$ rpki-client -vvf rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.mft File: l0tKVlSG4EjQwXaY1yJ2cM88mac.mft (raw, json) Hash identifier: /PBYI+MeZqlAjs0FHAtWf21Wqm0CeVK8EfGGVhnWJcM= Subject key identifier: C4:4A:07:D4:F7:2C:B8:BE:89:F6:4C:17:19:26:3F:D4:2B:F8:51:7D Authority key identifier: 97:4B:4A:56:54:86:E0:48:D0:C1:76:98:D7:22:76:70:CF:3C:99:A7 Certificate issuer: /CN=A916069A/serialNumber=974B4A565486E048D0C17698D7227670CF3C99A7 Certificate serial: 71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0tKVlSG4EjQwXaY1yJ2cM88mac.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.mft Manifest number: 71 Signing time: Fri 13 Jun 2025 05:44:57 +0000 Manifest this update: Fri 13 Jun 2025 05:44:57 +0000 Manifest next update: Fri 20 Jun 2025 05:44:57 +0000 Files and hashes: 1: l0tKVlSG4EjQwXaY1yJ2cM88mac.crl (hash: 7lr/EBZ+MriZ/G3M2W3pU5x45bOnLR9qCIlpHy9kvvo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.crl rsync://rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0tKVlSG4EjQwXaY1yJ2cM88mac.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 05:44:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 113 (0x71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916069A, serialNumber=974B4A565486E048D0C17698D7227670CF3C99A7 Validity Not Before: Jun 13 05:44:57 2025 GMT Not After : Jun 20 05:44:57 2025 GMT Subject: CN=684bbad9-c626 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:26:df:fa:a1:d9:9d:83:1c:e3:7e:37:26:a9: b8:a0:77:e3:cf:68:cb:95:2e:48:0b:f9:0e:51:92: 9e:8e:21:c0:2e:83:74:33:53:6a:7f:4d:14:8c:99: 80:b2:91:ab:99:83:3f:ae:c9:59:98:cf:bd:4e:7a: c9:31:31:2a:84:28:43:3c:d6:2c:47:50:c9:b9:ad: ec:12:89:04:ab:e2:88:cd:d0:4c:89:36:67:70:fb: e8:3d:db:84:ab:fd:b3:d8:19:26:3a:06:e6:45:32: a4:73:35:a8:96:0c:a5:61:37:42:91:59:75:e1:2d: 4d:81:1a:8d:91:4a:a7:c8:ba:86:e0:67:4c:cd:4f: 97:00:ad:ee:9e:ca:5e:1b:93:71:4c:98:97:6b:2e: 8b:85:ff:bf:0e:b8:c9:a0:7a:2e:76:f2:01:d0:d8: 5a:89:ee:67:24:e6:56:6d:0a:a2:36:0b:0d:94:e6: be:45:8f:6f:f2:9c:77:2e:3c:fc:90:3f:b2:e2:35: 50:58:50:99:e6:06:03:b8:ee:14:51:74:a8:38:e1: d2:47:0d:00:60:78:c2:f0:73:08:ab:ea:e5:b4:ff: 56:2f:d7:1b:92:e5:15:7c:57:4f:a4:92:1a:f8:6d: 17:49:b2:9a:2e:6d:99:8c:41:10:6b:ba:a1:e6:1b: c7:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:4A:07:D4:F7:2C:B8:BE:89:F6:4C:17:19:26:3F:D4:2B:F8:51:7D X509v3 Authority Key Identifier: keyid:97:4B:4A:56:54:86:E0:48:D0:C1:76:98:D7:22:76:70:CF:3C:99:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0tKVlSG4EjQwXaY1yJ2cM88mac.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:27:b1:68:70:eb:0e:89:58:e1:b5:43:e0:39:83:6b:6a:11: af:ce:f9:65:3f:42:be:4c:52:be:13:44:93:45:4d:45:e8:18: ce:52:59:33:39:e7:10:a0:45:f9:c9:af:3d:a3:ec:3a:3d:ce: 55:90:c8:b4:31:c5:ae:86:e2:57:50:a2:1c:6e:68:2f:fe:e9: 85:a3:4c:a1:f6:ce:d3:d2:10:ee:b7:48:97:a6:9d:f0:16:43: 9b:ad:9f:7b:2c:19:43:be:d5:c4:d9:f5:e4:45:1c:e5:fa:ec: a8:ec:0f:a5:1f:e9:cb:46:05:51:12:1d:c2:5c:da:89:09:0b: a5:a1:11:a5:59:93:d5:c6:7a:a7:60:5c:b6:cc:0a:05:aa:9d: 20:b8:b1:1e:df:57:4d:40:b1:dd:7c:3b:dd:11:07:54:3e:92: 04:ea:77:e7:70:c5:a1:48:eb:02:93:1b:9f:e4:52:7d:b4:9d: 72:db:f4:bb:d1:06:0f:cd:0c:d5:1c:2d:34:fe:d0:5d:c2:ab: 82:df:2f:29:1f:80:ff:94:87:85:b3:2e:db:7c:c8:ab:65:c9: bd:8c:90:72:30:d6:8f:a4:4c:3f:97:db:a5:af:98:6b:dc:c0: 5f:19:19:ee:14:b9:ea:ca:da:7e:8e:b7:d4:90:6e:0f:35:a2: 76:78:de:6f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MDY5QTExMC8GA1UEBRMoOTc0QjRBNTY1NDg2RTA0OEQwQzE3Njk4RDcyMjc2NzBD RjNDOTlBNzAeFw0yNTA2MTMwNTQ0NTdaFw0yNTA2MjAwNTQ0NTdaMBgxFjAUBgNV BAMTDTY4NGJiYWQ5LWM2MjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0Jt/6odmdgxzjfjcmqbigd+PPaMuVLkgL+Q5Rkp6OIcAug3QzU2p/TRSMmYCy kauZgz+uyVmYz71OeskxMSqEKEM81ixHUMm5rewSiQSr4ojN0EyJNmdw++g924Sr /bPYGSY6BuZFMqRzNaiWDKVhN0KRWXXhLU2BGo2RSqfIuobgZ0zNT5cAre6eyl4b k3FMmJdrLouF/78OuMmgei528gHQ2FqJ7mck5lZtCqI2Cw2U5r5Fj2/ynHcuPPyQ P7LiNVBYUJnmBgO47hRRdKg44dJHDQBgeMLwcwir6uW0/1Yv1xuS5RV8V0+kkhr4 bRdJspoubZmMQRBruqHmG8cRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxEoH1Pcs uL6J9kwXGSY/1Cv4UX0wHwYDVR0jBBgwFoAUl0tKVlSG4EjQwXaY1yJ2cM88macw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYwNjlBLzM2RDVENjJDOUJG MDExRUY4MUM5MDI2N0M0RjlBRTAyL2wwdEtWbFNHNEVqUXdYYVkxeUoyY004OG1h Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbDB0S1ZsU0c0RWpRd1hhWTF5SjJjTTg4bWFjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYw NjlBLzM2RDVENjJDOUJGMDExRUY4MUM5MDI2N0M0RjlBRTAyL2wwdEtWbFNHNEVq UXdYYVkxeUoyY004OG1hYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKsnsWhw6w6JWOG1Q+A5g2tqEa/O+WU/Qr5MUr4TRJNFTUXoGM5SWTM5 5xCgRfnJrz2j7Do9zlWQyLQxxa6G4ldQohxuaC/+6YWjTKH2ztPSEO63SJemnfAW Q5utn3ssGUO+1cTZ9eRFHOX67KjsD6Uf6ctGBVESHcJc2okJC6WhEaVZk9XGeqdg XLbMCgWqnSC4sR7fV01Asd18O90RB1Q+kgTqd+dwxaFI6wKTG5/kUn20nXLb9LvR Bg/NDNUcLTT+0F3Cq4LfLykfgP+Uh4WzLtt8yKtlyb2MkHIw1o+kTD+X26WvmGvc wF8ZGe4UuerK2n6Ot9SQbg81onZ43m8= -----END CERTIFICATE-----Generated at Sat Jun 14 07:40:44 2025 by rpki-client