$ rpki-client -vvf rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.mft File: ihHrdksVeFOdbtOykDv2H0wIAHw.mft (raw, json) Hash identifier: e3Jrl8ssRpeZ7ZDuJSdN5xF1cX+uxfhQ4t7ufLA7KfI= Subject key identifier: 7D:C3:FC:7F:E0:80:D9:37:8A:A3:A0:F4:40:EF:19:1E:5E:90:45:76 Authority key identifier: 8A:11:EB:76:4B:15:78:53:9D:6E:D3:B2:90:3B:F6:1F:4C:08:00:7C Certificate issuer: /CN=A914CC0F/serialNumber=8A11EB764B1578539D6ED3B2903BF61F4C08007C Certificate serial: 11 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ihHrdksVeFOdbtOykDv2H0wIAHw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.mft Manifest number: 11 Signing time: Wed 04 Jun 2025 20:06:46 +0000 Manifest this update: Wed 04 Jun 2025 20:06:45 +0000 Manifest next update: Wed 11 Jun 2025 20:06:45 +0000 Files and hashes: 1: ihHrdksVeFOdbtOykDv2H0wIAHw.crl (hash: 5VniSGTzJbhrvMCNU7gfY5dV1+N9YZJoskCvY4dupPo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.crl rsync://rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ihHrdksVeFOdbtOykDv2H0wIAHw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 20:06:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CC0F, serialNumber=8A11EB764B1578539D6ED3B2903BF61F4C08007C Validity Not Before: Jun 4 20:06:45 2025 GMT Not After : Jun 11 20:06:45 2025 GMT Subject: CN=6840a755-5f21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d0:e3:b8:7e:c0:73:e2:11:09:7e:bd:1d:c7: 2f:a9:4b:b4:0c:2c:5c:c1:69:75:70:b8:6e:35:54: d8:aa:93:56:0f:d5:7d:79:ae:4a:0a:1e:73:41:20: 4e:15:b1:dc:5d:c6:66:3e:dd:f5:02:aa:74:1a:04: b1:b2:19:31:8e:4f:60:6e:5b:6b:dc:2e:e8:72:e2: 04:4d:1e:eb:27:1f:08:4b:a0:c4:3a:8f:20:30:db: f1:7c:db:73:a4:f5:b3:20:e3:fa:fb:02:03:28:7d: 88:f3:49:4c:90:3a:a6:b9:84:36:68:d5:e7:56:7b: ad:c4:f6:17:da:70:41:53:87:e6:64:50:6b:ac:18: d6:0b:5a:83:20:52:7b:6d:41:e0:74:8d:9a:25:6b: 22:78:e1:a1:31:0f:f1:4c:f1:59:7b:64:b3:b9:3d: 01:79:75:ed:89:33:55:3f:19:cf:fa:95:25:fc:1b: 4c:1f:b7:ed:7d:0e:f9:cf:d7:2b:b7:a6:5f:56:3d: 22:26:20:35:eb:83:1c:7d:4c:0d:97:0d:a5:50:63: 9b:b7:8a:e7:df:90:c0:42:43:56:fc:03:63:77:b7: bf:43:17:f4:61:58:34:ee:a8:5b:0a:9a:46:38:da: cc:3a:ec:01:ed:ae:e2:f3:e2:bf:04:fa:8f:b6:4b: bd:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:C3:FC:7F:E0:80:D9:37:8A:A3:A0:F4:40:EF:19:1E:5E:90:45:76 X509v3 Authority Key Identifier: keyid:8A:11:EB:76:4B:15:78:53:9D:6E:D3:B2:90:3B:F6:1F:4C:08:00:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ihHrdksVeFOdbtOykDv2H0wIAHw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:10:f4:9e:22:7e:b8:ba:d0:99:c7:d5:95:a5:cc:f7:7a:81: 84:c4:72:07:32:85:e3:e8:65:ff:69:87:78:88:d2:92:3f:be: 30:92:8f:32:bd:4f:2b:55:73:2b:c4:05:fc:2f:42:64:c6:e5: 03:64:1a:9c:68:4b:17:ab:05:42:41:c2:d7:91:81:3e:8f:b7: a6:f7:fc:eb:8d:20:89:b7:dd:b1:79:f6:70:55:70:a2:42:c7: 86:cc:17:59:21:31:e4:31:73:9e:40:c0:04:e3:52:c0:df:6c: e6:4f:69:0f:22:4b:95:ac:3c:f6:91:5b:d4:75:e6:75:99:61: fe:76:9b:35:d6:6a:dc:ff:59:6c:3d:96:45:c9:00:b9:db:7c: b5:8f:8c:8d:9b:32:c2:3f:cc:ff:89:04:3f:38:60:75:54:62: be:1c:89:90:3a:41:17:b0:69:b3:27:ba:f7:41:e7:d4:bb:e5: 9e:ab:c2:80:ce:77:87:f8:85:78:69:9b:fb:99:a5:ca:8a:f1: 46:50:34:d3:f5:47:ff:19:87:45:56:54:23:ed:9a:c0:9a:11: 94:fc:a5:43:21:52:25:b5:8b:c7:12:25:dc:0f:bf:bb:50:33: 70:27:78:9b:ae:83:e1:6b:c6:7f:7b:c0:c7:58:ad:af:71:f5: 4d:07:53:ab -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 Q0MwRjExMC8GA1UEBRMoOEExMUVCNzY0QjE1Nzg1MzlENkVEM0IyOTAzQkY2MUY0 QzA4MDA3QzAeFw0yNTA2MDQyMDA2NDVaFw0yNTA2MTEyMDA2NDVaMBgxFjAUBgNV BAMTDTY4NDBhNzU1LTVmMjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCh0OO4fsBz4hEJfr0dxy+pS7QMLFzBaXVwuG41VNiqk1YP1X15rkoKHnNBIE4V sdxdxmY+3fUCqnQaBLGyGTGOT2BuW2vcLuhy4gRNHusnHwhLoMQ6jyAw2/F823Ok 9bMg4/r7AgMofYjzSUyQOqa5hDZo1edWe63E9hfacEFTh+ZkUGusGNYLWoMgUntt QeB0jZolayJ44aExD/FM8Vl7ZLO5PQF5de2JM1U/Gc/6lSX8G0wft+19DvnP1yu3 pl9WPSImIDXrgxx9TA2XDaVQY5u3iuffkMBCQ1b8A2N3t79DF/RhWDTuqFsKmkY4 2sw67AHtruLz4r8E+o+2S72fAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUfcP8f+CA 2TeKo6D0QO8ZHl6QRXYwHwYDVR0jBBgwFoAUihHrdksVeFOdbtOykDv2H0wIAHww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRDQzBGLzQ5RTk5NkM0MkM2 MjExRjBBOUIxQzY1QUM0RjlBRTAyL2loSHJka3NWZUZPZGJ0T3lrRHYySDB3SUFI dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvaWhIcmRrc1ZlRk9kYnRPeWtEdjJIMHdJQUh3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRD QzBGLzQ5RTk5NkM0MkM2MjExRjBBOUIxQzY1QUM0RjlBRTAyL2loSHJka3NWZUZP ZGJ0T3lrRHYySDB3SUFIdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHYQ9J4ifri60JnH1ZWlzPd6gYTEcgcyhePoZf9ph3iI0pI/vjCSjzK9 TytVcyvEBfwvQmTG5QNkGpxoSxerBUJBwteRgT6Pt6b3/OuNIIm33bF59nBVcKJC x4bMF1khMeQxc55AwATjUsDfbOZPaQ8iS5WsPPaRW9R15nWZYf52mzXWatz/WWw9 lkXJALnbfLWPjI2bMsI/zP+JBD84YHVUYr4ciZA6QRewabMnuvdB59S75Z6rwoDO d4f4hXhpm/uZpcqK8UZQNNP1R/8Zh0VWVCPtmsCaEZT8pUMhUiW1i8cSJdwPv7tQ M3AneJuug+Frxn97wMdYra9x9U0HU6s= -----END CERTIFICATE-----Generated at Fri Jun 6 17:32:17 2025 by rpki-client