$ rpki-client -vvf rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/ADiahleuCYgERy-OaNcF4u_b18A.mft File: ADiahleuCYgERy-OaNcF4u_b18A.mft (raw, json) Hash identifier: kpRHHQ8eFogILIAdtAwonWpn5qdHLuNpP2pDDELVns4= Subject key identifier: 22:E4:62:2F:81:85:EE:81:BA:1B:87:A2:DD:13:5D:44:80:4B:C4:93 Authority key identifier: 00:38:9A:86:57:AE:09:88:04:47:2F:8E:68:D7:05:E2:EF:DB:D7:C0 Certificate issuer: /CN=A914FA25/serialNumber=00389A8657AE098804472F8E68D705E2EFDBD7C0 Certificate serial: 0157 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ADiahleuCYgERy-OaNcF4u_b18A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/ADiahleuCYgERy-OaNcF4u_b18A.mft Manifest number: 0E03 Signing time: Wed 02 Jul 2025 19:06:18 +0000 Manifest this update: Wed 02 Jul 2025 19:06:17 +0000 Manifest next update: Wed 09 Jul 2025 19:06:17 +0000 Files and hashes: 1: ADiahleuCYgERy-OaNcF4u_b18A.crl (hash: OFt349k8eLZpwb08+v/e5FREEfffvpN0/kOZmA+vw+0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/ADiahleuCYgERy-OaNcF4u_b18A.crl rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/ADiahleuCYgERy-OaNcF4u_b18A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ADiahleuCYgERy-OaNcF4u_b18A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:06:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 343 (0x157) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914FA25, serialNumber=00389A8657AE098804472F8E68D705E2EFDBD7C0 Validity Not Before: Jul 2 19:06:17 2025 GMT Not After : Jul 9 19:06:17 2025 GMT Subject: CN=68658329-659d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0f:70:55:f0:dd:f3:5f:6f:f0:94:4a:18:e0: fd:c1:61:a7:b2:cf:ca:a0:f7:77:77:23:6e:ec:fa: ee:17:6c:d5:02:78:7e:64:89:7b:fe:b6:0e:99:50: e8:13:3d:14:48:68:41:5d:33:a8:94:cb:88:f9:98: 77:22:07:e3:75:19:ae:07:54:dd:a9:87:ed:fa:b1: 6a:49:2d:5a:80:b6:45:ca:b9:b1:c3:99:5b:2e:b0: ff:7e:c1:00:c5:fb:52:c5:1e:dc:c2:e2:42:c8:67: af:70:16:36:52:a5:96:8e:47:26:8a:64:fb:5e:87: 64:75:8d:fa:ed:4d:7c:4f:87:a7:02:a8:4a:1c:df: eb:78:09:7d:65:02:48:b9:b2:e9:d4:db:7f:bf:fe: 6e:8c:b5:c6:56:be:6e:c3:5e:9a:69:ac:8a:e7:f7: 70:e0:f6:0c:58:0c:91:c6:80:f7:7b:61:3a:72:9f: a2:6e:3e:c4:2f:89:7c:6e:da:ce:ae:8e:c4:f2:80: 22:44:4b:da:60:2a:a4:67:9d:c1:bc:45:22:1b:3e: d2:b1:89:b7:e2:54:10:b9:76:1c:ed:84:ef:e6:33: 42:18:c5:6d:69:cc:c3:df:cb:d5:1e:07:4c:83:aa: a2:5e:76:ed:1d:38:75:58:26:83:1e:a6:0c:da:88: 9b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:E4:62:2F:81:85:EE:81:BA:1B:87:A2:DD:13:5D:44:80:4B:C4:93 X509v3 Authority Key Identifier: keyid:00:38:9A:86:57:AE:09:88:04:47:2F:8E:68:D7:05:E2:EF:DB:D7:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/ADiahleuCYgERy-OaNcF4u_b18A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ADiahleuCYgERy-OaNcF4u_b18A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/ADiahleuCYgERy-OaNcF4u_b18A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:78:ba:20:8f:aa:48:17:f3:48:32:d9:12:42:4e:6f:c8:e2: 61:a8:c8:01:05:5a:0f:a8:a8:4b:bc:8c:e6:0e:7e:cb:65:f7: bb:65:f4:7d:3d:da:45:5b:38:7f:c9:2a:d7:87:3c:b3:fd:fb: a4:71:0c:55:4c:68:0e:52:e0:7d:e3:09:fb:64:d7:5b:22:be: ee:e8:06:9c:2d:74:c8:41:c7:fc:28:0a:92:6b:4c:7d:2b:20: b9:4d:90:ec:9b:3a:4e:db:2e:85:96:70:1d:25:11:38:42:ab: 54:91:a2:aa:62:44:ba:af:3e:2e:4d:38:49:d3:4b:33:87:55: 3e:a2:8a:63:be:fe:da:b8:68:4e:ef:13:b6:11:a1:25:11:77: 56:a9:0e:4a:be:1a:72:eb:0a:9f:04:f2:bf:cb:cf:f4:f6:a4: c8:3b:62:25:71:5e:2e:a9:4a:88:c8:26:a8:79:fa:a9:49:9c: fa:d9:29:56:3e:df:76:f2:d6:df:82:db:cb:d3:87:49:2a:b3: 08:9e:44:43:65:c6:d4:fc:eb:8a:91:e8:fc:86:54:b9:fc:c5: c1:10:ed:99:d3:2c:62:40:37:39:7a:0f:55:8c:2d:cc:c0:48: 44:3f:a0:5d:d3:8e:92:a6:25:2f:42:98:12:2e:a5:d7:4d:cc: 24:32:0a:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEZBMjUxMTAvBgNVBAUTKDAwMzg5QTg2NTdBRTA5ODgwNDQ3MkY4RTY4RDcwNUUy RUZEQkQ3QzAwHhcNMjUwNzAyMTkwNjE3WhcNMjUwNzA5MTkwNjE3WjAYMRYwFAYD VQQDEw02ODY1ODMyOS02NTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyQ9wVfDd819v8JRKGOD9wWGnss/KoPd3dyNu7PruF2zVAnh+ZIl7/rYOmVDo Ez0USGhBXTOolMuI+Zh3IgfjdRmuB1TdqYft+rFqSS1agLZFyrmxw5lbLrD/fsEA xftSxR7cwuJCyGevcBY2UqWWjkcmimT7XodkdY367U18T4enAqhKHN/reAl9ZQJI ubLp1Nt/v/5ujLXGVr5uw16aaayK5/dw4PYMWAyRxoD3e2E6cp+ibj7EL4l8btrO ro7E8oAiREvaYCqkZ53BvEUiGz7SsYm34lQQuXYc7YTv5jNCGMVtaczD38vVHgdM g6qiXnbtHTh1WCaDHqYM2oib1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCLkYi+B he6BuhuHot0TXUSAS8STMB8GA1UdIwQYMBaAFAA4moZXrgmIBEcvjmjXBeLv29fA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RkEyNS8yQkJDQkNBQTFE QUMxMUVBQUY0QTM3NjNDNEY5QUUwMi9BRGlhaGxldUNZZ0VSeS1PYU5jRjR1X2Ix OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FEaWFobGV1Q1lnRVJ5LU9hTmNGNHVfYjE4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RkEyNS8yQkJDQkNBQTFEQUMxMUVBQUY0QTM3NjNDNEY5QUUwMi9BRGlhaGxldUNZ Z0VSeS1PYU5jRjR1X2IxOEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjeLogj6pIF/NIMtkSQk5vyOJhqMgBBVoPqKhLvIzmDn7LZfe7ZfR9 PdpFWzh/ySrXhzyz/fukcQxVTGgOUuB94wn7ZNdbIr7u6AacLXTIQcf8KAqSa0x9 KyC5TZDsmzpO2y6FlnAdJRE4QqtUkaKqYkS6rz4uTThJ00szh1U+oopjvv7auGhO 7xO2EaElEXdWqQ5Kvhpy6wqfBPK/y8/09qTIO2IlcV4uqUqIyCaoefqpSZz62SlW Pt928tbfgtvL04dJKrMInkRDZcbU/OuKkej8hlS5/MXBEO2Z0yxiQDc5eg9VjC3M wEhEP6Bd046SpiUvQpgSLqXXTcwkMgoW -----END CERTIFICATE-----Generated at Thu Jul 3 08:04:42 2025 by rpki-client