$ rpki-client -vvf rpki.apnic.net/member_repository/A91559AC/C06135165F8D11EAB500BD64C4F9AE02/CmH1ryEJpoNhH7ogbyCM7-NImCE.mft File: CmH1ryEJpoNhH7ogbyCM7-NImCE.mft (raw, json) Hash identifier: 1GxvKMyIeWJMs46NrYiCKQyVjjbdlNiU4afMpU8gW4A= Subject key identifier: 53:9C:28:FA:38:E2:20:04:35:BA:E3:F1:11:B8:EF:49:09:DB:C3:B4 Authority key identifier: 0A:61:F5:AF:21:09:A6:83:61:1F:BA:20:6F:20:8C:EF:E3:48:98:21 Certificate issuer: /CN=A91559AC/serialNumber=0A61F5AF2109A683611FBA206F208CEFE3489821 Certificate serial: 0A91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmH1ryEJpoNhH7ogbyCM7-NImCE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91559AC/C06135165F8D11EAB500BD64C4F9AE02/CmH1ryEJpoNhH7ogbyCM7-NImCE.mft Manifest number: 0AAE Signing time: Sat 14 Jun 2025 19:26:31 +0000 Manifest this update: Sat 14 Jun 2025 19:26:30 +0000 Manifest next update: Sat 21 Jun 2025 19:26:30 +0000 Files and hashes: 1: CmH1ryEJpoNhH7ogbyCM7-NImCE.crl (hash: QespAc3TmBKrdeW5SOH9yi6bvrHzSInMeYMl+5vBUJk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91559AC/C06135165F8D11EAB500BD64C4F9AE02/CmH1ryEJpoNhH7ogbyCM7-NImCE.crl rsync://rpki.apnic.net/member_repository/A91559AC/C06135165F8D11EAB500BD64C4F9AE02/CmH1ryEJpoNhH7ogbyCM7-NImCE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmH1ryEJpoNhH7ogbyCM7-NImCE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 19:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2705 (0xa91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91559AC, serialNumber=0A61F5AF2109A683611FBA206F208CEFE3489821 Validity Not Before: Jun 14 19:26:30 2025 GMT Not After : Jun 21 19:26:30 2025 GMT Subject: CN=684dcce6-dbb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:cc:c9:1d:d5:41:0a:0b:ec:fc:5e:80:e4:76: 12:53:41:a6:28:dc:a8:1b:b1:e6:d4:95:9b:b0:6a: 7a:ee:df:f6:f8:62:54:00:2b:b2:e4:74:a2:0c:b0: f1:03:26:c4:5e:38:5a:50:52:8d:b0:de:e5:17:47: c5:55:d8:39:4d:44:15:42:d9:48:3c:93:e0:5c:ce: 9f:8d:22:b2:b5:de:51:40:68:2d:33:92:ad:2d:22: 64:9c:7e:f9:39:e2:d0:eb:57:0a:10:e0:a8:62:07: 12:f2:0e:a8:98:33:0e:ac:da:85:b0:04:e9:98:f1: 80:02:91:77:ce:0a:38:ca:3a:63:a5:68:5e:8b:10: 4e:8d:0d:6a:c5:00:16:ed:9a:b0:f8:7b:74:59:fd: 01:56:b3:26:b5:77:38:53:a7:46:57:cf:14:10:35: 2a:4a:66:c8:5a:27:a8:dd:ff:0b:d9:39:38:db:e2: ed:ad:7b:84:3d:96:80:a3:e6:97:28:fd:4f:45:03: d4:26:d4:29:34:67:e8:0f:db:f9:30:da:c2:b3:8a: a7:97:cd:cd:5a:7a:6a:b2:6c:c2:03:a4:5e:72:b6: 7b:03:47:58:db:41:9e:44:1b:14:8e:0c:91:02:3a: 87:fe:48:ce:09:88:01:db:07:8e:c9:bc:7a:0e:eb: 30:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:9C:28:FA:38:E2:20:04:35:BA:E3:F1:11:B8:EF:49:09:DB:C3:B4 X509v3 Authority Key Identifier: keyid:0A:61:F5:AF:21:09:A6:83:61:1F:BA:20:6F:20:8C:EF:E3:48:98:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91559AC/C06135165F8D11EAB500BD64C4F9AE02/CmH1ryEJpoNhH7ogbyCM7-NImCE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmH1ryEJpoNhH7ogbyCM7-NImCE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91559AC/C06135165F8D11EAB500BD64C4F9AE02/CmH1ryEJpoNhH7ogbyCM7-NImCE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:8a:2a:82:25:aa:d8:92:5a:a0:e1:94:46:9c:63:ea:28:b2: e2:57:b4:42:47:37:b9:71:5f:49:7f:2c:e4:cc:2f:99:5e:1b: cc:9c:46:38:59:c4:e4:6b:49:15:50:66:f3:18:87:a3:54:7a: 46:6f:7f:17:6d:f0:2e:0d:9d:3c:80:67:8b:6e:f9:3e:b0:8f: 20:6e:81:d7:82:ff:68:94:c6:ff:93:f8:17:6e:d7:ef:a6:7b: 3a:a7:6d:ce:39:c1:0d:9b:3a:e4:8f:87:c4:74:c2:c7:09:77: 4f:77:5a:ff:93:17:c0:86:30:fd:00:b8:e3:64:ae:c8:a7:0f: 0a:04:c0:15:94:a8:da:fe:40:d5:a6:05:2a:3e:42:42:b4:48: ec:67:f3:e7:ab:28:e4:46:e7:20:bf:f2:23:9a:98:fe:7a:b6: 33:8f:fc:fa:2f:94:b0:33:9a:0a:0a:c8:59:cc:5a:e9:84:ef: 81:02:ee:c0:63:ba:ae:df:cb:4b:8a:2d:2d:3d:52:0c:09:70: fe:c8:1e:a4:0e:58:95:04:d2:e7:0d:61:13:5d:62:7a:f2:3a: 7b:92:84:cf:c3:67:d6:4c:a2:fd:ed:a7:df:46:8f:6f:aa:b2: 77:13:66:da:fd:e7:3e:08:89:6d:9f:fd:d9:ec:1c:fd:e2:ee: e0:4f:3a:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCpEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU5QUMxMTAvBgNVBAUTKDBBNjFGNUFGMjEwOUE2ODM2MTFGQkEyMDZGMjA4Q0VG RTM0ODk4MjEwHhcNMjUwNjE0MTkyNjMwWhcNMjUwNjIxMTkyNjMwWjAYMRYwFAYD VQQDEw02ODRkY2NlNi1kYmI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0czJHdVBCgvs/F6A5HYSU0GmKNyoG7Hm1JWbsGp67t/2+GJUACuy5HSiDLDx AybEXjhaUFKNsN7lF0fFVdg5TUQVQtlIPJPgXM6fjSKytd5RQGgtM5KtLSJknH75 OeLQ61cKEOCoYgcS8g6omDMOrNqFsATpmPGAApF3zgo4yjpjpWheixBOjQ1qxQAW 7Zqw+Ht0Wf0BVrMmtXc4U6dGV88UEDUqSmbIWieo3f8L2Tk42+LtrXuEPZaAo+aX KP1PRQPUJtQpNGfoD9v5MNrCs4qnl83NWnpqsmzCA6RecrZ7A0dY20GeRBsUjgyR AjqH/kjOCYgB2weOybx6DuswSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFOcKPo4 4iAENbrj8RG470kJ28O0MB8GA1UdIwQYMBaAFAph9a8hCaaDYR+6IG8gjO/jSJgh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTlBQy9DMDYxMzUxNjVG OEQxMUVBQjUwMEJENjRDNEY5QUUwMi9DbUgxcnlFSnBvTmhIN29nYnlDTTctTklt Q0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NtSDFyeUVKcG9OaEg3b2dieUNNNy1OSW1DRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTlBQy9DMDYxMzUxNjVGOEQxMUVBQjUwMEJENjRDNEY5QUUwMi9DbUgxcnlFSnBv TmhIN29nYnlDTTctTkltQ0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHiiqCJarYklqg4ZRGnGPqKLLiV7RCRze5cV9JfyzkzC+ZXhvMnEY4 WcTka0kVUGbzGIejVHpGb38XbfAuDZ08gGeLbvk+sI8gboHXgv9olMb/k/gXbtfv pns6p23OOcENmzrkj4fEdMLHCXdPd1r/kxfAhjD9ALjjZK7Ipw8KBMAVlKja/kDV pgUqPkJCtEjsZ/PnqyjkRucgv/Ijmpj+erYzj/z6L5SwM5oKCshZzFrphO+BAu7A Y7qu38tLii0tPVIMCXD+yB6kDliVBNLnDWETXWJ68jp7koTPw2fWTKL97affRo9v qrJ3E2ba/ec+CIltn/3Z7Bz94u7gTzrp -----END CERTIFICATE-----Generated at Sun Jun 15 08:44:59 2025 by rpki-client