$ rpki-client -vvf rpki.apnic.net/member_repository/A917AE24/8EC4009430A411EC8BEDB82DC4F9AE02/13OnYxe8qx7vA29fbkx7NMSra3s.mft File: 13OnYxe8qx7vA29fbkx7NMSra3s.mft (raw, json) Hash identifier: cu/kp8tdkwx81VVSDut23jkN8JNqlAwFTADYMAhwIhg= Subject key identifier: CE:C3:1C:14:B4:1E:FC:E6:4B:F8:DC:DD:21:10:31:72:D6:C0:5D:FE Authority key identifier: D7:73:A7:63:17:BC:AB:1E:EF:03:6F:5F:6E:4C:7B:34:C4:AB:6B:7B Certificate issuer: /CN=A917AE24/serialNumber=D773A76317BCAB1EEF036F5F6E4C7B34C4AB6B7B Certificate serial: 04BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/13OnYxe8qx7vA29fbkx7NMSra3s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917AE24/8EC4009430A411EC8BEDB82DC4F9AE02/13OnYxe8qx7vA29fbkx7NMSra3s.mft Manifest number: 04BA Signing time: Sat 28 Jun 2025 23:26:55 +0000 Manifest this update: Sat 28 Jun 2025 23:26:55 +0000 Manifest next update: Sat 05 Jul 2025 23:26:55 +0000 Files and hashes: 1: 13OnYxe8qx7vA29fbkx7NMSra3s.crl (hash: r6gmwv/p92rpltMgi1DqPV824OchzxjrltYY6PWwYJE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917AE24/8EC4009430A411EC8BEDB82DC4F9AE02/13OnYxe8qx7vA29fbkx7NMSra3s.crl rsync://rpki.apnic.net/member_repository/A917AE24/8EC4009430A411EC8BEDB82DC4F9AE02/13OnYxe8qx7vA29fbkx7NMSra3s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/13OnYxe8qx7vA29fbkx7NMSra3s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 23:26:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1210 (0x4ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917AE24, serialNumber=D773A76317BCAB1EEF036F5F6E4C7B34C4AB6B7B Validity Not Before: Jun 28 23:26:55 2025 GMT Not After : Jul 5 23:26:55 2025 GMT Subject: CN=68607a3f-a28c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ac:e4:29:d1:71:6d:c7:52:1c:24:9c:2c:97: 45:71:8c:b0:87:43:f1:cb:c8:21:41:11:1a:ba:5c: 4e:89:36:bf:1a:31:60:56:43:8f:63:a2:52:48:f7: 40:60:88:e0:27:14:e1:20:0a:bb:9c:a1:f7:cf:bc: 5a:78:50:00:77:5d:8f:ac:df:70:ef:c6:5a:3f:2f: bb:1e:e1:0e:88:4e:28:ca:b9:86:e6:5a:58:c6:b7: 02:7a:f3:b2:89:b0:76:78:da:1e:66:30:92:06:92: 46:81:51:55:b0:f8:e8:93:47:e4:f8:c9:df:b8:be: 93:76:cf:5a:32:81:aa:bb:22:3f:b5:68:bc:6b:b3: 91:de:2d:43:5c:46:e9:5a:94:bc:f0:9b:86:b0:c8: 3e:9d:e6:05:d1:66:b8:7c:c2:30:26:03:fc:da:80: 04:c2:95:1a:a3:28:fb:3e:fe:17:db:dc:67:ee:24: 66:6c:7f:fa:4f:22:8b:1d:50:4a:9e:fc:26:ec:63: 20:27:ed:c5:76:48:b5:10:61:3c:d7:52:0f:65:aa: 4e:38:3a:ee:30:ce:4d:83:3c:33:49:d1:2f:8a:57: 65:4f:95:ad:65:40:c5:74:c2:ef:ac:5c:90:e2:11: 8a:79:ab:c8:f6:bc:17:90:8b:aa:21:a0:f5:54:a3: d2:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:C3:1C:14:B4:1E:FC:E6:4B:F8:DC:DD:21:10:31:72:D6:C0:5D:FE X509v3 Authority Key Identifier: keyid:D7:73:A7:63:17:BC:AB:1E:EF:03:6F:5F:6E:4C:7B:34:C4:AB:6B:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917AE24/8EC4009430A411EC8BEDB82DC4F9AE02/13OnYxe8qx7vA29fbkx7NMSra3s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/13OnYxe8qx7vA29fbkx7NMSra3s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AE24/8EC4009430A411EC8BEDB82DC4F9AE02/13OnYxe8qx7vA29fbkx7NMSra3s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:43:c3:64:1b:ec:14:95:96:98:e3:83:b3:25:f8:36:88:01: df:00:ee:d1:d8:9c:4c:67:b5:b8:bd:06:b0:84:79:4f:dc:10: 6d:cc:76:c5:dc:26:87:4b:4a:76:2f:07:ac:9d:94:da:29:85: 04:c0:b0:59:3b:2f:c5:bb:2b:78:0f:5f:9f:f4:c2:a3:05:43: 62:79:e2:f0:b1:0f:72:e7:f2:34:52:04:31:81:c3:5a:fc:59: aa:53:9c:c2:ef:0b:70:ab:af:08:3c:ad:dc:96:31:f6:93:36: 95:ef:cf:fa:7a:81:fc:22:32:38:91:19:0a:63:4e:b2:85:49: c9:d3:d3:66:ba:30:0c:91:3b:7f:76:d9:1a:5e:9d:6f:54:aa: 4f:2c:da:33:44:bd:ce:96:e0:0a:29:be:79:19:12:b3:74:de: cc:74:e9:ad:b3:50:26:67:44:d0:3f:27:f4:2b:ff:6d:1d:df: d0:22:0a:b2:79:10:f8:b3:b9:c4:fe:5f:99:2e:d7:fe:bb:99: 1f:67:c9:b7:e4:5a:89:df:89:ea:69:d2:fd:81:17:49:72:9e: 02:31:ae:8d:55:e7:ce:0e:42:55:79:2b:8a:dd:5e:40:ac:13: db:e8:55:4d:dd:7d:93:61:e1:c6:64:a0:d7:96:13:ab:d1:f2: c0:66:b5:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FFMjQxMTAvBgNVBAUTKEQ3NzNBNzYzMTdCQ0FCMUVFRjAzNkY1RjZFNEM3QjM0 QzRBQjZCN0IwHhcNMjUwNjI4MjMyNjU1WhcNMjUwNzA1MjMyNjU1WjAYMRYwFAYD VQQDEw02ODYwN2EzZi1hMjhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApazkKdFxbcdSHCScLJdFcYywh0Pxy8ghQREaulxOiTa/GjFgVkOPY6JSSPdA YIjgJxThIAq7nKH3z7xaeFAAd12PrN9w78ZaPy+7HuEOiE4oyrmG5lpYxrcCevOy ibB2eNoeZjCSBpJGgVFVsPjok0fk+MnfuL6Tds9aMoGquyI/tWi8a7OR3i1DXEbp WpS88JuGsMg+neYF0Wa4fMIwJgP82oAEwpUaoyj7Pv4X29xn7iRmbH/6TyKLHVBK nvwm7GMgJ+3Fdki1EGE811IPZapOODruMM5NgzwzSdEvildlT5WtZUDFdMLvrFyQ 4hGKeavI9rwXkIuqIaD1VKPSgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM7DHBS0 HvzmS/jc3SEQMXLWwF3+MB8GA1UdIwQYMBaAFNdzp2MXvKse7wNvX25MezTEq2t7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUUyNC84RUM0MDA5NDMw QTQxMUVDOEJFREI4MkRDNEY5QUUwMi8xM09uWXhlOHF4N3ZBMjlmYmt4N05NU3Jh M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzEzT25ZeGU4cXg3dkEyOWZia3g3Tk1TcmEzcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUUyNC84RUM0MDA5NDMwQTQxMUVDOEJFREI4MkRDNEY5QUUwMi8xM09uWXhlOHF4 N3ZBMjlmYmt4N05NU3JhM3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnQ8NkG+wUlZaY44OzJfg2iAHfAO7R2JxMZ7W4vQawhHlP3BBtzHbF 3CaHS0p2LwesnZTaKYUEwLBZOy/Fuyt4D1+f9MKjBUNieeLwsQ9y5/I0UgQxgcNa /FmqU5zC7wtwq68IPK3cljH2kzaV78/6eoH8IjI4kRkKY06yhUnJ09NmujAMkTt/ dtkaXp1vVKpPLNozRL3OluAKKb55GRKzdN7MdOmts1AmZ0TQPyf0K/9tHd/QIgqy eRD4s7nE/l+ZLtf+u5kfZ8m35FqJ34nqadL9gRdJcp4CMa6NVefODkJVeSuK3V5A rBPb6FVN3X2TYeHGZKDXlhOr0fLAZrXh -----END CERTIFICATE-----Generated at Mon Jun 30 18:30:24 2025 by rpki-client