$ rpki-client -vvf rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/838jTzqH0Y_MZxPkUQZ4ygVhwvw.mft File: 838jTzqH0Y_MZxPkUQZ4ygVhwvw.mft (raw, json) Hash identifier: 0KP9ZVCRbv2Ir5wi8UVKvBa1bFnTiuU11CUPxnI6NRg= Subject key identifier: 74:32:6E:CB:93:B0:35:E5:B9:C7:AD:2D:12:3A:F2:EA:85:97:87:E6 Authority key identifier: F3:7F:23:4F:3A:87:D1:8F:CC:67:13:E4:51:06:78:CA:05:61:C2:FC Certificate issuer: /CN=A913DD87/serialNumber=F37F234F3A87D18FCC6713E4510678CA0561C2FC Certificate serial: 73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/838jTzqH0Y_MZxPkUQZ4ygVhwvw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/838jTzqH0Y_MZxPkUQZ4ygVhwvw.mft Manifest number: 70 Signing time: Sat 31 May 2025 06:28:07 +0000 Manifest this update: Sat 31 May 2025 06:28:07 +0000 Manifest next update: Sat 07 Jun 2025 06:28:07 +0000 Files and hashes: 1: 838jTzqH0Y_MZxPkUQZ4ygVhwvw.crl (hash: MLxsRXGmWsgWpVSPviLeobbSjXoRn5JumnG4/249Yvk=) 2: 10B69CB69A7811EFB88E9513C4F9AE02.roa (hash: 2VRR976S85E6Z0QAWlMBLEL6PHFzhUVVUro0XhkvHgY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/838jTzqH0Y_MZxPkUQZ4ygVhwvw.crl rsync://rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/838jTzqH0Y_MZxPkUQZ4ygVhwvw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/838jTzqH0Y_MZxPkUQZ4ygVhwvw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:28:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 115 (0x73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DD87, serialNumber=F37F234F3A87D18FCC6713E4510678CA0561C2FC Validity Not Before: May 31 06:28:07 2025 GMT Not After : Jun 7 06:28:07 2025 GMT Subject: CN=683aa177-f187 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e7:ef:4a:58:b2:9e:b2:4a:63:f1:f6:81:cf: ff:57:64:bd:d6:b7:1a:ac:61:27:e3:d0:a7:6a:f2: c4:75:5a:ba:8e:c3:7f:c4:ed:c5:79:24:9a:ab:ec: 5e:eb:70:f1:da:bf:72:a3:92:83:ad:ee:60:37:96: dd:98:8a:c7:c6:a5:8b:4a:86:75:d8:76:79:7a:7c: 0a:55:0b:cc:85:0b:9b:ab:0c:d6:fc:8f:d7:94:47: 9f:86:89:a8:aa:9d:b1:0a:0c:fb:34:51:b9:55:ac: 29:90:fd:d1:d9:51:6b:0d:2c:07:9e:6a:d4:83:13: 43:c2:cc:d9:d3:c1:06:cc:73:16:3b:f8:dc:ce:a4: 8f:05:85:46:74:08:55:6b:69:83:2d:11:26:a9:79: 0b:e2:a3:8c:0f:27:b9:44:9c:c4:96:fa:3d:a3:76: 37:56:06:ba:77:b2:6b:bc:a8:26:6b:7c:03:d8:5a: 5b:76:e1:02:06:2b:df:52:b8:74:15:75:49:80:c7: e4:ae:28:59:06:0b:b7:23:6a:6b:32:81:2c:84:d9: d3:cc:bb:69:77:40:95:75:a6:87:9c:92:69:4c:99: 81:bf:81:9a:45:ee:19:7b:8d:26:0f:ab:44:5b:82: c2:08:9d:9c:26:d6:2a:72:e2:e1:2b:dc:6c:fc:54: 3d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:32:6E:CB:93:B0:35:E5:B9:C7:AD:2D:12:3A:F2:EA:85:97:87:E6 X509v3 Authority Key Identifier: keyid:F3:7F:23:4F:3A:87:D1:8F:CC:67:13:E4:51:06:78:CA:05:61:C2:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/838jTzqH0Y_MZxPkUQZ4ygVhwvw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/838jTzqH0Y_MZxPkUQZ4ygVhwvw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/838jTzqH0Y_MZxPkUQZ4ygVhwvw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:e5:2f:7b:e1:f8:38:c9:b1:f4:46:a2:ee:8b:b8:a6:47:12: 48:8f:dd:67:b5:e0:9e:d3:f2:95:e7:d6:24:9a:04:4c:4d:4e: 38:fa:7c:81:e6:a3:70:af:de:31:f3:91:74:6d:53:1d:44:23: 04:9a:eb:9d:66:46:0c:05:11:93:6b:45:64:01:64:4d:1f:cd: f3:82:d9:3c:02:12:27:c5:e3:18:f6:2e:73:92:90:31:75:0d: 2d:a8:74:93:85:14:7b:46:2b:e8:a9:f9:4e:57:9f:17:01:e0: f2:3d:d1:d1:79:3e:f5:42:d9:da:eb:a7:69:ed:75:7b:0b:d9: 43:d5:a9:9a:87:ba:b5:82:62:90:ec:b4:61:d4:b7:4b:17:a7: 8f:5d:b0:cf:94:0c:b0:d9:73:72:be:a8:c4:89:71:c0:d0:ea: 7c:0c:09:bd:0b:56:27:d7:4f:70:6f:8c:76:1a:62:48:83:fb: b7:e3:32:83:62:ba:9f:c5:71:a0:3f:98:e5:e1:42:11:c4:8b: dd:4d:9c:6d:5b:eb:83:c4:01:6e:2e:5f:26:66:c6:39:2d:28: bc:f0:0c:4f:21:c3:42:44:93:c2:c7:e7:77:16:8f:a7:c7:99: 89:e3:39:cf:f1:87:73:71:e5:52:84:7e:4b:7d:b0:f7:09:37: 43:71:62:d5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBczANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz REQ4NzExMC8GA1UEBRMoRjM3RjIzNEYzQTg3RDE4RkNDNjcxM0U0NTEwNjc4Q0Ew NTYxQzJGQzAeFw0yNTA1MzEwNjI4MDdaFw0yNTA2MDcwNjI4MDdaMBgxFjAUBgNV BAMTDTY4M2FhMTc3LWYxODcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCb5+9KWLKeskpj8faBz/9XZL3WtxqsYSfj0Kdq8sR1WrqOw3/E7cV5JJqr7F7r cPHav3KjkoOt7mA3lt2YisfGpYtKhnXYdnl6fApVC8yFC5urDNb8j9eUR5+Giaiq nbEKDPs0UblVrCmQ/dHZUWsNLAeeatSDE0PCzNnTwQbMcxY7+NzOpI8FhUZ0CFVr aYMtESapeQvio4wPJ7lEnMSW+j2jdjdWBrp3smu8qCZrfAPYWlt24QIGK99SuHQV dUmAx+SuKFkGC7cjamsygSyE2dPMu2l3QJV1poeckmlMmYG/gZpF7hl7jSYPq0Rb gsIInZwm1ipy4uEr3Gz8VD17AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUdDJuy5Ow NeW5x60tEjry6oWXh+YwHwYDVR0jBBgwFoAU838jTzqH0Y/MZxPkUQZ4ygVhwvww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNERDg3L0VDNTZCNzIwOTdF ODExRUY4RTMyOTAzQUM0RjlBRTAyLzgzOGpUenFIMFlfTVp4UGtVUVo0eWdWaHd2 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvODM4alR6cUgwWV9NWnhQa1VRWjR5Z1Zod3Z3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNE RDg3L0VDNTZCNzIwOTdFODExRUY4RTMyOTAzQUM0RjlBRTAyLzgzOGpUenFIMFlf TVp4UGtVUVo0eWdWaHd2dy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAALlL3vh+DjJsfRGou6LuKZHEkiP3We14J7T8pXn1iSaBExNTjj6fIHm o3Cv3jHzkXRtUx1EIwSa651mRgwFEZNrRWQBZE0fzfOC2TwCEifF4xj2LnOSkDF1 DS2odJOFFHtGK+ip+U5XnxcB4PI90dF5PvVC2drrp2ntdXsL2UPVqZqHurWCYpDs tGHUt0sXp49dsM+UDLDZc3K+qMSJccDQ6nwMCb0LVifXT3BvjHYaYkiD+7fjMoNi up/FcaA/mOXhQhHEi91NnG1b64PEAW4uXyZmxjktKLzwDE8hw0JEk8LH53cWj6fH mYnjOc/xh3Nx5VKEfkt9sPcJN0NxYtU= -----END CERTIFICATE-----Generated at Sat May 31 17:58:46 2025 by rpki-client