$ rpki-client -vvf rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.mft File: CrPxFJz1w7raaFscahN5tojXQ4Q.mft (raw, json) Hash identifier: rwfsBVIYNNqVm0x9ZfvfctYtTec8YUsNscMtlKbNU/M= Subject key identifier: EB:1F:14:60:BA:D9:33:67:7E:E8:B4:06:56:A7:F1:B8:97:22:DE:4E Authority key identifier: 0A:B3:F1:14:9C:F5:C3:BA:DA:68:5B:1C:6A:13:79:B6:88:D7:43:84 Certificate issuer: /CN=A913DF1E/serialNumber=0AB3F1149CF5C3BADA685B1C6A1379B688D74384 Certificate serial: 025D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrPxFJz1w7raaFscahN5tojXQ4Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.mft Manifest number: 0253 Signing time: Mon 09 Jun 2025 01:24:52 +0000 Manifest this update: Mon 09 Jun 2025 01:24:52 +0000 Manifest next update: Mon 16 Jun 2025 01:24:52 +0000 Files and hashes: 1: CrPxFJz1w7raaFscahN5tojXQ4Q.crl (hash: OmVlkJnxfMyssZCs3fdidCbFPwc1Qt8Afy7WAcbTeZ4=) 2: 899B070834D511ED99B1921FC4F9AE02.roa (hash: 59L53XZQZjjT2hN0a9eIPXDObrfGJobgfFbYtXLEctM=) 3: D58286CA1F9D11EDA5DD9842C4F9AE02.roa (hash: L9Ip2okOSQMq2psn2x0tTtvnTzOcLa7ive90M13do6A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.crl rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrPxFJz1w7raaFscahN5tojXQ4Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Jun 2025 01:24:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 605 (0x25d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DF1E, serialNumber=0AB3F1149CF5C3BADA685B1C6A1379B688D74384 Validity Not Before: Jun 9 01:24:52 2025 GMT Not After : Jun 16 01:24:52 2025 GMT Subject: CN=684637e4-2ed7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:44:25:01:9e:aa:77:3a:18:bb:68:d5:f7:04: 6d:07:a1:ac:13:5b:f9:0d:22:68:f4:e1:67:e9:2d: 2b:32:2f:04:e1:f0:d9:c6:7e:53:6e:9e:58:5b:69: c1:ac:48:cc:43:0f:50:76:7f:b4:f4:58:c7:3f:8a: a4:33:41:c9:68:35:51:6b:a3:55:c0:c3:43:64:92: 00:81:04:4b:b3:6c:3a:39:9d:53:08:7c:88:b9:5a: d5:fe:cc:31:37:3b:28:43:94:41:b5:48:53:dc:6e: 59:53:c3:8e:f5:ba:8f:9d:07:0a:8f:5a:f8:46:34: 12:04:fb:cf:3a:29:a4:98:44:e6:f4:aa:19:d9:cb: d5:6e:19:52:69:a6:f0:c8:44:8f:a5:57:df:3a:55: 79:ac:31:00:48:d6:2f:ee:28:4a:7c:85:50:4b:00: 16:80:28:c1:c8:4d:93:f7:77:eb:20:fa:7b:25:78: 3c:af:84:c8:89:59:98:4c:d0:75:de:9f:ef:19:95: 93:75:64:9c:f2:d6:b7:6f:82:14:6c:14:ae:7f:7a: f1:5e:08:98:a8:b8:db:27:4a:88:a4:38:31:73:02: 99:d6:d3:36:c9:41:c8:7e:d9:8d:19:d2:3b:53:f4: e3:f0:22:7f:32:3a:cb:2b:16:28:c7:ab:ee:4e:9e: b8:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:1F:14:60:BA:D9:33:67:7E:E8:B4:06:56:A7:F1:B8:97:22:DE:4E X509v3 Authority Key Identifier: keyid:0A:B3:F1:14:9C:F5:C3:BA:DA:68:5B:1C:6A:13:79:B6:88:D7:43:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrPxFJz1w7raaFscahN5tojXQ4Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:b7:00:83:69:23:6a:3f:f5:97:59:c1:67:a4:a5:82:af:6d: 5a:e7:97:b1:1a:69:c9:69:96:f4:0e:e5:d1:a4:c4:31:f9:a2: 8b:e4:d6:f9:26:9a:71:9c:c4:8e:be:4f:5a:48:f3:78:d2:b3: f6:64:1a:a4:1b:52:81:4e:98:02:7e:98:f5:19:63:6a:79:36: b9:44:52:ac:a3:a9:48:60:4e:4c:d5:05:8b:50:de:ce:91:9d: cc:c4:9d:9d:a8:14:e6:f8:1c:64:12:03:b4:b3:e3:6f:f6:a2: 67:56:e8:a3:ea:b2:38:6f:7d:18:81:5b:20:84:d7:be:6c:1c: de:67:39:22:cc:f5:c3:85:23:f7:6e:ef:59:59:d7:db:0c:fb: f6:a0:f5:d6:7f:56:2a:a6:78:eb:4e:a4:cb:92:f5:61:cd:31: 16:77:fd:a5:8c:df:41:c0:46:1a:8e:35:21:67:12:11:c7:2d: 32:c7:3a:d1:54:7b:61:31:a6:49:f4:e5:fa:c6:5d:09:58:7b: 96:c2:bc:ce:aa:07:21:f0:08:10:38:7b:83:48:c2:64:3d:da: 93:38:ca:2a:6a:52:c1:4b:3f:43:b8:f1:e8:1d:e5:1a:83:0a: d4:75:a6:ca:05:5c:87:14:2a:d4:11:7f:86:a6:52:19:12:39: 44:03:9b:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAl0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0RGMUUxMTAvBgNVBAUTKDBBQjNGMTE0OUNGNUMzQkFEQTY4NUIxQzZBMTM3OUI2 ODhENzQzODQwHhcNMjUwNjA5MDEyNDUyWhcNMjUwNjE2MDEyNDUyWjAYMRYwFAYD VQQDEw02ODQ2MzdlNC0yZWQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApUQlAZ6qdzoYu2jV9wRtB6GsE1v5DSJo9OFn6S0rMi8E4fDZxn5Tbp5YW2nB rEjMQw9Qdn+09FjHP4qkM0HJaDVRa6NVwMNDZJIAgQRLs2w6OZ1TCHyIuVrV/swx NzsoQ5RBtUhT3G5ZU8OO9bqPnQcKj1r4RjQSBPvPOimkmETm9KoZ2cvVbhlSaabw yESPpVffOlV5rDEASNYv7ihKfIVQSwAWgCjByE2T93frIPp7JXg8r4TIiVmYTNB1 3p/vGZWTdWSc8ta3b4IUbBSuf3rxXgiYqLjbJ0qIpDgxcwKZ1tM2yUHIftmNGdI7 U/Tj8CJ/MjrLKxYox6vuTp64hwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOsfFGC6 2TNnfui0Blan8biXIt5OMB8GA1UdIwQYMBaAFAqz8RSc9cO62mhbHGoTebaI10OE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREYxRS9DQzY1QTY2QTFG OUExMUVEODM1Q0FBM0ZDNEY5QUUwMi9DclB4Rkp6MXc3cmFhRnNjYWhONXRvalhR NFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NyUHhGSnoxdzdyYWFGc2NhaE41dG9qWFE0US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz REYxRS9DQzY1QTY2QTFGOUExMUVEODM1Q0FBM0ZDNEY5QUUwMi9DclB4Rkp6MXc3 cmFhRnNjYWhONXRvalhRNFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9twCDaSNqP/WXWcFnpKWCr21a55exGmnJaZb0DuXRpMQx+aKL5Nb5 JppxnMSOvk9aSPN40rP2ZBqkG1KBTpgCfpj1GWNqeTa5RFKso6lIYE5M1QWLUN7O kZ3MxJ2dqBTm+BxkEgO0s+Nv9qJnVuij6rI4b30YgVsghNe+bBzeZzkizPXDhSP3 bu9ZWdfbDPv2oPXWf1YqpnjrTqTLkvVhzTEWd/2ljN9BwEYajjUhZxIRxy0yxzrR VHthMaZJ9OX6xl0JWHuWwrzOqgch8AgQOHuDSMJkPdqTOMoqalLBSz9DuPHoHeUa gwrUdabKBVyHFCrUEX+GplIZEjlEA5uY -----END CERTIFICATE-----Generated at Mon Jun 9 11:18:16 2025 by rpki-client