$ rpki-client -vvf rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.mft File: ADNLjyGPpSUzmIbI-8lAk8iO1Xs.mft (raw, json) Hash identifier: 8UQCCK395qjBHMX1/qrtFF/QBv/KWLGqh5X3ty7qL4M= Subject key identifier: 6C:E5:53:89:36:8E:B2:EC:A5:40:58:E6:7E:78:66:40:A7:32:55:67 Authority key identifier: 00:33:4B:8F:21:8F:A5:25:33:98:86:C8:FB:C9:40:93:C8:8E:D5:7B Certificate issuer: /CN=A913C0C6/serialNumber=00334B8F218FA525339886C8FBC94093C88ED57B Certificate serial: 0520 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.mft Manifest number: 0507 Signing time: Thu 03 Jul 2025 00:05:40 +0000 Manifest this update: Thu 03 Jul 2025 00:05:39 +0000 Manifest next update: Thu 10 Jul 2025 00:05:39 +0000 Files and hashes: 1: ADNLjyGPpSUzmIbI-8lAk8iO1Xs.crl (hash: oUrnojSWZU7SnCWmJjO5TwlIkcwl5+7VrD0Fx3TGLGs=) 2: 2D197F6E52E611F087152212C4F9AE02.roa (hash: zVOqM+RoWZN/wECjUDwPT1Rps1jHUz0kOOj8NAvGv1U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.crl rsync://rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:05:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1312 (0x520) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C0C6, serialNumber=00334B8F218FA525339886C8FBC94093C88ED57B Validity Not Before: Jul 3 00:05:39 2025 GMT Not After : Jul 10 00:05:39 2025 GMT Subject: CN=6865c953-89d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:a8:18:87:25:aa:3b:35:cf:4d:39:3d:3a:4a: 44:b0:88:3e:f5:e1:dc:f1:a0:b2:3e:70:83:65:65: 36:32:f0:80:20:b2:25:49:e8:58:4f:1e:f9:a7:95: 01:67:14:fb:3f:3c:92:0b:a7:25:4f:bd:46:0a:f7: 9e:4a:b0:ae:cf:e9:fc:b6:60:ab:f2:2e:04:ee:1d: 2e:98:22:b9:8a:b2:a1:a9:01:75:1d:3b:f3:df:fe: b7:8f:a9:b5:4f:44:48:b1:e2:7b:bd:27:ad:14:24: fe:ac:80:b1:f6:60:fe:07:0d:28:53:b1:39:a9:3a: ed:cd:cd:be:d6:a2:af:69:ef:62:b7:5c:22:ce:65: 55:3c:3b:c5:42:a2:5a:48:1d:52:2b:d6:43:39:b0: 0b:ad:91:d8:d9:98:9e:f6:ef:df:8c:6b:76:c0:b8: f2:1c:e0:6b:7e:29:ad:11:be:0d:59:87:71:a6:b9: 94:4d:18:77:2a:a0:7a:3e:43:e7:74:c4:6d:cf:72: 9e:65:09:28:6d:e8:24:c3:74:40:46:53:63:f0:df: 3c:e7:fe:86:45:16:46:95:fa:a0:39:05:29:5e:8f: 0d:b8:90:90:cd:d2:8d:be:64:c8:7f:d8:c3:34:0b: 2f:56:bf:5d:7d:f8:76:ba:50:6c:4f:2a:70:69:e9: ea:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:E5:53:89:36:8E:B2:EC:A5:40:58:E6:7E:78:66:40:A7:32:55:67 X509v3 Authority Key Identifier: keyid:00:33:4B:8F:21:8F:A5:25:33:98:86:C8:FB:C9:40:93:C8:8E:D5:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:e1:b3:f2:29:bb:37:ca:eb:fe:b0:ff:da:ad:de:c8:9a:4c: 8a:38:fb:e7:de:4e:70:88:13:d0:57:0f:9b:e8:d5:62:7c:1f: 6c:32:81:74:87:32:4a:89:4e:77:7c:25:3a:7f:bc:68:0c:ea: a5:8f:5e:90:ae:80:c4:71:f9:8b:9f:97:1d:5c:b5:03:03:21: ea:b3:4c:77:c4:aa:db:70:06:03:f8:4d:17:e9:3c:36:ec:96: 3b:7f:4a:fe:7c:a5:d4:2a:36:fb:33:72:21:ac:09:f5:6a:02: 3f:f8:c4:9a:a9:d1:44:0e:d4:12:e7:cc:d7:14:df:51:3c:f7: fe:f1:7b:04:3a:6f:e5:8e:61:7e:92:1b:c9:26:05:4c:f6:07: c2:95:b5:2b:22:4f:fe:b3:09:89:4b:7a:3a:60:84:16:0b:08: 88:27:cd:cb:22:38:05:48:6a:bd:4d:ee:05:9b:f5:a3:f9:94: 0e:d1:95:f0:82:7b:c6:ee:8d:b9:5f:25:4f:1d:39:49:6f:cb: a3:43:db:ac:38:6e:9f:89:4c:a1:30:84:b9:a0:71:58:6f:f0: 85:4f:61:ce:21:d1:1e:fd:97:db:8b:c9:11:6f:97:e3:a9:dd: af:dd:c2:2b:22:a5:11:a8:15:21:ca:50:73:57:a4:82:b0:83: 5c:0c:9f:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0MwQzYxMTAvBgNVBAUTKDAwMzM0QjhGMjE4RkE1MjUzMzk4ODZDOEZCQzk0MDkz Qzg4RUQ1N0IwHhcNMjUwNzAzMDAwNTM5WhcNMjUwNzEwMDAwNTM5WjAYMRYwFAYD VQQDEw02ODY1Yzk1My04OWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA46gYhyWqOzXPTTk9OkpEsIg+9eHc8aCyPnCDZWU2MvCAILIlSehYTx75p5UB ZxT7PzySC6clT71GCveeSrCuz+n8tmCr8i4E7h0umCK5irKhqQF1HTvz3/63j6m1 T0RIseJ7vSetFCT+rICx9mD+Bw0oU7E5qTrtzc2+1qKvae9it1wizmVVPDvFQqJa SB1SK9ZDObALrZHY2Zie9u/fjGt2wLjyHOBrfimtEb4NWYdxprmUTRh3KqB6PkPn dMRtz3KeZQkobegkw3RARlNj8N885/6GRRZGlfqgOQUpXo8NuJCQzdKNvmTIf9jD NAsvVr9dffh2ulBsTypwaenqvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGzlU4k2 jrLspUBY5n54ZkCnMlVnMB8GA1UdIwQYMBaAFAAzS48hj6UlM5iGyPvJQJPIjtV7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzBDNi8xODNGODRBRTIz NEIxMUVDQjhBMkRFN0VDNEY5QUUwMi9BRE5ManlHUHBTVXptSWJJLThsQWs4aU8x WHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FETkxqeUdQcFNVem1JYkktOGxBazhpTzFYcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QzBDNi8xODNGODRBRTIzNEIxMUVDQjhBMkRFN0VDNEY5QUUwMi9BRE5ManlHUHBT VXptSWJJLThsQWs4aU8xWHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBt4bPyKbs3yuv+sP/ard7ImkyKOPvn3k5wiBPQVw+b6NVifB9sMoF0 hzJKiU53fCU6f7xoDOqlj16QroDEcfmLn5cdXLUDAyHqs0x3xKrbcAYD+E0X6Tw2 7JY7f0r+fKXUKjb7M3IhrAn1agI/+MSaqdFEDtQS58zXFN9RPPf+8XsEOm/ljmF+ khvJJgVM9gfClbUrIk/+swmJS3o6YIQWCwiIJ83LIjgFSGq9Te4Fm/Wj+ZQO0ZXw gnvG7o25XyVPHTlJb8ujQ9usOG6fiUyhMIS5oHFYb/CFT2HOIdEe/Zfbi8kRb5fj qd2v3cIrIqURqBUhylBzV6SCsINcDJ+g -----END CERTIFICATE-----Generated at Thu Jul 3 03:50:26 2025 by rpki-client