$ rpki-client -vvf rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.mft File: MfW8lHJxAkr0efYTZGbay_FDhsI.mft (raw, json) Hash identifier: E2WMoWARjiRJVZ9kMsUrsAWYEsNnt5rVE+xUT01/gW8= Subject key identifier: 01:F6:14:16:3F:F5:9C:86:93:0E:C3:5F:71:15:31:39:FA:F0:D2:F4 Authority key identifier: 31:F5:BC:94:72:71:02:4A:F4:79:F6:13:64:66:DA:CB:F1:43:86:C2 Certificate issuer: /CN=A914F4AA/serialNumber=31F5BC947271024AF479F6136466DACBF14386C2 Certificate serial: 3496 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfW8lHJxAkr0efYTZGbay_FDhsI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.mft Manifest number: 3496 Signing time: Mon 30 Jun 2025 14:39:00 +0000 Manifest this update: Mon 30 Jun 2025 14:39:00 +0000 Manifest next update: Mon 07 Jul 2025 14:39:00 +0000 Files and hashes: 1: MfW8lHJxAkr0efYTZGbay_FDhsI.crl (hash: BTAAq5bDPIDaao4kYm5EUUTf1nQ5eDR6pindDOI0ESI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.crl rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfW8lHJxAkr0efYTZGbay_FDhsI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 14:38:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13462 (0x3496) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F4AA, serialNumber=31F5BC947271024AF479F6136466DACBF14386C2 Validity Not Before: Jun 30 14:39:00 2025 GMT Not After : Jul 7 14:39:00 2025 GMT Subject: CN=6862a184-fd29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:03:cc:53:01:5a:07:d6:4d:41:9a:a4:97:16: 3b:a9:35:9c:da:c3:3e:d7:26:3d:9e:e1:97:34:f6: 81:32:dd:27:e3:55:bd:1e:be:14:0b:f1:4a:2d:07: 31:7c:d9:5d:90:a4:f6:7d:15:79:9c:30:c0:f0:93: c2:29:41:01:fd:1e:ed:de:1c:d9:4b:63:f8:7c:b4: 75:d9:c6:59:21:f9:ac:81:fe:96:48:79:00:92:f0: 83:0a:cd:31:c3:b3:67:96:7e:63:24:7f:5c:35:49: 02:b1:29:1a:69:d3:1f:fb:44:7f:b2:82:c0:df:1c: 92:5a:7c:9a:21:76:a6:5c:5d:77:b4:2d:82:c8:a0: a5:61:54:e8:a2:97:a4:a5:75:a3:b2:e6:31:c8:d9: 6b:58:72:65:23:34:6b:4d:96:30:38:36:8d:bc:ec: 19:35:52:d2:75:d7:7b:3e:86:02:46:25:1e:7d:1d: f7:f9:80:bc:c7:ba:37:52:90:27:33:86:76:b9:09: 2b:57:4a:c2:c7:66:71:f2:71:9a:4f:d9:03:71:2d: d2:28:8e:32:a3:1d:8b:dc:c2:fc:b0:f5:11:60:7a: 7f:d0:72:4f:12:aa:a3:dd:27:d9:49:6e:87:f4:df: 8f:a6:9a:74:eb:1f:47:72:f7:11:c5:65:70:61:5a: 15:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:F6:14:16:3F:F5:9C:86:93:0E:C3:5F:71:15:31:39:FA:F0:D2:F4 X509v3 Authority Key Identifier: keyid:31:F5:BC:94:72:71:02:4A:F4:79:F6:13:64:66:DA:CB:F1:43:86:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfW8lHJxAkr0efYTZGbay_FDhsI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:f9:78:b3:2f:8a:ea:b0:0b:f4:4c:77:35:b1:ae:81:9e:52: 1c:ea:26:87:92:63:06:f1:da:61:bb:3f:af:40:06:25:94:fa: bb:3b:20:32:da:52:37:85:1b:b1:28:b3:44:4e:aa:dd:29:67: 46:56:76:b0:10:c5:83:22:86:3f:7e:be:ac:41:60:62:1e:e7: 92:51:60:81:ef:69:56:27:45:93:ae:fc:78:61:75:7e:e7:5a: 12:a7:b8:e5:46:97:13:5f:3d:b0:52:96:46:5f:4a:80:fe:9a: 00:d2:bb:e0:30:1f:14:c1:8c:f7:35:6c:5f:c9:d0:33:49:b2: e1:0d:03:a6:93:3c:d6:82:01:de:ae:f0:bd:a8:cd:7d:59:4c: 1d:cc:03:16:60:b2:dc:f3:f5:21:9b:60:20:54:9c:fb:00:b3: 12:77:74:bb:46:08:da:4a:d1:76:4d:b9:de:a5:76:1a:bc:41: ce:11:bc:4c:10:9f:30:09:b6:00:27:4f:9f:e2:13:87:2c:c9: 8c:98:58:bc:c3:52:11:d2:78:15:71:35:12:56:a8:28:ff:18: ca:6d:e0:6b:49:c4:d7:67:03:b3:04:21:b3:a4:98:51:08:98: 59:5d:33:e4:13:23:25:68:02:03:00:12:43:63:32:5c:f7:90: 68:03:ce:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEY0QUExMTAvBgNVBAUTKDMxRjVCQzk0NzI3MTAyNEFGNDc5RjYxMzY0NjZEQUNC RjE0Mzg2QzIwHhcNMjUwNjMwMTQzOTAwWhcNMjUwNzA3MTQzOTAwWjAYMRYwFAYD VQQDEw02ODYyYTE4NC1mZDI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6QPMUwFaB9ZNQZqklxY7qTWc2sM+1yY9nuGXNPaBMt0n41W9Hr4UC/FKLQcx fNldkKT2fRV5nDDA8JPCKUEB/R7t3hzZS2P4fLR12cZZIfmsgf6WSHkAkvCDCs0x w7Nnln5jJH9cNUkCsSkaadMf+0R/soLA3xySWnyaIXamXF13tC2CyKClYVToopek pXWjsuYxyNlrWHJlIzRrTZYwODaNvOwZNVLSddd7PoYCRiUefR33+YC8x7o3UpAn M4Z2uQkrV0rCx2Zx8nGaT9kDcS3SKI4yox2L3ML8sPURYHp/0HJPEqqj3SfZSW6H 9N+Pppp06x9HcvcRxWVwYVoV4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAH2FBY/ 9ZyGkw7DX3EVMTn68NL0MB8GA1UdIwQYMBaAFDH1vJRycQJK9Hn2E2Rm2svxQ4bC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjRBQS9FOUYyQ0E0MDFE OEExMUUyODM0RDNFRTUwOEIwMkNEMi9NZlc4bEhKeEFrcjBlZllUWkdiYXlfRkRo c0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01mVzhsSEp4QWtyMGVmWVRaR2JheV9GRGhzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RjRBQS9FOUYyQ0E0MDFEOEExMUUyODM0RDNFRTUwOEIwMkNEMi9NZlc4bEhKeEFr cjBlZllUWkdiYXlfRkRoc0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBq+XizL4rqsAv0THc1sa6BnlIc6iaHkmMG8dphuz+vQAYllPq7OyAy 2lI3hRuxKLNETqrdKWdGVnawEMWDIoY/fr6sQWBiHueSUWCB72lWJ0WTrvx4YXV+ 51oSp7jlRpcTXz2wUpZGX0qA/poA0rvgMB8UwYz3NWxfydAzSbLhDQOmkzzWggHe rvC9qM19WUwdzAMWYLLc8/Uhm2AgVJz7ALMSd3S7RgjaStF2TbnepXYavEHOEbxM EJ8wCbYAJ0+f4hOHLMmMmFi8w1IR0ngVcTUSVqgo/xjKbeBrScTXZwOzBCGzpJhR CJhZXTPkEyMlaAIDABJDYzJc95BoA865 -----END CERTIFICATE-----Generated at Wed Jul 2 05:31:18 2025 by rpki-client