$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED2B/04F7A58045B111EFBD598B77C4F9AE02/RevxDdQ0xSgZEpy5XhoT7ML81e0.mft File: RevxDdQ0xSgZEpy5XhoT7ML81e0.mft (raw, json) Hash identifier: ktJnT0ncoUqoeDekosjTW+eWVZ91CIaB4sS7P6tS2/s= Subject key identifier: 48:A2:18:21:BC:D3:C2:49:BB:9D:47:AC:A7:9A:AD:A1:9F:A8:5A:B3 Authority key identifier: 45:EB:F1:0D:D4:34:C5:28:19:12:9C:B9:5E:1A:13:EC:C2:FC:D5:ED Certificate issuer: /CN=A916ED2B/serialNumber=45EBF10DD434C52819129CB95E1A13ECC2FCD5ED Certificate serial: B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RevxDdQ0xSgZEpy5XhoT7ML81e0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916ED2B/04F7A58045B111EFBD598B77C4F9AE02/RevxDdQ0xSgZEpy5XhoT7ML81e0.mft Manifest number: B2 Signing time: Tue 01 Jul 2025 06:39:59 +0000 Manifest this update: Tue 01 Jul 2025 06:39:59 +0000 Manifest next update: Tue 08 Jul 2025 06:39:59 +0000 Files and hashes: 1: RevxDdQ0xSgZEpy5XhoT7ML81e0.crl (hash: m5KkWGO4bQDcydvlOd9KvPK9RGIqYrNZ05SNnZR3xqA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916ED2B/04F7A58045B111EFBD598B77C4F9AE02/RevxDdQ0xSgZEpy5XhoT7ML81e0.crl rsync://rpki.apnic.net/member_repository/A916ED2B/04F7A58045B111EFBD598B77C4F9AE02/RevxDdQ0xSgZEpy5XhoT7ML81e0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RevxDdQ0xSgZEpy5XhoT7ML81e0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 06:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 178 (0xb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916ED2B, serialNumber=45EBF10DD434C52819129CB95E1A13ECC2FCD5ED Validity Not Before: Jul 1 06:39:59 2025 GMT Not After : Jul 8 06:39:59 2025 GMT Subject: CN=686382bf-e7b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0f:b2:0a:7c:92:cf:06:ba:58:25:b0:f1:39: 0d:b2:2b:13:16:ff:be:8b:17:09:52:0a:6b:10:11: 90:89:e7:94:e6:9a:eb:72:e8:61:f7:df:5b:70:dd: 27:5b:f8:9c:a9:96:ff:09:4c:2d:0a:d8:1f:9a:c4: a5:fa:e6:01:5a:fe:92:d6:27:90:33:30:f4:f0:2e: 7d:bb:c4:e8:4c:85:92:dc:53:0c:d8:63:ea:da:e3: c0:c6:82:65:3a:4b:36:32:e5:21:1d:c4:00:e0:2f: b8:25:53:72:c5:f1:49:52:f8:5a:51:66:23:98:97: e8:69:a9:9b:e8:0a:b5:c9:ad:2f:9c:76:3a:54:f9: 01:db:5e:64:95:57:8d:03:a6:c1:ac:da:ac:24:bc: 1a:f2:26:35:b7:6c:cf:c3:53:99:4f:8c:08:bc:d8: c9:ab:c2:22:c2:f1:8c:6b:c0:10:8e:29:76:9b:a2: 03:d5:d6:68:e2:c2:32:d3:33:72:31:82:59:9b:3c: 3d:fa:b2:c4:97:a1:d4:34:31:e8:83:ab:74:7d:9a: 82:47:0e:3a:ad:3d:06:ed:25:3f:c8:e7:83:1a:c4: bc:1f:55:20:79:a2:3b:bb:6a:a6:bf:9a:3a:0e:48: b3:b0:e8:d4:76:34:8a:8e:cb:cc:21:14:90:3c:bf: 78:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:A2:18:21:BC:D3:C2:49:BB:9D:47:AC:A7:9A:AD:A1:9F:A8:5A:B3 X509v3 Authority Key Identifier: keyid:45:EB:F1:0D:D4:34:C5:28:19:12:9C:B9:5E:1A:13:EC:C2:FC:D5:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916ED2B/04F7A58045B111EFBD598B77C4F9AE02/RevxDdQ0xSgZEpy5XhoT7ML81e0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RevxDdQ0xSgZEpy5XhoT7ML81e0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED2B/04F7A58045B111EFBD598B77C4F9AE02/RevxDdQ0xSgZEpy5XhoT7ML81e0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:3d:a4:78:53:4c:a9:8b:63:e5:ee:8b:1a:c5:ec:5e:3a:36: 8a:c8:a0:9e:2c:a6:2f:ff:fe:ff:42:51:4d:69:5d:43:71:98: 6a:64:f2:f5:6e:5d:84:10:24:70:8c:b5:14:90:e4:c5:59:cc: 51:10:0d:5c:cf:34:8d:b3:50:9e:af:21:38:b4:41:c7:46:af: 41:0b:8a:aa:72:06:d1:55:ee:37:e4:71:a2:b0:7f:62:f4:b4: c9:f9:05:73:77:01:56:44:56:27:a7:2f:ce:37:ef:55:8a:dc: 08:65:5a:a6:08:0c:23:ae:5f:d8:37:b7:bf:59:f5:cd:2b:11: c8:0f:52:f0:74:25:e0:67:34:52:d4:0b:00:b9:3c:26:9c:36: db:e6:9d:f8:df:1c:12:37:a4:4c:15:5f:9d:1c:4d:a5:1f:7f: 87:f9:2c:d3:fc:95:0d:eb:eb:f2:e3:59:25:d3:20:80:dc:01: 9e:e3:16:5a:98:f4:c6:bc:e2:7d:a9:f7:37:05:5e:4a:58:53: 43:f5:0e:7f:5e:b2:09:d0:a9:84:36:13:96:68:43:98:bb:52: bf:5d:09:0b:f6:fb:ba:f0:f8:7f:4d:e6:5f:21:3a:87:55:46: 08:bc:ff:c2:1f:93:e9:30:e9:c7:78:ed:5d:30:dd:20:6f:92: f3:b1:49:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVEMkIxMTAvBgNVBAUTKDQ1RUJGMTBERDQzNEM1MjgxOTEyOUNCOTVFMUExM0VD QzJGQ0Q1RUQwHhcNMjUwNzAxMDYzOTU5WhcNMjUwNzA4MDYzOTU5WjAYMRYwFAYD VQQDEw02ODYzODJiZi1lN2IyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArw+yCnySzwa6WCWw8TkNsisTFv++ixcJUgprEBGQieeU5prrcuhh999bcN0n W/icqZb/CUwtCtgfmsSl+uYBWv6S1ieQMzD08C59u8ToTIWS3FMM2GPq2uPAxoJl Oks2MuUhHcQA4C+4JVNyxfFJUvhaUWYjmJfoaamb6Aq1ya0vnHY6VPkB215klVeN A6bBrNqsJLwa8iY1t2zPw1OZT4wIvNjJq8IiwvGMa8AQjil2m6ID1dZo4sIy0zNy MYJZmzw9+rLEl6HUNDHog6t0fZqCRw46rT0G7SU/yOeDGsS8H1UgeaI7u2qmv5o6 DkizsOjUdjSKjsvMIRSQPL94DwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEiiGCG8 08JJu51HrKearaGfqFqzMB8GA1UdIwQYMBaAFEXr8Q3UNMUoGRKcuV4aE+zC/NXt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUQyQi8wNEY3QTU4MDQ1 QjExMUVGQkQ1OThCNzdDNEY5QUUwMi9SZXZ4RGRRMHhTZ1pFcHk1WGhvVDdNTDgx ZTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JldnhEZFEweFNnWkVweTVYaG9UN01MODFlMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUQyQi8wNEY3QTU4MDQ1QjExMUVGQkQ1OThCNzdDNEY5QUUwMi9SZXZ4RGRRMHhT Z1pFcHk1WGhvVDdNTDgxZTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHPaR4U0ypi2Pl7osaxexeOjaKyKCeLKYv//7/QlFNaV1DcZhqZPL1 bl2EECRwjLUUkOTFWcxREA1czzSNs1CeryE4tEHHRq9BC4qqcgbRVe435HGisH9i 9LTJ+QVzdwFWRFYnpy/ON+9VitwIZVqmCAwjrl/YN7e/WfXNKxHID1LwdCXgZzRS 1AsAuTwmnDbb5p343xwSN6RMFV+dHE2lH3+H+SzT/JUN6+vy41kl0yCA3AGe4xZa mPTGvOJ9qfc3BV5KWFND9Q5/XrIJ0KmENhOWaEOYu1K/XQkL9vu68Ph/TeZfITqH VUYIvP/CH5PpMOnHeO1dMN0gb5LzsUlO -----END CERTIFICATE-----Generated at Tue Jul 1 07:42:15 2025 by rpki-client