$ rpki-client -vvf rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/89pR_oC82pcIdSXiBGIeqfVXQZk.mft File: 89pR_oC82pcIdSXiBGIeqfVXQZk.mft (raw, json) Hash identifier: FijEq+5UCcW8rM5Q8ZjueoFyX6vL1euRLdGDxwzd9VI= Subject key identifier: 81:D3:08:BB:1E:7A:62:F6:69:0B:68:BF:63:A4:42:62:B4:A8:FB:E1 Authority key identifier: F3:DA:51:FE:80:BC:DA:97:08:75:25:E2:04:62:1E:A9:F5:57:41:99 Certificate issuer: /CN=A9147CDA/serialNumber=F3DA51FE80BCDA97087525E204621EA9F5574199 Certificate serial: 01C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89pR_oC82pcIdSXiBGIeqfVXQZk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/89pR_oC82pcIdSXiBGIeqfVXQZk.mft Manifest number: 01A8 Signing time: Fri 13 Jun 2025 02:42:20 +0000 Manifest this update: Fri 13 Jun 2025 02:42:19 +0000 Manifest next update: Fri 20 Jun 2025 02:42:19 +0000 Files and hashes: 1: 89pR_oC82pcIdSXiBGIeqfVXQZk.crl (hash: kdSLKMoe9/1d/rCQv8+sEmy/XMaQJ9L8L+gt0k3+SM0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/89pR_oC82pcIdSXiBGIeqfVXQZk.crl rsync://rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/89pR_oC82pcIdSXiBGIeqfVXQZk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89pR_oC82pcIdSXiBGIeqfVXQZk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 02:42:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 452 (0x1c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147CDA, serialNumber=F3DA51FE80BCDA97087525E204621EA9F5574199 Validity Not Before: Jun 13 02:42:19 2025 GMT Not After : Jun 20 02:42:19 2025 GMT Subject: CN=684b900b-c43e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:cc:63:ca:60:63:36:d4:0e:9b:10:e7:ad:38: 63:c4:84:e7:6a:c5:93:c1:64:2c:f5:1d:fa:2a:52: 4e:7c:8d:5e:2f:d4:b5:7b:49:f2:99:9f:da:7c:2c: 14:16:9d:b2:34:fb:99:26:cc:bc:41:1b:f3:77:c9: 94:a3:5c:94:de:ae:d0:c0:e3:a6:1a:ec:34:ed:02: 75:0d:9b:d4:9e:bc:1d:d0:6f:b6:d8:f3:9f:e4:43: f0:4e:e3:84:92:b6:c4:70:aa:cf:e2:ef:5c:b5:cf: 54:17:27:2e:c7:54:09:6a:fc:31:49:eb:6a:d4:df: 06:94:97:22:ad:ec:58:28:23:22:16:c6:04:43:f2: 85:f2:ef:23:00:e0:fe:50:5f:9b:0f:d9:0c:c1:52: 27:21:f7:ee:3f:45:1f:28:2f:46:d6:0b:e0:1d:c6: 45:d1:0d:f1:39:28:dc:95:d0:56:51:1a:b5:4b:88: 75:96:bd:f4:02:d8:f3:be:e4:ef:a7:e4:cb:71:79: 87:5b:06:a1:da:67:b3:3a:a3:f1:34:19:c5:1d:53: 73:3c:99:ac:40:7f:a7:d4:e5:0a:53:54:76:17:8a: 08:67:5b:e5:80:b1:8a:f1:af:6d:52:4f:b4:a7:0e: 2f:55:be:c6:e9:ad:ba:55:c7:5a:34:3f:6a:c8:f2: 24:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:D3:08:BB:1E:7A:62:F6:69:0B:68:BF:63:A4:42:62:B4:A8:FB:E1 X509v3 Authority Key Identifier: keyid:F3:DA:51:FE:80:BC:DA:97:08:75:25:E2:04:62:1E:A9:F5:57:41:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/89pR_oC82pcIdSXiBGIeqfVXQZk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89pR_oC82pcIdSXiBGIeqfVXQZk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/89pR_oC82pcIdSXiBGIeqfVXQZk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:ce:83:65:a2:bb:04:d9:c2:8c:43:2f:da:cb:5f:9d:e2:94: 85:f7:91:10:61:ba:2b:84:bf:1a:31:3a:ce:a4:51:ee:64:19: 9d:3b:53:d0:f6:85:0a:5e:d0:c1:a5:6a:95:4d:19:99:f1:f0: de:67:68:05:7f:22:1a:33:6b:a0:1f:10:fb:23:17:d5:28:61: ed:c4:6d:f1:cf:d1:9f:db:20:c0:61:77:ce:dc:81:16:0a:9a: 75:5f:b3:f2:0e:74:ab:3f:99:3e:33:2b:31:e4:c3:47:66:61: f3:d2:08:28:fb:c6:c3:4b:67:c3:fd:eb:59:af:ce:00:2d:d7: cf:dd:a7:aa:3c:5c:b6:42:55:57:ff:e1:5d:aa:98:e2:03:bb: c6:4e:e3:d0:2c:23:69:b7:c3:4e:f4:ef:73:e6:cc:48:28:50: 42:b1:c1:a0:10:10:28:3a:f3:d5:0c:6b:24:5f:39:75:70:98: a9:21:a9:70:ac:fa:bd:af:64:0c:00:e6:24:7e:82:d1:9b:7e: 38:c7:0b:cb:29:8d:61:9e:09:f7:41:e2:70:4d:5f:01:47:40: d0:e9:e5:b2:77:a8:b0:e6:41:94:14:4f:e7:c0:91:8f:dc:94: 44:9b:0e:0b:0b:49:30:c6:de:ff:17:09:58:ec:b7:78:63:35: 97:a3:ff:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDdDREExMTAvBgNVBAUTKEYzREE1MUZFODBCQ0RBOTcwODc1MjVFMjA0NjIxRUE5 RjU1NzQxOTkwHhcNMjUwNjEzMDI0MjE5WhcNMjUwNjIwMDI0MjE5WjAYMRYwFAYD VQQDEw02ODRiOTAwYi1jNDNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAssxjymBjNtQOmxDnrThjxITnasWTwWQs9R36KlJOfI1eL9S1e0nymZ/afCwU Fp2yNPuZJsy8QRvzd8mUo1yU3q7QwOOmGuw07QJ1DZvUnrwd0G+22POf5EPwTuOE krbEcKrP4u9ctc9UFycux1QJavwxSetq1N8GlJcirexYKCMiFsYEQ/KF8u8jAOD+ UF+bD9kMwVInIffuP0UfKC9G1gvgHcZF0Q3xOSjcldBWURq1S4h1lr30AtjzvuTv p+TLcXmHWwah2mezOqPxNBnFHVNzPJmsQH+n1OUKU1R2F4oIZ1vlgLGK8a9tUk+0 pw4vVb7G6a26VcdaND9qyPIk2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIHTCLse emL2aQtov2OkQmK0qPvhMB8GA1UdIwQYMBaAFPPaUf6AvNqXCHUl4gRiHqn1V0GZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0NEQS80OUIyN0Q4QTA1 NEQxMUVFOURGQzE2MjRDNEY5QUUwMi84OXBSX29DODJwY0lkU1hpQkdJZXFmVlhR WmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg5cFJfb0M4MnBjSWRTWGlCR0llcWZWWFFaay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 N0NEQS80OUIyN0Q4QTA1NEQxMUVFOURGQzE2MjRDNEY5QUUwMi84OXBSX29DODJw Y0lkU1hpQkdJZXFmVlhRWmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPzoNlorsE2cKMQy/ay1+d4pSF95EQYborhL8aMTrOpFHuZBmdO1PQ 9oUKXtDBpWqVTRmZ8fDeZ2gFfyIaM2ugHxD7IxfVKGHtxG3xz9Gf2yDAYXfO3IEW Cpp1X7PyDnSrP5k+Mysx5MNHZmHz0ggo+8bDS2fD/etZr84ALdfP3aeqPFy2QlVX /+FdqpjiA7vGTuPQLCNpt8NO9O9z5sxIKFBCscGgEBAoOvPVDGskXzl1cJipIalw rPq9r2QMAOYkfoLRm344xwvLKY1hngn3QeJwTV8BR0DQ6eWyd6iw5kGUFE/nwJGP 3JREmw4LC0kwxt7/FwlY7Ld4YzWXo/8M -----END CERTIFICATE-----Generated at Sat Jun 14 18:01:59 2025 by rpki-client