$ rpki-client -vvf rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft File: cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft (raw, json) Hash identifier: 3G/JCwp17uvqpUbfn1B6f+dqcDoOvQSGFIYmsbeGQx4= Subject key identifier: 0E:B8:85:01:D8:03:BB:DD:20:38:32:B0:D5:FC:61:8A:26:AF:B9:23 Authority key identifier: 71:17:3E:DA:73:05:CC:FD:10:BD:78:D8:3A:93:30:E8:C7:64:0D:F6 Certificate issuer: /CN=A911F627/serialNumber=71173EDA7305CCFD10BD78D83A9330E8C7640DF6 Certificate serial: 0172 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRc-2nMFzP0QvXjYOpMw6MdkDfY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft Manifest number: 0170 Signing time: Tue 01 Jul 2025 04:13:53 +0000 Manifest this update: Tue 01 Jul 2025 04:13:52 +0000 Manifest next update: Tue 08 Jul 2025 04:13:52 +0000 Files and hashes: 1: cRc-2nMFzP0QvXjYOpMw6MdkDfY.crl (hash: rqdSVYgv07IIkBZRP/XgejUgjlqR8I2Ga+NynRjZt6U=) 2: C001E5861FCC11EEB409C35EC4F9AE02.roa (hash: HsjfDSOih06ECrmd3NlukL0cYpkEm4olWRK90K810ck=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.crl rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRc-2nMFzP0QvXjYOpMw6MdkDfY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 04:13:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 370 (0x172) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F627, serialNumber=71173EDA7305CCFD10BD78D83A9330E8C7640DF6 Validity Not Before: Jul 1 04:13:52 2025 GMT Not After : Jul 8 04:13:52 2025 GMT Subject: CN=68636080-0ecf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:91:9c:0b:e0:27:37:e6:1f:3d:ad:38:f1:dd: 63:11:59:ce:c6:0f:a4:27:81:78:56:fe:a2:b7:94: 0e:99:32:48:60:fd:e3:bd:b0:e9:f2:db:31:42:50: c0:de:48:be:cd:f1:f6:27:c4:6a:b1:30:b5:9d:e8: 63:e1:4c:f9:2b:48:fd:28:5c:1d:c5:62:48:55:ed: ae:c5:f5:e9:39:37:fa:47:05:fc:4d:53:7c:d4:47: 5b:1c:a3:bf:aa:76:c6:38:0e:66:e5:26:cd:b9:81: f4:d5:12:90:75:a3:98:b1:ca:f0:3f:49:39:52:33: cd:ac:be:22:46:28:38:84:7b:1b:71:4d:b3:d4:90: 31:2f:98:c1:d1:93:a1:1b:43:93:6b:2f:d9:17:6c: 9d:d7:3d:ce:8a:a4:26:a0:21:0b:31:64:3a:15:26: 1c:63:e5:c2:46:73:fd:82:4b:95:e3:b6:e5:ba:d7: 4b:3a:ae:29:ac:a9:03:86:b6:91:cf:a0:e6:ff:77: e7:f9:af:d3:e3:e6:fc:72:8e:d2:4a:ee:cb:cc:cd: bf:e9:de:5e:79:84:04:27:55:f0:90:b4:82:87:e6: 51:15:58:bf:ad:aa:79:12:3f:c5:89:0d:59:93:0e: 1b:ca:e6:fe:85:5d:98:0c:d9:04:96:3c:d3:7d:5e: f9:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:B8:85:01:D8:03:BB:DD:20:38:32:B0:D5:FC:61:8A:26:AF:B9:23 X509v3 Authority Key Identifier: keyid:71:17:3E:DA:73:05:CC:FD:10:BD:78:D8:3A:93:30:E8:C7:64:0D:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRc-2nMFzP0QvXjYOpMw6MdkDfY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:4c:77:3d:33:66:e0:26:b8:31:94:aa:fe:4b:5b:ef:20:64: 0c:cf:b9:7c:c1:cf:13:d0:75:b3:47:6c:42:07:42:de:94:fd: ff:0d:8f:3a:a0:f9:8f:d0:90:e6:b5:7a:66:0c:f5:5a:ed:42: d9:56:7f:e0:54:82:4d:9e:44:27:e7:b7:51:35:83:d3:2b:4a: 70:0a:19:d0:46:65:27:6b:79:bb:b8:de:7d:5f:e7:16:e9:37: 73:76:70:4b:84:1a:15:c1:66:13:8f:cf:c8:57:d8:17:99:b1: 3a:fd:04:09:a2:e3:51:ee:de:aa:dc:8e:3d:18:5a:6d:99:fe: 38:b4:60:63:35:76:45:3f:76:65:34:7b:44:c7:3d:22:21:d8: c9:53:6e:ec:b9:ea:08:fa:01:c9:3d:47:51:79:01:3c:17:56: ea:2d:80:86:e0:62:f4:e9:0d:6b:07:af:e3:78:d3:6e:54:49: 3c:34:91:48:7f:85:3f:5d:95:f4:0a:e7:a3:bf:c9:d6:3d:f2: 66:ba:eb:21:c3:00:64:05:4b:28:9f:43:b4:92:ca:f7:67:c1: 72:4b:99:e2:73:0b:03:94:9c:80:ff:a0:38:aa:0d:3d:53:ee: e7:25:3d:2f:ed:ee:58:31:21:f7:15:50:7c:1d:20:51:a6:10: 38:82:7c:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY2MjcxMTAvBgNVBAUTKDcxMTczRURBNzMwNUNDRkQxMEJENzhEODNBOTMzMEU4 Qzc2NDBERjYwHhcNMjUwNzAxMDQxMzUyWhcNMjUwNzA4MDQxMzUyWjAYMRYwFAYD VQQDEw02ODYzNjA4MC0wZWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA85GcC+AnN+YfPa048d1jEVnOxg+kJ4F4Vv6it5QOmTJIYP3jvbDp8tsxQlDA 3ki+zfH2J8RqsTC1nehj4Uz5K0j9KFwdxWJIVe2uxfXpOTf6RwX8TVN81EdbHKO/ qnbGOA5m5SbNuYH01RKQdaOYscrwP0k5UjPNrL4iRig4hHsbcU2z1JAxL5jB0ZOh G0OTay/ZF2yd1z3OiqQmoCELMWQ6FSYcY+XCRnP9gkuV47blutdLOq4prKkDhraR z6Dm/3fn+a/T4+b8co7SSu7LzM2/6d5eeYQEJ1XwkLSCh+ZRFVi/rap5Ej/FiQ1Z kw4byub+hV2YDNkEljzTfV75iwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA64hQHY A7vdIDgysNX8YYomr7kjMB8GA1UdIwQYMBaAFHEXPtpzBcz9EL142DqTMOjHZA32 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjYyNy80OTNEQTM2NjFG QzkxMUVFOTk5RjU5NjBDNEY5QUUwMi9jUmMtMm5NRnpQMFF2WGpZT3BNdzZNZGtE ZlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NSYy0ybk1GelAwUXZYallPcE13Nk1ka0RmWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjYyNy80OTNEQTM2NjFGQzkxMUVFOTk5RjU5NjBDNEY5QUUwMi9jUmMtMm5NRnpQ MFF2WGpZT3BNdzZNZGtEZlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrTHc9M2bgJrgxlKr+S1vvIGQMz7l8wc8T0HWzR2xCB0LelP3/DY86 oPmP0JDmtXpmDPVa7ULZVn/gVIJNnkQn57dRNYPTK0pwChnQRmUna3m7uN59X+cW 6TdzdnBLhBoVwWYTj8/IV9gXmbE6/QQJouNR7t6q3I49GFptmf44tGBjNXZFP3Zl NHtExz0iIdjJU27sueoI+gHJPUdReQE8F1bqLYCG4GL06Q1rB6/jeNNuVEk8NJFI f4U/XZX0Cuejv8nWPfJmuushwwBkBUson0O0ksr3Z8FyS5nicwsDlJyA/6A4qg09 U+7nJT0v7e5YMSH3FVB8HSBRphA4gnw4 -----END CERTIFICATE-----Generated at Wed Jul 2 21:02:22 2025 by rpki-client