFTFdabjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmXO4xBY63pJCEDxh0Q2hzyURM95BWLl3v1jBXP7+Y9aA7bi7HK2oC CKctxNer1LyU2LiTFEtsqiITEaXx6ijDJZwgwQZzQPOaCbEialJ41+yZo65rNG+m o/1OBEBbU0x7qUTmgwRq0B7p5VT/K+zgBmR9+zCSNswxDeoM1uJNUvPFiXIBYCwm tKuhzJ2j3T9xuIftQs1NdFy6+NTIbC+NB4NezSi/vh4eylSE6FluPmLtOK+x75oF 7Q9Apz7MoHHg6cZfGUsUT2B3D89pfx6ZE0QdHJWHK56149/arcOYJnxHm79UNu/d KPch8xG46GqzFN1/At3xpsyQbVmYbGU5 -----END CERTIFICATE-----Generated at Sun Jun 15 09:14:08 2025 by rpki-client