$ rpki-client -vvf rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft File: 1cBKCsLVKt_nBVZHjcsOHYHtENo.mft (raw, json) Hash identifier: P0w+/OMbui02zZnqkBnlF2JVJLdMPsO8SYBmlIUDQ68= Subject key identifier: 65:B2:7C:00:6F:7F:D9:E4:79:4E:19:1B:BB:DB:42:A3:44:B6:CD:19 Authority key identifier: D5:C0:4A:0A:C2:D5:2A:DF:E7:05:56:47:8D:CB:0E:1D:81:ED:10:DA Certificate issuer: /CN=A91284EC/serialNumber=D5C04A0AC2D52ADFE70556478DCB0E1D81ED10DA Certificate serial: 0489 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft Manifest number: 0482 Signing time: Sat 28 Jun 2025 23:39:15 +0000 Manifest this update: Sat 28 Jun 2025 23:39:15 +0000 Manifest next update: Sat 05 Jul 2025 23:39:15 +0000 Files and hashes: 1: 1cBKCsLVKt_nBVZHjcsOHYHtENo.crl (hash: knkD11EF3tHPuEbaoiGnG7/Y7sSv8/QKXNvaF27oJnw=) 2: F11B4C14E40111ECBD78E571C4F9AE02.roa (hash: viYY8r9Z3djQTP7Mtv5p3ALckTBTe0eKvVy/mChOa9g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.crl rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 23:39:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1161 (0x489) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91284EC, serialNumber=D5C04A0AC2D52ADFE70556478DCB0E1D81ED10DA Validity Not Before: Jun 28 23:39:15 2025 GMT Not After : Jul 5 23:39:15 2025 GMT Subject: CN=68607d23-748a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:bb:4b:28:db:ad:bd:86:76:b7:58:72:55:92: aa:87:55:5e:57:c7:c4:0b:4b:f0:51:3b:52:62:97: 25:0f:bb:71:a7:0e:1b:48:15:bc:13:72:9c:2e:95: 5c:95:95:83:0a:95:a7:1d:c3:06:0e:5d:12:53:4f: 9e:d3:ac:da:a7:b4:8b:70:da:43:d6:13:80:05:d7: 90:d8:06:86:1c:bd:ea:96:ca:95:89:13:63:de:1c: f5:67:f2:70:5e:07:41:07:f1:e4:97:03:d8:55:b0: d1:d1:51:04:76:ba:22:7e:5a:50:eb:55:4e:47:57: b2:33:db:1b:5a:0c:7d:58:6b:7b:d2:0e:0f:55:9e: 2b:8e:c3:56:99:35:25:c0:cd:01:cf:3b:5f:d5:81: ad:6d:36:75:f9:24:21:aa:65:d8:c5:8c:cf:ff:2f: f7:18:da:dc:f8:75:ff:64:ab:d1:fc:d9:d2:b6:71: 35:4d:47:b6:f0:54:c3:2c:dc:2a:13:b8:dc:ee:57: c6:c3:15:9f:81:3b:bb:5a:a6:b9:f3:05:5a:d1:62: d9:b2:e7:61:fe:50:5c:86:f5:bb:35:f9:ee:1c:ff: 18:e1:86:c6:66:96:e6:d4:c7:78:1d:13:e9:de:97: 6a:70:b9:58:46:6f:5d:d5:d0:e7:d5:9f:b0:e7:88: 40:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:B2:7C:00:6F:7F:D9:E4:79:4E:19:1B:BB:DB:42:A3:44:B6:CD:19 X509v3 Authority Key Identifier: keyid:D5:C0:4A:0A:C2:D5:2A:DF:E7:05:56:47:8D:CB:0E:1D:81:ED:10:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:20:82:c1:fc:e8:92:20:7b:97:52:19:1b:1d:b6:31:a3:a0: 8c:84:6f:05:46:0d:61:44:42:79:fb:8b:31:99:c5:9a:d7:ef: f4:75:8d:22:36:db:bd:b3:ae:1b:e9:3f:40:ae:e8:40:a6:a2: a4:73:19:a5:62:19:f3:1d:e0:c7:dc:51:72:a7:81:f6:4f:6a: ca:5b:e8:16:8f:ab:9f:07:c8:ab:0c:85:09:6a:73:09:f3:27: 9a:3a:27:92:25:82:f8:4d:c6:51:17:3d:de:1f:7e:09:ab:79: fd:32:04:1a:88:83:35:e9:f5:32:e2:9c:51:b4:57:b5:5f:9f: 7a:d4:e2:99:37:0c:96:f2:bf:ae:35:05:e3:26:b6:5c:79:ae: e8:2a:25:e4:46:e1:11:fe:2b:b3:85:1b:fc:ee:c8:ea:ce:23: b4:80:34:16:b1:2e:17:ea:ef:07:33:9e:a4:ba:52:52:fd:6a: 78:eb:cb:27:03:b6:54:90:44:20:e3:4a:ef:e8:15:1d:30:10: 61:04:88:9d:a6:fc:90:fb:e2:40:42:ca:10:38:89:33:55:af: 6d:da:17:2a:46:0a:da:53:d6:50:1d:e5:1c:75:ba:79:8e:82: 59:08:5a:89:70:50:90:19:e4:26:2a:22:75:be:59:09:cf:68: c5:9a:35:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg0RUMxMTAvBgNVBAUTKEQ1QzA0QTBBQzJENTJBREZFNzA1NTY0NzhEQ0IwRTFE ODFFRDEwREEwHhcNMjUwNjI4MjMzOTE1WhcNMjUwNzA1MjMzOTE1WjAYMRYwFAYD VQQDEw02ODYwN2QyMy03NDhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0LtLKNutvYZ2t1hyVZKqh1VeV8fEC0vwUTtSYpclD7txpw4bSBW8E3KcLpVc lZWDCpWnHcMGDl0SU0+e06zap7SLcNpD1hOABdeQ2AaGHL3qlsqViRNj3hz1Z/Jw XgdBB/HklwPYVbDR0VEEdroiflpQ61VOR1eyM9sbWgx9WGt70g4PVZ4rjsNWmTUl wM0Bzztf1YGtbTZ1+SQhqmXYxYzP/y/3GNrc+HX/ZKvR/NnStnE1TUe28FTDLNwq E7jc7lfGwxWfgTu7Wqa58wVa0WLZsudh/lBchvW7NfnuHP8Y4YbGZpbm1Md4HRPp 3pdqcLlYRm9d1dDn1Z+w54hAwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGWyfABv f9nkeU4ZG7vbQqNEts0ZMB8GA1UdIwQYMBaAFNXASgrC1Srf5wVWR43LDh2B7RDa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODRFQy9FQkY2MDFGQzQ4 Q0YxMUVDQTY2NkIwM0VDNEY5QUUwMi8xY0JLQ3NMVkt0X25CVlpIamNzT0hZSHRF Tm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFjQktDc0xWS3RfbkJWWkhqY3NPSFlIdEVOby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODRFQy9FQkY2MDFGQzQ4Q0YxMUVDQTY2NkIwM0VDNEY5QUUwMi8xY0JLQ3NMVkt0 X25CVlpIamNzT0hZSHRFTm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9IILB/OiSIHuXUhkbHbYxo6CMhG8FRg1hREJ5+4sxmcWa1+/0dY0i Ntu9s64b6T9AruhApqKkcxmlYhnzHeDH3FFyp4H2T2rKW+gWj6ufB8irDIUJanMJ 8yeaOieSJYL4TcZRFz3eH34Jq3n9MgQaiIM16fUy4pxRtFe1X5961OKZNwyW8r+u NQXjJrZcea7oKiXkRuER/iuzhRv87sjqziO0gDQWsS4X6u8HM56kulJS/Wp468sn A7ZUkEQg40rv6BUdMBBhBIidpvyQ++JAQsoQOIkzVa9t2hcqRgraU9ZQHeUcdbp5 joJZCFqJcFCQGeQmKiJ1vlkJz2jFmjXQ -----END CERTIFICATE-----Generated at Mon Jun 30 00:56:18 2025 by rpki-client