$ rpki-client -vvf rpki.apnic.net/member_repository/A91937EA/1E9656306A5911EBA3641C3DC4F9AE02/CRHpmq32ZPA5kpyru0h0o6Fhyq0.mft File: CRHpmq32ZPA5kpyru0h0o6Fhyq0.mft (raw, json) Hash identifier: 3Y7BtawzWWXvBblytOQNhkYktV5ra7Ha/avArv2NZSE= Subject key identifier: DB:27:D6:C2:C0:0E:5C:C4:0C:E0:AD:99:7F:6E:85:DC:E1:4F:2B:53 Authority key identifier: 09:11:E9:9A:AD:F6:64:F0:39:92:9C:AB:BB:48:74:A3:A1:61:CA:AD Certificate issuer: /CN=A91937EA/serialNumber=0911E99AADF664F039929CABBB4874A3A161CAAD Certificate serial: 06A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CRHpmq32ZPA5kpyru0h0o6Fhyq0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91937EA/1E9656306A5911EBA3641C3DC4F9AE02/CRHpmq32ZPA5kpyru0h0o6Fhyq0.mft Manifest number: 06A2 Signing time: Thu 12 Jun 2025 21:49:34 +0000 Manifest this update: Thu 12 Jun 2025 21:49:33 +0000 Manifest next update: Thu 19 Jun 2025 21:49:33 +0000 Files and hashes: 1: CRHpmq32ZPA5kpyru0h0o6Fhyq0.crl (hash: enOK91xmK0PqJDTNxRn89lEThfLB9vlpfzcF90Sv18I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91937EA/1E9656306A5911EBA3641C3DC4F9AE02/CRHpmq32ZPA5kpyru0h0o6Fhyq0.crl rsync://rpki.apnic.net/member_repository/A91937EA/1E9656306A5911EBA3641C3DC4F9AE02/CRHpmq32ZPA5kpyru0h0o6Fhyq0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CRHpmq32ZPA5kpyru0h0o6Fhyq0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 21:49:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1700 (0x6a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91937EA, serialNumber=0911E99AADF664F039929CABBB4874A3A161CAAD Validity Not Before: Jun 12 21:49:33 2025 GMT Not After : Jun 19 21:49:33 2025 GMT Subject: CN=684b4b6e-bee4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a6:38:c8:e3:c2:c5:46:33:09:b7:da:0d:18: 50:1f:50:22:66:ba:51:63:04:4a:5d:bd:f3:d2:9c: 39:87:23:af:46:d7:85:9d:f6:04:43:b6:8d:6a:48: 3b:ab:63:80:8c:ad:3f:e6:48:7c:ee:23:1f:f4:7e: 01:cb:ec:d1:ac:26:5b:c5:58:2c:c3:4b:9d:11:fd: 17:76:48:8c:c7:3c:a1:76:fa:09:3e:be:55:70:b1: 4a:6b:51:4a:f2:71:36:30:5e:46:5c:f9:b5:6a:8d: 90:7b:55:93:d8:5b:e1:77:76:7d:02:0c:5e:c7:4d: 53:1e:f8:55:4b:8c:40:b4:27:e5:89:20:fc:67:78: 88:ba:77:02:eb:6a:82:9d:c3:1c:7f:3e:65:67:b7: e2:f5:fe:ed:56:f9:41:12:9a:33:4e:5e:18:a0:61: a2:6a:64:21:57:1d:93:ac:17:f4:2a:c5:da:5d:88: 17:27:de:01:8a:f2:df:c2:1f:c7:81:0e:43:6b:79: 5c:2b:73:a4:c2:02:fc:75:a1:9e:1b:f6:7e:d9:95: 68:90:58:56:4c:aa:a3:8b:b7:6a:42:e9:35:b4:c6: 44:45:9e:bf:7a:62:54:4d:99:32:48:f0:68:1a:93: 03:4e:15:f2:6f:7f:42:eb:1b:c1:a1:a0:d5:ef:b4: 33:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:27:D6:C2:C0:0E:5C:C4:0C:E0:AD:99:7F:6E:85:DC:E1:4F:2B:53 X509v3 Authority Key Identifier: keyid:09:11:E9:9A:AD:F6:64:F0:39:92:9C:AB:BB:48:74:A3:A1:61:CA:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91937EA/1E9656306A5911EBA3641C3DC4F9AE02/CRHpmq32ZPA5kpyru0h0o6Fhyq0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CRHpmq32ZPA5kpyru0h0o6Fhyq0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91937EA/1E9656306A5911EBA3641C3DC4F9AE02/CRHpmq32ZPA5kpyru0h0o6Fhyq0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:08:4b:7b:ac:90:e6:20:a2:8b:3a:b7:d1:69:6c:85:07:a7: d7:d0:3e:10:cf:dc:6a:31:3d:f5:e9:83:18:3e:de:07:a1:ba: 34:28:14:3b:5c:91:23:e6:05:cf:f4:a7:c5:31:95:c4:cc:cd: 86:ce:e7:0c:d7:49:7a:f4:63:1c:15:49:23:62:be:c8:3c:2f: 57:33:b8:b3:de:90:94:c1:4a:6c:de:70:2d:f2:bb:ff:69:74: a9:c3:26:a2:39:02:58:63:d9:32:6b:ab:0f:70:be:b1:84:69: e6:5b:97:0f:09:ce:da:a3:ef:fe:84:f6:17:62:12:e8:81:01: 70:42:42:6b:fa:b6:9b:4a:56:3f:e4:16:44:c7:a2:8f:fc:b3: db:a6:cf:e4:9d:dc:b2:21:ba:13:df:b6:97:0d:f3:d0:96:bf: ba:cd:7b:6a:33:0e:75:45:59:f4:c9:6a:71:58:5f:a2:7c:f0: 5a:cc:da:99:a1:ce:68:4f:5c:1a:b7:7b:49:2f:2f:53:99:73: bc:8e:d7:82:8b:2d:7f:85:00:d1:e2:5b:d1:c5:3f:2c:38:88: 98:df:54:0f:31:bf:9e:af:97:a0:da:60:e2:b2:00:ba:74:38: 23:76:cf:8d:3f:04:ad:21:7d:84:11:2a:2c:e6:ce:b1:f8:28: 00:3b:8c:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTM3RUExMTAvBgNVBAUTKDA5MTFFOTlBQURGNjY0RjAzOTkyOUNBQkJCNDg3NEEz QTE2MUNBQUQwHhcNMjUwNjEyMjE0OTMzWhcNMjUwNjE5MjE0OTMzWjAYMRYwFAYD VQQDEw02ODRiNGI2ZS1iZWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzqY4yOPCxUYzCbfaDRhQH1AiZrpRYwRKXb3z0pw5hyOvRteFnfYEQ7aNakg7 q2OAjK0/5kh87iMf9H4By+zRrCZbxVgsw0udEf0XdkiMxzyhdvoJPr5VcLFKa1FK 8nE2MF5GXPm1ao2Qe1WT2Fvhd3Z9Agxex01THvhVS4xAtCfliSD8Z3iIuncC62qC ncMcfz5lZ7fi9f7tVvlBEpozTl4YoGGiamQhVx2TrBf0KsXaXYgXJ94BivLfwh/H gQ5Da3lcK3OkwgL8daGeG/Z+2ZVokFhWTKqji7dqQuk1tMZERZ6/emJUTZkySPBo GpMDThXyb39C6xvBoaDV77QzawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNsn1sLA DlzEDOCtmX9uhdzhTytTMB8GA1UdIwQYMBaAFAkR6Zqt9mTwOZKcq7tIdKOhYcqt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzdFQS8xRTk2NTYzMDZB NTkxMUVCQTM2NDFDM0RDNEY5QUUwMi9DUkhwbXEzMlpQQTVrcHlydTBoMG82Rmh5 cTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NSSHBtcTMyWlBBNWtweXJ1MGgwbzZGaHlxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzdFQS8xRTk2NTYzMDZBNTkxMUVCQTM2NDFDM0RDNEY5QUUwMi9DUkhwbXEzMlpQ QTVrcHlydTBoMG82Rmh5cTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmCEt7rJDmIKKLOrfRaWyFB6fX0D4Qz9xqMT316YMYPt4Hobo0KBQ7 XJEj5gXP9KfFMZXEzM2GzucM10l69GMcFUkjYr7IPC9XM7iz3pCUwUps3nAt8rv/ aXSpwyaiOQJYY9kya6sPcL6xhGnmW5cPCc7ao+/+hPYXYhLogQFwQkJr+rabSlY/ 5BZEx6KP/LPbps/kndyyIboT37aXDfPQlr+6zXtqMw51RVn0yWpxWF+ifPBazNqZ oc5oT1wat3tJLy9TmXO8jteCiy1/hQDR4lvRxT8sOIiY31QPMb+er5eg2mDisgC6 dDgjds+NPwStIX2EESos5s6x+CgAO4xu -----END CERTIFICATE-----Generated at Sat Jun 14 19:26:54 2025 by rpki-client