$ rpki-client -vvf rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.mft File: MbPZBFfR_fg8NXTL0X_CiyzdVu8.mft (raw, json) Hash identifier: cM5SkyIGfezUqspaQA5/NHLXWdqngjRUMUg0idyBoi8= Subject key identifier: F1:F2:16:7E:32:6C:DE:9D:EA:8E:05:A2:5F:E8:30:00:DF:36:81:3D Authority key identifier: 31:B3:D9:04:57:D1:FD:F8:3C:35:74:CB:D1:7F:C2:8B:2C:DD:56:EF Certificate issuer: /CN=A91222CD/serialNumber=31B3D90457D1FDF83C3574CBD17FC28B2CDD56EF Certificate serial: 1B31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MbPZBFfR_fg8NXTL0X_CiyzdVu8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.mft Manifest number: 1B30 Signing time: Sat 14 Jun 2025 16:14:52 +0000 Manifest this update: Sat 14 Jun 2025 16:14:52 +0000 Manifest next update: Sat 21 Jun 2025 16:14:52 +0000 Files and hashes: 1: MbPZBFfR_fg8NXTL0X_CiyzdVu8.crl (hash: hLsXBWSGRlYexwZ0B2uq4gJMO9FpoPVzMnfa62mcOos=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.crl rsync://rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MbPZBFfR_fg8NXTL0X_CiyzdVu8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 16:14:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6961 (0x1b31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91222CD, serialNumber=31B3D90457D1FDF83C3574CBD17FC28B2CDD56EF Validity Not Before: Jun 14 16:14:52 2025 GMT Not After : Jun 21 16:14:52 2025 GMT Subject: CN=684d9ffc-c440 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:71:13:41:5c:40:e9:41:d3:8d:2d:25:67:20: 04:64:42:5f:14:24:c3:d3:16:3b:fc:4e:db:4a:c2: a5:05:2f:59:89:f9:25:85:06:f1:55:dd:26:54:ba: 7c:e9:a1:fd:87:45:33:d7:d2:d7:58:d5:fc:9d:d7: be:41:68:28:52:dc:71:19:9c:da:bc:b2:73:96:9c: 83:74:38:cd:2f:2a:9b:8b:5a:c5:2d:6f:7e:8a:16: 61:d9:83:4f:52:7d:8a:ce:cf:9a:27:e9:5a:1f:6d: 1e:ca:27:66:23:57:5c:2b:44:ab:98:49:3c:46:37: 12:5b:ad:17:bc:cf:fd:b3:ce:00:34:98:1d:e0:e1: 09:4f:e3:f2:96:9d:38:81:86:30:1e:bd:4f:e2:bd: f0:a2:c1:78:25:04:80:6b:7d:e5:88:d5:a4:75:82: 2d:e9:b1:ec:70:ea:49:38:59:0d:fc:b1:35:22:e7: b4:d2:5c:f9:3c:77:90:18:91:d4:68:7a:6a:37:3d: 2c:44:a1:25:97:d2:22:b9:81:e4:70:ab:35:02:3f: 75:47:8f:b6:05:46:05:81:ae:ae:17:c3:4c:a1:47: bc:40:ef:87:2e:06:91:93:64:49:29:e1:c4:8e:fe: ab:02:ae:e1:a4:7a:89:fb:d7:70:04:d6:1b:0d:74: 79:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:F2:16:7E:32:6C:DE:9D:EA:8E:05:A2:5F:E8:30:00:DF:36:81:3D X509v3 Authority Key Identifier: keyid:31:B3:D9:04:57:D1:FD:F8:3C:35:74:CB:D1:7F:C2:8B:2C:DD:56:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MbPZBFfR_fg8NXTL0X_CiyzdVu8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:15:2c:bf:9b:32:99:7d:1d:d6:94:2f:fd:92:d7:25:1c:3c: 34:c8:d2:fe:66:bc:90:2f:cd:0c:fe:66:2c:33:ea:a0:66:6a: a1:dc:c4:af:45:a4:b9:da:00:f3:81:8d:16:92:b6:a1:64:5f: b9:4c:03:bd:c5:b4:a9:58:97:e8:46:f6:53:6e:d8:3c:1c:30: 47:21:56:79:23:6e:a3:f9:ad:59:55:9e:83:3e:27:5e:95:89: 44:50:79:19:01:d0:5b:b4:19:a9:3e:e8:9b:83:77:57:2b:de: e8:52:32:db:d4:40:7f:e1:7a:78:ca:97:c9:fd:c9:dd:e3:7e: b3:dd:cb:56:43:7c:cf:d7:80:34:b6:62:53:7c:29:82:3c:d4: 73:a3:21:04:28:36:e8:6f:ca:b4:ad:38:2d:54:ff:26:4b:bc: e9:86:0b:bf:9c:91:65:25:72:cf:49:df:a0:74:87:4c:fe:d4: 92:01:4d:ad:31:90:5f:25:73:a6:bc:7f:16:e5:73:b0:1c:bc: c8:95:f3:d5:fc:e4:15:f2:4b:d4:ae:57:2c:40:0c:ed:01:6f: e5:e6:41:06:3d:2e:f8:b4:2b:74:36:33:d8:a1:5f:54:6a:8e: 20:1c:8d:ae:95:cd:3c:54:52:fd:cf:8e:62:5b:4a:9b:72:a4: 82:da:e0:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGzEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIyQ0QxMTAvBgNVBAUTKDMxQjNEOTA0NTdEMUZERjgzQzM1NzRDQkQxN0ZDMjhC MkNERDU2RUYwHhcNMjUwNjE0MTYxNDUyWhcNMjUwNjIxMTYxNDUyWjAYMRYwFAYD VQQDEw02ODRkOWZmYy1jNDQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuXETQVxA6UHTjS0lZyAEZEJfFCTD0xY7/E7bSsKlBS9ZifklhQbxVd0mVLp8 6aH9h0Uz19LXWNX8nde+QWgoUtxxGZzavLJzlpyDdDjNLyqbi1rFLW9+ihZh2YNP Un2Kzs+aJ+laH20eyidmI1dcK0SrmEk8RjcSW60XvM/9s84ANJgd4OEJT+Pylp04 gYYwHr1P4r3wosF4JQSAa33liNWkdYIt6bHscOpJOFkN/LE1Iue00lz5PHeQGJHU aHpqNz0sRKEll9IiuYHkcKs1Aj91R4+2BUYFga6uF8NMoUe8QO+HLgaRk2RJKeHE jv6rAq7hpHqJ+9dwBNYbDXR5uwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPHyFn4y bN6d6o4Fol/oMADfNoE9MB8GA1UdIwQYMBaAFDGz2QRX0f34PDV0y9F/woss3Vbv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjJDRC83RTMxMTVDODE2 NUExMUU3QjI3RjlCNDZDNEY5QUUwMi9NYlBaQkZmUl9mZzhOWFRMMFhfQ2l5emRW dTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01iUFpCRmZSX2ZnOE5YVEwwWF9DaXl6ZFZ1OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjJDRC83RTMxMTVDODE2NUExMUU3QjI3RjlCNDZDNEY5QUUwMi9NYlBaQkZmUl9m ZzhOWFRMMFhfQ2l5emRWdTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPFSy/mzKZfR3WlC/9ktclHDw0yNL+ZryQL80M/mYsM+qgZmqh3MSv RaS52gDzgY0WkrahZF+5TAO9xbSpWJfoRvZTbtg8HDBHIVZ5I26j+a1ZVZ6DPide lYlEUHkZAdBbtBmpPuibg3dXK97oUjLb1EB/4Xp4ypfJ/cnd436z3ctWQ3zP14A0 tmJTfCmCPNRzoyEEKDbob8q0rTgtVP8mS7zphgu/nJFlJXLPSd+gdIdM/tSSAU2t MZBfJXOmvH8W5XOwHLzIlfPV/OQV8kvUrlcsQAztAW/l5kEGPS74tCt0NjPYoV9U ao4gHI2ulc08VFL9z45iW0qbcqSC2uBW -----END CERTIFICATE-----Generated at Sun Jun 15 09:42:56 2025 by rpki-client