$ rpki-client -vvf rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.mft File: g1sFZ9k-rArjJOofFrPDnLGzOI4.mft (raw, json) Hash identifier: JAQbrwxPELjEVLXboVmO3MXLucrquNSkAQdkkcNU0V8= Subject key identifier: DF:06:8C:07:7E:FE:0B:97:29:D6:0F:A8:94:0B:15:55:62:4D:8C:BC Authority key identifier: 83:5B:05:67:D9:3E:AC:0A:E3:24:EA:1F:16:B3:C3:9C:B1:B3:38:8E Certificate issuer: /CN=A911F5B7/serialNumber=835B0567D93EAC0AE324EA1F16B3C39CB1B3388E Certificate serial: 0AD9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1sFZ9k-rArjJOofFrPDnLGzOI4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.mft Manifest number: 0C63 Signing time: Wed 02 Jul 2025 19:40:26 +0000 Manifest this update: Wed 02 Jul 2025 19:40:26 +0000 Manifest next update: Wed 09 Jul 2025 19:40:26 +0000 Files and hashes: 1: g1sFZ9k-rArjJOofFrPDnLGzOI4.crl (hash: Fb9pgNLkIwKVxSGPmApbpCJhWgWmqNE0adqndbK2yA8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.crl rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1sFZ9k-rArjJOofFrPDnLGzOI4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:40:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2777 (0xad9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F5B7, serialNumber=835B0567D93EAC0AE324EA1F16B3C39CB1B3388E Validity Not Before: Jul 2 19:40:26 2025 GMT Not After : Jul 9 19:40:26 2025 GMT Subject: CN=68658b2a-2377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f4:8d:dc:47:0a:39:10:c3:30:0e:dc:49:1f: f7:fb:97:f6:c1:56:62:43:73:4d:20:b5:15:5d:1a: da:bf:fa:ca:70:e1:df:c0:0b:3e:53:d0:44:02:bd: b8:c5:10:52:52:5c:54:80:55:28:71:15:f7:2b:73: c0:b2:a6:59:7d:45:b8:00:71:10:cd:92:1e:f4:3e: d6:92:51:cc:dc:a0:ec:05:7e:43:26:6f:4f:bf:38: 82:c1:e0:13:5f:23:67:51:fb:ab:9a:55:fe:5c:ac: d1:c7:65:aa:74:bb:93:1f:a0:b7:b9:f9:66:63:28: 88:60:b3:6e:ab:bc:a0:a9:47:6c:bb:6e:29:d5:af: 92:44:69:09:20:c4:2e:6a:f5:35:3d:27:de:98:b2: ff:30:12:dc:d2:01:a4:88:e7:5e:75:71:4e:64:9d: ad:f1:fc:a4:ce:2d:e6:8c:f5:ce:41:22:68:d9:f8: df:b0:d1:9b:ba:46:49:c6:fe:0e:93:68:44:37:7f: c4:a6:7d:98:4b:a4:08:84:49:af:36:92:c4:0a:57: 4e:d9:1e:fc:ed:ce:13:fb:4e:d5:7d:29:90:7b:71: d1:df:49:f4:ba:e1:05:bc:af:25:32:f8:f6:7e:6a: 45:f5:28:95:d4:c8:e0:7e:e6:93:b0:a6:ea:ef:2f: 26:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:06:8C:07:7E:FE:0B:97:29:D6:0F:A8:94:0B:15:55:62:4D:8C:BC X509v3 Authority Key Identifier: keyid:83:5B:05:67:D9:3E:AC:0A:E3:24:EA:1F:16:B3:C3:9C:B1:B3:38:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1sFZ9k-rArjJOofFrPDnLGzOI4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:2e:fa:51:2a:b3:36:ae:48:0d:bd:b8:06:1b:25:c8:03:fb: f1:85:87:ab:d2:de:8a:3e:d2:33:e8:58:de:c1:4b:21:3d:50: 04:80:f9:5d:53:91:9a:00:51:6e:fb:f5:41:19:58:6b:3e:01: fb:5b:9e:43:22:d4:d5:cc:9b:f2:60:9c:9e:07:aa:28:61:9a: d7:54:60:a7:e0:31:ef:b3:a3:94:27:f7:40:d8:8e:0e:5d:8d: 0c:79:15:fc:5e:a8:23:96:92:b6:c4:7b:ee:06:66:43:e3:67: a7:6f:ed:42:09:8f:25:40:65:9f:15:99:69:b9:f3:d0:e0:34: c1:8a:09:70:da:2e:20:ff:4d:27:c6:24:78:56:99:a2:0d:3c: 87:9a:4a:fa:d7:43:41:aa:a5:24:e0:b0:60:57:4c:fe:7f:d4: 89:62:22:c7:00:2d:54:8d:3e:41:70:bc:a6:35:c8:af:a7:d8: 50:2c:c1:e5:5b:53:b5:1f:db:b1:a0:e5:b0:53:aa:62:1d:0e: f9:d1:b7:f0:cc:cd:1d:9a:d7:e4:9f:e4:90:d0:3b:d2:38:e6: 0e:ea:7d:df:ef:62:93:d2:b8:4e:67:67:33:d7:c3:fa:77:07: e7:7c:cb:05:5d:15:b7:4e:bf:fd:f8:6e:17:58:89:1d:d4:23: b4:78:00:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCtkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY1QjcxMTAvBgNVBAUTKDgzNUIwNTY3RDkzRUFDMEFFMzI0RUExRjE2QjNDMzlD QjFCMzM4OEUwHhcNMjUwNzAyMTk0MDI2WhcNMjUwNzA5MTk0MDI2WjAYMRYwFAYD VQQDEw02ODY1OGIyYS0yMzc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy/SN3EcKORDDMA7cSR/3+5f2wVZiQ3NNILUVXRrav/rKcOHfwAs+U9BEAr24 xRBSUlxUgFUocRX3K3PAsqZZfUW4AHEQzZIe9D7WklHM3KDsBX5DJm9PvziCweAT XyNnUfurmlX+XKzRx2WqdLuTH6C3uflmYyiIYLNuq7ygqUdsu24p1a+SRGkJIMQu avU1PSfemLL/MBLc0gGkiOdedXFOZJ2t8fykzi3mjPXOQSJo2fjfsNGbukZJxv4O k2hEN3/Epn2YS6QIhEmvNpLECldO2R787c4T+07VfSmQe3HR30n0uuEFvK8lMvj2 fmpF9SiV1MjgfuaTsKbq7y8mIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN8GjAd+ /guXKdYPqJQLFVViTYy8MB8GA1UdIwQYMBaAFINbBWfZPqwK4yTqHxazw5yxsziO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjVCNy83MUU3QTIyMjUx OTUxMUVBODQ2NEJBNzhDNEY5QUUwMi9nMXNGWjlrLXJBcmpKT29mRnJQRG5MR3pP STQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2cxc0ZaOWstckFyakpPb2ZGclBEbkxHek9JNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjVCNy83MUU3QTIyMjUxOTUxMUVBODQ2NEJBNzhDNEY5QUUwMi9nMXNGWjlrLXJB cmpKT29mRnJQRG5MR3pPSTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCLvpRKrM2rkgNvbgGGyXIA/vxhYer0t6KPtIz6FjewUshPVAEgPld U5GaAFFu+/VBGVhrPgH7W55DItTVzJvyYJyeB6ooYZrXVGCn4DHvs6OUJ/dA2I4O XY0MeRX8XqgjlpK2xHvuBmZD42enb+1CCY8lQGWfFZlpufPQ4DTBiglw2i4g/00n xiR4VpmiDTyHmkr610NBqqUk4LBgV0z+f9SJYiLHAC1UjT5BcLymNcivp9hQLMHl W1O1H9uxoOWwU6piHQ750bfwzM0dmtfkn+SQ0DvSOOYO6n3f72KT0rhOZ2cz18P6 dwfnfMsFXRW3Tr/9+G4XWIkd1CO0eACW -----END CERTIFICATE-----Generated at Thu Jul 3 06:03:39 2025 by rpki-client