$ rpki-client -vvf rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.mft File: mFJq8YqDozT1eZgqMXm23R6X3i4.mft (raw, json) Hash identifier: qKO25gOxP7AzirEO7Q208PvUEfaC1LuDHLbRLhSZ8S4= Subject key identifier: F9:DB:75:74:9F:0A:42:D7:A5:44:C4:F7:13:D6:D2:F4:72:13:5C:93 Authority key identifier: 98:52:6A:F1:8A:83:A3:34:F5:79:98:2A:31:79:B6:DD:1E:97:DE:2E Certificate issuer: /CN=A91308CE/serialNumber=98526AF18A83A334F579982A3179B6DD1E97DE2E Certificate serial: 348B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFJq8YqDozT1eZgqMXm23R6X3i4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.mft Manifest number: 348B Signing time: Sat 14 Jun 2025 14:53:17 +0000 Manifest this update: Sat 14 Jun 2025 14:53:16 +0000 Manifest next update: Sat 21 Jun 2025 14:53:16 +0000 Files and hashes: 1: mFJq8YqDozT1eZgqMXm23R6X3i4.crl (hash: vmZtGWVtqwUV/ptO2n2/YmDLi/e3PxoNGRI7u09ubcQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.crl rsync://rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFJq8YqDozT1eZgqMXm23R6X3i4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 14:53:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13451 (0x348b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91308CE, serialNumber=98526AF18A83A334F579982A3179B6DD1E97DE2E Validity Not Before: Jun 14 14:53:16 2025 GMT Not After : Jun 21 14:53:16 2025 GMT Subject: CN=684d8cdc-baa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:45:4e:e3:7b:1a:ff:b3:fb:c9:1f:4c:e7:9d: 03:69:a2:a4:31:bb:5b:87:a5:67:87:43:4a:1a:6c: 12:90:a3:da:5c:f9:b3:96:a3:76:a8:1e:87:4c:92: 08:c2:59:cc:3c:8a:af:a3:69:15:05:1f:9b:48:a2: fe:83:9c:2f:02:e4:ed:45:c3:5d:08:c9:88:1d:f7: 09:45:3f:55:b6:18:2c:23:c7:33:9b:6e:4c:5b:99: 99:37:9c:67:c3:2b:c8:9e:ce:a1:28:f0:42:8d:d3: 44:99:a1:ce:cf:42:c9:93:cc:09:58:fe:52:a4:9b: 2b:18:f7:67:f8:89:fa:77:e7:96:6e:27:86:c7:8c: de:2d:ef:42:2b:50:1a:df:50:64:14:0e:d6:33:e4: 28:1a:6e:ad:05:d9:8e:a5:76:3d:0c:35:d9:51:b9: 5b:47:d6:79:c3:b2:83:4a:c1:47:8a:b0:e1:b2:ac: 7c:d2:27:0a:db:d9:b0:9a:00:02:98:b6:cd:25:9d: c4:f1:4f:fe:80:0f:5c:18:f2:89:23:1c:75:6d:07: da:10:31:a4:ec:3d:86:a5:d7:55:78:42:fd:23:c0: 7d:1b:c0:7c:e2:9f:e6:9e:96:00:90:71:e3:e3:97: 7f:21:28:45:b3:b7:eb:ac:c8:c2:cc:7a:ef:82:72: 94:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:DB:75:74:9F:0A:42:D7:A5:44:C4:F7:13:D6:D2:F4:72:13:5C:93 X509v3 Authority Key Identifier: keyid:98:52:6A:F1:8A:83:A3:34:F5:79:98:2A:31:79:B6:DD:1E:97:DE:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFJq8YqDozT1eZgqMXm23R6X3i4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:4b:5d:b0:4f:52:8e:07:52:fb:ed:54:9c:71:96:11:0a:2c: 66:73:a3:ea:d7:44:bc:65:df:28:be:df:2b:a2:38:0a:b8:30: 15:e0:75:19:e5:1a:7e:d8:9f:a9:ba:2a:1e:cf:30:b5:1d:33: 92:f5:76:fe:66:31:70:c9:51:1b:32:d2:bb:a6:8b:66:16:9d: 10:7b:2f:ce:7d:d5:f8:8e:fb:42:8a:58:47:9b:0d:79:02:e7: 1e:65:82:e4:d1:ca:0a:cc:98:a3:32:1f:53:7d:ce:f5:64:94: ae:91:80:a9:5e:86:55:a7:68:42:cb:03:f8:c0:40:d0:30:c9: e8:fd:f8:af:9b:0f:67:d4:c0:18:ae:d7:28:b2:7a:f9:75:5f: 20:64:a8:29:b0:77:27:49:81:20:90:88:8c:46:12:50:6f:0a: 28:99:9c:ba:69:a0:92:6c:40:27:1e:2a:2a:32:da:d5:1c:3c: d5:df:ac:16:01:96:ce:81:18:50:3d:4e:f0:4c:68:3d:57:f9: 86:12:5e:34:0e:8b:78:9d:0e:de:35:a9:e5:a8:2d:37:8e:65: 1a:f0:f9:5e:5c:a6:34:ab:e7:cb:df:fd:a3:1d:f7:b5:7a:56: c1:3d:ed:8a:0c:0c:03:63:31:e9:a8:e6:de:90:59:37:eb:58: 75:c0:d1:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA4Q0UxMTAvBgNVBAUTKDk4NTI2QUYxOEE4M0EzMzRGNTc5OTgyQTMxNzlCNkRE MUU5N0RFMkUwHhcNMjUwNjE0MTQ1MzE2WhcNMjUwNjIxMTQ1MzE2WjAYMRYwFAYD VQQDEw02ODRkOGNkYy1iYWE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtUVO43sa/7P7yR9M550DaaKkMbtbh6Vnh0NKGmwSkKPaXPmzlqN2qB6HTJII wlnMPIqvo2kVBR+bSKL+g5wvAuTtRcNdCMmIHfcJRT9VthgsI8czm25MW5mZN5xn wyvIns6hKPBCjdNEmaHOz0LJk8wJWP5SpJsrGPdn+In6d+eWbieGx4zeLe9CK1Aa 31BkFA7WM+QoGm6tBdmOpXY9DDXZUblbR9Z5w7KDSsFHirDhsqx80icK29mwmgAC mLbNJZ3E8U/+gA9cGPKJIxx1bQfaEDGk7D2GpddVeEL9I8B9G8B84p/mnpYAkHHj 45d/IShFs7frrMjCzHrvgnKUYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPnbdXSf CkLXpUTE9xPW0vRyE1yTMB8GA1UdIwQYMBaAFJhSavGKg6M09XmYKjF5tt0el94u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDhDRS8yNTdDRjcyNjFE OTkxMUUyOTY3QjlEODMwOEIwMkNEMi9tRkpxOFlxRG96VDFlWmdxTVhtMjNSNlgz aTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21GSnE4WXFEb3pUMWVaZ3FNWG0yM1I2WDNpNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDhDRS8yNTdDRjcyNjFEOTkxMUUyOTY3QjlEODMwOEIwMkNEMi9tRkpxOFlxRG96 VDFlWmdxTVhtMjNSNlgzaTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHS12wT1KOB1L77VSccZYRCixmc6Pq10S8Zd8ovt8rojgKuDAV4HUZ 5Rp+2J+puioezzC1HTOS9Xb+ZjFwyVEbMtK7potmFp0Qey/OfdX4jvtCilhHmw15 AuceZYLk0coKzJijMh9Tfc71ZJSukYCpXoZVp2hCywP4wEDQMMno/fivmw9n1MAY rtcosnr5dV8gZKgpsHcnSYEgkIiMRhJQbwoomZy6aaCSbEAnHioqMtrVHDzV36wW AZbOgRhQPU7wTGg9V/mGEl40Dot4nQ7eNanlqC03jmUa8PleXKY0q+fL3/2jHfe1 elbBPe2KDAwDYzHpqObekFk361h1wNEV -----END CERTIFICATE-----Generated at Sat Jun 14 19:30:56 2025 by rpki-client