$ rpki-client -vvf rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.mft File: CRERb8OOld9ZFjfYxmS0X7FvS9o.mft (raw, json) Hash identifier: FIP+y7TLz3jj8WBu3+chOur9jnm92BQlsg5IuZ3N2Rs= Subject key identifier: 7E:DC:CD:3E:28:2C:46:A0:BA:B1:AD:5F:4F:81:1E:D2:B7:79:5C:6A Authority key identifier: 09:11:11:6F:C3:8E:95:DF:59:16:37:D8:C6:64:B4:5F:B1:6F:4B:DA Certificate issuer: /CN=A9174C7A/serialNumber=0911116FC38E95DF591637D8C664B45FB16F4BDA Certificate serial: 0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CRERb8OOld9ZFjfYxmS0X7FvS9o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.mft Manifest number: 0F Signing time: Sun 29 Jun 2025 07:05:01 +0000 Manifest this update: Sun 29 Jun 2025 07:05:00 +0000 Manifest next update: Sun 06 Jul 2025 07:05:00 +0000 Files and hashes: 1: CRERb8OOld9ZFjfYxmS0X7FvS9o.crl (hash: EmRW+oNjebZFmJTlrxGwCmrBrH1Y5VFbWg6Lg28Brw4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.crl rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CRERb8OOld9ZFjfYxmS0X7FvS9o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 07:05:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174C7A, serialNumber=0911116FC38E95DF591637D8C664B45FB16F4BDA Validity Not Before: Jun 29 07:05:00 2025 GMT Not After : Jul 6 07:05:00 2025 GMT Subject: CN=6860e59c-1aea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ab:68:23:cd:5e:0c:6e:38:68:bc:43:10:40: 1a:58:f2:4c:78:8f:75:b5:44:39:d1:e9:05:d5:2c: dd:6a:91:8f:81:d9:c3:19:ef:71:dd:07:a0:51:ff: 77:33:d1:49:9d:ec:3c:aa:2f:f5:c2:a6:e0:1e:6e: d2:6d:4e:e1:20:e6:81:db:61:6a:2f:86:8a:9d:f0: 77:ee:67:94:5e:65:28:06:53:33:8b:83:c3:da:59: c0:99:70:d8:e4:e1:66:4f:9b:4d:37:42:3a:37:e1: 5a:1d:29:e5:58:52:73:be:36:52:e3:c3:7e:98:77: 67:cb:ea:a8:fe:d8:f6:32:b6:0a:c9:66:96:b2:bf: 20:6a:7d:eb:12:87:10:c8:df:25:82:c1:77:4a:14: 58:01:13:2c:44:62:29:2e:ab:cc:c8:40:43:1e:6a: 95:a1:fa:e7:4c:36:3e:47:f3:0f:82:58:f3:cd:bc: 56:d6:c1:9a:98:d6:74:76:e6:58:46:71:18:9f:d7: 61:d1:98:b7:ee:28:6c:fe:fa:e5:35:8c:bd:49:95: 48:91:b2:24:28:c2:26:5d:2e:bf:90:73:7f:13:1b: ac:c8:66:67:1d:55:51:43:6a:43:ed:e3:b7:e5:ee: 97:a8:0e:91:3a:d6:8b:21:b3:7a:a0:25:2a:38:3f: 64:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:DC:CD:3E:28:2C:46:A0:BA:B1:AD:5F:4F:81:1E:D2:B7:79:5C:6A X509v3 Authority Key Identifier: keyid:09:11:11:6F:C3:8E:95:DF:59:16:37:D8:C6:64:B4:5F:B1:6F:4B:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CRERb8OOld9ZFjfYxmS0X7FvS9o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:33:98:d3:2b:58:a4:28:f6:ad:be:4e:48:bb:57:0e:86:6d: f9:2e:f6:59:f5:4c:f7:44:3d:e8:7f:cd:3f:79:d8:de:87:96: a7:f1:77:2d:18:b2:cb:ae:75:8b:34:46:94:cf:55:8f:db:c4: 9c:cb:eb:90:44:f7:15:3b:4d:27:ff:88:9a:4b:32:72:cc:1c: d0:c5:46:f1:4b:71:35:18:a0:95:fe:5f:ad:3a:11:4d:d6:59: ea:0b:95:4b:e1:62:c2:ee:a5:d4:9f:49:e2:6d:a0:6a:90:46: 5b:f3:40:9e:76:e2:bf:77:37:fb:30:be:ee:7a:37:08:44:c7: 2c:e8:6b:e2:55:79:ea:73:2a:b5:84:e4:3e:7e:ec:cf:53:30: df:b5:74:e8:06:44:c2:ce:b5:c9:97:6a:3c:57:37:63:68:61: 1b:79:55:6f:e3:a4:a6:77:0f:25:ec:9d:44:cf:d9:5a:d4:42: 65:92:a4:e5:db:ed:d7:48:7a:af:ed:b4:3d:f1:b5:f7:4c:ce: 96:de:92:a0:5b:d9:d6:3a:34:5b:59:54:e4:2f:34:d4:b5:4b: b5:32:71:2f:d8:75:52:ad:22:bf:90:58:4a:e8:f9:ed:e7:47: af:74:d7:53:96:33:aa:ff:70:c5:d3:3b:b3:4d:19:4f:c5:9a: f0:b7:c1:60 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NEM3QTExMC8GA1UEBRMoMDkxMTExNkZDMzhFOTVERjU5MTYzN0Q4QzY2NEI0NUZC MTZGNEJEQTAeFw0yNTA2MjkwNzA1MDBaFw0yNTA3MDYwNzA1MDBaMBgxFjAUBgNV BAMTDTY4NjBlNTljLTFhZWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSq2gjzV4MbjhovEMQQBpY8kx4j3W1RDnR6QXVLN1qkY+B2cMZ73HdB6BR/3cz 0Umd7DyqL/XCpuAebtJtTuEg5oHbYWovhoqd8HfuZ5ReZSgGUzOLg8PaWcCZcNjk 4WZPm003Qjo34VodKeVYUnO+NlLjw36Yd2fL6qj+2PYytgrJZpayvyBqfesShxDI 3yWCwXdKFFgBEyxEYikuq8zIQEMeapWh+udMNj5H8w+CWPPNvFbWwZqY1nR25lhG cRif12HRmLfuKGz++uU1jL1JlUiRsiQowiZdLr+Qc38TG6zIZmcdVVFDakPt47fl 7peoDpE61oshs3qgJSo4P2SnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUftzNPigs RqC6sa1fT4Ee0rd5XGowHwYDVR0jBBgwFoAUCRERb8OOld9ZFjfYxmS0X7FvS9ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc0QzdBLzRERjE2REQwNDA0 NjExRjA5QkYwRDg0RkM0RjlBRTAyL0NSRVJiOE9PbGQ5WkZqZll4bVMwWDdGdlM5 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ1JFUmI4T09sZDlaRmpmWXhtUzBYN0Z2UzlvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc0 QzdBLzRERjE2REQwNDA0NjExRjA5QkYwRDg0RkM0RjlBRTAyL0NSRVJiOE9PbGQ5 WkZqZll4bVMwWDdGdlM5by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA4zmNMrWKQo9q2+Tki7Vw6Gbfku9ln1TPdEPeh/zT952N6Hlqfxdy0Y ssuudYs0RpTPVY/bxJzL65BE9xU7TSf/iJpLMnLMHNDFRvFLcTUYoJX+X606EU3W WeoLlUvhYsLupdSfSeJtoGqQRlvzQJ524r93N/swvu56NwhExyzoa+JVeepzKrWE 5D5+7M9TMN+1dOgGRMLOtcmXajxXN2NoYRt5VW/jpKZ3DyXsnUTP2VrUQmWSpOXb 7ddIeq/ttD3xtfdMzpbekqBb2dY6NFtZVOQvNNS1S7UycS/YdVKtIr+QWEro+e3n R69011OWM6r/cMXTO7NNGU/FmvC3wWA= -----END CERTIFICATE-----Generated at Mon Jun 30 00:03:50 2025 by rpki-client