$ rpki-client -vvf rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft File: CC8e6S_qY3P9odWuxG4vLYrorIc.mft (raw, json) Hash identifier: /mW32usee3P/a2l5KAQ9NjmOzHz94ys3uXLxznH5ckM= Subject key identifier: C1:52:73:50:98:37:CE:2E:3F:B3:54:FB:63:A2:F6:69:F2:00:D8:6C Authority key identifier: 08:2F:1E:E9:2F:EA:63:73:FD:A1:D5:AE:C4:6E:2F:2D:8A:E8:AC:87 Certificate issuer: /CN=A919F0DA/serialNumber=082F1EE92FEA6373FDA1D5AEC46E2F2D8AE8AC87 Certificate serial: 07E2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CC8e6S_qY3P9odWuxG4vLYrorIc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft Manifest number: 5FFE Signing time: Mon 02 Jun 2025 14:15:21 +0000 Manifest this update: Mon 02 Jun 2025 14:15:21 +0000 Manifest next update: Mon 09 Jun 2025 14:15:21 +0000 Files and hashes: 1: CC8e6S_qY3P9odWuxG4vLYrorIc.crl (hash: LBP3rZGuIJ/xfKf5i9IKN4QHE8IK5lbGam2WVw4kVxI=) 2: 8272E36003BD11EBB416B77DC4F9AE02.roa (hash: FqFiDIcegnSEYf0rjDFvLA1E5hLrfJwjUSudPY/6PhE=) 3: D64176D81B9911ECAB0E1678C4F9AE02.roa (hash: SCnihDYbmc4GiaIEvX2j7M8vuw8f64Zz9GgFXob0XUI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.crl rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CC8e6S_qY3P9odWuxG4vLYrorIc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 14:15:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2018 (0x7e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F0DA, serialNumber=082F1EE92FEA6373FDA1D5AEC46E2F2D8AE8AC87 Validity Not Before: Jun 2 14:15:21 2025 GMT Not After : Jun 9 14:15:21 2025 GMT Subject: CN=683db1f9-0cbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8d:af:66:72:e4:dc:3e:91:4d:68:9f:c6:93: b1:4c:ac:12:ce:1a:49:40:94:b7:da:4f:53:e4:8c: 90:fa:d1:aa:03:8d:5d:88:43:c5:2e:d0:0d:d8:19: a8:a2:1a:41:da:a6:5c:9a:e6:e1:1c:53:7e:69:2f: 24:b4:86:5f:62:a1:59:e7:12:e8:89:b9:b5:fc:f8: 3e:fa:0b:3a:1c:a7:02:ed:3a:72:09:ca:37:d3:9a: d3:fc:da:ff:a2:c4:37:cc:3c:bb:8b:8a:a0:56:a6: d0:c7:d2:34:17:27:e4:54:e1:03:6c:74:98:84:88: f0:0e:97:78:ca:36:01:8f:62:dd:bc:8e:0e:85:cb: 48:d0:3a:4e:84:4a:06:13:42:b3:da:5a:d2:b3:e8: ec:80:26:e9:a2:ef:12:e5:b0:ae:84:d6:3f:75:d9: 04:cc:43:21:47:bb:f0:f8:92:37:37:9e:f3:a9:f9: d5:66:a7:96:d8:da:4e:17:09:1e:ac:92:74:05:97: 9b:dc:55:8d:92:68:8d:51:3a:3c:20:46:3d:20:88: f8:94:11:d6:10:8b:85:b9:96:6e:c1:e1:c7:2d:d5: d0:e1:ba:ab:b2:e7:db:f4:84:ee:f2:48:6a:4c:39: cc:09:96:fc:df:aa:5d:ae:54:f3:68:5b:48:c0:3c: f7:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:52:73:50:98:37:CE:2E:3F:B3:54:FB:63:A2:F6:69:F2:00:D8:6C X509v3 Authority Key Identifier: keyid:08:2F:1E:E9:2F:EA:63:73:FD:A1:D5:AE:C4:6E:2F:2D:8A:E8:AC:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CC8e6S_qY3P9odWuxG4vLYrorIc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:8b:84:35:86:3b:83:82:d0:b5:f1:26:21:12:fd:67:8b:a5: c3:a2:5f:7c:3a:33:d0:e4:a0:50:9f:2e:a3:cc:4f:45:ea:77: e1:c4:88:d8:55:6c:bb:b3:12:6f:0b:e1:4e:1a:48:89:e6:6d: d7:b9:7c:fc:a4:38:36:bb:15:c4:0e:76:6b:c3:28:af:b5:c7: d3:87:8e:4f:c3:79:53:84:e0:1b:f9:f0:a1:f5:33:99:2f:0b: 9f:2f:23:33:d8:4e:ce:c5:6f:33:d3:be:c4:d8:25:6a:19:f4: 08:fd:b4:dc:18:e3:ec:fa:73:2d:93:26:8c:e1:d5:3e:5d:d1: 0c:20:5b:aa:c9:5b:b0:ff:db:a4:82:68:69:24:ec:20:4a:9e: 49:1e:a6:0c:dd:a3:5e:f3:aa:ce:10:57:7c:52:1e:fb:b3:04: 70:0f:fe:b4:54:63:ff:43:13:65:81:8a:49:81:25:76:1a:08: 15:f2:45:9f:39:3d:7e:f3:a2:be:42:82:d6:09:70:4d:c5:9e: f4:b8:b4:17:ac:ae:7a:e3:d6:76:62:f4:b5:a6:6e:a3:90:e5: 36:36:c0:c2:23:26:17:9e:d3:f4:6c:98:52:07:7b:4a:6d:41: 24:6d:57:c9:08:aa:78:3c:1b:9a:0e:77:e2:aa:e6:0b:20:83: 33:47:0b:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUYwREExMTAvBgNVBAUTKDA4MkYxRUU5MkZFQTYzNzNGREExRDVBRUM0NkUyRjJE OEFFOEFDODcwHhcNMjUwNjAyMTQxNTIxWhcNMjUwNjA5MTQxNTIxWjAYMRYwFAYD VQQDEw02ODNkYjFmOS0wY2JmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwY2vZnLk3D6RTWifxpOxTKwSzhpJQJS32k9T5IyQ+tGqA41diEPFLtAN2Bmo ohpB2qZcmubhHFN+aS8ktIZfYqFZ5xLoibm1/Pg++gs6HKcC7TpyCco305rT/Nr/ osQ3zDy7i4qgVqbQx9I0FyfkVOEDbHSYhIjwDpd4yjYBj2LdvI4OhctI0DpOhEoG E0Kz2lrSs+jsgCbpou8S5bCuhNY/ddkEzEMhR7vw+JI3N57zqfnVZqeW2NpOFwke rJJ0BZeb3FWNkmiNUTo8IEY9IIj4lBHWEIuFuZZuweHHLdXQ4bqrsufb9ITu8khq TDnMCZb836pdrlTzaFtIwDz3xwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMFSc1CY N84uP7NU+2Oi9mnyANhsMB8GA1UdIwQYMBaAFAgvHukv6mNz/aHVrsRuLy2K6KyH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjBEQS9GQzYxRTAwODFE NjcxMUUyOEMxODI4QTQwOEIwMkNEMi9DQzhlNlNfcVkzUDlvZFd1eEc0dkxZcm9y SWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0NDOGU2U19xWTNQOW9kV3V4RzR2TFlyb3JJYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjBEQS9GQzYxRTAwODFENjcxMUUyOEMxODI4QTQwOEIwMkNEMi9DQzhlNlNfcVkz UDlvZFd1eEc0dkxZcm9ySWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOi4Q1hjuDgtC18SYhEv1ni6XDol98OjPQ5KBQny6jzE9F6nfhxIjY VWy7sxJvC+FOGkiJ5m3XuXz8pDg2uxXEDnZrwyivtcfTh45Pw3lThOAb+fCh9TOZ LwufLyMz2E7OxW8z077E2CVqGfQI/bTcGOPs+nMtkyaM4dU+XdEMIFuqyVuw/9uk gmhpJOwgSp5JHqYM3aNe86rOEFd8Uh77swRwD/60VGP/QxNlgYpJgSV2GggV8kWf OT1+86K+QoLWCXBNxZ70uLQXrK5649Z2YvS1pm6jkOU2NsDCIyYXntP0bJhSB3tK bUEkbVfJCKp4PBuaDnfiquYLIIMzRwsI -----END CERTIFICATE-----Generated at Tue Jun 3 23:33:30 2025 by rpki-client