$ rpki-client -vvf rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.mft File: rCjcKlVLTjOaOZyWQrTOAmio37A.mft (raw, json) Hash identifier: JPYlsarCsxTbrnCJ6EsMBHTYCOd7LU/zM6dHyjAOF6k= Subject key identifier: C7:9E:0F:D6:CC:B7:39:12:36:A9:EF:38:E8:E1:88:89:2F:A1:CA:69 Authority key identifier: AC:28:DC:2A:55:4B:4E:33:9A:39:9C:96:42:B4:CE:02:68:A8:DF:B0 Certificate issuer: /CN=A915EA46/serialNumber=AC28DC2A554B4E339A399C9642B4CE0268A8DFB0 Certificate serial: 6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCjcKlVLTjOaOZyWQrTOAmio37A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.mft Manifest number: 6A Signing time: Sat 31 May 2025 06:29:49 +0000 Manifest this update: Sat 31 May 2025 06:29:48 +0000 Manifest next update: Sat 07 Jun 2025 06:29:48 +0000 Files and hashes: 1: rCjcKlVLTjOaOZyWQrTOAmio37A.crl (hash: obxviJZrGGX1PfEsAkNDc0oOz3EOaJTTjfxQCJcvuSM=) 2: A1E99A4E9C1211EFB233147EC4F9AE02.roa (hash: 3ye2avJW3DGdXLpGllemApGuBs5Hg/Dy3+TFvLk8rE8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.crl rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCjcKlVLTjOaOZyWQrTOAmio37A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:29:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 107 (0x6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915EA46, serialNumber=AC28DC2A554B4E339A399C9642B4CE0268A8DFB0 Validity Not Before: May 31 06:29:48 2025 GMT Not After : Jun 7 06:29:48 2025 GMT Subject: CN=683aa1dd-a98f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:29:27:e6:85:8f:25:f4:b9:3f:14:0f:da:ce: 81:db:81:9c:78:c5:6d:e3:08:df:79:1a:f6:d6:34: 81:44:6c:43:1a:ad:97:06:10:59:e2:38:d9:c2:28: ae:df:be:37:c4:f4:23:68:bf:a6:d6:ac:9f:7f:cc: 6b:94:b6:7d:bc:3d:e3:0e:26:bf:06:66:9f:55:3a: 59:c4:ef:1f:8a:ec:48:fd:59:ef:bc:39:e6:55:e7: c7:7b:7d:f8:45:ac:a4:3f:77:ca:e2:3d:6d:e2:49: 7c:81:f0:96:48:d9:70:9c:d1:99:f1:0b:cc:33:be: 32:d5:0e:73:73:29:59:6c:b8:cc:c0:18:c3:5b:59: 60:ba:8e:63:23:38:89:df:40:7f:af:da:dd:5b:47: 5f:8b:c2:99:f8:98:14:3d:af:53:ab:4b:95:e8:02: 47:73:89:5b:79:ea:da:3f:96:73:67:5b:d9:6b:96: 20:14:17:f2:66:d5:1b:2b:29:79:11:0f:e9:8a:b3: 89:2c:74:8f:d8:6d:3e:f2:35:76:8d:96:55:5d:13: 55:1e:93:c3:86:b9:61:92:f4:26:17:05:ee:6b:3a: b5:20:28:f9:2d:9e:51:d8:5d:5a:47:13:c3:0a:88: f3:41:d2:f2:af:ae:7a:23:18:f4:18:a3:8e:ef:a0: d8:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:9E:0F:D6:CC:B7:39:12:36:A9:EF:38:E8:E1:88:89:2F:A1:CA:69 X509v3 Authority Key Identifier: keyid:AC:28:DC:2A:55:4B:4E:33:9A:39:9C:96:42:B4:CE:02:68:A8:DF:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCjcKlVLTjOaOZyWQrTOAmio37A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:9b:dd:3f:71:7b:1e:75:10:df:0a:88:34:b5:ed:27:26:b1: 80:f8:9d:31:97:d5:64:19:d0:f0:2e:2e:68:77:d6:0f:1b:52: 4d:55:46:95:2a:2d:04:85:c2:f1:c0:e4:8c:1b:8f:eb:37:04: f6:9e:c8:01:47:aa:fe:35:bc:e2:49:52:f5:df:21:41:ca:58: cb:51:c5:d0:02:11:21:85:ec:3d:08:38:65:af:41:bf:6f:c9: e4:84:57:6a:fe:65:b3:92:4b:21:81:c9:6a:4a:81:b8:a0:53: 24:aa:77:1e:bf:fd:d8:26:3e:f0:3b:ba:f1:52:e3:b5:89:e2: 78:21:51:33:7d:5d:3f:fd:d2:f8:19:b7:fd:d6:73:1e:d9:c4: df:af:7a:e3:d9:d7:e7:f8:a9:4e:18:2a:5b:20:d8:9d:86:48: 1a:63:e9:57:f7:b9:85:db:8d:c3:5f:76:06:a2:81:84:04:1c: f6:d5:d0:8d:5a:cf:d1:35:e5:e7:59:00:af:17:e6:cf:1e:fb: 7d:d1:38:42:03:a1:b9:a8:84:fe:5c:50:fc:f3:3b:98:4b:1a: c8:a9:f7:df:1d:bc:41:91:b5:af:af:31:31:b8:f8:e7:32:04: d6:2f:75:c7:b2:19:f5:80:7d:11:b2:8b:85:f7:cd:b1:f8:a1: 8c:5b:21:ea -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBazANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RUE0NjExMC8GA1UEBRMoQUMyOERDMkE1NTRCNEUzMzlBMzk5Qzk2NDJCNENFMDI2 OEE4REZCMDAeFw0yNTA1MzEwNjI5NDhaFw0yNTA2MDcwNjI5NDhaMBgxFjAUBgNV BAMTDTY4M2FhMWRkLWE5OGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMKSfmhY8l9Lk/FA/azoHbgZx4xW3jCN95GvbWNIFEbEMarZcGEFniONnCKK7f vjfE9CNov6bWrJ9/zGuUtn28PeMOJr8GZp9VOlnE7x+K7Ej9We+8OeZV58d7ffhF rKQ/d8riPW3iSXyB8JZI2XCc0ZnxC8wzvjLVDnNzKVlsuMzAGMNbWWC6jmMjOInf QH+v2t1bR1+Lwpn4mBQ9r1OrS5XoAkdziVt56to/lnNnW9lrliAUF/Jm1RsrKXkR D+mKs4ksdI/YbT7yNXaNllVdE1Uek8OGuWGS9CYXBe5rOrUgKPktnlHYXVpHE8MK iPNB0vKvrnojGPQYo47voNgVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUx54P1sy3 ORI2qe846OGIiS+hymkwHwYDVR0jBBgwFoAUrCjcKlVLTjOaOZyWQrTOAmio37Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVFQTQ2L0RCREEyQ0M0OUMx MTExRUY5MkZCQTk3Q0M0RjlBRTAyL3JDamNLbFZMVGpPYU9aeVdRclRPQW1pbzM3 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvckNqY0tsVkxUak9hT1p5V1FyVE9BbWlvMzdBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVF QTQ2L0RCREEyQ0M0OUMxMTExRUY5MkZCQTk3Q0M0RjlBRTAyL3JDamNLbFZMVGpP YU9aeVdRclRPQW1pbzM3QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGSb3T9xex51EN8KiDS17ScmsYD4nTGX1WQZ0PAuLmh31g8bUk1VRpUq LQSFwvHA5Iwbj+s3BPaeyAFHqv41vOJJUvXfIUHKWMtRxdACESGF7D0IOGWvQb9v yeSEV2r+ZbOSSyGByWpKgbigUySqdx6//dgmPvA7uvFS47WJ4nghUTN9XT/90vgZ t/3Wcx7ZxN+veuPZ1+f4qU4YKlsg2J2GSBpj6Vf3uYXbjcNfdgaigYQEHPbV0I1a z9E15edZAK8X5s8e+33ROEIDobmohP5cUPzzO5hLGsip998dvEGRta+vMTG4+Ocy BNYvdceyGfWAfRGyi4X3zbH4oYxbIeo= -----END CERTIFICATE-----Generated at Sat May 31 16:49:06 2025 by rpki-client