$ rpki-client -vvf rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.mft File: DEft4wSONabm6MsM5E_IQ3Jx6z0.mft (raw, json) Hash identifier: JfsVWVvnvqu7MA7JV4q+O+ELlrGF7QbKxKkE0PtA8kg= Subject key identifier: 82:84:42:65:79:96:EA:82:8F:40:E6:2A:02:FA:BD:DD:9B:33:B2:3A Authority key identifier: 0C:47:ED:E3:04:8E:35:A6:E6:E8:CB:0C:E4:4F:C8:43:72:71:EB:3D Certificate issuer: /CN=A917B51E/serialNumber=0C47EDE3048E35A6E6E8CB0CE44FC8437271EB3D Certificate serial: 0797 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEft4wSONabm6MsM5E_IQ3Jx6z0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.mft Manifest number: 078E Signing time: Fri 06 Jun 2025 21:29:00 +0000 Manifest this update: Fri 06 Jun 2025 21:28:59 +0000 Manifest next update: Fri 13 Jun 2025 21:28:59 +0000 Files and hashes: 1: DEft4wSONabm6MsM5E_IQ3Jx6z0.crl (hash: qjuMllXm9nm2qLm6HFo6KJYJruZwW5Z+OKz6v4EyoRk=) 2: EFA17F260FEA11EB8FA8CB2AC4F9AE02.roa (hash: jLCgtQuVltt3/VZJ3eAvwdfbtQsE4HY8zDX+9B0R7hY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.crl rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEft4wSONabm6MsM5E_IQ3Jx6z0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Jun 2025 21:28:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1943 (0x797) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B51E, serialNumber=0C47EDE3048E35A6E6E8CB0CE44FC8437271EB3D Validity Not Before: Jun 6 21:28:59 2025 GMT Not After : Jun 13 21:28:59 2025 GMT Subject: CN=68435d9c-05bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c4:7e:61:69:d8:52:4e:1e:4f:13:7a:68:af: 02:16:69:f8:e7:76:38:3d:71:cb:ec:48:e6:91:3f: 21:4a:33:9c:85:de:40:c4:75:70:5b:30:87:05:a6: 0a:55:a2:e0:83:ca:2d:26:13:46:2b:47:96:a3:bd: 6e:af:63:4e:27:ed:51:6c:83:a7:de:a4:97:8e:0b: 3e:7d:fc:d8:bd:be:5c:2b:82:e0:1e:94:aa:b9:dc: 95:56:59:17:df:e2:1f:28:1b:8b:24:60:59:e7:20: 46:9f:d0:b5:42:7f:02:73:f1:e4:01:62:e2:34:2d: 29:52:3d:07:48:e7:0a:dc:95:4f:9e:e1:26:cd:ce: 4d:d6:5c:7b:b5:07:84:9a:c1:13:dc:68:ff:d0:51: 26:c2:a8:ee:00:da:2a:e5:8d:b6:f5:e9:50:22:11: 49:75:f8:54:7a:91:26:6b:ed:32:25:06:92:8f:46: 6d:0b:4e:38:60:c1:23:92:ae:f1:5a:48:31:2d:b6: 56:ba:09:cf:19:91:a0:78:e4:35:66:e9:c9:f4:51: cd:d1:88:5b:77:ed:35:3b:c5:a7:78:11:44:08:5d: f3:c2:d4:8a:df:88:a5:b3:b3:42:d4:84:20:02:55: 4a:21:c3:36:eb:e7:e3:26:9b:5c:56:0b:2c:f7:85: 96:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:84:42:65:79:96:EA:82:8F:40:E6:2A:02:FA:BD:DD:9B:33:B2:3A X509v3 Authority Key Identifier: keyid:0C:47:ED:E3:04:8E:35:A6:E6:E8:CB:0C:E4:4F:C8:43:72:71:EB:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEft4wSONabm6MsM5E_IQ3Jx6z0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:73:38:3f:6a:df:a7:f7:0b:15:68:f6:a9:c1:60:a7:21:7c: 43:d6:c5:14:25:85:be:4f:05:81:2a:82:15:bc:5c:39:07:4b: d5:b3:4a:3f:97:71:01:59:33:24:5c:fa:69:ae:0a:80:ee:3b: 1b:62:a5:ea:32:ae:f4:d6:6d:4c:e9:91:9f:98:b3:bd:20:fd: a7:52:65:1a:fb:e3:fd:e1:6e:c7:1e:01:4d:bf:66:5b:be:6c: 3e:c5:0c:22:5d:a7:c1:dc:2a:c2:cf:f3:33:18:8d:07:3f:25: 32:06:ae:95:fa:75:17:4a:97:91:1f:af:e7:90:8f:3c:9b:c8: 5a:7b:50:83:41:58:9e:7b:95:f4:01:0e:d2:2c:01:64:49:e8: a1:83:fc:8e:bf:f0:fe:50:4d:dd:0a:52:dc:83:34:0f:6a:26: 5d:9d:b4:a7:f5:bd:df:10:c7:46:1a:d2:c7:b4:6f:4c:cf:84: 58:74:10:49:8a:0a:4b:47:2b:61:65:82:e5:bf:7d:33:fe:8f: d9:78:ec:7f:f0:c2:ef:31:05:97:90:4a:7c:d0:d5:a9:de:d1: e3:1e:44:65:c6:ee:33:40:29:e3:3f:42:10:b2:d0:e8:8b:d5: aa:24:eb:bd:42:b5:23:27:80:a9:6c:17:3d:34:d7:5c:07:6a: 2c:d5:25:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I1MUUxMTAvBgNVBAUTKDBDNDdFREUzMDQ4RTM1QTZFNkU4Q0IwQ0U0NEZDODQz NzI3MUVCM0QwHhcNMjUwNjA2MjEyODU5WhcNMjUwNjEzMjEyODU5WjAYMRYwFAYD VQQDEw02ODQzNWQ5Yy0wNWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv8R+YWnYUk4eTxN6aK8CFmn453Y4PXHL7EjmkT8hSjOchd5AxHVwWzCHBaYK VaLgg8otJhNGK0eWo71ur2NOJ+1RbIOn3qSXjgs+ffzYvb5cK4LgHpSqudyVVlkX 3+IfKBuLJGBZ5yBGn9C1Qn8Cc/HkAWLiNC0pUj0HSOcK3JVPnuEmzc5N1lx7tQeE msET3Gj/0FEmwqjuANoq5Y229elQIhFJdfhUepEma+0yJQaSj0ZtC044YMEjkq7x WkgxLbZWugnPGZGgeOQ1ZunJ9FHN0Yhbd+01O8WneBFECF3zwtSK34ils7NC1IQg AlVKIcM26+fjJptcVgss94WWlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIKEQmV5 luqCj0DmKgL6vd2bM7I6MB8GA1UdIwQYMBaAFAxH7eMEjjWm5ujLDORPyENyces9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjUxRS81OUNERDU0QTBG RTkxMUVCOUYzMEM3MjVDNEY5QUUwMi9ERWZ0NHdTT05hYm02TXNNNUVfSVEzSng2 ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RFZnQ0d1NPTmFibTZNc001RV9JUTNKeDZ6MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjUxRS81OUNERDU0QTBGRTkxMUVCOUYzMEM3MjVDNEY5QUUwMi9ERWZ0NHdTT05h Ym02TXNNNUVfSVEzSng2ejAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtczg/at+n9wsVaPapwWCnIXxD1sUUJYW+TwWBKoIVvFw5B0vVs0o/ l3EBWTMkXPpprgqA7jsbYqXqMq701m1M6ZGfmLO9IP2nUmUa++P94W7HHgFNv2Zb vmw+xQwiXafB3CrCz/MzGI0HPyUyBq6V+nUXSpeRH6/nkI88m8hae1CDQViee5X0 AQ7SLAFkSeihg/yOv/D+UE3dClLcgzQPaiZdnbSn9b3fEMdGGtLHtG9Mz4RYdBBJ igpLRythZYLlv30z/o/ZeOx/8MLvMQWXkEp80NWp3tHjHkRlxu4zQCnjP0IQstDo i9WqJOu9QrUjJ4CpbBc9NNdcB2os1SXu -----END CERTIFICATE-----Generated at Sat Jun 7 15:30:28 2025 by rpki-client