$ rpki-client -vvf rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.mft File: cRYXAC2fDJ62W07dYfehyR_NuD4.mft (raw, json) Hash identifier: 5zeVf3HxRPTeTdwE7Ux69BNRIiQlhPYbXtMOt8FWk1Y= Subject key identifier: A6:3E:CC:61:AC:C2:85:AD:F3:68:03:A9:B8:74:DE:2B:BD:13:2E:BD Authority key identifier: 71:16:17:00:2D:9F:0C:9E:B6:5B:4E:DD:61:F7:A1:C9:1F:CD:B8:3E Certificate issuer: /CN=A919C6E7/serialNumber=711617002D9F0C9EB65B4EDD61F7A1C91FCDB83E Certificate serial: A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRYXAC2fDJ62W07dYfehyR_NuD4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.mft Manifest number: A1 Signing time: Sun 29 Jun 2025 05:15:09 +0000 Manifest this update: Sun 29 Jun 2025 05:15:08 +0000 Manifest next update: Sun 06 Jul 2025 05:15:08 +0000 Files and hashes: 1: cRYXAC2fDJ62W07dYfehyR_NuD4.crl (hash: /tb2yRxCmG2VYCQFgXOUeCGXpHuM5A1HA6CUhDvakYo=) 2: 73EF25545DDE11EFBCDB7463C4F9AE02.roa (hash: JrlJ2EvGFrH8+I8VUWwxgID9iYwpW3LVV5yISMkbZ08=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.crl rsync://rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRYXAC2fDJ62W07dYfehyR_NuD4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 05:15:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162 (0xa2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C6E7, serialNumber=711617002D9F0C9EB65B4EDD61F7A1C91FCDB83E Validity Not Before: Jun 29 05:15:08 2025 GMT Not After : Jul 6 05:15:08 2025 GMT Subject: CN=6860cbdd-faca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:98:fe:8f:22:3c:c0:8e:ed:79:2b:55:86:f1: 31:95:cf:6d:9a:43:6a:f8:b8:b3:86:44:b0:6f:26: 03:5e:e3:a6:14:9d:1f:b6:6d:fb:ea:1b:48:89:17: a9:48:1e:8e:9b:7f:e2:b5:9e:52:0a:cc:55:7f:18: 81:b4:f1:94:5e:89:fb:2d:38:55:9d:e7:68:35:67: c7:15:ba:f1:22:d3:a7:27:b4:28:00:6d:fd:25:cd: 67:21:91:d5:9f:00:59:6f:51:b6:27:b8:2a:c2:a8: b3:e4:41:87:8f:b0:14:7c:dc:02:5a:96:d1:4b:3a: 2d:82:29:7d:50:25:d0:02:47:91:3a:49:43:07:03: 72:a6:49:4f:45:db:f0:4e:a6:40:45:10:8d:c7:ab: ed:da:79:96:51:66:7f:b6:46:e6:5e:7a:1f:7a:0b: a0:f7:58:c5:8c:a5:72:07:ad:ba:57:1b:19:21:f3: a4:d4:db:cc:da:7a:bb:d5:74:22:af:c5:a1:c6:d2: 91:eb:91:76:2d:25:61:41:86:f9:f9:22:c0:b0:f8: cb:5b:ac:e6:37:8b:0b:6b:44:bb:36:b8:8d:14:a4: bd:ca:b6:9c:d9:f9:f9:64:b0:21:ac:8a:22:d7:89: f1:cc:86:05:de:da:0c:ef:ad:9d:29:1e:b0:c0:6b: bf:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:3E:CC:61:AC:C2:85:AD:F3:68:03:A9:B8:74:DE:2B:BD:13:2E:BD X509v3 Authority Key Identifier: keyid:71:16:17:00:2D:9F:0C:9E:B6:5B:4E:DD:61:F7:A1:C9:1F:CD:B8:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRYXAC2fDJ62W07dYfehyR_NuD4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:11:29:88:ce:fa:9e:6b:3c:7e:9a:7f:8f:25:f5:2b:1a:9b: 8c:b0:4e:ce:a2:58:5c:2f:79:54:1c:d1:8a:72:b0:c2:83:13: 5c:46:ff:e3:aa:71:72:61:78:cf:ab:05:b2:45:85:12:85:5b: a2:ef:5d:51:5e:bd:a5:4e:41:19:6d:f5:4a:af:65:da:4a:ec: 19:55:dc:df:91:4b:bf:cd:f1:e5:7d:6a:d9:88:18:2c:1f:83: 76:9b:82:42:b2:6a:b5:02:33:77:76:af:06:69:e8:ee:ed:ed: a8:31:ea:23:75:a0:27:c8:2a:a4:df:01:f1:89:81:fa:93:e0: 23:3d:7e:a6:ef:2e:3e:3a:34:ee:ef:86:5f:77:5e:df:c4:d0: 38:cd:a4:7c:71:fc:cf:e0:94:0a:2b:e5:ec:cf:4b:d3:6d:d2: aa:08:b9:10:94:99:5f:f5:bb:d8:55:96:ca:b0:11:01:46:17: 5d:6b:1a:4e:bf:a0:b2:78:41:09:f6:26:7a:2f:be:32:0d:54: d8:6b:03:dd:a0:b5:b3:b3:5c:c1:e2:2f:f7:21:be:85:fb:f9: 84:81:e0:51:e3:cb:84:9a:9f:97:ed:8e:51:5e:d6:8a:27:19: 68:37:ea:f3:cb:10:a6:15:dd:ad:a5:7a:7f:3a:96:94:28:d1: cd:c9:e7:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM2RTcxMTAvBgNVBAUTKDcxMTYxNzAwMkQ5RjBDOUVCNjVCNEVERDYxRjdBMUM5 MUZDREI4M0UwHhcNMjUwNjI5MDUxNTA4WhcNMjUwNzA2MDUxNTA4WjAYMRYwFAYD VQQDEw02ODYwY2JkZC1mYWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsJj+jyI8wI7teStVhvExlc9tmkNq+LizhkSwbyYDXuOmFJ0ftm376htIiRep SB6Om3/itZ5SCsxVfxiBtPGUXon7LThVnedoNWfHFbrxItOnJ7QoAG39Jc1nIZHV nwBZb1G2J7gqwqiz5EGHj7AUfNwCWpbRSzotgil9UCXQAkeROklDBwNypklPRdvw TqZARRCNx6vt2nmWUWZ/tkbmXnofegug91jFjKVyB626VxsZIfOk1NvM2nq71XQi r8WhxtKR65F2LSVhQYb5+SLAsPjLW6zmN4sLa0S7NriNFKS9yrac2fn5ZLAhrIoi 14nxzIYF3toM762dKR6wwGu/FwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKY+zGGs woWt82gDqbh03iu9Ey69MB8GA1UdIwQYMBaAFHEWFwAtnwyetltO3WH3ockfzbg+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzZFNy9FNEEwQ0NBRTVE REQxMUVGODMwREY1NjFDNEY5QUUwMi9jUllYQUMyZkRKNjJXMDdkWWZlaHlSX051 RDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NSWVhBQzJmREo2MlcwN2RZZmVoeVJfTnVENC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzZFNy9FNEEwQ0NBRTVEREQxMUVGODMwREY1NjFDNEY5QUUwMi9jUllYQUMyZkRK NjJXMDdkWWZlaHlSX051RDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGESmIzvqeazx+mn+PJfUrGpuMsE7OolhcL3lUHNGKcrDCgxNcRv/j qnFyYXjPqwWyRYUShVui711RXr2lTkEZbfVKr2XaSuwZVdzfkUu/zfHlfWrZiBgs H4N2m4JCsmq1AjN3dq8Gaeju7e2oMeojdaAnyCqk3wHxiYH6k+AjPX6m7y4+OjTu 74Zfd17fxNA4zaR8cfzP4JQKK+Xsz0vTbdKqCLkQlJlf9bvYVZbKsBEBRhddaxpO v6CyeEEJ9iZ6L74yDVTYawPdoLWzs1zB4i/3Ib6F+/mEgeBR48uEmp+X7Y5RXtaK JxloN+rzyxCmFd2tpXp/OpaUKNHNyees -----END CERTIFICATE-----Generated at Mon Jun 30 15:05:34 2025 by rpki-client