$ rpki-client -vvf rpki.apnic.net/member_repository/A9136655/F707F4640A9811EABDCAA17CC4F9AE02/cFeff18bId_J3mZ8azwh8W-H1XI.mft File: cFeff18bId_J3mZ8azwh8W-H1XI.mft (raw, json) Hash identifier: aaP17JJ3Wy0a1R38wIw+Wdlb2cFsHQ+mwrORJ+cACK4= Subject key identifier: 8C:7E:8D:42:C9:A4:E2:4D:F6:39:01:4A:04:EC:55:D8:74:E5:6B:5F Authority key identifier: 70:57:9F:7F:5F:1B:21:DF:C9:DE:66:7C:6B:3C:21:F1:6F:87:D5:72 Certificate issuer: /CN=A9136655/serialNumber=70579F7F5F1B21DFC9DE667C6B3C21F16F87D572 Certificate serial: 0C3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFeff18bId_J3mZ8azwh8W-H1XI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136655/F707F4640A9811EABDCAA17CC4F9AE02/cFeff18bId_J3mZ8azwh8W-H1XI.mft Manifest number: 0C2E Signing time: Fri 30 May 2025 18:46:43 +0000 Manifest this update: Fri 30 May 2025 18:46:43 +0000 Manifest next update: Fri 06 Jun 2025 18:46:43 +0000 Files and hashes: 1: cFeff18bId_J3mZ8azwh8W-H1XI.crl (hash: HstBVEbVhuhBjrXkl8gXOxUgOs/15WX38jwMNsYmyNw=) 2: DEABC3F619C411EFA1A8677DC4F9AE02.roa (hash: W7K6VRN1QzgBc/gpj+6wHuV7YMhiZeiqUU+WpyRDJ4I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136655/F707F4640A9811EABDCAA17CC4F9AE02/cFeff18bId_J3mZ8azwh8W-H1XI.crl rsync://rpki.apnic.net/member_repository/A9136655/F707F4640A9811EABDCAA17CC4F9AE02/cFeff18bId_J3mZ8azwh8W-H1XI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFeff18bId_J3mZ8azwh8W-H1XI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:46:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3134 (0xc3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136655, serialNumber=70579F7F5F1B21DFC9DE667C6B3C21F16F87D572 Validity Not Before: May 30 18:46:43 2025 GMT Not After : Jun 6 18:46:43 2025 GMT Subject: CN=6839fd13-8dff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:be:47:b3:0a:73:05:6d:18:fe:3e:22:90:80: cb:aa:84:41:93:63:97:ec:4b:4b:bf:06:a7:34:bc: 4c:04:e7:cc:24:9e:b6:e0:e4:db:fe:e6:f0:f2:64: 1d:e7:05:f8:a1:b8:0c:45:37:b7:07:cf:3e:6d:52: cc:f4:78:f7:fe:2c:5a:76:b9:8a:ed:69:51:82:b9: b2:1c:52:21:8e:41:d3:fa:e4:f0:0c:55:ee:ee:11: 0b:f4:52:bb:a7:b4:4c:51:8d:10:a5:f6:b5:e6:25: f2:b7:af:45:b9:c5:8c:2e:87:f8:c1:6c:88:ef:0a: 45:a0:ad:d5:1d:85:8f:5f:41:16:22:23:fa:05:d4: 8c:79:96:69:d2:3b:88:8e:ac:3f:75:b6:22:b7:6d: 99:98:51:48:04:89:ee:9c:e6:95:3c:66:75:72:ba: cc:6c:fb:02:37:7a:e0:20:b0:2b:ec:b3:db:f0:a0: 94:a8:63:18:33:dc:69:d0:25:25:5f:f4:22:ea:37: 31:a5:19:69:50:77:50:69:75:c3:2c:95:19:94:7d: e8:c8:52:b0:d7:2a:14:e1:f4:01:ac:5c:67:4c:b1: 2a:0a:0b:99:af:d9:86:b9:5b:25:31:75:e0:f8:30: 2a:d2:f9:c9:24:4c:1b:cf:e8:6d:10:81:9c:49:c5: 4a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:7E:8D:42:C9:A4:E2:4D:F6:39:01:4A:04:EC:55:D8:74:E5:6B:5F X509v3 Authority Key Identifier: keyid:70:57:9F:7F:5F:1B:21:DF:C9:DE:66:7C:6B:3C:21:F1:6F:87:D5:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136655/F707F4640A9811EABDCAA17CC4F9AE02/cFeff18bId_J3mZ8azwh8W-H1XI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFeff18bId_J3mZ8azwh8W-H1XI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136655/F707F4640A9811EABDCAA17CC4F9AE02/cFeff18bId_J3mZ8azwh8W-H1XI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:9b:a3:43:52:67:dd:ec:74:4c:1c:0e:e4:53:22:ef:34:f8: 2d:b2:e6:0a:58:4c:99:6b:52:ca:f2:21:d1:a8:e7:c6:d1:38: 07:50:a0:cd:4c:61:f3:cc:dd:ff:06:6a:46:52:9b:0b:a9:df: 82:46:07:e2:2c:8c:0c:19:a3:46:46:8c:64:ac:d4:1c:b8:7c: 97:0c:d5:eb:73:14:79:23:e2:b6:e4:f7:4d:17:d1:6d:6d:40: 2b:f4:1e:62:91:09:7d:df:78:2e:81:ff:dd:bf:67:5c:c6:2c: 96:42:6d:e2:3f:f4:81:c4:b7:c3:f5:ef:b7:bb:6b:af:ff:09: 7a:97:b1:cc:fb:f2:e4:58:db:16:65:2c:d5:1f:aa:4e:c2:94: 46:75:83:af:04:31:06:f3:90:ef:e9:07:a8:be:91:19:a7:23: 87:d5:9d:a4:3e:d7:eb:99:5d:eb:07:9f:6a:de:09:05:c4:24: f5:90:73:e8:c3:12:1c:9f:8b:67:1c:60:95:ae:4d:11:da:1e: 9b:ea:69:7f:e1:37:8c:18:fe:7b:92:0e:81:a7:3b:4f:96:05: 2d:7d:d4:6a:4b:7e:37:d1:84:92:b5:a0:72:f3:e6:6c:ef:da: 53:d3:6e:60:26:82:71:dc:e1:69:ac:e7:58:94:94:d0:88:1d: da:98:95:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDD4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzY2NTUxMTAvBgNVBAUTKDcwNTc5RjdGNUYxQjIxREZDOURFNjY3QzZCM0MyMUYx NkY4N0Q1NzIwHhcNMjUwNTMwMTg0NjQzWhcNMjUwNjA2MTg0NjQzWjAYMRYwFAYD VQQDEw02ODM5ZmQxMy04ZGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3L5HswpzBW0Y/j4ikIDLqoRBk2OX7EtLvwanNLxMBOfMJJ624OTb/ubw8mQd 5wX4obgMRTe3B88+bVLM9Hj3/ixadrmK7WlRgrmyHFIhjkHT+uTwDFXu7hEL9FK7 p7RMUY0Qpfa15iXyt69FucWMLof4wWyI7wpFoK3VHYWPX0EWIiP6BdSMeZZp0juI jqw/dbYit22ZmFFIBInunOaVPGZ1crrMbPsCN3rgILAr7LPb8KCUqGMYM9xp0CUl X/Qi6jcxpRlpUHdQaXXDLJUZlH3oyFKw1yoU4fQBrFxnTLEqCguZr9mGuVslMXXg +DAq0vnJJEwbz+htEIGcScVKGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIx+jULJ pOJN9jkBSgTsVdh05WtfMB8GA1UdIwQYMBaAFHBXn39fGyHfyd5mfGs8IfFvh9Vy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjY1NS9GNzA3RjQ2NDBB OTgxMUVBQkRDQUExN0NDNEY5QUUwMi9jRmVmZjE4YklkX0ozbVo4YXp3aDhXLUgx WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NGZWZmMThiSWRfSjNtWjhhendoOFctSDFYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjY1NS9GNzA3RjQ2NDBBOTgxMUVBQkRDQUExN0NDNEY5QUUwMi9jRmVmZjE4Yklk X0ozbVo4YXp3aDhXLUgxWEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIm6NDUmfd7HRMHA7kUyLvNPgtsuYKWEyZa1LK8iHRqOfG0TgHUKDN TGHzzN3/BmpGUpsLqd+CRgfiLIwMGaNGRoxkrNQcuHyXDNXrcxR5I+K25PdNF9Ft bUAr9B5ikQl933gugf/dv2dcxiyWQm3iP/SBxLfD9e+3u2uv/wl6l7HM+/LkWNsW ZSzVH6pOwpRGdYOvBDEG85Dv6QeovpEZpyOH1Z2kPtfrmV3rB59q3gkFxCT1kHPo wxIcn4tnHGCVrk0R2h6b6ml/4TeMGP57kg6BpztPlgUtfdRqS3430YSStaBy8+Zs 79pT025gJoJx3OFprOdYlJTQiB3amJVw -----END CERTIFICATE-----Generated at Sat May 31 16:46:51 2025 by rpki-client