$ rpki-client -vvf rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.mft File: 4Kttl3Jl2w1cWNQzoos8wgUaDCk.mft (raw, json) Hash identifier: 8/gJKGi/FB17Br6acJziOPmeNzZWUG5yBEg8CDqR8Ns= Subject key identifier: 7F:75:BC:8D:DE:53:C9:C0:D5:2D:59:7D:15:A9:7D:23:8A:C4:CD:9B Authority key identifier: E0:AB:6D:97:72:65:DB:0D:5C:58:D4:33:A2:8B:3C:C2:05:1A:0C:29 Certificate issuer: /CN=A917A93E/serialNumber=E0AB6D977265DB0D5C58D433A28B3CC2051A0C29 Certificate serial: 69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Kttl3Jl2w1cWNQzoos8wgUaDCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.mft Manifest number: 65 Signing time: Wed 11 Jun 2025 06:30:16 +0000 Manifest this update: Wed 11 Jun 2025 06:30:16 +0000 Manifest next update: Wed 18 Jun 2025 06:30:15 +0000 Files and hashes: 1: 4Kttl3Jl2w1cWNQzoos8wgUaDCk.crl (hash: L0y/+nKCRR8iBQbY0U+HZgSlYbtHLU7k876mVbrXhrY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.crl rsync://rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Kttl3Jl2w1cWNQzoos8wgUaDCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 06:30:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 105 (0x69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A93E, serialNumber=E0AB6D977265DB0D5C58D433A28B3CC2051A0C29 Validity Not Before: Jun 11 06:30:16 2025 GMT Not After : Jun 18 06:30:15 2025 GMT Subject: CN=68492278-d7be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e1:0b:90:8e:fb:40:73:1b:4e:2b:ff:84:84: f6:06:db:fa:86:33:a5:fc:db:20:7b:f4:70:b8:89: 9e:21:cf:81:40:40:4d:51:96:8d:07:15:57:5a:f9: 1f:7f:5f:10:37:01:72:e4:a9:dd:8a:37:38:2a:42: 4a:b5:ab:47:f5:3b:0d:de:92:3e:9c:d4:08:7b:37: 83:ae:aa:a7:b1:d8:c9:92:c1:3e:03:94:a4:75:ed: 09:44:aa:d7:7e:44:e3:d3:ec:4a:36:8a:99:f7:6a: b0:7a:76:a5:59:4b:ef:22:01:e3:ef:3f:19:7b:9b: 70:ac:af:e2:8b:c7:38:9d:c4:65:31:ab:6b:28:2a: 42:19:ed:32:d0:09:fc:86:59:32:26:e2:64:42:f4: ef:49:84:aa:04:fb:bd:73:d6:b5:7e:49:d8:f6:3a: b4:c0:75:86:98:33:4e:f2:3d:28:69:7e:54:41:35: 31:6e:f0:f2:8b:df:84:ba:51:18:0d:9c:cb:c6:3c: 31:14:fa:73:e7:89:df:fe:04:a4:f2:34:ec:f3:84: b6:06:a4:2e:2e:93:f9:46:07:56:85:d4:7c:33:a7: 38:a9:a7:4d:7b:15:45:60:b2:44:4b:0e:fa:fc:2b: 3e:bb:0a:71:a5:02:34:cf:44:3a:93:99:c1:d8:6c: 19:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:75:BC:8D:DE:53:C9:C0:D5:2D:59:7D:15:A9:7D:23:8A:C4:CD:9B X509v3 Authority Key Identifier: keyid:E0:AB:6D:97:72:65:DB:0D:5C:58:D4:33:A2:8B:3C:C2:05:1A:0C:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Kttl3Jl2w1cWNQzoos8wgUaDCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:2b:a7:f3:e6:0a:a0:b0:a9:a1:87:97:a7:5f:6d:52:3b:64: d5:49:24:12:a0:1e:3b:dd:59:a7:cd:83:e4:4f:9f:a4:d6:94: ec:94:a6:fd:b2:bb:0c:57:90:e0:03:07:73:1c:cc:36:85:51: 3a:26:e4:75:2b:96:99:e3:4e:82:6f:6b:16:7a:ff:26:6b:a1: 02:54:27:dd:2c:77:fd:66:40:50:41:4c:d8:e6:9b:b1:b0:8f: 44:7a:c9:eb:eb:37:0e:cf:ca:fd:c9:27:b4:f5:41:16:8a:14: 03:ea:87:3a:cd:b8:75:35:8b:01:d4:12:f4:85:03:14:1f:30: b9:0e:86:64:69:4a:9e:b5:5e:3c:11:9d:0b:55:bc:14:b0:9f: 0d:c1:d6:2d:b7:72:d9:92:56:69:35:96:6a:45:70:25:79:fd: 28:a6:0a:2e:25:6e:f1:af:09:da:6e:41:2f:f2:92:94:55:01: 93:77:75:27:4b:1d:23:e2:e7:ec:7d:e5:80:65:88:0e:75:67: f9:1e:6a:17:17:ac:6c:db:78:0f:c1:7e:f9:da:d5:92:a8:d9: bb:3a:4c:30:0e:2d:d1:4c:d6:e7:32:fa:7f:8a:db:11:f9:2e: e6:64:5a:d3:a6:e2:c6:1a:03:77:d2:03:50:0f:d8:3e:9a:c5: 27:64:e6:c3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QTkzRTExMC8GA1UEBRMoRTBBQjZEOTc3MjY1REIwRDVDNThENDMzQTI4QjNDQzIw NTFBMEMyOTAeFw0yNTA2MTEwNjMwMTZaFw0yNTA2MTgwNjMwMTVaMBgxFjAUBgNV BAMTDTY4NDkyMjc4LWQ3YmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDF4QuQjvtAcxtOK/+EhPYG2/qGM6X82yB79HC4iZ4hz4FAQE1Rlo0HFVda+R9/ XxA3AXLkqd2KNzgqQkq1q0f1Ow3ekj6c1Ah7N4Ouqqex2MmSwT4DlKR17QlEqtd+ ROPT7Eo2ipn3arB6dqVZS+8iAePvPxl7m3Csr+KLxzidxGUxq2soKkIZ7TLQCfyG WTIm4mRC9O9JhKoE+71z1rV+Sdj2OrTAdYaYM07yPShpflRBNTFu8PKL34S6URgN nMvGPDEU+nPnid/+BKTyNOzzhLYGpC4uk/lGB1aF1Hwzpzipp017FUVgskRLDvr8 Kz67CnGlAjTPRDqTmcHYbBlTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUf3W8jd5T ycDVLVl9Fal9I4rEzZswHwYDVR0jBBgwFoAU4Kttl3Jl2w1cWNQzoos8wgUaDCkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdBOTNFLzQ3MUIzNzI4Qjc5 QTExRUY4RUM0OTk1MUM0RjlBRTAyLzRLdHRsM0psMncxY1dOUXpvb3M4d2dVYURD ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNEt0dGwzSmwydzFjV05Rem9vczh3Z1VhRENrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdB OTNFLzQ3MUIzNzI4Qjc5QTExRUY4RUM0OTk1MUM0RjlBRTAyLzRLdHRsM0psMncx Y1dOUXpvb3M4d2dVYURDay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADkrp/PmCqCwqaGHl6dfbVI7ZNVJJBKgHjvdWafNg+RPn6TWlOyUpv2y uwxXkOADB3MczDaFUTom5HUrlpnjToJvaxZ6/yZroQJUJ90sd/1mQFBBTNjmm7Gw j0R6yevrNw7Pyv3JJ7T1QRaKFAPqhzrNuHU1iwHUEvSFAxQfMLkOhmRpSp61XjwR nQtVvBSwnw3B1i23ctmSVmk1lmpFcCV5/SimCi4lbvGvCdpuQS/ykpRVAZN3dSdL HSPi5+x95YBliA51Z/keahcXrGzbeA/Bfvna1ZKo2bs6TDAOLdFM1ucy+n+K2xH5 LuZkWtOm4sYaA3fSA1AP2D6axSdk5sM= -----END CERTIFICATE-----Generated at Thu Jun 12 16:06:45 2025 by rpki-client