$ rpki-client -vvf rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.mft File: 8QyAUkfAJvnjKU-BRR0WLEZQ_NM.mft (raw, json) Hash identifier: t+1kZvDEi9b6zdUU+4PIU1VaJ+SJZ97Tkxfx9Qq/xdI= Subject key identifier: 60:4D:54:4E:B9:F7:BF:C7:4A:A0:11:F8:41:19:09:55:65:AC:74:72 Authority key identifier: F1:0C:80:52:47:C0:26:F9:E3:29:4F:81:45:1D:16:2C:46:50:FC:D3 Certificate issuer: /CN=A91409DC/serialNumber=F10C805247C026F9E3294F81451D162C4650FCD3 Certificate serial: 0C41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.mft Manifest number: 148E Signing time: Fri 20 Jun 2025 18:29:36 +0000 Manifest this update: Fri 20 Jun 2025 18:29:36 +0000 Manifest next update: Fri 27 Jun 2025 18:29:36 +0000 Files and hashes: 1: 8QyAUkfAJvnjKU-BRR0WLEZQ_NM.crl (hash: HdKA8iTFUpf/bgt+oXWrvn4PxYWPVuYdTzVN+PHZLs0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.crl rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Jun 2025 18:29:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3137 (0xc41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91409DC, serialNumber=F10C805247C026F9E3294F81451D162C4650FCD3 Validity Not Before: Jun 20 18:29:36 2025 GMT Not After : Jun 27 18:29:36 2025 GMT Subject: CN=6855a890-cc54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:b7:35:f0:87:31:2e:80:60:41:8b:bc:b1:2f: bb:c2:40:a7:75:a2:07:e1:e3:8c:b5:8a:26:6c:5a: b3:e0:51:54:26:c7:44:30:25:0b:56:2f:ff:c0:f1: 18:11:73:1a:bf:11:c3:c6:4b:2d:da:5d:6b:0f:08: 51:28:65:8e:ea:ad:77:bb:c1:08:66:db:ce:5c:83: 22:53:a0:31:d0:c2:2b:30:83:48:9c:9e:e7:19:c7: fc:e2:ca:03:a8:d3:57:93:6a:ca:32:74:1f:fa:71: c2:d1:6e:28:6b:90:3a:77:f6:d2:47:40:28:c4:a9: 17:24:38:b9:45:0d:c0:f2:47:53:5e:7c:4e:01:b1: 23:c4:03:5f:a1:fb:c0:c0:e8:6d:c1:06:be:91:00: 30:6d:22:28:c1:61:a7:8f:7f:a6:86:36:a1:fb:3b: 1f:95:7c:4c:81:fe:cd:f0:18:5a:1e:67:5c:ce:e8: cc:4b:4f:5e:0b:b5:66:5e:38:b9:88:9f:df:1d:09: a1:51:c2:32:8d:1e:11:5a:e2:27:31:ae:78:40:d7: 48:76:c4:42:a3:5e:0b:e1:e1:10:6d:7c:ab:e6:bd: 67:b1:ad:cd:82:39:b9:f3:2f:22:7e:ac:aa:e5:f5: c5:0a:33:02:b5:b9:ed:c3:4b:c9:12:f9:36:f5:d1: 59:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:4D:54:4E:B9:F7:BF:C7:4A:A0:11:F8:41:19:09:55:65:AC:74:72 X509v3 Authority Key Identifier: keyid:F1:0C:80:52:47:C0:26:F9:E3:29:4F:81:45:1D:16:2C:46:50:FC:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:93:12:ab:5b:38:86:7b:53:61:f3:c2:0a:4c:22:7a:34:13: af:9a:00:65:16:35:65:e4:16:0e:3c:bc:b4:4f:16:9f:2f:77: ec:14:1b:0f:a8:23:b8:6b:39:61:75:a6:11:32:a9:bf:4c:15: 5e:fb:9f:65:c7:fe:27:0c:b7:92:d4:85:9a:38:c2:84:f7:2f: 9b:28:7c:69:c2:1a:f8:c0:8b:72:1b:cd:e7:63:24:e8:09:34: 07:91:0c:16:3c:cc:4c:a1:ff:d1:50:ea:bd:ef:8e:68:65:ae: 21:83:0f:4c:75:82:af:9a:c3:47:e6:a8:1e:93:91:64:ca:e8: 5e:98:d0:f9:49:67:21:11:76:62:23:9a:f1:53:8e:5d:10:fb: 32:06:56:42:ab:9f:fa:70:ef:0a:32:cc:fd:13:28:fb:90:45: 69:63:da:b1:1c:e9:ce:b0:dc:26:0c:22:2e:f2:a4:56:2a:90: 79:95:9a:51:6f:00:30:ea:97:b4:0c:47:71:f2:3f:6c:e2:4b: 0f:17:b3:8a:28:12:7c:43:36:c9:36:92:27:b4:6b:58:bf:bb: 42:fa:61:b2:d0:b5:56:64:ba:88:1f:85:e3:c9:4e:50:62:97: 4f:bf:7c:da:17:36:81:da:ee:ba:29:a0:41:a2:50:b7:dd:07: 76:82:52:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA5REMxMTAvBgNVBAUTKEYxMEM4MDUyNDdDMDI2RjlFMzI5NEY4MTQ1MUQxNjJD NDY1MEZDRDMwHhcNMjUwNjIwMTgyOTM2WhcNMjUwNjI3MTgyOTM2WjAYMRYwFAYD VQQDEw02ODU1YTg5MC1jYzU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA37c18IcxLoBgQYu8sS+7wkCndaIH4eOMtYombFqz4FFUJsdEMCULVi//wPEY EXMavxHDxkst2l1rDwhRKGWO6q13u8EIZtvOXIMiU6Ax0MIrMINInJ7nGcf84soD qNNXk2rKMnQf+nHC0W4oa5A6d/bSR0AoxKkXJDi5RQ3A8kdTXnxOAbEjxANfofvA wOhtwQa+kQAwbSIowWGnj3+mhjah+zsflXxMgf7N8BhaHmdczujMS09eC7VmXji5 iJ/fHQmhUcIyjR4RWuInMa54QNdIdsRCo14L4eEQbXyr5r1nsa3Ngjm58y8ifqyq 5fXFCjMCtbntw0vJEvk29dFZGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGBNVE65 97/HSqAR+EEZCVVlrHRyMB8GA1UdIwQYMBaAFPEMgFJHwCb54ylPgUUdFixGUPzT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDlEQy9BNUJCRkFBNjA5 MzUxMUVBQUIxMEM5MUZDNEY5QUUwMi84UXlBVWtmQUp2bmpLVS1CUlIwV0xFWlFf Tk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhReUFVa2ZBSnZuaktVLUJSUjBXTEVaUV9OTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDlEQy9BNUJCRkFBNjA5MzUxMUVBQUIxMEM5MUZDNEY5QUUwMi84UXlBVWtmQUp2 bmpLVS1CUlIwV0xFWlFfTk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDLkxKrWziGe1Nh88IKTCJ6NBOvmgBlFjVl5BYOPLy0TxafL3fsFBsP qCO4azlhdaYRMqm/TBVe+59lx/4nDLeS1IWaOMKE9y+bKHxpwhr4wItyG83nYyTo CTQHkQwWPMxMof/RUOq9745oZa4hgw9MdYKvmsNH5qgek5FkyuhemND5SWchEXZi I5rxU45dEPsyBlZCq5/6cO8KMsz9Eyj7kEVpY9qxHOnOsNwmDCIu8qRWKpB5lZpR bwAw6pe0DEdx8j9s4ksPF7OKKBJ8QzbJNpIntGtYv7tC+mGy0LVWZLqIH4XjyU5Q YpdPv3zaFzaB2u66KaBBolC33Qd2glIQ -----END CERTIFICATE-----Generated at Fri Jun 20 20:56:49 2025 by rpki-client