$ rpki-client -vvf rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft File: P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft (raw, json) Hash identifier: BITA8oVoOYPjmA5GWuotLafoZSNuVwVNJbIMEdQFuuY= Subject key identifier: E7:20:34:53:56:B6:36:0C:1A:19:31:10:AB:A0:96:44:F2:D2:3A:66 Authority key identifier: 3F:C1:70:E8:DF:5A:DB:FA:1B:63:70:B7:45:0F:28:FA:E0:B3:5A:18 Certificate issuer: /CN=A917357E/serialNumber=3FC170E8DF5ADBFA1B6370B7450F28FAE0B35A18 Certificate serial: 0444 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft Manifest number: 0645 Signing time: Sun 01 Jun 2025 00:31:32 +0000 Manifest this update: Sun 01 Jun 2025 00:31:32 +0000 Manifest next update: Sun 08 Jun 2025 00:31:32 +0000 Files and hashes: 1: P8Fw6N9a2_obY3C3RQ8o-uCzWhg.crl (hash: e+zw+ryWUhfRWM/G4WyQ0KQ+Gg0QcKQQYPYMa771+f0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.crl rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 00:31:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1092 (0x444) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917357E, serialNumber=3FC170E8DF5ADBFA1B6370B7450F28FAE0B35A18 Validity Not Before: Jun 1 00:31:32 2025 GMT Not After : Jun 8 00:31:32 2025 GMT Subject: CN=683b9f64-8168 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:33:ed:5f:c2:ee:3a:03:88:4e:f5:0d:73:6e: d4:4c:7c:9a:8c:04:75:54:42:5d:86:c5:23:ae:d2: c2:3a:f4:66:20:fd:cd:69:77:74:f2:7d:56:18:0f: e7:23:22:b5:fe:99:4c:c0:f3:1a:91:66:ee:26:d8: 25:14:cc:ab:67:3a:eb:bf:79:40:c1:c9:47:fc:d4: ce:fd:9e:f6:7f:8b:ba:0a:38:7c:15:70:78:be:7b: 80:12:6c:6a:52:08:6b:a8:07:53:b6:4d:c1:ad:24: 1e:33:82:fc:6e:b0:43:f4:92:88:41:c2:50:e7:10: 6a:d0:22:f4:8a:ea:b7:25:dc:5d:ba:a7:9f:ff:93: ec:18:46:10:20:b5:b5:dc:62:31:71:25:4a:33:11: 3f:e3:40:76:71:a3:8a:a2:b8:b4:aa:f7:63:66:a6: 86:96:0e:d2:07:f9:28:b1:d4:f5:b3:8b:4c:28:84: d0:e5:c5:8a:f4:f8:78:07:1f:b9:3c:c2:3d:1b:7d: ce:d5:5e:f6:e4:67:81:d6:44:9d:99:e4:85:ad:fa: fb:6e:ae:d4:c0:85:34:4d:2a:52:eb:3b:9e:b6:c8: d0:2e:14:59:ba:fb:05:72:c3:79:35:42:e4:0d:e3: 6c:02:32:a1:00:6d:35:d8:09:19:43:e1:1e:8d:54: 72:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:20:34:53:56:B6:36:0C:1A:19:31:10:AB:A0:96:44:F2:D2:3A:66 X509v3 Authority Key Identifier: keyid:3F:C1:70:E8:DF:5A:DB:FA:1B:63:70:B7:45:0F:28:FA:E0:B3:5A:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:e0:77:fe:4a:93:8e:df:dc:6b:cf:45:aa:40:99:53:98:c6: 37:b6:5c:63:5c:a2:7a:57:56:2b:e4:6f:d4:17:4a:4b:93:19: 9e:27:f8:51:cb:8e:75:3f:b1:d4:b2:4e:20:4d:01:54:94:a8: 5d:52:b5:71:b9:24:74:75:ca:df:62:53:f0:a7:c3:7a:f1:4f: fd:01:72:9e:c7:4e:e1:d8:98:95:fb:76:9d:a4:16:30:0d:a5: a7:5a:c7:8f:78:83:b4:f0:bf:2b:9e:ed:e6:11:e7:e9:db:b6: 96:02:e9:b7:c4:90:7c:a9:0d:32:6b:29:52:bc:85:d0:16:ee: bd:db:d9:d9:c7:60:02:cd:21:92:17:60:fe:a6:aa:e3:4d:a0: 34:fc:e2:ec:be:0f:10:f6:6c:a2:99:20:37:fb:a8:14:56:c1: a8:83:9e:e5:5d:43:c4:d8:db:f0:d0:b3:da:45:a4:a4:98:2c: 85:b9:2c:1e:2e:41:92:21:f5:b8:cf:4f:40:f2:ab:67:99:6c: ee:50:90:41:09:8d:a8:04:29:68:68:8b:fd:b8:e4:de:6c:c3: 9f:66:e0:0e:a2:6e:35:50:6b:f8:1f:11:bb:b5:73:35:d2:ad: 48:8d:c2:49:ab:c3:8e:64:2b:5b:09:6f:67:31:4a:7f:cc:b5: ab:c2:b8:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzM1N0UxMTAvBgNVBAUTKDNGQzE3MEU4REY1QURCRkExQjYzNzBCNzQ1MEYyOEZB RTBCMzVBMTgwHhcNMjUwNjAxMDAzMTMyWhcNMjUwNjA4MDAzMTMyWjAYMRYwFAYD VQQDEw02ODNiOWY2NC04MTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzzPtX8LuOgOITvUNc27UTHyajAR1VEJdhsUjrtLCOvRmIP3NaXd08n1WGA/n IyK1/plMwPMakWbuJtglFMyrZzrrv3lAwclH/NTO/Z72f4u6Cjh8FXB4vnuAEmxq UghrqAdTtk3BrSQeM4L8brBD9JKIQcJQ5xBq0CL0iuq3Jdxduqef/5PsGEYQILW1 3GIxcSVKMxE/40B2caOKori0qvdjZqaGlg7SB/kosdT1s4tMKITQ5cWK9Ph4Bx+5 PMI9G33O1V725GeB1kSdmeSFrfr7bq7UwIU0TSpS6zuetsjQLhRZuvsFcsN5NULk DeNsAjKhAG012AkZQ+EejVRyaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOcgNFNW tjYMGhkxEKuglkTy0jpmMB8GA1UdIwQYMBaAFD/BcOjfWtv6G2Nwt0UPKPrgs1oY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzU3RS82MDJENzZEODVE NzMxMUVDQTMyNDg4NTNDNEY5QUUwMi9QOEZ3Nk45YTJfb2JZM0MzUlE4by11Q3pX aGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A4Rnc2TjlhMl9vYlkzQzNSUThvLXVDeldoZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzU3RS82MDJENzZEODVENzMxMUVDQTMyNDg4NTNDNEY5QUUwMi9QOEZ3Nk45YTJf b2JZM0MzUlE4by11Q3pXaGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAA4Hf+SpOO39xrz0WqQJlTmMY3tlxjXKJ6V1Yr5G/UF0pLkxmeJ/hR y451P7HUsk4gTQFUlKhdUrVxuSR0dcrfYlPwp8N68U/9AXKex07h2JiV+3adpBYw DaWnWsePeIO08L8rnu3mEefp27aWAum3xJB8qQ0yaylSvIXQFu6929nZx2ACzSGS F2D+pqrjTaA0/OLsvg8Q9myimSA3+6gUVsGog57lXUPE2Nvw0LPaRaSkmCyFuSwe LkGSIfW4z09A8qtnmWzuUJBBCY2oBCloaIv9uOTebMOfZuAOom41UGv4HxG7tXM1 0q1IjcJJq8OOZCtbCW9nMUp/zLWrwrh2 -----END CERTIFICATE-----Generated at Mon Jun 2 06:37:12 2025 by rpki-client