$ rpki-client -vvf rpki.apnic.net/member_repository/A916269D/78BF945032A111EA862BD517C4F9AE02/_D34EL_Cm_HPvwqvpWOX65tMq3c.mft File: _D34EL_Cm_HPvwqvpWOX65tMq3c.mft (raw, json) Hash identifier: pZhRL4/QtBt9bmTzlvy+htQDdeUrH5Qjyw6r4iJNJ6A= Subject key identifier: 01:01:10:29:34:11:B0:FA:4E:AD:A1:FE:88:B2:64:8E:46:DE:36:4A Authority key identifier: FC:3D:F8:10:BF:C2:9B:F1:CF:BF:0A:AF:A5:63:97:EB:9B:4C:AB:77 Certificate issuer: /CN=A916269D/serialNumber=FC3DF810BFC29BF1CFBF0AAFA56397EB9B4CAB77 Certificate serial: 0B5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_D34EL_Cm_HPvwqvpWOX65tMq3c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916269D/78BF945032A111EA862BD517C4F9AE02/_D34EL_Cm_HPvwqvpWOX65tMq3c.mft Manifest number: 0B58 Signing time: Wed 04 Jun 2025 19:03:37 +0000 Manifest this update: Wed 04 Jun 2025 19:03:36 +0000 Manifest next update: Wed 11 Jun 2025 19:03:36 +0000 Files and hashes: 1: _D34EL_Cm_HPvwqvpWOX65tMq3c.crl (hash: pfUrf9fYHezpe/3egV/NUrribzWOgJ2vkUzkQrwwDIQ=) 2: EDA2987A32A211EA87A1561DC4F9AE02.roa (hash: MfEk5NxWi8gs+2M+DhUKf65mWDxmQTJBopQpU/oINak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916269D/78BF945032A111EA862BD517C4F9AE02/_D34EL_Cm_HPvwqvpWOX65tMq3c.crl rsync://rpki.apnic.net/member_repository/A916269D/78BF945032A111EA862BD517C4F9AE02/_D34EL_Cm_HPvwqvpWOX65tMq3c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_D34EL_Cm_HPvwqvpWOX65tMq3c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 19:03:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2910 (0xb5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916269D, serialNumber=FC3DF810BFC29BF1CFBF0AAFA56397EB9B4CAB77 Validity Not Before: Jun 4 19:03:36 2025 GMT Not After : Jun 11 19:03:36 2025 GMT Subject: CN=68409889-5844 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f9:6a:61:23:d2:3a:ac:00:6b:81:06:42:a5: ba:77:d7:9b:7a:45:31:db:0d:3c:18:f4:03:f1:64: d0:b7:0e:cc:a4:cb:c1:3b:07:1d:0f:f1:ae:8b:30: 65:17:39:c2:08:15:d2:fe:41:a7:ec:de:bb:23:bd: 08:82:58:8b:2f:32:8b:1b:ac:a9:59:71:db:a7:5f: 80:13:66:63:5d:54:91:7a:8f:6f:ac:b6:dd:d6:78: 57:f8:4a:22:6a:03:97:73:e8:f0:aa:1a:ca:f1:fc: 1e:cd:d7:c6:db:cf:59:76:2d:59:8b:42:0c:31:66: 54:10:04:c3:b3:b3:13:e1:a1:32:b8:90:ae:29:13: 0d:66:20:a4:7f:a8:8f:37:04:cc:ae:f8:bb:80:71: dc:7e:0c:13:6a:f2:c5:d9:f5:c4:95:5f:2a:8d:00: 51:84:a3:39:70:23:5c:db:c6:76:89:34:33:e6:59: ae:e9:45:0b:a2:ea:1f:49:99:fa:08:07:2a:8f:41: da:2a:03:a2:ad:6f:31:64:11:65:e3:d4:1e:26:9f: 3f:f2:df:5c:03:77:44:0e:bf:89:72:da:6c:da:28: 2c:aa:de:bf:44:c0:0f:77:ac:03:7d:d7:12:82:74: 50:45:d3:28:47:27:7d:bf:5f:51:43:0c:d1:50:a4: fd:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:01:10:29:34:11:B0:FA:4E:AD:A1:FE:88:B2:64:8E:46:DE:36:4A X509v3 Authority Key Identifier: keyid:FC:3D:F8:10:BF:C2:9B:F1:CF:BF:0A:AF:A5:63:97:EB:9B:4C:AB:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916269D/78BF945032A111EA862BD517C4F9AE02/_D34EL_Cm_HPvwqvpWOX65tMq3c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_D34EL_Cm_HPvwqvpWOX65tMq3c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916269D/78BF945032A111EA862BD517C4F9AE02/_D34EL_Cm_HPvwqvpWOX65tMq3c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:66:c5:dd:b3:07:36:6b:13:da:5c:74:ca:ba:d3:e2:f5:82: 21:83:4b:02:35:75:3b:46:53:db:75:08:0d:c9:c1:46:08:90: 7d:b9:8b:5f:f3:2f:3a:66:bb:e3:e5:a1:c1:06:ab:93:da:13: e0:7d:8f:1c:c8:be:ef:94:2e:32:85:f7:63:0a:be:6b:b6:75: e1:ea:25:bf:06:09:f6:49:51:0f:ae:3d:2a:50:ee:f4:e0:ad: 03:52:a8:a8:a6:00:02:08:74:61:2c:d6:29:cc:c7:e8:e0:1c: 48:2b:c6:20:97:6c:fb:ed:8c:d0:63:58:32:f1:41:7f:54:62: 96:ac:08:e6:b8:7c:66:bc:df:2c:f3:af:cf:82:0d:e0:f0:40: c9:ec:21:fe:ac:15:15:58:9a:4e:4d:ca:e0:ab:2b:fb:41:43: d3:fe:39:e4:85:20:0d:89:80:7b:b7:6c:61:0c:79:b3:fd:d4: 7d:a3:b0:67:80:b9:08:13:a7:a4:9b:6f:a9:f4:7a:d1:a7:06: ae:05:d2:84:ef:0e:23:7c:dc:f4:bf:5d:de:4b:18:45:65:a0: 04:99:db:82:24:85:e2:86:19:f4:ae:ac:3a:fa:38:19:d7:27: 31:b6:2f:c9:04:7a:15:c9:12:53:1f:f2:d1:df:38:b6:64:a5: 21:d4:24:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC14wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjI2OUQxMTAvBgNVBAUTKEZDM0RGODEwQkZDMjlCRjFDRkJGMEFBRkE1NjM5N0VC OUI0Q0FCNzcwHhcNMjUwNjA0MTkwMzM2WhcNMjUwNjExMTkwMzM2WjAYMRYwFAYD VQQDEw02ODQwOTg4OS01ODQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuflqYSPSOqwAa4EGQqW6d9ebekUx2w08GPQD8WTQtw7MpMvBOwcdD/GuizBl FznCCBXS/kGn7N67I70IgliLLzKLG6ypWXHbp1+AE2ZjXVSReo9vrLbd1nhX+Eoi agOXc+jwqhrK8fwezdfG289Zdi1Zi0IMMWZUEATDs7MT4aEyuJCuKRMNZiCkf6iP NwTMrvi7gHHcfgwTavLF2fXElV8qjQBRhKM5cCNc28Z2iTQz5lmu6UULouofSZn6 CAcqj0HaKgOirW8xZBFl49QeJp8/8t9cA3dEDr+Jctps2igsqt6/RMAPd6wDfdcS gnRQRdMoRyd9v19RQwzRUKT9wwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAEBECk0 EbD6Tq2h/oiyZI5G3jZKMB8GA1UdIwQYMBaAFPw9+BC/wpvxz78Kr6Vjl+ubTKt3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjY5RC83OEJGOTQ1MDMy QTExMUVBODYyQkQ1MTdDNEY5QUUwMi9fRDM0RUxfQ21fSFB2d3F2cFdPWDY1dE1x M2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19EMzRFTF9DbV9IUHZ3cXZwV09YNjV0TXEzYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjY5RC83OEJGOTQ1MDMyQTExMUVBODYyQkQ1MTdDNEY5QUUwMi9fRDM0RUxfQ21f SFB2d3F2cFdPWDY1dE1xM2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArZsXdswc2axPaXHTKutPi9YIhg0sCNXU7RlPbdQgNycFGCJB9uYtf 8y86Zrvj5aHBBquT2hPgfY8cyL7vlC4yhfdjCr5rtnXh6iW/Bgn2SVEPrj0qUO70 4K0DUqiopgACCHRhLNYpzMfo4BxIK8Ygl2z77YzQY1gy8UF/VGKWrAjmuHxmvN8s 86/Pgg3g8EDJ7CH+rBUVWJpOTcrgqyv7QUPT/jnkhSANiYB7t2xhDHmz/dR9o7Bn gLkIE6ekm2+p9HrRpwauBdKE7w4jfNz0v13eSxhFZaAEmduCJIXihhn0rqw6+jgZ 1ycxti/JBHoVyRJTH/LR3zi2ZKUh1CQW -----END CERTIFICATE-----Generated at Thu Jun 5 20:00:47 2025 by rpki-client