$ rpki-client -vvf rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.mft File: CrPxFJz1w7raaFscahN5tojXQ4Q.mft (raw, json) Hash identifier: Kj9DRICss9tPRuP+zAI7eLftVcU0vmTioLhzRgwLipg= Subject key identifier: 41:3E:C4:7E:70:2D:09:EA:D2:97:9D:24:D8:DE:90:D6:87:04:3B:DF Authority key identifier: 0A:B3:F1:14:9C:F5:C3:BA:DA:68:5B:1C:6A:13:79:B6:88:D7:43:84 Certificate issuer: /CN=A913DF1E/serialNumber=0AB3F1149CF5C3BADA685B1C6A1379B688D74384 Certificate serial: 0269 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrPxFJz1w7raaFscahN5tojXQ4Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.mft Manifest number: 025F Signing time: Thu 03 Jul 2025 02:12:23 +0000 Manifest this update: Thu 03 Jul 2025 02:12:22 +0000 Manifest next update: Thu 10 Jul 2025 02:12:22 +0000 Files and hashes: 1: CrPxFJz1w7raaFscahN5tojXQ4Q.crl (hash: Bjb/Yxj6tRZDWqliazlmnvph2uJJqhpOPynOiyfwgTs=) 2: 899B070834D511ED99B1921FC4F9AE02.roa (hash: 59L53XZQZjjT2hN0a9eIPXDObrfGJobgfFbYtXLEctM=) 3: D58286CA1F9D11EDA5DD9842C4F9AE02.roa (hash: L9Ip2okOSQMq2psn2x0tTtvnTzOcLa7ive90M13do6A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.crl rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrPxFJz1w7raaFscahN5tojXQ4Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:12:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 617 (0x269) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DF1E, serialNumber=0AB3F1149CF5C3BADA685B1C6A1379B688D74384 Validity Not Before: Jul 3 02:12:22 2025 GMT Not After : Jul 10 02:12:22 2025 GMT Subject: CN=6865e706-064b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:aa:14:55:2c:9c:7f:07:c3:ec:11:7c:99:ed: 21:b5:29:b8:48:3e:d2:1a:02:11:8b:ff:43:42:74: 0c:b0:ca:16:b0:2d:70:28:28:61:7f:9f:f8:fb:a2: 2f:03:c5:84:eb:82:0f:14:ae:58:c5:f9:6e:25:fc: 5e:78:e9:a7:70:70:0e:9c:d6:6f:1d:c4:0e:33:34: c8:80:fc:f6:19:c2:ee:e4:5a:83:f7:72:de:77:c4: 9b:a8:7c:c5:f3:20:8e:6a:eb:fc:d3:84:50:6e:a6: a3:bf:8a:38:30:65:20:59:2f:d5:26:b7:bc:03:38: 5c:f1:29:2d:42:68:0a:16:bc:b6:1d:bd:68:15:5e: e5:a5:c2:03:4c:79:a0:ee:a2:5a:34:17:96:60:0c: 09:06:de:7e:94:22:a1:ac:3c:c9:ea:5f:9e:e5:6d: 3c:b4:2e:4f:5d:09:33:8f:4d:54:d8:8c:1b:d3:d9: 98:57:80:81:a4:86:6d:53:90:6e:09:c7:86:b5:c7: be:f9:e0:b8:cf:ba:a1:1b:15:f7:ef:f9:12:ef:71: 54:6a:0b:c7:19:11:f7:e4:4a:da:5f:dc:7d:27:77: d4:5f:6a:57:db:1e:58:63:a8:6d:25:26:ec:9c:af: 0e:53:57:35:20:bf:74:64:ee:1b:f5:5b:4b:1a:10: 78:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:3E:C4:7E:70:2D:09:EA:D2:97:9D:24:D8:DE:90:D6:87:04:3B:DF X509v3 Authority Key Identifier: keyid:0A:B3:F1:14:9C:F5:C3:BA:DA:68:5B:1C:6A:13:79:B6:88:D7:43:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrPxFJz1w7raaFscahN5tojXQ4Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:2e:f1:09:fb:44:27:44:77:b1:c1:cc:69:91:57:15:72:24: 96:0a:ce:44:87:56:8a:55:2b:e7:7b:af:3c:78:3f:49:88:62: 96:24:e6:e6:ea:7b:8d:b3:c1:5d:27:66:cc:4e:50:ff:48:85: 0e:9c:4c:80:19:df:ad:5a:02:4b:1e:9d:95:a8:38:f7:8e:06: 48:6a:bf:78:1f:65:af:80:59:65:ea:33:68:bc:82:83:5a:35: 4d:3e:56:22:7e:53:c0:9a:2b:ba:68:ea:1b:8e:d7:d2:c5:bd: a2:ad:23:bc:fa:75:5b:b4:4c:79:25:96:04:21:e6:ce:3b:9e: 5b:57:3a:2f:08:d4:af:7d:6b:fb:af:96:28:11:e9:d5:16:71: de:5a:15:77:d6:5f:92:d4:e4:71:80:93:38:26:b1:99:11:b4: 71:f4:8a:9a:36:91:09:37:18:f1:d4:47:d9:6e:1a:67:68:68: a8:be:03:e1:58:23:69:d4:99:3d:34:b6:22:90:98:e0:8e:eb: c5:6a:4f:65:a3:6a:3a:4d:d0:08:14:7e:bf:1d:da:81:e9:62: a8:c1:e0:05:d1:6f:1c:ee:37:95:22:84:ae:43:d5:92:bc:d5: fe:24:f5:c6:fa:c0:d1:d6:46:24:19:ed:4c:41:49:91:04:64: 96:34:52:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0RGMUUxMTAvBgNVBAUTKDBBQjNGMTE0OUNGNUMzQkFEQTY4NUIxQzZBMTM3OUI2 ODhENzQzODQwHhcNMjUwNzAzMDIxMjIyWhcNMjUwNzEwMDIxMjIyWjAYMRYwFAYD VQQDEw02ODY1ZTcwNi0wNjRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzKoUVSycfwfD7BF8me0htSm4SD7SGgIRi/9DQnQMsMoWsC1wKChhf5/4+6Iv A8WE64IPFK5YxfluJfxeeOmncHAOnNZvHcQOMzTIgPz2GcLu5FqD93Led8SbqHzF 8yCOauv804RQbqajv4o4MGUgWS/VJre8Azhc8SktQmgKFry2Hb1oFV7lpcIDTHmg 7qJaNBeWYAwJBt5+lCKhrDzJ6l+e5W08tC5PXQkzj01U2Iwb09mYV4CBpIZtU5Bu CceGtce++eC4z7qhGxX37/kS73FUagvHGRH35EraX9x9J3fUX2pX2x5YY6htJSbs nK8OU1c1IL90ZO4b9VtLGhB4XQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEE+xH5w LQnq0pedJNjekNaHBDvfMB8GA1UdIwQYMBaAFAqz8RSc9cO62mhbHGoTebaI10OE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREYxRS9DQzY1QTY2QTFG OUExMUVEODM1Q0FBM0ZDNEY5QUUwMi9DclB4Rkp6MXc3cmFhRnNjYWhONXRvalhR NFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NyUHhGSnoxdzdyYWFGc2NhaE41dG9qWFE0US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz REYxRS9DQzY1QTY2QTFGOUExMUVEODM1Q0FBM0ZDNEY5QUUwMi9DclB4Rkp6MXc3 cmFhRnNjYWhONXRvalhRNFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABLvEJ+0QnRHexwcxpkVcVciSWCs5Eh1aKVSvne688eD9JiGKWJObm 6nuNs8FdJ2bMTlD/SIUOnEyAGd+tWgJLHp2VqDj3jgZIar94H2WvgFll6jNovIKD WjVNPlYiflPAmiu6aOobjtfSxb2irSO8+nVbtEx5JZYEIebOO55bVzovCNSvfWv7 r5YoEenVFnHeWhV31l+S1ORxgJM4JrGZEbRx9IqaNpEJNxjx1EfZbhpnaGiovgPh WCNp1Jk9NLYikJjgjuvFak9lo2o6TdAIFH6/HdqB6WKoweAF0W8c7jeVIoSuQ9WS vNX+JPXG+sDR1kYkGe1MQUmRBGSWNFLx -----END CERTIFICATE-----Generated at Fri Jul 4 14:04:04 2025 by rpki-client