$ rpki-client -vvf rpki.apnic.net/member_repository/A918F1EE/EB00A8C8E75111EFBED81B0EC4F9AE02/poX1Gn3T8CbPKOIfA6FAaZ24_ow.mft File: poX1Gn3T8CbPKOIfA6FAaZ24_ow.mft (raw, json) Hash identifier: GJSHagx/AIIXVKmvclSAfXnfFwvMKHOjRtJCOD7gbNI= Subject key identifier: E2:9E:12:88:0A:EB:4B:84:E7:11:8C:18:93:1D:B9:96:C8:BF:09:5B Authority key identifier: A6:85:F5:1A:7D:D3:F0:26:CF:28:E2:1F:03:A1:40:69:9D:B8:FE:8C Certificate issuer: /CN=A918F1EE/serialNumber=A685F51A7DD3F026CF28E21F03A140699DB8FE8C Certificate serial: 4A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/poX1Gn3T8CbPKOIfA6FAaZ24_ow.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F1EE/EB00A8C8E75111EFBED81B0EC4F9AE02/poX1Gn3T8CbPKOIfA6FAaZ24_ow.mft Manifest number: 4A Signing time: Thu 03 Jul 2025 07:34:04 +0000 Manifest this update: Thu 03 Jul 2025 07:34:04 +0000 Manifest next update: Thu 10 Jul 2025 07:34:04 +0000 Files and hashes: 1: poX1Gn3T8CbPKOIfA6FAaZ24_ow.crl (hash: cmrVxXNi3w2SUYZLn9d1f65Yg16p/SvR9CRON+iAvXw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F1EE/EB00A8C8E75111EFBED81B0EC4F9AE02/poX1Gn3T8CbPKOIfA6FAaZ24_ow.crl rsync://rpki.apnic.net/member_repository/A918F1EE/EB00A8C8E75111EFBED81B0EC4F9AE02/poX1Gn3T8CbPKOIfA6FAaZ24_ow.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/poX1Gn3T8CbPKOIfA6FAaZ24_ow.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74 (0x4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F1EE, serialNumber=A685F51A7DD3F026CF28E21F03A140699DB8FE8C Validity Not Before: Jul 3 07:34:04 2025 GMT Not After : Jul 10 07:34:04 2025 GMT Subject: CN=6866326c-ca5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:cd:74:3b:67:f6:22:0f:2e:70:43:16:2a:29: 7a:26:cf:86:6b:cc:fe:9d:06:64:e4:7e:0d:96:c5: 31:68:71:e7:8a:8e:b1:b6:b4:85:59:97:50:48:02: 07:23:21:0e:ca:99:3a:94:f3:68:af:5e:b1:51:3e: 0c:41:a2:6a:3a:85:43:67:b2:28:ab:cf:d8:41:f6: 05:ed:f0:da:d7:54:cc:cf:8e:39:5e:a2:e8:1a:4a: 9c:32:67:46:72:36:75:a5:f9:3f:d5:79:1c:92:38: a9:7c:06:62:79:38:66:80:3d:f1:d4:b1:70:0b:b6: 1d:d7:e3:c6:ea:5c:84:4a:b6:32:4a:fa:f3:fa:21: bc:1d:26:e8:cd:e6:17:ca:57:5b:c6:3e:a2:be:23: 44:aa:58:65:0f:98:0d:7b:c6:da:9c:a5:00:66:e4: 23:56:f2:97:ae:e6:6f:8d:97:ae:3f:e1:7b:c3:35: 14:c7:4d:04:33:34:bb:84:d6:a3:d0:7c:1d:be:fc: 49:96:e3:0f:93:ef:c0:44:c8:38:6b:36:cb:47:49: 12:15:69:c9:32:62:7c:98:90:a1:76:ed:c9:26:7f: 2a:de:21:cc:b6:e6:0c:fb:30:9c:a1:1e:20:5b:cd: 31:8a:b2:d1:b2:fc:4c:d3:88:4a:6f:17:fe:6a:cc: a7:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:9E:12:88:0A:EB:4B:84:E7:11:8C:18:93:1D:B9:96:C8:BF:09:5B X509v3 Authority Key Identifier: keyid:A6:85:F5:1A:7D:D3:F0:26:CF:28:E2:1F:03:A1:40:69:9D:B8:FE:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F1EE/EB00A8C8E75111EFBED81B0EC4F9AE02/poX1Gn3T8CbPKOIfA6FAaZ24_ow.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/poX1Gn3T8CbPKOIfA6FAaZ24_ow.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F1EE/EB00A8C8E75111EFBED81B0EC4F9AE02/poX1Gn3T8CbPKOIfA6FAaZ24_ow.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:8f:f8:b4:d4:03:f0:0c:a8:73:f4:1c:14:b2:8b:ab:a4:9e: f3:d1:6a:81:07:8d:fd:8b:1d:f0:63:62:60:be:8c:60:3b:25: c6:0d:58:e0:dd:5d:41:6a:23:14:61:7e:49:3c:d0:3e:66:82: fb:c3:76:68:fc:58:d1:a8:5b:b2:40:3a:c0:30:42:34:55:56: 1f:36:d0:27:89:7b:a6:b1:43:36:f7:93:2e:ef:be:17:fb:d8: 19:ea:15:73:f9:62:3f:9b:da:12:20:e7:51:7b:5b:6f:66:0d: f2:43:7f:75:b9:75:3e:22:22:5a:26:cb:71:f2:87:02:6b:fd: e9:aa:56:47:d3:ba:34:6b:fe:eb:b8:0a:15:7e:ad:cc:5d:8b: cf:ca:86:51:62:ac:dd:27:b2:4e:d3:8b:5a:a8:5f:a8:bd:71: 58:65:c5:b9:cd:03:91:c2:c8:21:1e:69:1d:b0:f3:d7:fe:53: 1f:37:f7:a8:19:fa:d4:71:f9:f1:67:3a:4f:1b:10:81:e2:34: c9:5f:72:54:78:9b:c8:a5:4a:d9:f4:ce:02:f0:07:98:2c:ba: 61:49:cd:8d:86:85:43:22:c8:48:93:57:3b:ea:d1:af:a3:70: 59:48:9b:fc:7f:f5:d9:8b:54:c1:48:64:c8:ed:70:76:d5:a5: 88:eb:9b:47 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RjFFRTExMC8GA1UEBRMoQTY4NUY1MUE3REQzRjAyNkNGMjhFMjFGMDNBMTQwNjk5 REI4RkU4QzAeFw0yNTA3MDMwNzM0MDRaFw0yNTA3MTAwNzM0MDRaMBgxFjAUBgNV BAMTDTY4NjYzMjZjLWNhNWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDOzXQ7Z/YiDy5wQxYqKXomz4ZrzP6dBmTkfg2WxTFoceeKjrG2tIVZl1BIAgcj IQ7KmTqU82ivXrFRPgxBomo6hUNnsiirz9hB9gXt8NrXVMzPjjleougaSpwyZ0Zy NnWl+T/VeRySOKl8BmJ5OGaAPfHUsXALth3X48bqXIRKtjJK+vP6IbwdJujN5hfK V1vGPqK+I0SqWGUPmA17xtqcpQBm5CNW8peu5m+Nl64/4XvDNRTHTQQzNLuE1qPQ fB2+/EmW4w+T78BEyDhrNstHSRIVackyYnyYkKF27ckmfyreIcy25gz7MJyhHiBb zTGKstGy/EzTiEpvF/5qzKcdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4p4SiArr S4TnEYwYkx25lsi/CVswHwYDVR0jBBgwFoAUpoX1Gn3T8CbPKOIfA6FAaZ24/oww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThGMUVFL0VCMDBBOEM4RTc1 MTExRUZCRUQ4MUIwRUM0RjlBRTAyL3BvWDFHbjNUOENiUEtPSWZBNkZBYVoyNF9v dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcG9YMUduM1Q4Q2JQS09JZkE2RkFhWjI0X293LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThG MUVFL0VCMDBBOEM4RTc1MTExRUZCRUQ4MUIwRUM0RjlBRTAyL3BvWDFHbjNUOENi UEtPSWZBNkZBYVoyNF9vdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG2P+LTUA/AMqHP0HBSyi6uknvPRaoEHjf2LHfBjYmC+jGA7JcYNWODd XUFqIxRhfkk80D5mgvvDdmj8WNGoW7JAOsAwQjRVVh820CeJe6axQzb3ky7vvhf7 2BnqFXP5Yj+b2hIg51F7W29mDfJDf3W5dT4iIlomy3HyhwJr/emqVkfTujRr/uu4 ChV+rcxdi8/KhlFirN0nsk7Ti1qoX6i9cVhlxbnNA5HCyCEeaR2w89f+Ux8396gZ +tRx+fFnOk8bEIHiNMlfclR4m8ilStn0zgLwB5gsumFJzY2GhUMiyEiTVzvq0a+j cFlIm/x/9dmLVMFIZMjtcHbVpYjrm0c= -----END CERTIFICATE-----Generated at Thu Jul 3 23:20:32 2025 by rpki-client