$ rpki-client -vvf rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.mft File: MfW8lHJxAkr0efYTZGbay_FDhsI.mft (raw, json) Hash identifier: curmxVyH25p5789NlO38jT8+H3AUrNCMDmJwqiZaK34= Subject key identifier: 58:B8:9A:D3:A5:C3:A1:B1:E2:4D:24:67:91:05:38:7C:9E:49:F1:6A Authority key identifier: 31:F5:BC:94:72:71:02:4A:F4:79:F6:13:64:66:DA:CB:F1:43:86:C2 Certificate issuer: /CN=A914F4AA/serialNumber=31F5BC947271024AF479F6136466DACBF14386C2 Certificate serial: 348A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfW8lHJxAkr0efYTZGbay_FDhsI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.mft Manifest number: 348A Signing time: Fri 06 Jun 2025 14:36:42 +0000 Manifest this update: Fri 06 Jun 2025 14:36:42 +0000 Manifest next update: Fri 13 Jun 2025 14:36:42 +0000 Files and hashes: 1: MfW8lHJxAkr0efYTZGbay_FDhsI.crl (hash: 2UGdMl4NU+ayWXpBZFGjQ+i4IlN5r2Pg7/2/LTirfqk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.crl rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfW8lHJxAkr0efYTZGbay_FDhsI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Jun 2025 14:36:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13450 (0x348a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F4AA, serialNumber=31F5BC947271024AF479F6136466DACBF14386C2 Validity Not Before: Jun 6 14:36:42 2025 GMT Not After : Jun 13 14:36:42 2025 GMT Subject: CN=6842fcfa-e933 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8d:bd:98:02:18:32:4e:2e:92:5b:54:64:ee: 5d:4f:aa:46:f1:fa:d6:90:a1:cc:e7:fe:20:ff:b6: 66:e1:06:d1:23:1f:f7:ce:f1:46:2b:de:5a:cb:c2: f1:59:94:51:30:6c:e7:e3:a1:37:f6:60:45:6e:d5: e4:6f:ad:dd:19:51:5d:21:e4:c6:25:fb:ad:b1:f1: da:d0:b3:67:d4:0a:3c:d1:d9:b1:2f:64:9d:81:38: 1c:e7:f0:ae:e1:ef:6d:3a:c6:df:22:a4:5a:5e:ba: d1:9b:33:82:2e:25:6e:4d:d4:5d:43:bd:e5:c9:09: a9:84:b6:39:62:5d:23:4c:65:0e:80:e8:8f:fd:3e: 88:1a:17:27:13:d6:b7:1c:f2:7b:f0:ff:92:6e:63: 9b:77:a5:b3:bc:a1:17:49:fc:8c:18:d4:fa:e3:41: a2:c7:28:3c:aa:26:5b:13:a0:a4:41:6d:ac:a8:a5: a8:33:18:27:38:55:43:90:99:de:d4:65:28:21:96: 83:42:38:5d:7b:c4:57:a0:5a:90:a8:b1:c5:a7:78: 27:91:41:a1:41:24:11:d0:41:8e:33:e8:38:fd:a0: 07:42:ec:d9:6b:7e:5a:ca:74:a9:4a:82:29:2d:5b: 22:e6:7f:14:20:11:e6:99:c5:90:8c:03:79:5e:1f: cb:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:B8:9A:D3:A5:C3:A1:B1:E2:4D:24:67:91:05:38:7C:9E:49:F1:6A X509v3 Authority Key Identifier: keyid:31:F5:BC:94:72:71:02:4A:F4:79:F6:13:64:66:DA:CB:F1:43:86:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfW8lHJxAkr0efYTZGbay_FDhsI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:9b:3d:92:1d:66:d1:9a:fa:b0:0e:9d:0a:b8:34:72:17:a3: 4e:ea:f6:bb:37:0a:3d:6b:b4:fc:f0:72:62:18:ee:5c:ee:e1: 2d:14:08:e2:c2:0d:41:81:9b:18:b5:97:fb:61:d1:12:92:c1: a9:0f:de:16:82:3a:76:cf:04:1a:e0:4d:de:3c:ae:a4:d1:c3: fd:38:f1:2e:d2:ba:ec:17:1a:d7:8f:40:f1:45:01:60:2a:46: 22:6d:f1:95:9d:2a:a0:9f:5f:12:a7:ac:e0:e7:e6:88:2d:5f: 13:e7:36:46:ed:f8:3e:8c:08:50:44:2e:16:fa:e0:4d:93:af: dd:5c:f2:4b:da:3e:f3:9f:4f:cf:35:83:07:49:a7:03:50:ba: c2:4c:91:30:45:d1:f4:44:37:12:e7:65:27:2b:da:be:2e:e8: 4a:77:a0:9f:4a:f9:78:bc:11:5d:e7:4f:a9:6d:5c:69:22:84: fc:fd:49:8e:42:35:f7:69:fb:58:10:5a:75:a8:1a:68:34:5c: 2a:7c:9a:39:2c:7d:be:2e:f2:c1:dd:7e:63:59:d2:8c:7d:b8: 9e:15:d1:a9:c9:75:bd:2d:b5:06:49:b9:8e:47:45:a3:50:8a: bc:44:3e:1a:45:a9:15:d3:ed:c9:c8:b9:4f:89:2a:1d:02:8b: 7a:d9:64:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEY0QUExMTAvBgNVBAUTKDMxRjVCQzk0NzI3MTAyNEFGNDc5RjYxMzY0NjZEQUNC RjE0Mzg2QzIwHhcNMjUwNjA2MTQzNjQyWhcNMjUwNjEzMTQzNjQyWjAYMRYwFAYD VQQDEw02ODQyZmNmYS1lOTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt429mAIYMk4ukltUZO5dT6pG8frWkKHM5/4g/7Zm4QbRIx/3zvFGK95ay8Lx WZRRMGzn46E39mBFbtXkb63dGVFdIeTGJfutsfHa0LNn1Ao80dmxL2SdgTgc5/Cu 4e9tOsbfIqRaXrrRmzOCLiVuTdRdQ73lyQmphLY5Yl0jTGUOgOiP/T6IGhcnE9a3 HPJ78P+SbmObd6WzvKEXSfyMGNT640Gixyg8qiZbE6CkQW2sqKWoMxgnOFVDkJne 1GUoIZaDQjhde8RXoFqQqLHFp3gnkUGhQSQR0EGOM+g4/aAHQuzZa35aynSpSoIp LVsi5n8UIBHmmcWQjAN5Xh/LYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFi4mtOl w6Gx4k0kZ5EFOHyeSfFqMB8GA1UdIwQYMBaAFDH1vJRycQJK9Hn2E2Rm2svxQ4bC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjRBQS9FOUYyQ0E0MDFE OEExMUUyODM0RDNFRTUwOEIwMkNEMi9NZlc4bEhKeEFrcjBlZllUWkdiYXlfRkRo c0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01mVzhsSEp4QWtyMGVmWVRaR2JheV9GRGhzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RjRBQS9FOUYyQ0E0MDFEOEExMUUyODM0RDNFRTUwOEIwMkNEMi9NZlc4bEhKeEFr cjBlZllUWkdiYXlfRkRoc0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+mz2SHWbRmvqwDp0KuDRyF6NO6va7Nwo9a7T88HJiGO5c7uEtFAji wg1BgZsYtZf7YdESksGpD94Wgjp2zwQa4E3ePK6k0cP9OPEu0rrsFxrXj0DxRQFg KkYibfGVnSqgn18Sp6zg5+aILV8T5zZG7fg+jAhQRC4W+uBNk6/dXPJL2j7zn0/P NYMHSacDULrCTJEwRdH0RDcS52UnK9q+LuhKd6CfSvl4vBFd50+pbVxpIoT8/UmO QjX3aftYEFp1qBpoNFwqfJo5LH2+LvLB3X5jWdKMfbieFdGpyXW9LbUGSbmOR0Wj UIq8RD4aRakV0+3JyLlPiSodAot62WQ2 -----END CERTIFICATE-----Generated at Sat Jun 7 18:13:49 2025 by rpki-client