$ rpki-client -vvf rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.mft File: ADNLjyGPpSUzmIbI-8lAk8iO1Xs.mft (raw, json) Hash identifier: VdsKUEM/UHvT8KUQpD/NPtFABpG1WK+cRSZ7WsKEtYs= Subject key identifier: B8:8C:A9:A0:63:5A:37:34:A6:A4:8B:59:73:AE:10:D7:41:1C:63:8E Authority key identifier: 00:33:4B:8F:21:8F:A5:25:33:98:86:C8:FB:C9:40:93:C8:8E:D5:7B Certificate issuer: /CN=A913C0C6/serialNumber=00334B8F218FA525339886C8FBC94093C88ED57B Certificate serial: 0507 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.mft Manifest number: 04F0 Signing time: Sat 31 May 2025 00:00:45 +0000 Manifest this update: Sat 31 May 2025 00:00:45 +0000 Manifest next update: Sat 07 Jun 2025 00:00:45 +0000 Files and hashes: 1: ADNLjyGPpSUzmIbI-8lAk8iO1Xs.crl (hash: BzSOD0e+cyXAGqLPcXTYeodV63FQvIOnlzbN3icJAlQ=) 2: 47660D4A488F11EFB89B763FC4F9AE02.roa (hash: o1OTNYPIFsb3EvbpcOOr9EZlDozQP5u7U/7IxhfxWGM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.crl rsync://rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1287 (0x507) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C0C6, serialNumber=00334B8F218FA525339886C8FBC94093C88ED57B Validity Not Before: May 31 00:00:45 2025 GMT Not After : Jun 7 00:00:45 2025 GMT Subject: CN=683a46ad-e228 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:bb:2d:49:ae:e7:67:d7:3f:ea:26:26:2e:c1: 1a:04:82:88:e2:37:24:94:b6:42:da:59:bf:d5:db: 7c:c9:72:96:33:ad:cb:7f:ea:36:67:78:1f:93:ff: f2:36:9d:b2:cc:56:a2:06:ec:5c:80:35:36:ed:e2: 59:d4:83:ba:27:5b:20:80:ff:2d:71:7a:be:5f:5a: d6:fc:84:e4:4c:c3:29:c3:0e:89:80:8d:c8:58:68: 9d:8b:07:73:6a:f9:b6:38:da:f0:1f:b0:f1:7a:cd: b0:1c:28:7e:e1:f4:41:cc:30:01:3e:19:89:d0:84: 48:ac:d5:7f:0e:c9:9c:59:f2:8a:3d:a4:97:20:8e: dc:47:6f:7e:a6:62:e2:2e:86:0e:76:d9:e3:f7:45: 36:ce:82:34:f5:60:cf:d2:f2:21:22:5f:03:a6:d9: 4b:c3:dc:30:bb:fd:e6:6d:dc:9a:c7:2d:32:ac:19: 97:89:b9:6c:9b:18:4b:11:eb:ca:f8:c5:e4:08:98: 06:b5:d8:0a:0f:68:bf:68:13:5f:62:3a:2c:69:1b: 5a:c8:f3:54:d4:52:53:99:59:42:41:11:f7:c3:da: 7d:e8:98:15:00:b4:28:be:8e:22:fa:f8:1f:e3:36: fb:91:82:8d:23:f2:7d:28:4b:c2:3d:e0:a7:3c:03: a7:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:8C:A9:A0:63:5A:37:34:A6:A4:8B:59:73:AE:10:D7:41:1C:63:8E X509v3 Authority Key Identifier: keyid:00:33:4B:8F:21:8F:A5:25:33:98:86:C8:FB:C9:40:93:C8:8E:D5:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:b5:ab:a0:11:c2:0d:73:a7:8f:be:0e:f0:42:71:5e:ec:0d: ff:99:25:40:87:fe:6d:d5:18:c2:56:3a:75:fe:4c:32:c1:25: 0c:dd:b7:ab:da:8a:6c:17:35:60:d7:ed:c5:40:f0:4c:db:4f: a8:f6:50:bc:99:a2:a6:82:aa:ac:93:aa:5b:ea:1b:0f:0d:6e: 61:21:2f:e9:47:39:62:47:5c:e3:b2:32:7c:c5:3c:12:7b:56: e9:cd:e8:5d:60:bb:7e:e3:0f:c3:cb:f6:ae:38:70:e3:bd:de: 5c:85:c3:9a:fe:3a:ee:4b:97:d7:e1:3f:db:e4:30:17:1f:46: e3:99:6c:96:df:0c:35:34:03:58:55:43:8b:10:87:49:fb:78: e7:6e:21:cc:a6:16:35:b6:a3:9a:91:bd:ff:ed:4e:a5:20:e2: ec:5a:dc:0d:af:6c:89:1e:78:99:94:16:ca:83:63:a1:b3:de: ec:e5:90:4e:80:ad:b5:08:3c:f8:08:71:10:9a:d0:46:b8:ae: 6a:f7:8d:24:67:1b:63:74:4d:e4:e6:67:58:f2:69:00:04:fa: 03:2c:ce:a1:c0:ab:7a:57:6c:6d:c8:13:bf:7e:17:89:4b:c7: 50:8b:0a:c6:12:c5:57:4e:c3:d1:7c:a4:04:c0:92:02:12:10: b9:ca:17:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0MwQzYxMTAvBgNVBAUTKDAwMzM0QjhGMjE4RkE1MjUzMzk4ODZDOEZCQzk0MDkz Qzg4RUQ1N0IwHhcNMjUwNTMxMDAwMDQ1WhcNMjUwNjA3MDAwMDQ1WjAYMRYwFAYD VQQDEw02ODNhNDZhZC1lMjI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAubstSa7nZ9c/6iYmLsEaBIKI4jcklLZC2lm/1dt8yXKWM63Lf+o2Z3gfk//y Np2yzFaiBuxcgDU27eJZ1IO6J1sggP8tcXq+X1rW/ITkTMMpww6JgI3IWGidiwdz avm2ONrwH7Dxes2wHCh+4fRBzDABPhmJ0IRIrNV/DsmcWfKKPaSXII7cR29+pmLi LoYOdtnj90U2zoI09WDP0vIhIl8DptlLw9wwu/3mbdyaxy0yrBmXiblsmxhLEevK +MXkCJgGtdgKD2i/aBNfYjosaRtayPNU1FJTmVlCQRH3w9p96JgVALQovo4i+vgf 4zb7kYKNI/J9KEvCPeCnPAOneQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLiMqaBj Wjc0pqSLWXOuENdBHGOOMB8GA1UdIwQYMBaAFAAzS48hj6UlM5iGyPvJQJPIjtV7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzBDNi8xODNGODRBRTIz NEIxMUVDQjhBMkRFN0VDNEY5QUUwMi9BRE5ManlHUHBTVXptSWJJLThsQWs4aU8x WHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FETkxqeUdQcFNVem1JYkktOGxBazhpTzFYcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QzBDNi8xODNGODRBRTIzNEIxMUVDQjhBMkRFN0VDNEY5QUUwMi9BRE5ManlHUHBT VXptSWJJLThsQWs4aU8xWHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmtaugEcINc6ePvg7wQnFe7A3/mSVAh/5t1RjCVjp1/kwywSUM3ber 2opsFzVg1+3FQPBM20+o9lC8maKmgqqsk6pb6hsPDW5hIS/pRzliR1zjsjJ8xTwS e1bpzehdYLt+4w/Dy/auOHDjvd5chcOa/jruS5fX4T/b5DAXH0bjmWyW3ww1NANY VUOLEIdJ+3jnbiHMphY1tqOakb3/7U6lIOLsWtwNr2yJHniZlBbKg2Ohs97s5ZBO gK21CDz4CHEQmtBGuK5q940kZxtjdE3k5mdY8mkABPoDLM6hwKt6V2xtyBO/fheJ S8dQiwrGEsVXTsPRfKQEwJICEhC5yhdO -----END CERTIFICATE-----Generated at Sat May 31 16:47:45 2025 by rpki-client