$ rpki-client -vvf rpki.apnic.net/member_repository/A91536B7/F1CD27B473AD11E7ACBD025EC4F9AE02/mB-iJ6KkNcK3bgbJxFLT7HUZhNM.mft File: mB-iJ6KkNcK3bgbJxFLT7HUZhNM.mft (raw, json) Hash identifier: 1Ac96GBZY9o7pM6iUKGne639Kt7MoY4ZCAYy01ktCYw= Subject key identifier: 4F:21:E4:7C:1E:08:FC:14:1D:3E:2A:E4:1C:EE:8C:E5:82:3F:98:38 Authority key identifier: 98:1F:A2:27:A2:A4:35:C2:B7:6E:06:C9:C4:52:D3:EC:75:19:84:D3 Certificate issuer: /CN=A91536B7/serialNumber=981FA227A2A435C2B76E06C9C452D3EC751984D3 Certificate serial: 0738 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mB-iJ6KkNcK3bgbJxFLT7HUZhNM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91536B7/F1CD27B473AD11E7ACBD025EC4F9AE02/mB-iJ6KkNcK3bgbJxFLT7HUZhNM.mft Manifest number: 503D Signing time: Mon 16 Jun 2025 16:28:31 +0000 Manifest this update: Mon 16 Jun 2025 16:28:31 +0000 Manifest next update: Mon 23 Jun 2025 16:28:31 +0000 Files and hashes: 1: mB-iJ6KkNcK3bgbJxFLT7HUZhNM.crl (hash: JCfK/zFi7kHWljCxmmrHOe1FfFlcYYjxv2btfbSfbYk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91536B7/F1CD27B473AD11E7ACBD025EC4F9AE02/mB-iJ6KkNcK3bgbJxFLT7HUZhNM.crl rsync://rpki.apnic.net/member_repository/A91536B7/F1CD27B473AD11E7ACBD025EC4F9AE02/mB-iJ6KkNcK3bgbJxFLT7HUZhNM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mB-iJ6KkNcK3bgbJxFLT7HUZhNM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 16:28:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1848 (0x738) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91536B7, serialNumber=981FA227A2A435C2B76E06C9C452D3EC751984D3 Validity Not Before: Jun 16 16:28:31 2025 GMT Not After : Jun 23 16:28:31 2025 GMT Subject: CN=6850462f-fca9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:3f:4c:9d:19:3b:0c:75:4f:bf:67:dc:46:b1: 00:87:5d:8f:b8:24:c3:1c:ae:25:0f:da:4b:c0:3e: 1c:ea:6d:9c:98:db:97:e8:b6:de:b4:45:86:e9:55: 3d:96:fa:2f:6a:ff:f0:03:36:e3:10:8b:9f:d2:97: aa:5a:38:d4:26:c4:7a:7a:05:9c:46:e0:30:6d:d2: cc:6d:6b:ba:4e:b0:80:83:4a:bb:94:83:a0:02:8e: 51:d3:87:e1:eb:e9:cf:e2:de:13:be:2b:52:d9:74: bc:85:dd:22:06:c2:ed:42:0e:bd:d9:49:26:d4:c3: bd:6f:de:3d:b2:95:83:9c:21:a6:c9:66:b2:a8:08: d3:c0:1e:13:51:09:ac:d6:b4:13:e6:65:4e:9f:51: 2e:13:32:19:e2:41:80:52:b0:8f:aa:51:72:a1:04: 4b:d8:89:77:09:41:3a:80:d1:c5:fc:3f:61:78:84: 8c:d8:6e:0b:7c:03:f1:a4:d3:10:b1:13:d8:d8:0c: 51:3b:1d:0d:70:4e:b3:b5:7f:5f:ac:f4:93:65:fb: b8:cc:19:36:d3:73:e0:cd:e2:24:a7:95:41:e5:5d: af:a4:89:4c:83:b9:7d:0a:4c:a0:93:57:ae:49:48: c5:5d:8b:5d:75:02:2b:8d:8d:4e:f6:3c:77:6d:3d: 13:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:21:E4:7C:1E:08:FC:14:1D:3E:2A:E4:1C:EE:8C:E5:82:3F:98:38 X509v3 Authority Key Identifier: keyid:98:1F:A2:27:A2:A4:35:C2:B7:6E:06:C9:C4:52:D3:EC:75:19:84:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91536B7/F1CD27B473AD11E7ACBD025EC4F9AE02/mB-iJ6KkNcK3bgbJxFLT7HUZhNM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mB-iJ6KkNcK3bgbJxFLT7HUZhNM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91536B7/F1CD27B473AD11E7ACBD025EC4F9AE02/mB-iJ6KkNcK3bgbJxFLT7HUZhNM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:69:df:ec:f3:7d:dc:0b:50:d0:80:a0:41:54:6a:3d:a0:4d: 07:6b:70:3e:88:ba:f8:f9:15:64:3f:ee:f6:66:e5:05:eb:51: c6:cb:f4:c9:a3:a0:5b:36:bc:c8:5c:fc:35:de:97:da:98:c8: 64:0c:e0:bc:4b:74:03:94:3c:2c:e2:2d:dd:ff:13:dd:53:44: 83:8c:05:6f:6d:e5:77:fa:18:fc:f0:5e:b2:61:4b:de:fc:9e: be:6d:fa:f2:f3:16:2e:b3:cb:c5:5f:3f:24:d6:b0:a8:56:60: 71:5e:d0:c3:1a:6f:d0:02:de:89:a5:fc:4b:f3:0e:32:04:45: 73:ad:ef:4a:a5:f9:b6:e5:93:48:70:35:f0:4c:ad:d4:e7:ea: 0a:0e:07:d7:cd:98:5b:93:4d:8d:d3:f3:73:44:62:7d:36:0e: 98:9b:c6:22:df:81:80:77:b1:3e:0c:1c:38:a9:4c:91:3a:d7: fe:81:92:6f:ec:87:90:d6:9c:1f:23:8e:d8:c6:1d:cb:f0:83: 80:2a:05:ce:fc:5e:70:57:4c:2f:23:a6:a5:ec:32:bf:58:a3: 11:52:a1:54:96:b8:14:3b:b0:6b:2c:05:67:ac:df:5f:4d:1f: d1:75:f1:ff:a1:e1:9f:50:1f:23:09:f2:06:d9:24:d0:cd:8a: 35:31:57:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM2QjcxMTAvBgNVBAUTKDk4MUZBMjI3QTJBNDM1QzJCNzZFMDZDOUM0NTJEM0VD NzUxOTg0RDMwHhcNMjUwNjE2MTYyODMxWhcNMjUwNjIzMTYyODMxWjAYMRYwFAYD VQQDEw02ODUwNDYyZi1mY2E5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzz9MnRk7DHVPv2fcRrEAh12PuCTDHK4lD9pLwD4c6m2cmNuX6LbetEWG6VU9 lvovav/wAzbjEIuf0peqWjjUJsR6egWcRuAwbdLMbWu6TrCAg0q7lIOgAo5R04fh 6+nP4t4TvitS2XS8hd0iBsLtQg692Ukm1MO9b949spWDnCGmyWayqAjTwB4TUQms 1rQT5mVOn1EuEzIZ4kGAUrCPqlFyoQRL2Il3CUE6gNHF/D9heISM2G4LfAPxpNMQ sRPY2AxROx0NcE6ztX9frPSTZfu4zBk203PgzeIkp5VB5V2vpIlMg7l9Ckygk1eu SUjFXYtddQIrjY1O9jx3bT0T2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE8h5Hwe CPwUHT4q5BzujOWCP5g4MB8GA1UdIwQYMBaAFJgfoieipDXCt24GycRS0+x1GYTT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzZCNy9GMUNEMjdCNDcz QUQxMUU3QUNCRDAyNUVDNEY5QUUwMi9tQi1pSjZLa05jSzNiZ2JKeEZMVDdIVVpo Tk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21CLWlKNktrTmNLM2JnYkp4RkxUN0hVWmhOTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzZCNy9GMUNEMjdCNDczQUQxMUU3QUNCRDAyNUVDNEY5QUUwMi9tQi1pSjZLa05j SzNiZ2JKeEZMVDdIVVpoTk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACad/s833cC1DQgKBBVGo9oE0Ha3A+iLr4+RVkP+72ZuUF61HGy/TJ o6BbNrzIXPw13pfamMhkDOC8S3QDlDws4i3d/xPdU0SDjAVvbeV3+hj88F6yYUve /J6+bfry8xYus8vFXz8k1rCoVmBxXtDDGm/QAt6JpfxL8w4yBEVzre9Kpfm25ZNI cDXwTK3U5+oKDgfXzZhbk02N0/NzRGJ9Ng6Ym8Yi34GAd7E+DBw4qUyROtf+gZJv 7IeQ1pwfI47Yxh3L8IOAKgXO/F5wV0wvI6al7DK/WKMRUqFUlrgUO7BrLAVnrN9f TR/RdfH/oeGfUB8jCfIG2STQzYo1MVde -----END CERTIFICATE-----Generated at Tue Jun 17 01:30:42 2025 by rpki-client