$ rpki-client -vvf rpki.apnic.net/member_repository/A916AC30/760D6A648C6211EF99464085C4F9AE02/cuiGCytHM2W_JhQg0GtYqATClrI.mft File: cuiGCytHM2W_JhQg0GtYqATClrI.mft (raw, json) Hash identifier: ieXAn0NEWiy7RI+Mmlgi12mVj4YFps0osgWFlyq9zVU= Subject key identifier: 74:24:B5:82:3F:B0:BA:E0:DD:CB:38:59:E7:ED:5B:99:F3:C7:72:07 Authority key identifier: 72:E8:86:0B:2B:47:33:65:BF:26:14:20:D0:6B:58:A8:04:C2:96:B2 Certificate issuer: /CN=A916AC30/serialNumber=72E8860B2B473365BF261420D06B58A804C296B2 Certificate serial: 94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuiGCytHM2W_JhQg0GtYqATClrI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916AC30/760D6A648C6211EF99464085C4F9AE02/cuiGCytHM2W_JhQg0GtYqATClrI.mft Manifest number: 8A Signing time: Wed 11 Jun 2025 06:07:12 +0000 Manifest this update: Wed 11 Jun 2025 06:07:11 +0000 Manifest next update: Wed 18 Jun 2025 06:07:11 +0000 Files and hashes: 1: cuiGCytHM2W_JhQg0GtYqATClrI.crl (hash: 8vMWjh/wT1FB/UxiDxir5qP17CdPHvD05ClGsVuGMR0=) 2: 8CBE22F8D33911EF9F576474C4F9AE02.roa (hash: NMDs0Vn0lErQbJ2ubqn2Wa0iHcDZLQ+NyOe8KJVyEl0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916AC30/760D6A648C6211EF99464085C4F9AE02/cuiGCytHM2W_JhQg0GtYqATClrI.crl rsync://rpki.apnic.net/member_repository/A916AC30/760D6A648C6211EF99464085C4F9AE02/cuiGCytHM2W_JhQg0GtYqATClrI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuiGCytHM2W_JhQg0GtYqATClrI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 06:07:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 148 (0x94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916AC30, serialNumber=72E8860B2B473365BF261420D06B58A804C296B2 Validity Not Before: Jun 11 06:07:11 2025 GMT Not After : Jun 18 06:07:11 2025 GMT Subject: CN=68491d0f-d74d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:25:d0:64:14:d3:64:bc:b8:34:62:e3:ac:ea: c2:14:e8:d2:89:22:62:cf:a7:09:4e:48:a8:39:43: 3b:a6:f3:9a:c0:dd:68:18:d1:0d:6c:86:49:b7:9e: 5c:e2:19:75:2f:dd:fd:1f:1e:03:91:ef:06:62:73: dc:86:14:f6:ad:c8:ad:ec:11:92:e7:9b:a5:cc:e0: 3d:77:ce:f4:9a:82:de:61:42:28:f1:6b:ce:1a:ed: 6e:9d:c9:9b:2e:d1:51:81:7f:1b:16:6e:4d:e0:93: 4d:28:5a:a0:af:ee:91:e0:e8:ce:f0:5b:47:32:21: 69:8b:24:bc:52:ff:9d:4a:8d:3f:08:1d:a3:5d:77: fb:be:54:7a:4d:61:0f:42:94:b0:f3:eb:fa:23:e4: 51:e1:37:ac:c1:a5:79:29:61:ae:44:00:15:0e:e1: 51:d5:85:89:09:fa:f8:03:83:90:6a:2c:9b:d8:da: 47:71:2d:97:49:33:bc:b4:5b:22:ba:c3:e3:17:91: c3:25:d8:fe:8b:b7:20:0c:7d:36:d6:28:bb:b6:60: f3:42:35:10:69:2d:a5:c4:57:c2:e8:c4:2f:61:c6: fd:c3:54:9e:1a:67:7b:e9:7c:84:dd:08:0a:16:86: f5:2b:c1:36:94:b3:39:b1:a5:52:31:58:18:27:02: 26:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:24:B5:82:3F:B0:BA:E0:DD:CB:38:59:E7:ED:5B:99:F3:C7:72:07 X509v3 Authority Key Identifier: keyid:72:E8:86:0B:2B:47:33:65:BF:26:14:20:D0:6B:58:A8:04:C2:96:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916AC30/760D6A648C6211EF99464085C4F9AE02/cuiGCytHM2W_JhQg0GtYqATClrI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuiGCytHM2W_JhQg0GtYqATClrI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AC30/760D6A648C6211EF99464085C4F9AE02/cuiGCytHM2W_JhQg0GtYqATClrI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:4b:2d:35:18:f3:f1:42:c5:1e:5e:a5:be:95:39:a8:f8:e7: ab:6b:b3:45:6a:44:24:03:aa:3c:7b:d9:f5:d6:20:8c:34:63: 9c:0c:c3:5e:8f:0c:e7:9f:fb:f4:27:38:56:18:e8:2f:50:fd: af:af:b5:d1:18:c3:ee:d0:78:88:65:a2:bd:0d:36:b8:47:d1: a8:79:24:b7:55:78:f2:b2:e7:e2:1a:2f:71:dd:ff:6e:43:df: e9:a1:a1:29:a5:77:3d:3b:1e:a6:87:b3:79:c4:56:6e:fc:73: 1a:60:91:ff:62:bf:7f:73:c5:38:ec:b5:99:aa:8d:d6:2a:f3: 9a:2c:05:03:aa:08:4e:c0:d1:31:49:72:c0:13:f8:33:b7:a7: 54:c5:09:e9:4a:0a:41:79:81:6d:70:47:0b:4d:83:ac:51:6b: 37:c8:11:1d:76:29:86:76:84:c5:75:da:d1:ca:c9:1f:f0:8f: 39:0e:5f:3f:a8:86:81:bc:31:d4:d0:3d:7a:5c:08:93:de:8d: b4:30:28:4a:70:ce:b8:8f:fe:cf:40:64:39:27:a4:b4:27:9d: 27:b9:34:2b:08:15:b3:da:f6:81:24:c5:1a:af:da:1e:10:7b: 93:2b:e0:93:af:02:30:17:e5:57:ca:06:a9:4e:38:ab:b5:7b: 4b:ac:ea:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkFDMzAxMTAvBgNVBAUTKDcyRTg4NjBCMkI0NzMzNjVCRjI2MTQyMEQwNkI1OEE4 MDRDMjk2QjIwHhcNMjUwNjExMDYwNzExWhcNMjUwNjE4MDYwNzExWjAYMRYwFAYD VQQDEw02ODQ5MWQwZi1kNzRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxCXQZBTTZLy4NGLjrOrCFOjSiSJiz6cJTkioOUM7pvOawN1oGNENbIZJt55c 4hl1L939Hx4Dke8GYnPchhT2rcit7BGS55ulzOA9d870moLeYUIo8WvOGu1uncmb LtFRgX8bFm5N4JNNKFqgr+6R4OjO8FtHMiFpiyS8Uv+dSo0/CB2jXXf7vlR6TWEP QpSw8+v6I+RR4TeswaV5KWGuRAAVDuFR1YWJCfr4A4OQaiyb2NpHcS2XSTO8tFsi usPjF5HDJdj+i7cgDH021ii7tmDzQjUQaS2lxFfC6MQvYcb9w1SeGmd76XyE3QgK Fob1K8E2lLM5saVSMVgYJwIm2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHQktYI/ sLrg3cs4WeftW5nzx3IHMB8GA1UdIwQYMBaAFHLohgsrRzNlvyYUINBrWKgEwpay MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QUMzMC83NjBENkE2NDhD NjIxMUVGOTk0NjQwODVDNEY5QUUwMi9jdWlHQ3l0SE0yV19KaFFnMEd0WXFBVENs ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N1aUdDeXRITTJXX0poUWcwR3RZcUFUQ2xySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QUMzMC83NjBENkE2NDhDNjIxMUVGOTk0NjQwODVDNEY5QUUwMi9jdWlHQ3l0SE0y V19KaFFnMEd0WXFBVENsckkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgSy01GPPxQsUeXqW+lTmo+Oera7NFakQkA6o8e9n11iCMNGOcDMNe jwznn/v0JzhWGOgvUP2vr7XRGMPu0HiIZaK9DTa4R9GoeSS3VXjysufiGi9x3f9u Q9/poaEppXc9Ox6mh7N5xFZu/HMaYJH/Yr9/c8U47LWZqo3WKvOaLAUDqghOwNEx SXLAE/gzt6dUxQnpSgpBeYFtcEcLTYOsUWs3yBEddimGdoTFddrRyskf8I85Dl8/ qIaBvDHU0D16XAiT3o20MChKcM64j/7PQGQ5J6S0J50nuTQrCBWz2vaBJMUar9oe EHuTK+CTrwIwF+VXygapTjirtXtLrOr4 -----END CERTIFICATE-----Generated at Thu Jun 12 20:45:44 2025 by rpki-client