$ rpki-client -vvf rpki.apnic.net/member_repository/A913C437/663D183E9CD111EBA8D0BB57C4F9AE02/ed8QJTU18NZ_oR22ikx2NKpqRHw.mft File: ed8QJTU18NZ_oR22ikx2NKpqRHw.mft (raw, json) Hash identifier: zCbMTFEuwhQDpyd4QpylCx1JJxK+Ur5OWBRCJz23FQE= Subject key identifier: 0D:31:C2:32:EC:53:39:DA:48:BD:40:6B:61:CB:A6:B8:BA:1E:E2:EF Authority key identifier: 79:DF:10:25:35:35:F0:D6:7F:A1:1D:B6:8A:4C:76:34:AA:6A:44:7C Certificate issuer: /CN=A913C437/serialNumber=79DF10253535F0D67FA11DB68A4C7634AA6A447C Certificate serial: 0626 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ed8QJTU18NZ_oR22ikx2NKpqRHw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C437/663D183E9CD111EBA8D0BB57C4F9AE02/ed8QJTU18NZ_oR22ikx2NKpqRHw.mft Manifest number: 0620 Signing time: Fri 30 May 2025 22:59:20 +0000 Manifest this update: Fri 30 May 2025 22:59:19 +0000 Manifest next update: Fri 06 Jun 2025 22:59:19 +0000 Files and hashes: 1: ed8QJTU18NZ_oR22ikx2NKpqRHw.crl (hash: DJzFpwwIRC+vknRvI0kauvACJh7iI13/kouZU49Qous=) 2: BF195C829CD211EBA0E3CB58C4F9AE02.roa (hash: mfyk2fX8qp7Cd9NT+aeakKLsbIUS87BsuyFLFMAwavc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C437/663D183E9CD111EBA8D0BB57C4F9AE02/ed8QJTU18NZ_oR22ikx2NKpqRHw.crl rsync://rpki.apnic.net/member_repository/A913C437/663D183E9CD111EBA8D0BB57C4F9AE02/ed8QJTU18NZ_oR22ikx2NKpqRHw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ed8QJTU18NZ_oR22ikx2NKpqRHw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:59:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1574 (0x626) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C437, serialNumber=79DF10253535F0D67FA11DB68A4C7634AA6A447C Validity Not Before: May 30 22:59:19 2025 GMT Not After : Jun 6 22:59:19 2025 GMT Subject: CN=683a3848-fbd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e7:eb:bc:82:09:74:cf:f4:d2:49:b0:7b:85: 7b:19:fb:6c:22:2c:86:2f:22:8c:20:3b:00:5e:63: 05:9c:fd:fa:d2:bb:80:e5:63:6a:a0:df:e4:0d:50: ef:8d:32:63:f7:73:53:3f:26:ff:14:91:b1:53:f9: 16:00:ca:d5:0d:db:10:bf:8d:50:cb:5c:34:c2:98: 91:49:3b:37:ca:c8:53:71:fb:b2:38:24:78:66:f6: 7b:96:3a:00:6e:99:86:29:a7:63:e5:83:c2:1c:28: d5:ed:51:f6:2f:8e:2e:51:75:27:63:67:e7:0a:66: 60:92:a8:a3:71:a7:fa:05:c4:c7:48:8c:5d:ec:0f: c5:5f:0d:a3:af:60:32:a3:5b:ae:3a:23:ba:5c:99: 2c:a0:cb:f4:35:5c:41:37:7b:69:fd:f0:55:79:43: 93:db:d2:72:90:19:0e:61:87:29:7d:83:83:87:85: 8d:81:4b:6c:df:3d:ab:07:e6:c3:a2:48:3b:24:96: 6b:82:f1:22:71:49:ba:cc:71:d8:8f:57:d8:86:9f: b5:b0:fa:f0:58:d8:ca:10:3e:70:48:a1:20:50:4b: 64:f2:8b:61:da:a0:81:c2:ab:6c:04:d5:27:9a:97: 4c:aa:b8:a3:87:a8:d5:94:ea:1c:96:76:6e:33:5e: f7:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:31:C2:32:EC:53:39:DA:48:BD:40:6B:61:CB:A6:B8:BA:1E:E2:EF X509v3 Authority Key Identifier: keyid:79:DF:10:25:35:35:F0:D6:7F:A1:1D:B6:8A:4C:76:34:AA:6A:44:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C437/663D183E9CD111EBA8D0BB57C4F9AE02/ed8QJTU18NZ_oR22ikx2NKpqRHw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ed8QJTU18NZ_oR22ikx2NKpqRHw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C437/663D183E9CD111EBA8D0BB57C4F9AE02/ed8QJTU18NZ_oR22ikx2NKpqRHw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:41:01:3d:46:75:38:45:13:ec:c1:b2:60:ca:da:35:5a:8c: 02:13:5b:b7:78:25:8a:b7:fd:c6:d7:f8:58:d9:08:07:8a:1d: 9f:c1:bf:e6:de:44:d2:4d:1c:d8:a5:f4:13:7e:a3:c3:b0:3c: a6:b0:84:29:e0:0d:40:d3:39:b9:f6:71:c0:80:5f:19:be:e4: 5e:95:29:b4:dc:7f:a0:c7:90:57:45:dd:70:8d:d9:a5:a9:b8: 29:81:aa:d0:74:22:8e:be:f4:ce:f6:f6:bb:fe:55:2f:3a:2d: 07:4d:df:f9:f9:1b:54:b2:71:d6:2a:23:29:c1:ad:41:08:79: be:4c:7e:99:03:80:71:d6:bd:94:3f:ca:51:9e:7c:5d:5a:1d: 85:23:97:9d:33:9f:45:d2:3b:ae:41:05:f2:7f:6f:b4:fb:34: d6:7e:03:51:91:94:66:5b:a2:e5:05:af:ce:f7:84:32:f3:89: 0e:6d:88:c0:25:aa:63:53:8a:ec:13:36:49:a1:ad:73:cb:39: 50:9c:5d:58:b7:2c:59:b3:78:ed:c9:fa:fa:47:e2:3e:65:c2: 73:05:7b:d1:54:e9:c4:9e:ac:40:66:17:8d:c5:fa:c5:8a:c2: 40:e1:9f:15:a1:5c:7f:49:18:46:c6:8f:a8:84:80:64:8f:9b: ea:17:17:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBiYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0M0MzcxMTAvBgNVBAUTKDc5REYxMDI1MzUzNUYwRDY3RkExMURCNjhBNEM3NjM0 QUE2QTQ0N0MwHhcNMjUwNTMwMjI1OTE5WhcNMjUwNjA2MjI1OTE5WjAYMRYwFAYD VQQDEw02ODNhMzg0OC1mYmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuOfrvIIJdM/00kmwe4V7GftsIiyGLyKMIDsAXmMFnP360ruA5WNqoN/kDVDv jTJj93NTPyb/FJGxU/kWAMrVDdsQv41Qy1w0wpiRSTs3yshTcfuyOCR4ZvZ7ljoA bpmGKadj5YPCHCjV7VH2L44uUXUnY2fnCmZgkqijcaf6BcTHSIxd7A/FXw2jr2Ay o1uuOiO6XJksoMv0NVxBN3tp/fBVeUOT29JykBkOYYcpfYODh4WNgUts3z2rB+bD okg7JJZrgvEicUm6zHHYj1fYhp+1sPrwWNjKED5wSKEgUEtk8oth2qCBwqtsBNUn mpdMqrijh6jVlOoclnZuM173FwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA0xwjLs UznaSL1Aa2HLpri6HuLvMB8GA1UdIwQYMBaAFHnfECU1NfDWf6EdtopMdjSqakR8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzQzNy82NjNEMTgzRTlD RDExMUVCQThEMEJCNTdDNEY5QUUwMi9lZDhRSlRVMThOWl9vUjIyaWt4Mk5LcHFS SHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VkOFFKVFUxOE5aX29SMjJpa3gyTktwcVJIdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QzQzNy82NjNEMTgzRTlDRDExMUVCQThEMEJCNTdDNEY5QUUwMi9lZDhRSlRVMThO Wl9vUjIyaWt4Mk5LcHFSSHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZQQE9RnU4RRPswbJgyto1WowCE1u3eCWKt/3G1/hY2QgHih2fwb/m 3kTSTRzYpfQTfqPDsDymsIQp4A1A0zm59nHAgF8ZvuRelSm03H+gx5BXRd1wjdml qbgpgarQdCKOvvTO9va7/lUvOi0HTd/5+RtUsnHWKiMpwa1BCHm+TH6ZA4Bx1r2U P8pRnnxdWh2FI5edM59F0juuQQXyf2+0+zTWfgNRkZRmW6LlBa/O94Qy84kObYjA JapjU4rsEzZJoa1zyzlQnF1YtyxZs3jtyfr6R+I+ZcJzBXvRVOnEnqxAZheNxfrF isJA4Z8VoVx/SRhGxo+ohIBkj5vqFxdB -----END CERTIFICATE-----Generated at Sat May 31 17:06:31 2025 by rpki-client