$ rpki-client -vvf rpki.apnic.net/member_repository/A919B6FC/8892CC4A983911EBA1409960C4F9AE02/povAkQ-DHeyBilCjIUX3Q1XOY8A.mft File: povAkQ-DHeyBilCjIUX3Q1XOY8A.mft (raw, json) Hash identifier: RoGmabIwcPgLCXfLOuDvj4KjskVo3SoCM3253PPsWUg= Subject key identifier: F3:1B:96:82:74:94:7C:AF:39:C0:6D:87:9C:75:FB:2B:67:6C:CD:16 Authority key identifier: A6:8B:C0:91:0F:83:1D:EC:81:8A:50:A3:21:45:F7:43:55:CE:63:C0 Certificate issuer: /CN=A919B6FC/serialNumber=A68BC0910F831DEC818A50A32145F74355CE63C0 Certificate serial: 0631 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/povAkQ-DHeyBilCjIUX3Q1XOY8A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B6FC/8892CC4A983911EBA1409960C4F9AE02/povAkQ-DHeyBilCjIUX3Q1XOY8A.mft Manifest number: 062C Signing time: Wed 04 Jun 2025 22:35:21 +0000 Manifest this update: Wed 04 Jun 2025 22:35:20 +0000 Manifest next update: Wed 11 Jun 2025 22:35:20 +0000 Files and hashes: 1: povAkQ-DHeyBilCjIUX3Q1XOY8A.crl (hash: 9ctbWlCox36krP/LLYCXwi0MI3n2S0ASwwTb6QDw35o=) 2: E6F39362983B11EBBDA9EC64C4F9AE02.roa (hash: YXHB6nmYEYltiZ92tG4myKnTA6m8YtAyD0mK1r1cu3w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B6FC/8892CC4A983911EBA1409960C4F9AE02/povAkQ-DHeyBilCjIUX3Q1XOY8A.crl rsync://rpki.apnic.net/member_repository/A919B6FC/8892CC4A983911EBA1409960C4F9AE02/povAkQ-DHeyBilCjIUX3Q1XOY8A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/povAkQ-DHeyBilCjIUX3Q1XOY8A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 22:35:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1585 (0x631) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B6FC, serialNumber=A68BC0910F831DEC818A50A32145F74355CE63C0 Validity Not Before: Jun 4 22:35:20 2025 GMT Not After : Jun 11 22:35:20 2025 GMT Subject: CN=6840ca28-303a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:68:28:12:c3:37:74:c5:b8:99:8d:c4:3e:c0: 8a:f9:ca:5a:5b:2f:9b:57:ef:8a:11:8e:4b:b9:00: 2b:67:2d:8a:37:82:5c:67:28:6c:50:ae:48:6f:01: aa:3b:b9:44:66:4b:74:11:4a:be:ea:bc:94:5b:f1: 04:e0:3a:c0:e0:08:ae:a3:7f:cf:84:57:d0:15:70: 48:0b:40:07:63:17:59:a0:ff:1c:dd:0a:09:8b:4a: da:b1:ae:c3:00:96:25:6e:9c:a1:19:23:9c:7c:12: e6:9d:e0:10:23:07:c3:9e:2d:2d:85:fe:d1:b7:83: e0:72:94:a7:b4:ee:61:da:8b:94:68:58:49:ae:06: 45:17:dd:a6:07:cb:d6:52:e7:fa:bf:fc:2d:76:00: a0:21:a6:62:d3:3d:dd:8a:d9:b9:d9:b6:91:4b:6b: 6d:b5:44:3c:7e:13:e5:a9:a6:6e:e2:e2:e2:0c:27: 69:19:8f:03:46:47:5f:f3:43:fb:ee:3d:7c:1c:de: 7c:d8:73:b3:b7:00:b3:cd:f9:73:b9:8c:e9:62:71: 11:4a:ca:6d:be:ef:ce:9a:25:24:a5:c3:d7:04:a4: a7:d8:2a:dd:bb:1d:46:3c:00:b6:41:45:2e:32:5e: 3d:fd:72:fc:5d:1f:31:ca:e0:f8:8e:9b:a8:2a:47: 36:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:1B:96:82:74:94:7C:AF:39:C0:6D:87:9C:75:FB:2B:67:6C:CD:16 X509v3 Authority Key Identifier: keyid:A6:8B:C0:91:0F:83:1D:EC:81:8A:50:A3:21:45:F7:43:55:CE:63:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B6FC/8892CC4A983911EBA1409960C4F9AE02/povAkQ-DHeyBilCjIUX3Q1XOY8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/povAkQ-DHeyBilCjIUX3Q1XOY8A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B6FC/8892CC4A983911EBA1409960C4F9AE02/povAkQ-DHeyBilCjIUX3Q1XOY8A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d2:d7:69:aa:47:ba:55:56:c0:50:ae:97:02:da:9b:fa:16:59: bb:71:4c:b9:fc:35:62:e8:78:60:45:1b:31:8a:47:05:50:49: b6:0e:8a:4e:0d:86:65:01:e9:9a:72:b6:ca:e1:84:58:c3:dc: e3:5c:9e:ea:89:f1:a0:d1:f3:74:6e:60:e3:fe:39:74:b6:f0: 5e:ff:14:c6:14:90:06:23:d9:ed:fb:67:bf:b9:3a:6b:14:4c: 96:9a:e1:fe:36:11:06:c8:dc:a3:0d:1f:a2:a7:f8:fd:9c:7e: 87:f2:93:f8:91:af:a8:fc:da:33:1a:ef:55:1e:39:69:13:f2: 0c:b8:16:7b:b5:41:6f:4d:d1:08:52:de:08:55:a5:1c:7a:eb: 4f:ff:8f:2b:a2:50:80:44:93:61:33:d4:fe:af:3b:36:8f:43: da:6f:82:5b:dc:72:54:c9:93:81:0a:99:17:ca:57:eb:3a:cb: 70:05:59:31:43:a6:5a:27:b0:13:8f:c4:60:a1:3f:5c:9b:e1: d9:cf:70:da:98:4b:45:d8:2a:9d:fe:59:a0:ed:4e:a4:2f:c2: 2b:94:6b:bc:01:55:6b:51:2a:e1:69:22:9f:ad:35:de:dd:0e: 18:5f:73:43:17:43:94:b3:8e:82:c2:39:d8:ca:f6:98:fd:eb: 17:e6:5f:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUI2RkMxMTAvBgNVBAUTKEE2OEJDMDkxMEY4MzFERUM4MThBNTBBMzIxNDVGNzQz NTVDRTYzQzAwHhcNMjUwNjA0MjIzNTIwWhcNMjUwNjExMjIzNTIwWjAYMRYwFAYD VQQDEw02ODQwY2EyOC0zMDNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwGgoEsM3dMW4mY3EPsCK+cpaWy+bV++KEY5LuQArZy2KN4JcZyhsUK5IbwGq O7lEZkt0EUq+6ryUW/EE4DrA4Aiuo3/PhFfQFXBIC0AHYxdZoP8c3QoJi0rasa7D AJYlbpyhGSOcfBLmneAQIwfDni0thf7Rt4PgcpSntO5h2ouUaFhJrgZFF92mB8vW Uuf6v/wtdgCgIaZi0z3ditm52baRS2tttUQ8fhPlqaZu4uLiDCdpGY8DRkdf80P7 7j18HN582HOztwCzzflzuYzpYnERSsptvu/OmiUkpcPXBKSn2Crdux1GPAC2QUUu Ml49/XL8XR8xyuD4jpuoKkc2nwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPMbloJ0 lHyvOcBth5x1+ytnbM0WMB8GA1UdIwQYMBaAFKaLwJEPgx3sgYpQoyFF90NVzmPA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjZGQy84ODkyQ0M0QTk4 MzkxMUVCQTE0MDk5NjBDNEY5QUUwMi9wb3ZBa1EtREhleUJpbENqSVVYM1ExWE9Z OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BvdkFrUS1ESGV5QmlsQ2pJVVgzUTFYT1k4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjZGQy84ODkyQ0M0QTk4MzkxMUVCQTE0MDk5NjBDNEY5QUUwMi9wb3ZBa1EtREhl eUJpbENqSVVYM1ExWE9ZOEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDS12mqR7pVVsBQrpcC2pv6Flm7cUy5/DVi6HhgRRsxikcFUEm2DopO DYZlAemacrbK4YRYw9zjXJ7qifGg0fN0bmDj/jl0tvBe/xTGFJAGI9nt+2e/uTpr FEyWmuH+NhEGyNyjDR+ip/j9nH6H8pP4ka+o/NozGu9VHjlpE/IMuBZ7tUFvTdEI Ut4IVaUceutP/48rolCARJNhM9T+rzs2j0Pab4Jb3HJUyZOBCpkXylfrOstwBVkx Q6ZaJ7ATj8RgoT9cm+HZz3DamEtF2Cqd/lmg7U6kL8IrlGu8AVVrUSrhaSKfrTXe 3Q4YX3NDF0OUs46CwjnYyvaY/esX5l9h -----END CERTIFICATE-----Generated at Thu Jun 5 19:14:22 2025 by rpki-client