$ rpki-client -vvf rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.mft File: Crfzan3eThH0sBWX3w3nopqAvEQ.mft (raw, json) Hash identifier: dIEOud6ofqF6v1bRL+1Aixtpq5nHwJDZPlNuvAqhtAE= Subject key identifier: 7E:39:DF:C2:CD:B0:E9:24:4E:E5:F9:D9:2E:5F:20:1B:13:F9:4A:94 Authority key identifier: 0A:B7:F3:6A:7D:DE:4E:11:F4:B0:15:97:DF:0D:E7:A2:9A:80:BC:44 Certificate issuer: /CN=A917F352/serialNumber=0AB7F36A7DDE4E11F4B01597DF0DE7A29A80BC44 Certificate serial: 011E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Crfzan3eThH0sBWX3w3nopqAvEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.mft Manifest number: 011C Signing time: Tue 01 Jul 2025 05:15:14 +0000 Manifest this update: Tue 01 Jul 2025 05:15:14 +0000 Manifest next update: Tue 08 Jul 2025 05:15:14 +0000 Files and hashes: 1: Crfzan3eThH0sBWX3w3nopqAvEQ.crl (hash: leVq8mtOVuF7dS3tlYIV7h1nnxHiUqN2GwYMy58VRlk=) 2: 8FE6CF86A1FB11EE9773325BC4F9AE02.roa (hash: 7+HziPW8bdU4fmbvKj0ZUtapknCkvsD+7VoRTrV2tSY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.crl rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Crfzan3eThH0sBWX3w3nopqAvEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 05:15:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 286 (0x11e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F352, serialNumber=0AB7F36A7DDE4E11F4B01597DF0DE7A29A80BC44 Validity Not Before: Jul 1 05:15:14 2025 GMT Not After : Jul 8 05:15:14 2025 GMT Subject: CN=68636ee2-b8db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b1:b5:ae:e0:6e:73:3a:1c:7e:4a:b1:9b:a6: 98:01:84:6f:c6:bf:59:60:91:3e:df:61:de:29:9a: 5b:97:f5:fe:79:14:b5:cc:db:3e:fb:68:0c:57:88: dd:77:1b:33:27:2c:ba:4f:18:45:e2:42:7b:74:77: 19:c8:b8:26:02:fc:d3:aa:fa:3b:d9:3a:e1:e8:61: a6:df:85:0a:94:90:08:3a:2d:95:cc:8b:37:40:04: 68:b3:3a:c4:3b:9d:a5:78:c3:47:18:43:13:df:7d: 00:d2:66:64:b7:8a:6e:03:32:37:20:81:54:23:0b: 60:07:fd:2c:f1:25:08:7d:44:f3:8e:2c:5e:23:2c: 22:99:22:e0:35:72:24:a8:77:bb:29:d0:aa:6f:7c: 78:52:7c:9f:09:f0:f6:f8:4b:24:01:c2:11:32:75: dd:40:55:0f:05:58:a1:d3:88:68:0a:8a:3d:db:a0: 54:76:35:aa:ec:2a:0c:8d:70:76:7e:b6:c6:88:93: 09:ef:9e:cb:e2:8f:55:16:24:c4:9c:2b:4a:c8:00: 92:24:c0:2c:c6:d4:b8:26:45:d5:59:56:60:07:78: 35:f3:0c:64:6f:6f:b2:00:41:c4:87:6d:86:33:a2: 71:e2:67:37:99:34:b4:05:81:ec:0d:d3:4b:b0:27: 3a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:39:DF:C2:CD:B0:E9:24:4E:E5:F9:D9:2E:5F:20:1B:13:F9:4A:94 X509v3 Authority Key Identifier: keyid:0A:B7:F3:6A:7D:DE:4E:11:F4:B0:15:97:DF:0D:E7:A2:9A:80:BC:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Crfzan3eThH0sBWX3w3nopqAvEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:d7:09:d3:15:0a:b6:73:2a:60:76:a0:b2:84:10:14:23:42: 08:4d:c0:3f:17:4b:d5:3f:d6:fb:63:38:fe:bf:d9:6a:5c:a1: d1:63:e4:b7:59:af:45:3b:55:8c:db:aa:47:dc:cf:9f:af:a8: 41:c1:76:d2:46:00:44:6d:a8:d9:1e:46:15:39:92:26:9e:15: 99:82:21:55:c4:0b:7d:86:8b:b4:fa:93:25:05:85:4c:f7:3d: bd:5a:39:16:53:4e:e9:c8:e1:a2:47:3e:73:4a:ef:02:67:60: 21:2c:29:a8:39:4b:f5:cd:01:0a:ca:32:f0:76:07:00:f3:5a: 5a:6b:fb:d3:f6:66:af:e0:21:a0:18:41:ca:ae:6b:03:13:46: 11:c0:0d:b8:47:91:7c:9e:25:dd:6f:77:69:c3:4a:b2:95:78: 3b:02:76:26:a8:67:88:cd:36:f6:4e:57:28:92:ee:21:67:24: ad:d2:45:b7:d5:1a:bf:dd:ec:ae:7b:2a:4b:33:3e:ef:ef:f5: e1:8c:d9:62:17:38:e2:8b:f1:d5:49:6c:55:d1:29:5c:75:28: 61:c2:57:e7:5b:3c:25:21:c0:d5:77:fe:51:0b:34:25:a6:1d: 3b:2f:ac:ac:3c:c9:74:31:57:46:b8:ed:a3:eb:6a:46:92:58: 3b:29:0c:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YzNTIxMTAvBgNVBAUTKDBBQjdGMzZBN0RERTRFMTFGNEIwMTU5N0RGMERFN0Ey OUE4MEJDNDQwHhcNMjUwNzAxMDUxNTE0WhcNMjUwNzA4MDUxNTE0WjAYMRYwFAYD VQQDEw02ODYzNmVlMi1iOGRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqbG1ruBuczocfkqxm6aYAYRvxr9ZYJE+32HeKZpbl/X+eRS1zNs++2gMV4jd dxszJyy6TxhF4kJ7dHcZyLgmAvzTqvo72Trh6GGm34UKlJAIOi2VzIs3QARoszrE O52leMNHGEMT330A0mZkt4puAzI3IIFUIwtgB/0s8SUIfUTzjixeIywimSLgNXIk qHe7KdCqb3x4UnyfCfD2+EskAcIRMnXdQFUPBVih04hoCoo926BUdjWq7CoMjXB2 frbGiJMJ757L4o9VFiTEnCtKyACSJMAsxtS4JkXVWVZgB3g18wxkb2+yAEHEh22G M6Jx4mc3mTS0BYHsDdNLsCc6FwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH4538LN sOkkTuX52S5fIBsT+UqUMB8GA1UdIwQYMBaAFAq382p93k4R9LAVl98N56KagLxE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjM1Mi8zRDlEN0Y1RUEx RkIxMUVFQTM2MDkyNUFDNEY5QUUwMi9DcmZ6YW4zZVRoSDBzQldYM3czbm9wcUF2 RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NyZnphbjNlVGhIMHNCV1gzdzNub3BxQXZFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjM1Mi8zRDlEN0Y1RUExRkIxMUVFQTM2MDkyNUFDNEY5QUUwMi9DcmZ6YW4zZVRo SDBzQldYM3czbm9wcUF2RVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCG1wnTFQq2cypgdqCyhBAUI0IITcA/F0vVP9b7Yzj+v9lqXKHRY+S3 Wa9FO1WM26pH3M+fr6hBwXbSRgBEbajZHkYVOZImnhWZgiFVxAt9hou0+pMlBYVM 9z29WjkWU07pyOGiRz5zSu8CZ2AhLCmoOUv1zQEKyjLwdgcA81paa/vT9mav4CGg GEHKrmsDE0YRwA24R5F8niXdb3dpw0qylXg7AnYmqGeIzTb2Tlcoku4hZySt0kW3 1Rq/3eyueypLMz7v7/XhjNliFzjii/HVSWxV0SlcdShhwlfnWzwlIcDVd/5RCzQl ph07L6ysPMl0MVdGuO2j62pGklg7KQw9 -----END CERTIFICATE-----Generated at Thu Jul 3 00:56:36 2025 by rpki-client