$ rpki-client -vvf rpki.apnic.net/member_repository/A914B610/4393EAE01DA711E2842FDCA008B02CD2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.mft File: fHKLlwQp1HAJeXihbnZ7IdxuOx8.mft (raw, json) Hash identifier: ZUM46iRCtKVPL1KKR8erBllifjvF0wuKs5DTQQMOnwY= Subject key identifier: 8E:04:80:28:59:A7:A3:55:18:49:2F:FC:2F:A4:0D:80:D2:62:BE:22 Authority key identifier: 7C:72:8B:97:04:29:D4:70:09:79:78:A1:6E:76:7B:21:DC:6E:3B:1F Certificate issuer: /CN=A914B610/serialNumber=7C728B970429D470097978A16E767B21DC6E3B1F Certificate serial: 3481 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B610/4393EAE01DA711E2842FDCA008B02CD2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.mft Manifest number: 3480 Signing time: Sat 31 May 2025 15:12:59 +0000 Manifest this update: Sat 31 May 2025 15:12:59 +0000 Manifest next update: Sat 07 Jun 2025 15:12:59 +0000 Files and hashes: 1: fHKLlwQp1HAJeXihbnZ7IdxuOx8.crl (hash: nNXERnzEjCIbUnwG3keXElsn/tQXHtwwLoHgp5Dygbo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B610/4393EAE01DA711E2842FDCA008B02CD2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.crl rsync://rpki.apnic.net/member_repository/A914B610/4393EAE01DA711E2842FDCA008B02CD2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 15:12:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13441 (0x3481) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B610, serialNumber=7C728B970429D470097978A16E767B21DC6E3B1F Validity Not Before: May 31 15:12:59 2025 GMT Not After : Jun 7 15:12:59 2025 GMT Subject: CN=683b1c7b-8258 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9b:6e:9e:ce:fe:c0:11:0e:e7:81:a8:e0:a7: 73:8b:69:68:f5:d2:4a:99:53:06:45:d5:9e:95:4a: 89:0f:03:64:e8:d7:1e:ae:9d:08:6d:0d:ad:32:b7: 34:29:d1:26:e0:61:0f:a5:85:df:40:d0:2f:bb:16: 25:03:b6:93:cc:9f:d6:32:fe:fb:db:f5:38:0d:99: 29:af:a2:4a:4f:06:b3:e9:a2:fd:ec:2c:34:82:f8: ba:e8:af:a5:c0:cd:d0:da:5b:c2:94:0b:7a:f6:49: e0:fb:1a:d7:33:5c:07:17:38:19:9e:89:54:5f:6d: c2:a5:a5:5d:43:56:65:26:14:a1:d8:3c:10:02:05: c2:3f:83:ea:15:8f:99:0b:1b:bf:f7:09:d8:4d:83: 22:d2:d6:7f:7e:de:8e:0f:df:9a:83:16:af:28:58: 36:2a:16:f8:72:29:ab:e5:6b:c0:9d:ae:b9:a1:48: 0c:12:03:d5:6c:51:41:2e:c2:f2:e5:3b:77:45:14: 78:96:4c:c1:65:83:00:75:ac:1b:61:f4:43:eb:77: 99:c9:b9:f2:d6:db:9f:1b:89:80:93:2a:46:04:45: de:14:b7:b1:55:b1:c5:60:03:5c:fa:e8:22:bd:4e: 4b:dd:c6:fe:1f:92:51:38:06:52:61:c4:22:1d:d5: 46:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:04:80:28:59:A7:A3:55:18:49:2F:FC:2F:A4:0D:80:D2:62:BE:22 X509v3 Authority Key Identifier: keyid:7C:72:8B:97:04:29:D4:70:09:79:78:A1:6E:76:7B:21:DC:6E:3B:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B610/4393EAE01DA711E2842FDCA008B02CD2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B610/4393EAE01DA711E2842FDCA008B02CD2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:35:f6:04:42:7c:d6:8d:e4:ff:1a:a5:42:32:d7:e1:89:74: b0:96:d1:31:bf:65:2e:eb:42:73:02:21:86:49:9d:6f:c5:8c: 24:80:2b:f6:91:52:7c:55:88:23:5f:46:8a:b8:19:8b:9b:86: 93:9c:c4:46:1f:c1:c2:00:94:63:c4:97:3f:c1:70:40:5c:cc: 7e:21:34:f0:4e:16:61:d8:fd:43:21:72:c6:51:dd:67:59:20: fc:9b:11:ff:70:c8:f8:7d:f2:4f:40:bd:5d:2a:47:2b:82:cd: 1a:e5:db:4b:09:4c:44:71:a9:54:93:05:96:bd:76:8d:0b:75: ce:a4:02:d0:49:b0:33:f4:bf:dd:40:64:cf:b6:9c:ef:95:c4: 31:47:3e:86:0d:4e:75:91:25:e5:3f:29:92:b9:63:8f:1c:53: fd:97:e9:29:cd:96:ab:36:d4:ab:03:a0:3d:4a:ee:90:6d:4f: e0:d1:f0:eb:88:45:30:15:54:68:40:1d:f6:32:e5:46:b5:31: fd:39:e1:b2:5e:7d:cc:43:7d:7a:81:99:2f:50:33:9e:24:5b: e4:2d:36:7f:a4:91:83:67:7e:93:b3:ab:07:7a:6d:51:4e:21: dd:86:97:f9:3f:e9:6c:75:44:72:74:d5:46:9c:33:f1:90:55: ff:c8:79:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEI2MTAxMTAvBgNVBAUTKDdDNzI4Qjk3MDQyOUQ0NzAwOTc5NzhBMTZFNzY3QjIx REM2RTNCMUYwHhcNMjUwNTMxMTUxMjU5WhcNMjUwNjA3MTUxMjU5WjAYMRYwFAYD VQQDEw02ODNiMWM3Yi04MjU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsptuns7+wBEO54Go4Kdzi2lo9dJKmVMGRdWelUqJDwNk6Ncerp0IbQ2tMrc0 KdEm4GEPpYXfQNAvuxYlA7aTzJ/WMv772/U4DZkpr6JKTwaz6aL97Cw0gvi66K+l wM3Q2lvClAt69kng+xrXM1wHFzgZnolUX23CpaVdQ1ZlJhSh2DwQAgXCP4PqFY+Z Cxu/9wnYTYMi0tZ/ft6OD9+agxavKFg2Khb4cimr5WvAna65oUgMEgPVbFFBLsLy 5Tt3RRR4lkzBZYMAdawbYfRD63eZybny1tufG4mAkypGBEXeFLexVbHFYANc+ugi vU5L3cb+H5JROAZSYcQiHdVGOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI4EgChZ p6NVGEkv/C+kDYDSYr4iMB8GA1UdIwQYMBaAFHxyi5cEKdRwCXl4oW52eyHcbjsf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjYxMC80MzkzRUFFMDFE QTcxMUUyODQyRkRDQTAwOEIwMkNEMi9mSEtMbHdRcDFIQUplWGloYm5aN0lkeHVP eDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZIS0xsd1FwMUhBSmVYaWhiblo3SWR4dU94OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjYxMC80MzkzRUFFMDFEQTcxMUUyODQyRkRDQTAwOEIwMkNEMi9mSEtMbHdRcDFI QUplWGloYm5aN0lkeHVPeDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDNNfYEQnzWjeT/GqVCMtfhiXSwltExv2Uu60JzAiGGSZ1vxYwkgCv2 kVJ8VYgjX0aKuBmLm4aTnMRGH8HCAJRjxJc/wXBAXMx+ITTwThZh2P1DIXLGUd1n WSD8mxH/cMj4ffJPQL1dKkcrgs0a5dtLCUxEcalUkwWWvXaNC3XOpALQSbAz9L/d QGTPtpzvlcQxRz6GDU51kSXlPymSuWOPHFP9l+kpzZarNtSrA6A9Su6QbU/g0fDr iEUwFVRoQB32MuVGtTH9OeGyXn3MQ316gZkvUDOeJFvkLTZ/pJGDZ36Ts6sHem1R TiHdhpf5P+lsdURydNVGnDPxkFX/yHkF -----END CERTIFICATE-----Generated at Sat May 31 17:18:50 2025 by rpki-client