$ rpki-client -vvf rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/0KRmavNbS2VNgYHEzRyRGu-ZRbs.mft File: 0KRmavNbS2VNgYHEzRyRGu-ZRbs.mft (raw, json) Hash identifier: aOLftDCV4QQBywkd17nxRyRAmI4jDtW8EdVDZt44GKo= Subject key identifier: A6:E7:BB:6F:42:7D:02:F8:51:BB:C1:F2:F4:71:6A:F6:C5:E1:A8:16 Authority key identifier: D0:A4:66:6A:F3:5B:4B:65:4D:81:81:C4:CD:1C:91:1A:EF:99:45:BB Certificate issuer: /CN=A918FE4B/serialNumber=D0A4666AF35B4B654D8181C4CD1C911AEF9945BB Certificate serial: 1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0KRmavNbS2VNgYHEzRyRGu-ZRbs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/0KRmavNbS2VNgYHEzRyRGu-ZRbs.mft Manifest number: 01EC Signing time: Tue 01 Jul 2025 03:14:01 +0000 Manifest this update: Tue 01 Jul 2025 03:14:01 +0000 Manifest next update: Tue 08 Jul 2025 03:14:01 +0000 Files and hashes: 1: 0KRmavNbS2VNgYHEzRyRGu-ZRbs.crl (hash: 4o/1AwwPzxLVHfUs+PzlkgUwG8JvNA5ACrfTNG/scAk=) 2: F22AC4E253FA11F0ACEFB91BC4F9AE02.roa (hash: zV/07wRUVY1rurlMX/hm5KuzjNtGcUHEDL2bs1ve1Lk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/0KRmavNbS2VNgYHEzRyRGu-ZRbs.crl rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/0KRmavNbS2VNgYHEzRyRGu-ZRbs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0KRmavNbS2VNgYHEzRyRGu-ZRbs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 03:14:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27 (0x1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FE4B, serialNumber=D0A4666AF35B4B654D8181C4CD1C911AEF9945BB Validity Not Before: Jul 1 03:14:01 2025 GMT Not After : Jul 8 03:14:01 2025 GMT Subject: CN=68635279-abda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:37:13:76:a3:cf:99:c9:6f:c6:ac:0c:75:ac: 83:e4:6f:fc:9e:2b:59:4a:6f:a1:fc:c4:fc:6e:9d: 36:20:d8:cb:1e:ea:1f:07:bd:9f:aa:23:35:e9:ce: 31:d4:ad:07:67:bd:94:23:b3:84:23:28:22:6f:4b: bb:d0:0a:b4:02:3e:4b:0a:9c:47:78:b3:63:6e:ca: a8:2d:84:63:91:ba:79:ff:47:26:93:08:15:79:05: 84:fb:fd:54:95:f0:9f:69:f1:65:c1:7b:f7:1f:9d: 5e:d9:45:e2:c0:f7:c4:a0:c3:0e:c1:78:e5:71:36: 9b:86:4b:e5:48:51:ca:8e:b9:89:e3:28:ee:8b:08: b6:bb:dd:78:78:01:9c:6b:d6:c4:ae:50:6d:3e:c2: 29:49:01:58:a9:bd:1f:e7:1d:5a:f8:fa:a1:de:dd: f3:fb:1a:66:f3:9e:cc:f6:5e:2e:4f:2b:5f:fc:8a: 78:3d:c8:b0:bc:71:8f:f1:f8:fd:b6:7a:d7:c5:2f: db:f9:f2:30:17:ea:7c:03:ef:9d:40:60:9c:f4:9a: 3c:a4:9f:e2:d6:36:96:0d:ef:20:83:45:da:2b:64: 4c:9f:45:1e:6b:9d:b5:7f:db:7d:7a:11:02:0b:14: 2b:86:7f:4b:65:c0:60:00:4a:41:ac:7b:0d:82:2e: 20:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:E7:BB:6F:42:7D:02:F8:51:BB:C1:F2:F4:71:6A:F6:C5:E1:A8:16 X509v3 Authority Key Identifier: keyid:D0:A4:66:6A:F3:5B:4B:65:4D:81:81:C4:CD:1C:91:1A:EF:99:45:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/0KRmavNbS2VNgYHEzRyRGu-ZRbs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0KRmavNbS2VNgYHEzRyRGu-ZRbs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/0KRmavNbS2VNgYHEzRyRGu-ZRbs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:71:cb:60:1b:fe:d2:d0:d7:19:68:1c:9e:6c:19:4e:5e:7b: 30:c7:49:56:38:84:99:5f:03:09:9c:f0:d8:ae:a0:d8:89:ba: 3a:20:9a:a1:0f:6b:73:ee:d1:96:02:50:72:2c:80:2b:63:95: a5:5f:46:2f:35:13:5c:13:7c:bf:55:6b:8d:26:e5:27:b6:48: 23:1b:8b:35:ad:ac:4f:05:48:77:9b:aa:66:c7:8a:6b:9a:62: e4:a4:79:92:b2:5d:c1:53:8a:81:68:43:13:e4:ce:6c:95:c6: 1c:b4:b7:ad:41:7d:33:bb:b5:05:3e:62:40:af:7f:f6:0e:08: 86:71:4c:bc:58:ad:49:fd:c3:9c:fe:be:fe:6e:43:36:90:37: 67:5b:8f:09:f9:49:37:c3:af:e0:2e:24:98:42:37:c5:a8:c4: c5:6f:25:7e:9b:af:2e:90:02:f7:bc:d4:e4:62:3c:6d:43:65: e6:5a:4b:b2:7d:41:23:21:61:59:79:5d:69:df:16:56:45:2e: d8:ac:29:9d:8a:fd:16:24:fd:2e:5b:d7:96:34:38:1b:91:84: 05:3e:fd:2b:02:76:78:30:72:8d:ba:4a:fd:03:7d:6b:9d:91: 13:ed:1e:58:59:b9:42:08:8b:f2:88:72:fe:01:c0:2c:2e:7d: 34:f6:83:c5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RkU0QjExMC8GA1UEBRMoRDBBNDY2NkFGMzVCNEI2NTREODE4MUM0Q0QxQzkxMUFF Rjk5NDVCQjAeFw0yNTA3MDEwMzE0MDFaFw0yNTA3MDgwMzE0MDFaMBgxFjAUBgNV BAMTDTY4NjM1Mjc5LWFiZGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCNxN2o8+ZyW/GrAx1rIPkb/yeK1lKb6H8xPxunTYg2Mse6h8HvZ+qIzXpzjHU rQdnvZQjs4QjKCJvS7vQCrQCPksKnEd4s2NuyqgthGORunn/RyaTCBV5BYT7/VSV 8J9p8WXBe/cfnV7ZReLA98Sgww7BeOVxNpuGS+VIUcqOuYnjKO6LCLa73Xh4AZxr 1sSuUG0+wilJAVipvR/nHVr4+qHe3fP7Gmbznsz2Xi5PK1/8ing9yLC8cY/x+P22 etfFL9v58jAX6nwD751AYJz0mjykn+LWNpYN7yCDRdorZEyfRR5rnbV/2316EQIL FCuGf0tlwGAASkGsew2CLiDtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUpue7b0J9 AvhRu8Hy9HFq9sXhqBYwHwYDVR0jBBgwFoAU0KRmavNbS2VNgYHEzRyRGu+ZRbsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThGRTRCL0MxNDAxNkI0OEQ3 RjExRURCN0RCODU0Q0M0RjlBRTAyLzBLUm1hdk5iUzJWTmdZSEV6UnlSR3UtWlJi cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMEtSbWF2TmJTMlZOZ1lIRXpSeVJHdS1aUmJzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThG RTRCL0MxNDAxNkI0OEQ3RjExRURCN0RCODU0Q0M0RjlBRTAyLzBLUm1hdk5iUzJW TmdZSEV6UnlSR3UtWlJicy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABhxy2Ab/tLQ1xloHJ5sGU5eezDHSVY4hJlfAwmc8NiuoNiJujogmqEP a3Pu0ZYCUHIsgCtjlaVfRi81E1wTfL9Va40m5Se2SCMbizWtrE8FSHebqmbHimua YuSkeZKyXcFTioFoQxPkzmyVxhy0t61BfTO7tQU+YkCvf/YOCIZxTLxYrUn9w5z+ vv5uQzaQN2dbjwn5STfDr+AuJJhCN8WoxMVvJX6bry6QAve81ORiPG1DZeZaS7J9 QSMhYVl5XWnfFlZFLtisKZ2K/RYk/S5b15Y0OBuRhAU+/SsCdngwco26Sv0DfWud kRPtHlhZuUIIi/KIcv4BwCwufTT2g8U= -----END CERTIFICATE-----Generated at Wed Jul 2 00:37:26 2025 by rpki-client