$ rpki-client -vvf rpki.apnic.net/member_repository/A918C64D/DAD4586AEDC711EABBA13746C4F9AE02/C-qOMYe9SY0l8kldarDunkU0p_E.mft File: C-qOMYe9SY0l8kldarDunkU0p_E.mft (raw, json) Hash identifier: 7bM0TUdG415azKSmYKM+aDhcZ5aa2d6RPDa0cGg+M2A= Subject key identifier: AA:65:4D:D9:1D:F4:F6:6A:24:DC:D1:A0:CC:E4:F1:55:E3:02:64:61 Authority key identifier: 0B:EA:8E:31:87:BD:49:8D:25:F2:49:5D:6A:B0:EE:9E:45:34:A7:F1 Certificate issuer: /CN=A918C64D/serialNumber=0BEA8E3187BD498D25F2495D6AB0EE9E4534A7F1 Certificate serial: 07E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C-qOMYe9SY0l8kldarDunkU0p_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C64D/DAD4586AEDC711EABBA13746C4F9AE02/C-qOMYe9SY0l8kldarDunkU0p_E.mft Manifest number: 07DE Signing time: Fri 06 Jun 2025 21:03:28 +0000 Manifest this update: Fri 06 Jun 2025 21:03:27 +0000 Manifest next update: Fri 13 Jun 2025 21:03:27 +0000 Files and hashes: 1: C-qOMYe9SY0l8kldarDunkU0p_E.crl (hash: uTCJFHnAQuWniGniorZiE5jGXjku4wLTsJAKwWE5n+8=) 2: B7362AE0EDC811EAAFF8BD46C4F9AE02.roa (hash: NrRaGTGhuuOTZ4sgZcXvRyo7s7nlCIeG2H0kiEu0fzA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C64D/DAD4586AEDC711EABBA13746C4F9AE02/C-qOMYe9SY0l8kldarDunkU0p_E.crl rsync://rpki.apnic.net/member_repository/A918C64D/DAD4586AEDC711EABBA13746C4F9AE02/C-qOMYe9SY0l8kldarDunkU0p_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C-qOMYe9SY0l8kldarDunkU0p_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Jun 2025 21:03:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2019 (0x7e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C64D, serialNumber=0BEA8E3187BD498D25F2495D6AB0EE9E4534A7F1 Validity Not Before: Jun 6 21:03:27 2025 GMT Not After : Jun 13 21:03:27 2025 GMT Subject: CN=684357a0-223a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:5f:fe:3f:96:05:81:0a:91:31:fa:b4:73:5e: 2c:fa:42:03:cc:da:59:9e:b3:c7:0a:fb:ba:c5:d4: 5b:54:42:7a:96:9d:63:3c:f8:d9:81:ba:fe:e4:a8: 8d:84:f0:9c:91:ca:7e:2e:8f:c5:54:e6:fb:c7:cb: b5:15:e9:01:2e:e6:3f:8d:d7:c2:a1:e5:1f:95:af: 17:de:13:1f:8f:84:b0:07:bd:4c:4a:72:6a:76:92: a5:3a:a1:aa:bd:31:b0:0c:4e:94:55:15:3f:53:81: cb:79:4b:95:75:4e:b1:c8:ac:76:81:dc:b1:e8:e2: 01:27:c6:a4:98:df:92:91:d5:60:3c:a7:76:fd:4d: e3:86:89:20:28:63:90:17:66:b4:a2:f2:5b:f2:db: 5c:9f:79:3d:ce:61:34:54:ad:4b:b2:8a:bf:40:c5: 96:a4:7a:94:0b:5c:b6:c4:3f:c1:52:b1:8b:b1:ee: c1:99:ba:81:fc:7c:0b:25:f8:ed:e7:bf:ae:fa:cb: 5c:1c:30:b5:f4:6d:25:41:89:8c:93:84:92:bb:c0: d6:fc:1f:78:db:34:d6:93:0f:f4:a5:7f:e0:29:52: 73:ad:de:f8:69:d0:21:f3:e3:d5:ca:5f:39:91:c4: d6:43:67:64:1e:24:27:7c:c0:e1:22:a9:0d:f7:4d: a5:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:65:4D:D9:1D:F4:F6:6A:24:DC:D1:A0:CC:E4:F1:55:E3:02:64:61 X509v3 Authority Key Identifier: keyid:0B:EA:8E:31:87:BD:49:8D:25:F2:49:5D:6A:B0:EE:9E:45:34:A7:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C64D/DAD4586AEDC711EABBA13746C4F9AE02/C-qOMYe9SY0l8kldarDunkU0p_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C-qOMYe9SY0l8kldarDunkU0p_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C64D/DAD4586AEDC711EABBA13746C4F9AE02/C-qOMYe9SY0l8kldarDunkU0p_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:73:d7:8a:d4:82:03:33:08:df:a1:e6:50:26:b0:23:2b:7b: 24:45:25:75:02:3a:a0:fe:1c:47:c9:1d:f7:1d:1d:13:b7:10: 36:5c:a7:20:ac:01:b5:24:0e:cb:2e:f9:23:ac:78:36:f6:be: b1:3e:76:3f:f2:e6:b8:40:20:60:27:ed:0b:ef:6d:55:ea:32: 6f:70:ef:10:66:4a:63:38:b0:8b:e9:5e:6b:16:2e:24:23:62: 3b:fc:3b:0c:4a:3c:03:0b:61:93:8d:77:25:51:72:cc:99:04: ae:12:ba:0b:43:de:0f:5d:24:7d:ef:81:5d:d0:f5:e8:ab:b5: 49:7f:c0:40:e7:fe:b0:5b:a2:07:6d:2b:4b:ea:1b:4c:8e:96: f8:95:cb:1e:6f:dd:20:58:da:b1:67:cb:f0:65:97:48:ad:89: b7:21:39:55:f6:45:37:99:ad:9d:57:42:55:20:ee:08:16:79: d2:19:ef:e5:10:5e:60:92:02:ba:86:71:f7:ce:f2:eb:b1:22: 45:4f:aa:9b:b5:86:ae:ff:91:d4:38:89:db:be:99:cc:56:0f: 6f:2d:77:2c:1f:f2:28:c0:09:e4:7c:0e:64:c4:8a:7b:1c:71: 8b:04:68:08:1a:43:b3:ca:68:c9:f2:56:52:ab:9b:5e:1c:14: 2a:2c:46:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM2NEQxMTAvBgNVBAUTKDBCRUE4RTMxODdCRDQ5OEQyNUYyNDk1RDZBQjBFRTlF NDUzNEE3RjEwHhcNMjUwNjA2MjEwMzI3WhcNMjUwNjEzMjEwMzI3WjAYMRYwFAYD VQQDEw02ODQzNTdhMC0yMjNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3F/+P5YFgQqRMfq0c14s+kIDzNpZnrPHCvu6xdRbVEJ6lp1jPPjZgbr+5KiN hPCckcp+Lo/FVOb7x8u1FekBLuY/jdfCoeUfla8X3hMfj4SwB71MSnJqdpKlOqGq vTGwDE6UVRU/U4HLeUuVdU6xyKx2gdyx6OIBJ8akmN+SkdVgPKd2/U3jhokgKGOQ F2a0ovJb8ttcn3k9zmE0VK1Lsoq/QMWWpHqUC1y2xD/BUrGLse7BmbqB/HwLJfjt 57+u+stcHDC19G0lQYmMk4SSu8DW/B942zTWkw/0pX/gKVJzrd74adAh8+PVyl85 kcTWQ2dkHiQnfMDhIqkN902lKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKplTdkd 9PZqJNzRoMzk8VXjAmRhMB8GA1UdIwQYMBaAFAvqjjGHvUmNJfJJXWqw7p5FNKfx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzY0RC9EQUQ0NTg2QUVE QzcxMUVBQkJBMTM3NDZDNEY5QUUwMi9DLXFPTVllOVNZMGw4a2xkYXJEdW5rVTBw X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0MtcU9NWWU5U1kwbDhrbGRhckR1bmtVMHBfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzY0RC9EQUQ0NTg2QUVEQzcxMUVBQkJBMTM3NDZDNEY5QUUwMi9DLXFPTVllOVNZ MGw4a2xkYXJEdW5rVTBwX0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKc9eK1IIDMwjfoeZQJrAjK3skRSV1Ajqg/hxHyR33HR0TtxA2XKcg rAG1JA7LLvkjrHg29r6xPnY/8ua4QCBgJ+0L721V6jJvcO8QZkpjOLCL6V5rFi4k I2I7/DsMSjwDC2GTjXclUXLMmQSuEroLQ94PXSR974Fd0PXoq7VJf8BA5/6wW6IH bStL6htMjpb4lcseb90gWNqxZ8vwZZdIrYm3ITlV9kU3ma2dV0JVIO4IFnnSGe/l EF5gkgK6hnH3zvLrsSJFT6qbtYau/5HUOInbvpnMVg9vLXcsH/IowAnkfA5kxIp7 HHGLBGgIGkOzymjJ8lZSq5teHBQqLEYN -----END CERTIFICATE-----Generated at Sat Jun 7 12:48:03 2025 by rpki-client