$ rpki-client -vvf rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.mft File: 0e69FiTc3lGUEO1dZObVE5hLd9A.mft (raw, json) Hash identifier: B2weEvGNNIrQ4jmFVOevWpDRWIfCY4VTdLSA45Fd5Qg= Subject key identifier: 46:22:78:9A:C4:2A:A0:DC:97:9F:C7:6C:DF:6F:C5:FE:68:A7:37:E3 Authority key identifier: D1:EE:BD:16:24:DC:DE:51:94:10:ED:5D:64:E6:D5:13:98:4B:77:D0 Certificate issuer: /CN=A913F2BD/serialNumber=D1EEBD1624DCDE519410ED5D64E6D513984B77D0 Certificate serial: AF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0e69FiTc3lGUEO1dZObVE5hLd9A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.mft Manifest number: AE Signing time: Mon 09 Jun 2025 05:00:12 +0000 Manifest this update: Mon 09 Jun 2025 05:00:12 +0000 Manifest next update: Mon 16 Jun 2025 05:00:12 +0000 Files and hashes: 1: 0e69FiTc3lGUEO1dZObVE5hLd9A.crl (hash: JNFgCpyGoMXOggdQFI4XfYlYeacAwoqQpPe+pmTdkhI=) 2: D0B078FA389611EF909AF237C4F9AE02.roa (hash: AFifu1YP8FleMFw0L6x+s4qXy39ubAWolO6tvcH8Ipg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.crl rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0e69FiTc3lGUEO1dZObVE5hLd9A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Jun 2025 05:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 175 (0xaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F2BD, serialNumber=D1EEBD1624DCDE519410ED5D64E6D513984B77D0 Validity Not Before: Jun 9 05:00:12 2025 GMT Not After : Jun 16 05:00:12 2025 GMT Subject: CN=68466a5c-7724 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d3:c8:ea:c8:7c:b3:3c:e6:ac:88:2e:b7:27: 5a:6e:33:70:a9:5d:d5:29:83:8e:05:95:2e:e0:0d: 9e:2a:41:90:84:0c:c1:5c:85:d0:ed:14:21:35:93: 61:51:a7:08:8d:d3:4b:70:7f:73:d6:c8:a1:52:82: a6:b0:41:49:88:a2:f3:e5:b7:8e:7f:93:8d:71:4e: 29:d0:1e:aa:19:49:cb:39:ba:3d:fe:36:ea:7e:85: 21:5f:65:41:c2:8b:cd:83:ae:7d:8c:00:29:02:b8: 8a:ef:5b:09:dd:9e:0b:9a:7d:44:cc:2b:fa:20:e3: 23:e7:05:82:19:c2:c6:06:7d:2f:d3:93:d6:8d:4f: 5a:00:86:aa:6b:a6:f6:a4:73:92:22:80:6a:6e:29: 9f:3b:65:26:e0:77:f3:71:b5:70:ab:3b:43:a4:f9: e4:d1:0f:6c:6c:49:4f:d8:3b:f1:97:95:7b:07:c3: 42:4c:dd:63:7d:e4:a0:5e:ab:ca:4a:26:89:81:38: 4f:08:1f:7c:fe:36:4d:9d:12:d5:24:30:35:83:bf: 07:78:9d:27:77:aa:62:bd:29:68:36:af:a6:2c:b6: ae:bf:ae:34:8c:1f:46:17:76:74:9f:c0:07:f3:ea: 83:62:3b:00:a9:2c:f6:5d:ce:8f:72:88:59:c9:bc: 30:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:22:78:9A:C4:2A:A0:DC:97:9F:C7:6C:DF:6F:C5:FE:68:A7:37:E3 X509v3 Authority Key Identifier: keyid:D1:EE:BD:16:24:DC:DE:51:94:10:ED:5D:64:E6:D5:13:98:4B:77:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0e69FiTc3lGUEO1dZObVE5hLd9A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:67:2f:5c:f1:08:4a:f2:8f:7f:f0:2a:36:dd:46:4d:6a:8f: a9:a0:e6:e1:ee:9c:80:54:99:69:3a:1d:ef:30:4c:47:a4:82: eb:10:c4:ea:dd:89:8a:7a:d4:0c:73:29:57:40:2b:dd:94:d1: 47:86:c2:c1:00:56:fb:64:06:11:02:e5:67:00:95:67:ad:f2: 09:1c:3d:71:28:0c:bc:14:b1:a7:e2:89:7a:cf:51:9e:f0:3c: 9d:83:a0:5d:ec:8e:ad:eb:78:ac:1f:1b:c5:aa:01:de:94:84: 6d:7c:3e:13:60:3a:d1:b8:e5:75:0f:60:ec:56:48:73:9a:7d: aa:05:52:a2:50:81:da:61:ac:f8:2f:91:b3:1d:8a:ea:e7:d4: 35:c8:f6:71:54:66:cb:96:28:c5:ea:d7:04:ab:f1:74:ea:a8: 33:00:7b:d1:8e:9d:83:5f:16:d3:a6:1f:f3:07:eb:60:5e:56: 6d:83:c5:ef:89:ee:38:fc:b3:44:b0:8d:b9:a4:b6:7e:ac:ba: c1:39:8d:c3:b2:fa:03:54:a7:84:7b:30:00:64:78:18:77:d5: f0:df:5e:5b:6e:ce:55:a1:2e:f2:ec:9f:2b:0b:01:14:b1:47: bb:82:88:c7:f5:92:b3:79:d8:88:65:bb:be:5a:e8:e1:d6:e0: 8c:09:6a:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YyQkQxMTAvBgNVBAUTKEQxRUVCRDE2MjREQ0RFNTE5NDEwRUQ1RDY0RTZENTEz OTg0Qjc3RDAwHhcNMjUwNjA5MDUwMDEyWhcNMjUwNjE2MDUwMDEyWjAYMRYwFAYD VQQDEw02ODQ2NmE1Yy03NzI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAytPI6sh8szzmrIgutydabjNwqV3VKYOOBZUu4A2eKkGQhAzBXIXQ7RQhNZNh UacIjdNLcH9z1sihUoKmsEFJiKLz5beOf5ONcU4p0B6qGUnLObo9/jbqfoUhX2VB wovNg659jAApAriK71sJ3Z4Lmn1EzCv6IOMj5wWCGcLGBn0v05PWjU9aAIaqa6b2 pHOSIoBqbimfO2Um4HfzcbVwqztDpPnk0Q9sbElP2Dvxl5V7B8NCTN1jfeSgXqvK SiaJgThPCB98/jZNnRLVJDA1g78HeJ0nd6pivSloNq+mLLauv640jB9GF3Z0n8AH 8+qDYjsAqSz2Xc6PcohZybwwpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEYieJrE KqDcl5/HbN9vxf5opzfjMB8GA1UdIwQYMBaAFNHuvRYk3N5RlBDtXWTm1ROYS3fQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjJCRC8zRUUyNzY3NjM4 OTYxMUVGOUVERTgxMzZDNEY5QUUwMi8wZTY5RmlUYzNsR1VFTzFkWk9iVkU1aExk OUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzBlNjlGaVRjM2xHVUVPMWRaT2JWRTVoTGQ5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjJCRC8zRUUyNzY3NjM4OTYxMUVGOUVERTgxMzZDNEY5QUUwMi8wZTY5RmlUYzNs R1VFTzFkWk9iVkU1aExkOUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeZy9c8QhK8o9/8Co23UZNao+poObh7pyAVJlpOh3vMExHpILrEMTq 3YmKetQMcylXQCvdlNFHhsLBAFb7ZAYRAuVnAJVnrfIJHD1xKAy8FLGn4ol6z1Ge 8Dydg6Bd7I6t63isHxvFqgHelIRtfD4TYDrRuOV1D2DsVkhzmn2qBVKiUIHaYaz4 L5GzHYrq59Q1yPZxVGbLlijF6tcEq/F06qgzAHvRjp2DXxbTph/zB+tgXlZtg8Xv ie44/LNEsI25pLZ+rLrBOY3DsvoDVKeEezAAZHgYd9Xw315bbs5VoS7y7J8rCwEU sUe7gojH9ZKzediIZbu+Wujh1uCMCWq6 -----END CERTIFICATE-----Generated at Tue Jun 10 20:54:24 2025 by rpki-client