$ rpki-client -vvf rpki.apnic.net/member_repository/A91402E0/AA6BF4402B5811EE9FD2F01EC4F9AE02/0xR9jSeprR3LgjR_FEsIVeBV4aA.mft File: 0xR9jSeprR3LgjR_FEsIVeBV4aA.mft (raw, json) Hash identifier: +uqx+8DBWiik0I6UGa5UXnZh3Sdeuho5qv+H3ModZyA= Subject key identifier: BA:C1:10:4E:8F:D1:3F:F3:0C:7E:F8:9D:6A:95:E0:7B:AF:B1:86:02 Authority key identifier: D3:14:7D:8D:27:A9:AD:1D:CB:82:34:7F:14:4B:08:55:E0:55:E1:A0 Certificate issuer: /CN=A91402E0/serialNumber=D3147D8D27A9AD1DCB82347F144B0855E055E1A0 Certificate serial: 0161 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0xR9jSeprR3LgjR_FEsIVeBV4aA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91402E0/AA6BF4402B5811EE9FD2F01EC4F9AE02/0xR9jSeprR3LgjR_FEsIVeBV4aA.mft Manifest number: 0161 Signing time: Sun 15 Jun 2025 03:08:54 +0000 Manifest this update: Sun 15 Jun 2025 03:08:54 +0000 Manifest next update: Sun 22 Jun 2025 03:08:54 +0000 Files and hashes: 1: 0xR9jSeprR3LgjR_FEsIVeBV4aA.crl (hash: TlXOU7SrUWxwl35PlE5WFEVLWICj4brSTjPmsjdIFSs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91402E0/AA6BF4402B5811EE9FD2F01EC4F9AE02/0xR9jSeprR3LgjR_FEsIVeBV4aA.crl rsync://rpki.apnic.net/member_repository/A91402E0/AA6BF4402B5811EE9FD2F01EC4F9AE02/0xR9jSeprR3LgjR_FEsIVeBV4aA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0xR9jSeprR3LgjR_FEsIVeBV4aA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 353 (0x161) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91402E0, serialNumber=D3147D8D27A9AD1DCB82347F144B0855E055E1A0 Validity Not Before: Jun 15 03:08:54 2025 GMT Not After : Jun 22 03:08:54 2025 GMT Subject: CN=684e3946-fc06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f1:04:b1:90:91:d8:56:80:62:8a:9f:94:04: 90:98:a9:f1:b5:79:f0:ee:57:65:cc:1c:a1:ef:12: cc:cb:f6:87:c9:19:15:db:96:b7:b0:ce:65:b9:20: 2f:1a:64:23:8b:dd:23:bf:8c:d1:86:0f:6e:84:e6: f5:4a:7c:ab:43:8d:d3:13:c7:e4:af:a2:68:62:c8: 3e:d9:b0:61:e7:e2:09:b0:af:e7:86:58:39:24:a2: b4:9e:33:4b:b9:83:17:30:b7:81:e5:2e:6c:3c:9d: 04:24:19:d0:65:cb:77:b1:5e:6f:2b:e6:09:42:08: 37:d2:9d:39:93:d6:2c:80:cb:cb:9b:f4:04:bc:54: e1:8c:e8:0e:6f:8f:70:b5:66:95:f0:3c:20:e9:1f: 62:dc:02:c2:88:76:93:bc:fd:a3:08:4d:eb:51:94: f7:ac:91:ca:66:2a:da:67:83:44:98:bf:83:01:93: 01:d1:fe:74:cc:17:dd:a7:4a:6a:8e:28:9b:50:5e: 7d:15:cb:a6:9a:be:43:f0:a1:f9:28:22:8d:16:69: 77:e2:fa:dd:e7:19:cc:37:80:c5:c4:67:06:42:9b: ca:47:26:4a:9b:4e:25:9b:ad:bd:76:2d:cc:93:3b: dd:88:7e:b3:37:d3:10:17:d4:b8:96:ce:13:7a:92: 0f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:C1:10:4E:8F:D1:3F:F3:0C:7E:F8:9D:6A:95:E0:7B:AF:B1:86:02 X509v3 Authority Key Identifier: keyid:D3:14:7D:8D:27:A9:AD:1D:CB:82:34:7F:14:4B:08:55:E0:55:E1:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91402E0/AA6BF4402B5811EE9FD2F01EC4F9AE02/0xR9jSeprR3LgjR_FEsIVeBV4aA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0xR9jSeprR3LgjR_FEsIVeBV4aA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91402E0/AA6BF4402B5811EE9FD2F01EC4F9AE02/0xR9jSeprR3LgjR_FEsIVeBV4aA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:f6:3f:fd:5a:dd:60:67:4c:97:c4:a6:f5:c1:d3:33:a2:16: 8c:88:58:c8:49:28:3f:57:7c:e5:7f:22:5b:c4:59:aa:98:fa: 23:73:39:8d:cc:db:0f:76:ac:57:62:8a:2a:f4:ab:53:82:03: 17:b0:17:f7:92:8f:47:78:25:eb:e8:96:0e:d8:9b:e9:14:54: f0:7d:b1:9e:7a:9b:d4:52:47:33:84:76:26:b2:5f:e5:ee:f3: 08:c5:44:5b:27:3c:0f:25:39:1b:8d:25:ed:ab:1b:cc:87:80: be:15:76:7a:f1:30:af:c5:41:64:c3:bd:f0:1d:7e:d1:02:b2: 1c:b3:7e:f5:3c:6d:8c:bc:a1:ec:4c:29:b3:c0:2a:60:98:06: a4:ff:bc:ca:07:1a:f9:b8:7c:ef:ca:31:03:2a:a5:77:28:60: 37:68:90:67:47:a5:79:9b:75:21:30:4f:7e:f6:cc:da:f2:83: 81:e2:c1:90:20:5b:82:bc:89:d6:c4:7a:4e:3a:b6:80:d1:c6: 12:cb:8a:d3:cb:b2:8b:4b:e7:7e:b9:ec:18:68:4a:22:93:05: 7b:c9:37:ad:14:62:8a:20:0b:a2:84:0a:f5:ab:81:86:c2:4c: a5:8c:f9:c1:b9:df:f5:64:96:ad:71:77:23:db:74:da:7b:d5: 83:f6:78:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDAyRTAxMTAvBgNVBAUTKEQzMTQ3RDhEMjdBOUFEMURDQjgyMzQ3RjE0NEIwODU1 RTA1NUUxQTAwHhcNMjUwNjE1MDMwODU0WhcNMjUwNjIyMDMwODU0WjAYMRYwFAYD VQQDEw02ODRlMzk0Ni1mYzA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzfEEsZCR2FaAYoqflASQmKnxtXnw7ldlzByh7xLMy/aHyRkV25a3sM5luSAv GmQji90jv4zRhg9uhOb1SnyrQ43TE8fkr6JoYsg+2bBh5+IJsK/nhlg5JKK0njNL uYMXMLeB5S5sPJ0EJBnQZct3sV5vK+YJQgg30p05k9YsgMvLm/QEvFThjOgOb49w tWaV8Dwg6R9i3ALCiHaTvP2jCE3rUZT3rJHKZiraZ4NEmL+DAZMB0f50zBfdp0pq jiibUF59Fcummr5D8KH5KCKNFml34vrd5xnMN4DFxGcGQpvKRyZKm04lm629di3M kzvdiH6zN9MQF9S4ls4TepIPUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLrBEE6P 0T/zDH74nWqV4HuvsYYCMB8GA1UdIwQYMBaAFNMUfY0nqa0dy4I0fxRLCFXgVeGg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDJFMC9BQTZCRjQ0MDJC NTgxMUVFOUZEMkYwMUVDNEY5QUUwMi8weFI5alNlcHJSM0xnalJfRkVzSVZlQlY0 YUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB4UjlqU2VwclIzTGdqUl9GRXNJVmVCVjRhQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDJFMC9BQTZCRjQ0MDJCNTgxMUVFOUZEMkYwMUVDNEY5QUUwMi8weFI5alNlcHJS M0xnalJfRkVzSVZlQlY0YUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBs9j/9Wt1gZ0yXxKb1wdMzohaMiFjISSg/V3zlfyJbxFmqmPojczmN zNsPdqxXYooq9KtTggMXsBf3ko9HeCXr6JYO2JvpFFTwfbGeepvUUkczhHYmsl/l 7vMIxURbJzwPJTkbjSXtqxvMh4C+FXZ68TCvxUFkw73wHX7RArIcs371PG2MvKHs TCmzwCpgmAak/7zKBxr5uHzvyjEDKqV3KGA3aJBnR6V5m3UhME9+9sza8oOB4sGQ IFuCvInWxHpOOraA0cYSy4rTy7KLS+d+uewYaEoikwV7yTetFGKKIAuihAr1q4GG wkyljPnBud/1ZJatcXcj23Tae9WD9njt -----END CERTIFICATE-----Generated at Sun Jun 15 05:31:55 2025 by rpki-client