$ rpki-client -vvf rpki.apnic.net/member_repository/A913D756/6A421A80B06711EF8214D469C4F9AE02/8wm0k6ku58YpXgCQYwolGh0TZRc.mft File: 8wm0k6ku58YpXgCQYwolGh0TZRc.mft (raw, json) Hash identifier: iQwhX66MzcKtsf/3BYHLTNBz78PuJQOoAJDT85+dXk0= Subject key identifier: 0F:31:9C:BC:B5:BF:C6:4D:BA:D2:F6:3B:2B:2F:52:4E:5A:B9:8F:B0 Authority key identifier: F3:09:B4:93:A9:2E:E7:C6:29:5E:00:90:63:0A:25:1A:1D:13:65:17 Certificate issuer: /CN=A913D756/serialNumber=F309B493A92EE7C6295E0090630A251A1D136517 Certificate serial: 64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8wm0k6ku58YpXgCQYwolGh0TZRc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D756/6A421A80B06711EF8214D469C4F9AE02/8wm0k6ku58YpXgCQYwolGh0TZRc.mft Manifest number: 64 Signing time: Fri 13 Jun 2025 05:56:59 +0000 Manifest this update: Fri 13 Jun 2025 05:56:59 +0000 Manifest next update: Fri 20 Jun 2025 05:56:59 +0000 Files and hashes: 1: 8wm0k6ku58YpXgCQYwolGh0TZRc.crl (hash: vUHJzT1ZW0xjCQhgjJoGnFBjXOIdy09MFp40p+uliXk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D756/6A421A80B06711EF8214D469C4F9AE02/8wm0k6ku58YpXgCQYwolGh0TZRc.crl rsync://rpki.apnic.net/member_repository/A913D756/6A421A80B06711EF8214D469C4F9AE02/8wm0k6ku58YpXgCQYwolGh0TZRc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8wm0k6ku58YpXgCQYwolGh0TZRc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 05:56:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 100 (0x64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D756, serialNumber=F309B493A92EE7C6295E0090630A251A1D136517 Validity Not Before: Jun 13 05:56:59 2025 GMT Not After : Jun 20 05:56:59 2025 GMT Subject: CN=684bbdab-2d05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3d:f8:ad:19:a2:6b:ef:f1:42:ea:fa:dd:a9: bb:59:29:f6:13:e7:68:89:39:a1:12:f7:5a:c5:8c: 67:01:b0:83:75:bf:7d:00:38:65:5e:c5:47:b5:0b: 45:75:14:28:ed:a6:30:46:19:15:51:17:77:ad:2e: 9b:a3:69:67:39:a5:b2:75:63:12:e2:d3:4b:4d:25: 77:b2:ed:25:2b:e8:f7:9e:e3:40:42:1e:c3:af:fe: 4b:ea:88:4b:54:00:07:6c:69:69:7b:e2:34:3d:38: b9:65:06:6c:66:4c:81:cf:b2:ae:6b:c5:94:de:5e: a2:dc:1d:94:d8:33:22:c1:ea:2a:12:90:f9:01:f0: 71:37:5d:f5:5e:ac:56:4d:4b:48:3e:ec:0d:9b:af: e3:96:2b:75:c6:b8:91:a1:ac:eb:7a:ea:23:9f:42: 1c:1e:8b:cf:9d:9c:50:bc:d4:90:6e:95:bc:4e:d7: 9f:a1:9a:d2:10:b9:b9:25:35:a4:51:90:5e:20:4e: 5c:17:dc:dd:be:4d:dc:cb:22:29:1e:3c:45:53:3b: 81:a1:21:fb:29:b2:b3:dc:48:54:0f:f6:57:4f:c4: 37:01:48:da:ce:15:59:e5:14:c8:31:63:c9:ff:c1: 40:2b:89:5e:12:7d:2c:12:05:29:3d:54:12:4b:af: d9:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:31:9C:BC:B5:BF:C6:4D:BA:D2:F6:3B:2B:2F:52:4E:5A:B9:8F:B0 X509v3 Authority Key Identifier: keyid:F3:09:B4:93:A9:2E:E7:C6:29:5E:00:90:63:0A:25:1A:1D:13:65:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D756/6A421A80B06711EF8214D469C4F9AE02/8wm0k6ku58YpXgCQYwolGh0TZRc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8wm0k6ku58YpXgCQYwolGh0TZRc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D756/6A421A80B06711EF8214D469C4F9AE02/8wm0k6ku58YpXgCQYwolGh0TZRc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:2b:0e:e3:41:36:29:d1:10:dc:b8:e6:0d:22:4a:ff:5e:5a: 7a:a3:e8:27:93:a2:cb:4f:7a:5e:45:33:6f:2b:ab:eb:5e:38: a0:e6:af:e1:18:3d:34:8c:55:4e:8c:9a:15:56:02:b0:d9:34: b5:98:79:26:f5:02:81:36:72:c8:fd:1d:95:b6:74:5a:e4:41: a8:e6:b1:b9:0b:ef:d1:b4:c8:b1:f6:a0:a8:43:25:16:69:8c: cf:65:fc:31:b4:d7:15:ea:5a:69:49:df:1a:eb:37:b5:f1:d7: 9f:a6:61:af:48:56:b3:16:89:32:97:6c:b2:55:80:31:22:ab: 71:16:86:91:c0:dd:c4:b5:af:5c:07:10:25:7e:1d:39:18:c2: 4a:ef:4f:5e:41:df:06:25:1b:20:f7:8d:ca:bd:d0:ce:b2:b7: e3:f0:2e:7e:74:ca:ec:94:24:9c:0a:ca:8e:e5:3d:08:23:45: 75:cb:a8:14:01:97:d6:22:59:6b:54:bf:b7:0a:d3:f5:f1:93: ed:54:0d:4f:1a:c6:bb:b8:ee:bd:a9:23:71:b8:b5:01:f3:a0: a8:0b:36:18:26:32:0b:25:d0:24:fa:55:7e:ad:e8:e6:1a:6c: 6a:b3:f2:28:ef:63:cf:3d:5e:56:83:9a:8d:3d:24:68:d8:b0: 3e:0d:2f:cd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RDc1NjExMC8GA1UEBRMoRjMwOUI0OTNBOTJFRTdDNjI5NUUwMDkwNjMwQTI1MUEx RDEzNjUxNzAeFw0yNTA2MTMwNTU2NTlaFw0yNTA2MjAwNTU2NTlaMBgxFjAUBgNV BAMTDTY4NGJiZGFiLTJkMDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+PfitGaJr7/FC6vrdqbtZKfYT52iJOaES91rFjGcBsIN1v30AOGVexUe1C0V1 FCjtpjBGGRVRF3etLpujaWc5pbJ1YxLi00tNJXey7SUr6Pee40BCHsOv/kvqiEtU AAdsaWl74jQ9OLllBmxmTIHPsq5rxZTeXqLcHZTYMyLB6ioSkPkB8HE3XfVerFZN S0g+7A2br+OWK3XGuJGhrOt66iOfQhwei8+dnFC81JBulbxO15+hmtIQubklNaRR kF4gTlwX3N2+TdzLIikePEVTO4GhIfspsrPcSFQP9ldPxDcBSNrOFVnlFMgxY8n/ wUAriV4SfSwSBSk9VBJLr9mxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDzGcvLW/ xk260vY7Ky9STlq5j7AwHwYDVR0jBBgwFoAU8wm0k6ku58YpXgCQYwolGh0TZRcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNENzU2LzZBNDIxQTgwQjA2 NzExRUY4MjE0RDQ2OUM0RjlBRTAyLzh3bTBrNmt1NThZcFhnQ1FZd29sR2gwVFpS Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOHdtMGs2a3U1OFlwWGdDUVl3b2xHaDBUWlJjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNE NzU2LzZBNDIxQTgwQjA2NzExRUY4MjE0RDQ2OUM0RjlBRTAyLzh3bTBrNmt1NThZ cFhnQ1FZd29sR2gwVFpSYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABwrDuNBNinRENy45g0iSv9eWnqj6CeTostPel5FM28rq+teOKDmr+EY PTSMVU6MmhVWArDZNLWYeSb1AoE2csj9HZW2dFrkQajmsbkL79G0yLH2oKhDJRZp jM9l/DG01xXqWmlJ3xrrN7Xx15+mYa9IVrMWiTKXbLJVgDEiq3EWhpHA3cS1r1wH ECV+HTkYwkrvT15B3wYlGyD3jcq90M6yt+PwLn50yuyUJJwKyo7lPQgjRXXLqBQB l9YiWWtUv7cK0/Xxk+1UDU8axru47r2pI3G4tQHzoKgLNhgmMgsl0CT6VX6t6OYa bGqz8ijvY889XlaDmo09JGjYsD4NL80= -----END CERTIFICATE-----Generated at Fri Jun 13 22:45:52 2025 by rpki-client