$ rpki-client -vvf rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/rF9v7wiyLvX_ZHPbPVbI6yblUDg.mft File: rF9v7wiyLvX_ZHPbPVbI6yblUDg.mft (raw, json) Hash identifier: fzOF6zo58EWI24foZnfb+x1uxiX0NAYokrQG7md7dUA= Subject key identifier: 75:27:3A:4B:1A:D6:A6:35:E4:20:DE:DF:95:27:7B:E6:CE:62:19:D4 Authority key identifier: AC:5F:6F:EF:08:B2:2E:F5:FF:64:73:DB:3D:56:C8:EB:26:E5:50:38 Certificate issuer: /CN=A91580A1/serialNumber=AC5F6FEF08B22EF5FF6473DB3D56C8EB26E55038 Certificate serial: 0B4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rF9v7wiyLvX_ZHPbPVbI6yblUDg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/rF9v7wiyLvX_ZHPbPVbI6yblUDg.mft Manifest number: 134D Signing time: Sat 14 Jun 2025 18:58:39 +0000 Manifest this update: Sat 14 Jun 2025 18:58:39 +0000 Manifest next update: Sat 21 Jun 2025 18:58:39 +0000 Files and hashes: 1: rF9v7wiyLvX_ZHPbPVbI6yblUDg.crl (hash: +NhBUz1X2Sg75Ih7cINR+30GsrHCT7DRQzYHOX+kTmA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/rF9v7wiyLvX_ZHPbPVbI6yblUDg.crl rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/rF9v7wiyLvX_ZHPbPVbI6yblUDg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rF9v7wiyLvX_ZHPbPVbI6yblUDg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 18:58:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2895 (0xb4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91580A1, serialNumber=AC5F6FEF08B22EF5FF6473DB3D56C8EB26E55038 Validity Not Before: Jun 14 18:58:39 2025 GMT Not After : Jun 21 18:58:39 2025 GMT Subject: CN=684dc65f-adfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ee:9e:d5:ce:0f:a2:ac:6b:f4:29:b2:42:c2: 9f:96:ef:39:91:72:57:66:b4:08:7e:32:dc:6b:ad: 6e:05:41:48:7f:41:09:b2:bb:33:78:73:42:dd:17: 35:ed:ed:e2:21:ca:79:e3:d8:47:f5:ea:45:53:e3: a0:c4:9f:d6:3b:65:f0:28:be:fa:a9:d6:3d:d6:76: f4:a7:62:24:8b:6d:61:73:ca:ce:02:dc:3c:52:6b: 78:a4:40:4c:8d:f7:44:f3:7c:75:84:d7:4c:f1:b4: a2:db:5f:5c:3d:7b:7a:2c:8e:53:90:8a:95:bd:fc: 52:94:db:e3:3e:49:f4:d9:98:88:f9:36:34:0b:a3: f5:f5:d1:f5:14:7f:c3:ff:73:94:45:c4:cf:9a:92: d1:ab:0b:06:7c:e9:6a:ca:8b:56:61:a4:bf:73:bd: f1:25:27:f9:b3:67:2a:de:0a:5f:65:82:81:bd:d1: 27:b2:9f:26:94:f1:2c:ec:32:14:b7:71:b6:6c:3f: b2:0e:c9:ef:a2:50:80:88:6e:d8:e8:d1:cc:3e:52: 17:a0:b0:b9:52:80:37:60:88:09:03:11:13:c7:d8: 06:9d:22:b8:e5:c3:f1:95:b9:3a:9f:4c:cb:f6:fd: ac:b7:ea:ab:f5:02:70:d7:0e:20:76:e8:7e:51:8d: ab:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:27:3A:4B:1A:D6:A6:35:E4:20:DE:DF:95:27:7B:E6:CE:62:19:D4 X509v3 Authority Key Identifier: keyid:AC:5F:6F:EF:08:B2:2E:F5:FF:64:73:DB:3D:56:C8:EB:26:E5:50:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/rF9v7wiyLvX_ZHPbPVbI6yblUDg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rF9v7wiyLvX_ZHPbPVbI6yblUDg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/rF9v7wiyLvX_ZHPbPVbI6yblUDg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:50:f8:35:53:43:d0:ca:10:0d:e3:11:70:1c:bb:a1:31:d3: 81:a3:67:1a:55:eb:5e:08:29:73:29:f7:b5:47:8b:07:15:cc: 28:6d:f2:be:31:44:3f:c5:4f:1a:02:bc:ef:22:2a:77:6e:3b: f5:fc:6e:63:01:43:13:71:f1:dc:2d:78:58:2a:f3:06:d6:78: 39:1e:28:33:c0:25:b6:9c:30:92:1a:13:92:05:82:e0:36:32: 62:86:5c:5c:c1:15:83:9c:29:e0:fa:52:2a:9c:b5:b2:25:97: 7f:6f:16:fc:ce:13:aa:93:1b:d4:52:e8:c9:98:7e:f2:1e:a3: eb:09:9f:ad:23:9d:74:f0:ae:f9:17:d4:ee:88:55:2c:97:a1: 74:93:d6:16:93:bb:23:90:2a:fd:7e:c9:1e:cd:86:42:6c:0f: fa:e0:b1:c4:38:35:d9:6d:52:ed:91:92:e4:f5:6d:f6:fa:6a: ff:04:16:90:bd:f2:b7:8a:3c:19:ce:39:23:5f:ce:1f:46:1d: 7c:91:cd:94:0f:fd:0e:bd:2e:e2:33:e7:c8:4f:c2:5a:37:51: 05:cb:53:a1:7f:2c:2a:80:11:f2:2c:c6:1c:af:09:ad:0b:61: 2f:34:af:fe:2e:4f:b0:4d:cf:0e:bf:cf:f1:ed:98:b0:12:7f: 7f:9e:25:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC08wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgwQTExMTAvBgNVBAUTKEFDNUY2RkVGMDhCMjJFRjVGRjY0NzNEQjNENTZDOEVC MjZFNTUwMzgwHhcNMjUwNjE0MTg1ODM5WhcNMjUwNjIxMTg1ODM5WjAYMRYwFAYD VQQDEw02ODRkYzY1Zi1hZGZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs+6e1c4Poqxr9CmyQsKflu85kXJXZrQIfjLca61uBUFIf0EJsrszeHNC3Rc1 7e3iIcp549hH9epFU+OgxJ/WO2XwKL76qdY91nb0p2Iki21hc8rOAtw8Umt4pEBM jfdE83x1hNdM8bSi219cPXt6LI5TkIqVvfxSlNvjPkn02ZiI+TY0C6P19dH1FH/D /3OURcTPmpLRqwsGfOlqyotWYaS/c73xJSf5s2cq3gpfZYKBvdEnsp8mlPEs7DIU t3G2bD+yDsnvolCAiG7Y6NHMPlIXoLC5UoA3YIgJAxETx9gGnSK45cPxlbk6n0zL 9v2st+qr9QJw1w4gduh+UY2rAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHUnOksa 1qY15CDe35Une+bOYhnUMB8GA1UdIwQYMBaAFKxfb+8Isi71/2Rz2z1WyOsm5VA4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODBBMS85MjU2MEE2QTM3 NEQxMUVBQTBBM0JFNTVDNEY5QUUwMi9yRjl2N3dpeUx2WF9aSFBiUFZiSTZ5YmxV RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JGOXY3d2l5THZYX1pIUGJQVmJJNnlibFVEZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODBBMS85MjU2MEE2QTM3NEQxMUVBQTBBM0JFNTVDNEY5QUUwMi9yRjl2N3dpeUx2 WF9aSFBiUFZiSTZ5YmxVRGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcUPg1U0PQyhAN4xFwHLuhMdOBo2caVeteCClzKfe1R4sHFcwobfK+ MUQ/xU8aArzvIip3bjv1/G5jAUMTcfHcLXhYKvMG1ng5HigzwCW2nDCSGhOSBYLg NjJihlxcwRWDnCng+lIqnLWyJZd/bxb8zhOqkxvUUujJmH7yHqPrCZ+tI5108K75 F9TuiFUsl6F0k9YWk7sjkCr9fskezYZCbA/64LHEODXZbVLtkZLk9W32+mr/BBaQ vfK3ijwZzjkjX84fRh18kc2UD/0OvS7iM+fIT8JaN1EFy1OhfywqgBHyLMYcrwmt C2EvNK/+Lk+wTc8Ov8/x7ZiwEn9/niUe -----END CERTIFICATE-----Generated at Sun Jun 15 09:58:30 2025 by rpki-client