$ rpki-client -vvf rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/iTEhgF-UFH033MbXS2N4Rvcjl8U.mft File: iTEhgF-UFH033MbXS2N4Rvcjl8U.mft (raw, json) Hash identifier: fs433lfLdERvGao461xCoJTscZ/FfCLqN/GuPTKa5bE= Subject key identifier: 58:0B:E2:FC:87:3C:D7:86:B4:B8:2F:22:54:ED:B4:76:62:6B:CB:54 Authority key identifier: 89:31:21:80:5F:94:14:7D:37:DC:C6:D7:4B:63:78:46:F7:23:97:C5 Certificate issuer: /CN=A917E00F/serialNumber=893121805F94147D37DCC6D74B637846F72397C5 Certificate serial: 0556 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iTEhgF-UFH033MbXS2N4Rvcjl8U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/iTEhgF-UFH033MbXS2N4Rvcjl8U.mft Manifest number: 0658 Signing time: Wed 04 Jun 2025 23:15:27 +0000 Manifest this update: Wed 04 Jun 2025 23:15:27 +0000 Manifest next update: Wed 11 Jun 2025 23:15:27 +0000 Files and hashes: 1: iTEhgF-UFH033MbXS2N4Rvcjl8U.crl (hash: knj4901mTM26jSoazvHNnjnYwQueDk1U9mAZu30DFAo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/iTEhgF-UFH033MbXS2N4Rvcjl8U.crl rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/iTEhgF-UFH033MbXS2N4Rvcjl8U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iTEhgF-UFH033MbXS2N4Rvcjl8U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 23:15:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1366 (0x556) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E00F, serialNumber=893121805F94147D37DCC6D74B637846F72397C5 Validity Not Before: Jun 4 23:15:27 2025 GMT Not After : Jun 11 23:15:27 2025 GMT Subject: CN=6840d38f-c52d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:09:d5:d4:1c:fb:c2:6e:38:91:3b:f8:a4:16: a0:af:a4:2d:1f:82:c8:65:f3:79:7f:85:3f:3f:1a: 5a:63:86:3b:4c:93:35:1f:d8:e5:5a:b9:33:7d:c1: b9:a5:9e:68:81:a8:45:c6:65:f8:69:f1:1c:de:d8: 91:e7:7f:96:d8:04:c8:c5:6b:42:2f:bd:f0:44:3d: bd:0d:07:b3:f4:6e:64:c1:ad:fb:a7:00:fd:fd:ed: d0:83:9d:c9:61:10:24:9f:32:a0:d8:00:c7:eb:8a: 6f:e3:70:91:a4:56:dd:ac:ad:02:91:11:c6:d0:dc: 05:f9:d5:59:1d:fe:60:18:15:d5:b7:c3:6e:eb:bf: 44:7b:29:5b:c1:7c:89:3e:4b:ec:71:e6:e6:d3:72: 1a:5e:cf:da:5f:9a:7e:c1:cb:23:7b:f0:ed:6e:f7: c4:c5:d1:47:6f:cf:67:28:ce:37:b4:c2:a6:d1:63: 44:79:5c:8f:c9:e8:c2:f0:b1:87:80:f1:c8:69:f0: 1e:77:3a:35:08:ac:41:84:15:dc:f0:01:64:12:11: c9:c8:8a:0c:d7:b4:b8:f6:29:05:46:e8:16:4b:fb: 10:89:52:c4:e0:49:a8:5f:12:cc:fe:38:a4:16:e9: 81:50:b3:3a:f7:28:43:6b:b0:ef:bf:f5:23:14:a9: c7:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:0B:E2:FC:87:3C:D7:86:B4:B8:2F:22:54:ED:B4:76:62:6B:CB:54 X509v3 Authority Key Identifier: keyid:89:31:21:80:5F:94:14:7D:37:DC:C6:D7:4B:63:78:46:F7:23:97:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/iTEhgF-UFH033MbXS2N4Rvcjl8U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iTEhgF-UFH033MbXS2N4Rvcjl8U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/iTEhgF-UFH033MbXS2N4Rvcjl8U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:af:07:c6:79:32:e2:00:48:16:5f:98:fa:a5:f3:b4:f5:82: 00:83:3b:b8:e9:94:bb:8f:f6:cd:66:39:e2:d8:c2:8f:0e:24: a7:2a:3e:bd:29:0d:52:e1:8a:b5:fd:9f:01:ce:af:d8:79:fd: 8e:7d:31:e1:8a:1d:8d:4e:32:9f:ef:0d:de:75:88:77:5d:9d: 48:03:a2:9f:ec:07:62:8e:22:4b:81:23:ed:33:42:dc:db:ff: b3:a8:2e:87:95:7d:da:25:49:24:b0:3d:c2:02:e6:cb:87:71: f7:7a:bd:d6:d5:b5:f9:96:29:99:42:c2:7f:f2:2a:d4:e8:39: be:9f:f4:aa:4f:3c:f4:47:df:24:9c:1b:56:17:83:59:97:d5: ea:7f:bc:51:84:c2:5f:22:e8:30:22:cb:06:25:b8:00:f8:65: 18:be:67:31:ac:b7:39:af:32:38:64:a3:96:0b:b4:e4:cb:16: 45:de:d1:59:49:b2:ad:ae:77:e8:49:b8:45:fe:52:a0:ed:2c: 9c:5b:a0:75:9d:14:a5:ff:2c:8a:ea:57:68:50:3d:4b:8e:03: 73:8d:e3:b1:2f:81:9f:94:16:33:a3:80:a9:e5:4a:ca:5b:99: 50:3c:77:4c:0c:fe:7f:e2:29:72:fd:be:14:f6:da:bc:4a:e6: b7:bc:fc:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwMEYxMTAvBgNVBAUTKDg5MzEyMTgwNUY5NDE0N0QzN0RDQzZENzRCNjM3ODQ2 RjcyMzk3QzUwHhcNMjUwNjA0MjMxNTI3WhcNMjUwNjExMjMxNTI3WjAYMRYwFAYD VQQDEw02ODQwZDM4Zi1jNTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAywnV1Bz7wm44kTv4pBagr6QtH4LIZfN5f4U/PxpaY4Y7TJM1H9jlWrkzfcG5 pZ5ogahFxmX4afEc3tiR53+W2ATIxWtCL73wRD29DQez9G5kwa37pwD9/e3Qg53J YRAknzKg2ADH64pv43CRpFbdrK0CkRHG0NwF+dVZHf5gGBXVt8Nu679EeylbwXyJ Pkvscebm03IaXs/aX5p+wcsje/DtbvfExdFHb89nKM43tMKm0WNEeVyPyejC8LGH gPHIafAedzo1CKxBhBXc8AFkEhHJyIoM17S49ikFRugWS/sQiVLE4EmoXxLM/jik FumBULM69yhDa7Dvv/UjFKnHgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFgL4vyH PNeGtLgvIlTttHZia8tUMB8GA1UdIwQYMBaAFIkxIYBflBR9N9zG10tjeEb3I5fF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTAwRi9FREU0OEI5Q0VF MjkxMUVCODA4NEI2MzhDNEY5QUUwMi9pVEVoZ0YtVUZIMDMzTWJYUzJONFJ2Y2ps OFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lURWhnRi1VRkgwMzNNYlhTMk40UnZjamw4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTAwRi9FREU0OEI5Q0VFMjkxMUVCODA4NEI2MzhDNEY5QUUwMi9pVEVoZ0YtVUZI MDMzTWJYUzJONFJ2Y2psOFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSrwfGeTLiAEgWX5j6pfO09YIAgzu46ZS7j/bNZjni2MKPDiSnKj69 KQ1S4Yq1/Z8Bzq/Yef2OfTHhih2NTjKf7w3edYh3XZ1IA6Kf7AdijiJLgSPtM0Lc 2/+zqC6HlX3aJUkksD3CAubLh3H3er3W1bX5limZQsJ/8irU6Dm+n/SqTzz0R98k nBtWF4NZl9Xqf7xRhMJfIugwIssGJbgA+GUYvmcxrLc5rzI4ZKOWC7TkyxZF3tFZ SbKtrnfoSbhF/lKg7SycW6B1nRSl/yyK6ldoUD1LjgNzjeOxL4GflBYzo4Cp5UrK W5lQPHdMDP5/4ily/b4U9tq8Sua3vPw1 -----END CERTIFICATE-----Generated at Fri Jun 6 17:03:19 2025 by rpki-client