$ rpki-client -vvf rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/IwN4FncHnC-7R0lkDwZXociO20Q.mft File: IwN4FncHnC-7R0lkDwZXociO20Q.mft (raw, json) Hash identifier: TFfAs7/gHFNDh2ou0UKwPndvHFUfAjLUsIEcmVFE0sw= Subject key identifier: DB:F8:6C:0A:4F:5E:C3:CF:99:BA:F3:B2:8F:A0:24:28:58:35:58:B1 Authority key identifier: 23:03:78:16:77:07:9C:2F:BB:47:49:64:0F:06:57:A1:C8:8E:DB:44 Certificate issuer: /CN=A911E0B4/serialNumber=2303781677079C2FBB4749640F0657A1C88EDB44 Certificate serial: 6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IwN4FncHnC-7R0lkDwZXociO20Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/IwN4FncHnC-7R0lkDwZXociO20Q.mft Manifest number: 6F Signing time: Sat 05 Jul 2025 07:12:18 +0000 Manifest this update: Sat 05 Jul 2025 07:12:18 +0000 Manifest next update: Sat 12 Jul 2025 07:12:18 +0000 Files and hashes: 1: IwN4FncHnC-7R0lkDwZXociO20Q.crl (hash: JH5A/By1iGpfYy+X53XB2dNAi7H1l4k5mtzOIMselDg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/IwN4FncHnC-7R0lkDwZXociO20Q.crl rsync://rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/IwN4FncHnC-7R0lkDwZXociO20Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IwN4FncHnC-7R0lkDwZXociO20Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 111 (0x6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E0B4, serialNumber=2303781677079C2FBB4749640F0657A1C88EDB44 Validity Not Before: Jul 5 07:12:18 2025 GMT Not After : Jul 12 07:12:18 2025 GMT Subject: CN=6868d052-6cd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:79:05:cf:8f:70:77:b1:dc:7f:46:a4:37:a0: 73:7f:85:a3:04:3b:11:3c:e7:7b:dc:14:41:6e:aa: 2b:89:07:1b:50:59:56:21:1e:82:47:07:dd:8e:06: 69:79:1b:d3:c4:b4:1f:61:f4:85:d6:55:41:4b:61: b2:11:e4:14:e6:4b:23:e0:a0:7b:df:9b:c3:58:e3: a3:f6:0e:b5:2e:30:86:a7:3a:22:15:dc:76:65:e5: e7:e7:b9:b4:8d:80:a4:5e:08:09:c8:50:e3:f5:64: 50:ee:3f:ff:5f:b7:21:0d:8f:d4:4e:6e:51:67:68: 7a:e3:3f:98:c7:1f:55:cd:b5:10:a3:1f:78:22:a4: 49:11:c8:87:83:4a:6c:5f:1e:32:7c:58:52:cc:e0: 89:09:ff:c0:50:f1:b0:ad:77:ce:e6:7b:ef:79:9e: cd:71:61:89:6f:e7:85:87:aa:1a:24:de:c8:db:ec: 41:4b:9e:91:54:83:82:f0:02:83:e4:52:6c:4e:b3: 2e:12:fa:36:6c:e7:ee:3a:b0:ac:9a:55:ce:a1:b9: 50:04:1c:fc:bd:31:2b:2c:6f:8f:c0:9d:82:4f:d0: 88:e4:f0:7a:70:44:61:70:e9:31:3e:37:f0:4d:32: d3:8f:77:7d:47:d9:39:84:7a:b9:1e:df:eb:44:9d: 8c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:F8:6C:0A:4F:5E:C3:CF:99:BA:F3:B2:8F:A0:24:28:58:35:58:B1 X509v3 Authority Key Identifier: keyid:23:03:78:16:77:07:9C:2F:BB:47:49:64:0F:06:57:A1:C8:8E:DB:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/IwN4FncHnC-7R0lkDwZXociO20Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IwN4FncHnC-7R0lkDwZXociO20Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/IwN4FncHnC-7R0lkDwZXociO20Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:e3:6c:ce:5c:1b:fb:c1:20:91:14:ca:d1:f2:44:58:55:ff: 10:00:e1:65:7c:ad:dc:04:dc:3f:e1:45:c1:2e:81:ee:1c:a1: aa:7b:f2:3f:49:d6:78:a8:e9:b8:c7:a0:8d:08:48:43:90:85: 5c:22:18:66:93:49:10:d5:91:02:19:3b:55:8e:a0:6d:78:18: 91:be:30:7e:63:6d:1e:b1:b0:b8:88:10:59:9d:00:8a:bd:66: 85:9c:b7:fd:81:b4:a8:29:2f:2a:57:88:fe:fe:a2:20:bd:46: fd:31:a4:e3:20:9d:02:6d:66:c4:26:6e:fb:f6:5a:7e:7a:80: b6:ca:ef:6d:82:c6:56:ad:67:e4:d9:56:30:fb:e6:6f:b2:d2: a1:57:b9:04:f8:f5:be:03:d3:f7:f6:8c:58:cd:26:f7:ad:ae: b9:6c:f5:eb:45:23:57:c4:0f:a8:bf:db:8f:ba:7d:04:6a:9b: 44:ef:90:54:b8:11:1e:f7:96:ef:95:1d:d3:13:81:4b:71:1b: 26:78:e7:50:4a:4b:44:92:e7:aa:b0:33:67:58:30:c4:32:72: 80:38:1e:55:a4:3e:fc:79:ee:76:b5:0f:2b:8c:2a:df:66:02: 96:7f:af:0b:0d:70:4a:10:1c:af:66:59:e0:a6:6a:69:28:fd: 2a:eb:6f:5d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx RTBCNDExMC8GA1UEBRMoMjMwMzc4MTY3NzA3OUMyRkJCNDc0OTY0MEYwNjU3QTFD ODhFREI0NDAeFw0yNTA3MDUwNzEyMThaFw0yNTA3MTIwNzEyMThaMBgxFjAUBgNV BAMTDTY4NjhkMDUyLTZjZDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHeQXPj3B3sdx/RqQ3oHN/haMEOxE853vcFEFuqiuJBxtQWVYhHoJHB92OBml5 G9PEtB9h9IXWVUFLYbIR5BTmSyPgoHvfm8NY46P2DrUuMIanOiIV3HZl5efnubSN gKReCAnIUOP1ZFDuP/9ftyENj9ROblFnaHrjP5jHH1XNtRCjH3gipEkRyIeDSmxf HjJ8WFLM4IkJ/8BQ8bCtd87me+95ns1xYYlv54WHqhok3sjb7EFLnpFUg4LwAoPk UmxOsy4S+jZs5+46sKyaVc6huVAEHPy9MSssb4/AnYJP0Ijk8HpwRGFw6TE+N/BN MtOPd31H2TmEerke3+tEnYyHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2/hsCk9e w8+ZuvOyj6AkKFg1WLEwHwYDVR0jBBgwFoAUIwN4FncHnC+7R0lkDwZXociO20Qw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFFMEI0L0YyMjMxREU0QUYz ODExRUZBMjBERDAxM0M0RjlBRTAyL0l3TjRGbmNIbkMtN1IwbGtEd1pYb2NpTzIw US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSXdONEZuY0huQy03UjBsa0R3WlhvY2lPMjBRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFF MEI0L0YyMjMxREU0QUYzODExRUZBMjBERDAxM0M0RjlBRTAyL0l3TjRGbmNIbkMt N1IwbGtEd1pYb2NpTzIwUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG7jbM5cG/vBIJEUytHyRFhV/xAA4WV8rdwE3D/hRcEuge4coap78j9J 1nio6bjHoI0ISEOQhVwiGGaTSRDVkQIZO1WOoG14GJG+MH5jbR6xsLiIEFmdAIq9 ZoWct/2BtKgpLypXiP7+oiC9Rv0xpOMgnQJtZsQmbvv2Wn56gLbK722CxlatZ+TZ VjD75m+y0qFXuQT49b4D0/f2jFjNJvetrrls9etFI1fED6i/24+6fQRqm0TvkFS4 ER73lu+VHdMTgUtxGyZ451BKS0SS56qwM2dYMMQycoA4HlWkPvx57na1DyuMKt9m ApZ/rwsNcEoQHK9mWeCmamko/Srrb10= -----END CERTIFICATE-----Generated at Sat Jul 5 23:05:55 2025 by rpki-client