$ rpki-client -vvf rpki.apnic.net/member_repository/A91417B0/EB082472D88311EF954A3D70C4F9AE02/MfrsXjAsGCKfmftHpyPypHmHF6w.mft File: MfrsXjAsGCKfmftHpyPypHmHF6w.mft (raw, json) Hash identifier: GYf2MOpuqVGQCreTOcqIvG0H3eCjMbm4NT9xd+s5kVc= Subject key identifier: 83:B0:25:A7:3F:0C:23:67:DE:E5:BF:97:DE:99:30:F4:29:94:44:13 Authority key identifier: 31:FA:EC:5E:30:2C:18:22:9F:99:FB:47:A7:23:F2:A4:79:87:17:AC Certificate issuer: /CN=A91417B0/serialNumber=31FAEC5E302C18229F99FB47A723F2A4798717AC Certificate serial: 4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfrsXjAsGCKfmftHpyPypHmHF6w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91417B0/EB082472D88311EF954A3D70C4F9AE02/MfrsXjAsGCKfmftHpyPypHmHF6w.mft Manifest number: 4B Signing time: Sun 15 Jun 2025 06:26:55 +0000 Manifest this update: Sun 15 Jun 2025 06:26:55 +0000 Manifest next update: Sun 22 Jun 2025 06:26:55 +0000 Files and hashes: 1: MfrsXjAsGCKfmftHpyPypHmHF6w.crl (hash: C9vqQkX+lBtsP/e0T93MLQLnTun02nYKUbf8wmUyiE4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91417B0/EB082472D88311EF954A3D70C4F9AE02/MfrsXjAsGCKfmftHpyPypHmHF6w.crl rsync://rpki.apnic.net/member_repository/A91417B0/EB082472D88311EF954A3D70C4F9AE02/MfrsXjAsGCKfmftHpyPypHmHF6w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfrsXjAsGCKfmftHpyPypHmHF6w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75 (0x4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91417B0, serialNumber=31FAEC5E302C18229F99FB47A723F2A4798717AC Validity Not Before: Jun 15 06:26:55 2025 GMT Not After : Jun 22 06:26:55 2025 GMT Subject: CN=684e67af-1920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:58:3a:74:14:16:00:c9:1e:6f:cd:0e:7b:f1: 07:62:56:fe:da:88:e3:f1:9a:79:20:5f:ca:ff:a9: 0f:2b:06:c0:65:6b:33:d2:3c:01:9b:1e:d8:d0:3f: 47:36:ef:23:5a:27:71:36:83:09:58:b9:42:96:79: e0:59:32:d4:c6:77:55:ca:6e:2f:72:fd:2c:ff:4a: ae:92:41:fd:01:ab:11:e9:cb:70:cb:e6:9f:de:71: a9:c7:d0:f3:56:75:c4:a1:5a:c0:72:76:bf:30:72: db:9b:07:a3:3f:07:c3:66:f8:04:fb:8d:b6:a8:06: 7e:aa:c4:05:f1:56:60:f2:7d:c2:36:be:18:46:cb: bb:59:8f:09:4a:bb:f8:22:22:d1:dd:8b:ce:71:ef: 25:8b:b5:7e:75:de:88:7e:ec:5a:a9:6e:75:4b:d6: ec:00:2a:be:8f:74:dc:82:76:33:57:33:76:63:18: ea:7e:dc:a0:8f:b0:93:40:1d:be:5d:6f:c2:98:31: 51:75:21:c6:4b:79:c7:6b:6f:7b:aa:98:9d:31:b8: be:dd:e6:e3:91:31:29:48:e0:01:74:14:ca:cc:d6: b0:d2:68:4f:ac:ff:88:0a:df:97:d3:8d:d2:ce:24: 55:ec:0b:48:f0:d7:73:84:1c:44:86:44:74:85:a1: ed:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:B0:25:A7:3F:0C:23:67:DE:E5:BF:97:DE:99:30:F4:29:94:44:13 X509v3 Authority Key Identifier: keyid:31:FA:EC:5E:30:2C:18:22:9F:99:FB:47:A7:23:F2:A4:79:87:17:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91417B0/EB082472D88311EF954A3D70C4F9AE02/MfrsXjAsGCKfmftHpyPypHmHF6w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfrsXjAsGCKfmftHpyPypHmHF6w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91417B0/EB082472D88311EF954A3D70C4F9AE02/MfrsXjAsGCKfmftHpyPypHmHF6w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:87:4e:08:d3:6d:90:02:32:26:49:a8:aa:a6:1a:27:9b:94: af:3d:bd:78:5f:7f:8b:3d:96:c4:88:47:2d:40:7a:e4:8e:67: e3:b1:08:13:bd:ce:f4:7e:d8:17:b7:45:1a:c1:1f:21:62:4b: a0:7c:62:94:d3:19:db:75:47:ef:7a:b0:48:63:47:4e:d1:d9: cf:66:1c:79:bf:a2:87:fd:33:db:a6:57:08:fb:dd:9f:47:12: 36:72:55:0a:5f:58:e2:18:da:6d:68:cf:6a:4b:0e:cb:9f:03: 93:cb:ee:78:aa:2c:05:0f:6d:92:be:e7:d9:93:9b:0f:f0:31: a6:da:27:77:ee:c4:c7:88:6c:d6:5a:d8:d0:4f:8e:c6:dd:19: a9:b0:d4:14:9a:25:27:01:c2:b2:d6:9a:9e:47:7b:73:ed:be: 89:07:c8:cf:3e:b7:46:a4:50:cf:30:7a:9d:d2:48:a1:e6:cf: 44:30:7b:7f:89:19:10:e2:ea:cd:03:62:b3:c4:a2:49:29:eb: 52:24:1c:dd:07:26:6e:e3:b7:00:58:be:ee:74:bb:98:65:2f: c8:0d:0e:6b:a6:d4:ac:2d:17:45:b1:0e:69:dc:92:9e:97:70: d4:d1:29:54:56:c4:7a:e8:1a:2d:eb:fb:0f:ce:a2:60:5e:bd: d5:b2:fe:2d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MTdCMDExMC8GA1UEBRMoMzFGQUVDNUUzMDJDMTgyMjlGOTlGQjQ3QTcyM0YyQTQ3 OTg3MTdBQzAeFw0yNTA2MTUwNjI2NTVaFw0yNTA2MjIwNjI2NTVaMBgxFjAUBgNV BAMTDTY4NGU2N2FmLTE5MjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0WDp0FBYAyR5vzQ578QdiVv7aiOPxmnkgX8r/qQ8rBsBlazPSPAGbHtjQP0c2 7yNaJ3E2gwlYuUKWeeBZMtTGd1XKbi9y/Sz/Sq6SQf0BqxHpy3DL5p/ecanH0PNW dcShWsBydr8wctubB6M/B8Nm+AT7jbaoBn6qxAXxVmDyfcI2vhhGy7tZjwlKu/gi ItHdi85x7yWLtX513oh+7FqpbnVL1uwAKr6PdNyCdjNXM3ZjGOp+3KCPsJNAHb5d b8KYMVF1IcZLecdrb3uqmJ0xuL7d5uORMSlI4AF0FMrM1rDSaE+s/4gK35fTjdLO JFXsC0jw13OEHESGRHSFoe3nAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUg7Alpz8M I2fe5b+X3pkw9CmURBMwHwYDVR0jBBgwFoAUMfrsXjAsGCKfmftHpyPypHmHF6ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQxN0IwL0VCMDgyNDcyRDg4 MzExRUY5NTRBM0Q3MEM0RjlBRTAyL01mcnNYakFzR0NLZm1mdEhweVB5cEhtSEY2 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTWZyc1hqQXNHQ0tmbWZ0SHB5UHlwSG1IRjZ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQx N0IwL0VCMDgyNDcyRDg4MzExRUY5NTRBM0Q3MEM0RjlBRTAyL01mcnNYakFzR0NL Zm1mdEhweVB5cEhtSEY2dy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADuHTgjTbZACMiZJqKqmGieblK89vXhff4s9lsSIRy1AeuSOZ+OxCBO9 zvR+2Be3RRrBHyFiS6B8YpTTGdt1R+96sEhjR07R2c9mHHm/oof9M9umVwj73Z9H EjZyVQpfWOIY2m1oz2pLDsufA5PL7niqLAUPbZK+59mTmw/wMabaJ3fuxMeIbNZa 2NBPjsbdGamw1BSaJScBwrLWmp5He3PtvokHyM8+t0akUM8wep3SSKHmz0Qwe3+J GRDi6s0DYrPEokkp61IkHN0HJm7jtwBYvu50u5hlL8gNDmum1KwtF0WxDmnckp6X cNTRKVRWxHroGi3r+w/OomBevdWy/i0= -----END CERTIFICATE-----Generated at Sun Jun 15 10:16:57 2025 by rpki-client