$ rpki-client -vvf rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.mft File: 3OubbYP7AtxF6SA1OKXIr2-UH6k.mft (raw, json) Hash identifier: BSqxUpqR2GmXSikVSZuHREgtsu/+he16m+uBB6qrCks= Subject key identifier: D0:83:2B:59:4A:DA:14:49:52:A8:AC:E2:61:51:43:35:33:22:34:FB Authority key identifier: DC:EB:9B:6D:83:FB:02:DC:45:E9:20:35:38:A5:C8:AF:6F:94:1F:A9 Certificate issuer: /CN=A918D2CA/serialNumber=DCEB9B6D83FB02DC45E9203538A5C8AF6F941FA9 Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OubbYP7AtxF6SA1OKXIr2-UH6k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.mft Manifest number: 16 Signing time: Tue 01 Jul 2025 08:46:40 +0000 Manifest this update: Tue 01 Jul 2025 08:46:39 +0000 Manifest next update: Tue 08 Jul 2025 08:46:39 +0000 Files and hashes: 1: 3OubbYP7AtxF6SA1OKXIr2-UH6k.crl (hash: ZeogJGkKW6ipWdDHRL4J/qccbTx9FFTngTg04N063kE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.crl rsync://rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OubbYP7AtxF6SA1OKXIr2-UH6k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:46:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D2CA, serialNumber=DCEB9B6D83FB02DC45E9203538A5C8AF6F941FA9 Validity Not Before: Jul 1 08:46:39 2025 GMT Not After : Jul 8 08:46:39 2025 GMT Subject: CN=6863a070-fbb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f1:e0:44:ed:d0:72:76:4d:12:b6:8b:c8:91: c7:b2:ad:de:5b:4e:eb:30:0d:d3:6c:3e:b7:15:fa: 07:bf:dd:0b:7e:3e:d1:d2:7f:ca:fd:97:e0:f8:a7: d4:8a:de:59:36:02:c5:a7:6b:f5:d0:1d:1c:e8:f4: 73:b2:2c:0a:dc:a4:46:0d:ad:db:cb:73:58:18:74: 7a:d4:14:ac:cc:7b:ec:fa:47:78:82:c6:d3:d1:47: c2:fa:7a:eb:eb:6b:ff:aa:70:e0:fb:71:c9:03:11: 13:53:bc:cc:66:1c:85:eb:0d:b2:1c:2b:e4:c6:00: b4:ae:c9:ad:4d:84:cb:cc:1d:c7:2b:c7:10:b0:56: 86:1d:10:6d:2e:18:e9:df:41:7d:e5:c3:c8:83:13: 1b:52:b6:79:45:68:43:64:b8:5b:b0:0a:f2:80:4e: d8:de:23:60:d7:d8:1d:12:27:a6:b4:aa:44:0e:8a: fd:9d:5c:bf:c3:31:8c:48:a9:18:15:0e:d4:52:fb: ab:01:fc:d7:f8:7a:ad:48:14:7f:89:74:9e:7b:cb: 26:f7:ae:3b:0a:71:d5:70:2d:b3:1e:8c:0a:16:d3: b7:66:d1:02:9b:35:9b:0a:2a:60:ca:26:2d:fb:60: 27:56:84:dc:ae:5e:61:2a:21:e5:95:18:71:f6:99: d4:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:83:2B:59:4A:DA:14:49:52:A8:AC:E2:61:51:43:35:33:22:34:FB X509v3 Authority Key Identifier: keyid:DC:EB:9B:6D:83:FB:02:DC:45:E9:20:35:38:A5:C8:AF:6F:94:1F:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OubbYP7AtxF6SA1OKXIr2-UH6k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:69:c8:22:02:53:f5:4d:ff:9b:20:e6:99:30:da:35:ad:2a: 75:95:a9:3a:2d:82:45:f4:3d:29:38:94:2a:36:be:cd:27:1d: f5:38:f7:b8:21:2b:c6:ac:7e:56:5f:31:de:72:ac:7c:26:ee: 61:c3:da:89:9e:27:d7:2e:9c:81:d5:0a:97:bf:e5:0b:3f:b9: 62:07:9c:6e:6c:71:b6:62:a9:f9:bd:e4:46:dc:94:5e:24:32: 52:8d:71:53:0d:66:09:16:2b:9b:87:ec:c1:88:a8:3f:a3:44: 57:52:d5:ba:75:d7:be:9c:a6:14:23:f2:b5:0f:01:64:74:aa: c5:95:65:9b:13:35:da:fa:a3:da:cd:31:a6:4a:af:44:2f:67: cf:9f:82:f8:e9:53:e4:3b:c9:ec:26:b6:79:4d:02:05:0f:a2: f6:0c:0a:69:e2:c3:1e:78:b2:25:f9:8d:85:79:eb:cd:da:45: 79:58:78:7a:b6:9b:9a:13:b1:06:8d:60:37:a7:8a:0f:51:49: ac:8f:d6:75:ba:5d:5d:5d:cb:db:6e:56:9b:45:cc:12:20:f0: 1e:52:63:64:27:74:a9:0f:e1:62:50:fd:29:a9:93:69:ec:67: b7:cd:a3:3c:d1:f3:80:28:c5:5e:ec:04:68:bc:4b:7a:ac:98: 89:12:5d:63 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RDJDQTExMC8GA1UEBRMoRENFQjlCNkQ4M0ZCMDJEQzQ1RTkyMDM1MzhBNUM4QUY2 Rjk0MUZBOTAeFw0yNTA3MDEwODQ2MzlaFw0yNTA3MDgwODQ2MzlaMBgxFjAUBgNV BAMTDTY4NjNhMDcwLWZiYjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDA8eBE7dBydk0StovIkceyrd5bTuswDdNsPrcV+ge/3Qt+PtHSf8r9l+D4p9SK 3lk2AsWna/XQHRzo9HOyLArcpEYNrdvLc1gYdHrUFKzMe+z6R3iCxtPRR8L6euvr a/+qcOD7cckDERNTvMxmHIXrDbIcK+TGALSuya1NhMvMHccrxxCwVoYdEG0uGOnf QX3lw8iDExtStnlFaENkuFuwCvKATtjeI2DX2B0SJ6a0qkQOiv2dXL/DMYxIqRgV DtRS+6sB/Nf4eq1IFH+JdJ57yyb3rjsKcdVwLbMejAoW07dm0QKbNZsKKmDKJi37 YCdWhNyuXmEqIeWVGHH2mdT9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU0IMrWUra FElSqKziYVFDNTMiNPswHwYDVR0jBBgwFoAU3OubbYP7AtxF6SA1OKXIr2+UH6kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThEMkNBLzEyMzg0QURFMzU0 NzExRjA4MTAzQkUyNEM0RjlBRTAyLzNPdWJiWVA3QXR4RjZTQTFPS1hJcjItVUg2 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM091YmJZUDdBdHhGNlNBMU9LWElyMi1VSDZrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThE MkNBLzEyMzg0QURFMzU0NzExRjA4MTAzQkUyNEM0RjlBRTAyLzNPdWJiWVA3QXR4 RjZTQTFPS1hJcjItVUg2ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHdpyCICU/VN/5sg5pkw2jWtKnWVqTotgkX0PSk4lCo2vs0nHfU497gh K8asflZfMd5yrHwm7mHD2omeJ9cunIHVCpe/5Qs/uWIHnG5scbZiqfm95EbclF4k MlKNcVMNZgkWK5uH7MGIqD+jRFdS1bp1176cphQj8rUPAWR0qsWVZZsTNdr6o9rN MaZKr0QvZ8+fgvjpU+Q7yewmtnlNAgUPovYMCmniwx54siX5jYV5683aRXlYeHq2 m5oTsQaNYDenig9RSayP1nW6XV1dy9tuVptFzBIg8B5SY2QndKkP4WJQ/Smpk2ns Z7fNozzR84AoxV7sBGi8S3qsmIkSXWM= -----END CERTIFICATE-----Generated at Wed Jul 2 21:42:58 2025 by rpki-client