$ rpki-client -vvf rpki.apnic.net/member_repository/A914B610/4393EAE01DA711E2842FDCA008B02CD2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.mft File: fHKLlwQp1HAJeXihbnZ7IdxuOx8.mft (raw, json) Hash identifier: 6PN6TExLSJkGgumu3YmJpPWIrwPRGDsBLjuROR3FIhY= Subject key identifier: A3:04:07:B7:D5:9A:8F:29:36:E6:FF:AB:E4:C2:D0:14:ED:4C:79:93 Authority key identifier: 7C:72:8B:97:04:29:D4:70:09:79:78:A1:6E:76:7B:21:DC:6E:3B:1F Certificate issuer: /CN=A914B610/serialNumber=7C728B970429D470097978A16E767B21DC6E3B1F Certificate serial: 3492 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B610/4393EAE01DA711E2842FDCA008B02CD2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.mft Manifest number: 3491 Signing time: Fri 04 Jul 2025 15:21:33 +0000 Manifest this update: Fri 04 Jul 2025 15:21:33 +0000 Manifest next update: Fri 11 Jul 2025 15:21:33 +0000 Files and hashes: 1: fHKLlwQp1HAJeXihbnZ7IdxuOx8.crl (hash: 6yhIR6QxNIFOB9qWfjESWO4+bspABovNitJtIJsOQs4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B610/4393EAE01DA711E2842FDCA008B02CD2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.crl rsync://rpki.apnic.net/member_repository/A914B610/4393EAE01DA711E2842FDCA008B02CD2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13458 (0x3492) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B610, serialNumber=7C728B970429D470097978A16E767B21DC6E3B1F Validity Not Before: Jul 4 15:21:33 2025 GMT Not After : Jul 11 15:21:33 2025 GMT Subject: CN=6867f17d-c31e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:44:be:c1:cb:73:32:fb:13:24:f3:28:bc:ac: c2:b1:b6:79:70:bd:5a:cd:02:1e:29:11:6d:c6:b8: d5:18:eb:15:d3:94:aa:81:85:4d:9e:72:9f:0b:8b: 87:2a:7b:21:60:8b:16:52:08:2f:34:00:33:a6:a2: f7:af:d0:13:ba:ed:ae:b0:1f:fc:6d:59:83:e4:6d: c7:5c:c9:9c:6a:50:88:f8:e7:8f:45:79:25:d5:10: ae:de:e8:72:1c:d4:f6:8f:df:4e:c5:15:c4:57:c5: 7f:b2:8c:c8:64:f6:fc:9d:7a:d6:fc:1f:3c:af:ac: dc:1b:96:4c:4e:42:23:bc:01:7c:54:f4:ab:c9:75: 5c:3a:6b:d8:5f:17:ba:7a:c4:f4:b4:7b:23:20:80: 22:a2:80:de:86:3d:69:73:19:e5:77:7f:6e:b5:30: f1:48:b9:3e:98:f6:e4:18:ab:fd:65:0a:e3:ca:a8: 4e:5a:8e:8b:6d:c0:3b:48:ef:bd:fe:8a:8b:65:8d: 79:d6:53:75:8e:7c:7c:53:6c:0a:e4:41:98:32:6c: ad:9e:eb:3c:9e:4a:12:92:30:d3:c7:29:04:b8:6c: 10:ce:2e:13:85:29:4f:bf:3c:f7:30:01:44:ff:88: 9b:5d:e1:c0:d1:d0:f8:cb:3a:0f:2a:51:24:03:e9: 7b:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:04:07:B7:D5:9A:8F:29:36:E6:FF:AB:E4:C2:D0:14:ED:4C:79:93 X509v3 Authority Key Identifier: keyid:7C:72:8B:97:04:29:D4:70:09:79:78:A1:6E:76:7B:21:DC:6E:3B:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B610/4393EAE01DA711E2842FDCA008B02CD2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B610/4393EAE01DA711E2842FDCA008B02CD2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:4d:d0:b8:ba:95:f5:96:4e:c5:d9:5c:cc:b8:be:fe:8f:da: d9:2b:b2:fa:c6:02:36:9e:21:ab:4f:81:00:43:63:6a:45:5f: 45:18:3c:dd:92:7b:50:f9:72:27:6e:7d:1f:3c:d0:fc:c5:ac: 54:36:53:3f:47:d0:25:9f:74:80:7d:5d:a7:17:d8:e8:67:58: ef:b1:17:63:77:f4:5b:f2:f7:2b:97:ce:5f:9f:3a:88:37:2d: 33:c9:c9:e3:21:6f:5b:76:55:04:33:3f:65:b9:df:7a:c5:b1: 43:0f:80:3f:47:9c:2b:05:14:1c:36:5f:18:30:81:21:a8:bf: 6a:e7:1a:2c:69:57:d0:59:ac:dc:b0:52:56:c7:93:15:30:d9: a1:c5:80:fc:94:7d:eb:f3:34:83:dd:e2:40:fe:a5:0f:4b:47: 50:97:71:22:b3:6e:97:8c:1d:55:7a:bc:3d:72:d1:88:b9:ca: 96:c1:ce:4b:18:98:d5:ca:64:d5:57:a7:51:d6:17:e2:5d:53: b8:b2:14:58:e3:6d:bd:90:61:7b:80:0a:b7:82:4c:7f:12:b1: f3:cb:f0:8c:c9:15:51:6a:d1:fc:58:21:89:ba:bb:5d:02:ef: c6:20:7c:9f:3a:ab:d3:9f:2e:85:e5:76:6a:c9:61:25:11:dc: c5:72:f9:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEI2MTAxMTAvBgNVBAUTKDdDNzI4Qjk3MDQyOUQ0NzAwOTc5NzhBMTZFNzY3QjIx REM2RTNCMUYwHhcNMjUwNzA0MTUyMTMzWhcNMjUwNzExMTUyMTMzWjAYMRYwFAYD VQQDEw02ODY3ZjE3ZC1jMzFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApkS+wctzMvsTJPMovKzCsbZ5cL1azQIeKRFtxrjVGOsV05SqgYVNnnKfC4uH KnshYIsWUggvNAAzpqL3r9ATuu2usB/8bVmD5G3HXMmcalCI+OePRXkl1RCu3uhy HNT2j99OxRXEV8V/sozIZPb8nXrW/B88r6zcG5ZMTkIjvAF8VPSryXVcOmvYXxe6 esT0tHsjIIAiooDehj1pcxnld39utTDxSLk+mPbkGKv9ZQrjyqhOWo6LbcA7SO+9 /oqLZY151lN1jnx8U2wK5EGYMmytnus8nkoSkjDTxykEuGwQzi4ThSlPvzz3MAFE /4ibXeHA0dD4yzoPKlEkA+l7KwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKMEB7fV mo8pNub/q+TC0BTtTHmTMB8GA1UdIwQYMBaAFHxyi5cEKdRwCXl4oW52eyHcbjsf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjYxMC80MzkzRUFFMDFE QTcxMUUyODQyRkRDQTAwOEIwMkNEMi9mSEtMbHdRcDFIQUplWGloYm5aN0lkeHVP eDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZIS0xsd1FwMUhBSmVYaWhiblo3SWR4dU94OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjYxMC80MzkzRUFFMDFEQTcxMUUyODQyRkRDQTAwOEIwMkNEMi9mSEtMbHdRcDFI QUplWGloYm5aN0lkeHVPeDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCATdC4upX1lk7F2VzMuL7+j9rZK7L6xgI2niGrT4EAQ2NqRV9FGDzd kntQ+XInbn0fPND8xaxUNlM/R9Aln3SAfV2nF9joZ1jvsRdjd/Rb8vcrl85fnzqI Ny0zycnjIW9bdlUEMz9lud96xbFDD4A/R5wrBRQcNl8YMIEhqL9q5xosaVfQWazc sFJWx5MVMNmhxYD8lH3r8zSD3eJA/qUPS0dQl3Eis26XjB1Verw9ctGIucqWwc5L GJjVymTVV6dR1hfiXVO4shRY4229kGF7gAq3gkx/ErHzy/CMyRVRatH8WCGJurtd Au/GIHyfOqvTny6F5XZqyWElEdzFcvlf -----END CERTIFICATE-----Generated at Sat Jul 5 18:45:31 2025 by rpki-client