$ rpki-client -vvf rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.mft File: M5IbTpqJQaWGu92a-LGIWo8iX6I.mft (raw, json) Hash identifier: Z2Uw3gjwPNez/9mFVQckBiPwyiA8hyi2zSoNeiRjBLk= Subject key identifier: BA:CE:5A:62:70:29:14:37:C8:4C:A7:FD:45:D2:36:14:B7:5F:AE:32 Authority key identifier: 33:92:1B:4E:9A:89:41:A5:86:BB:DD:9A:F8:B1:88:5A:8F:22:5F:A2 Certificate issuer: /CN=A9195A3A/serialNumber=33921B4E9A8941A586BBDD9AF8B1885A8F225FA2 Certificate serial: 348B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5IbTpqJQaWGu92a-LGIWo8iX6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.mft Manifest number: 348B Signing time: Sat 14 Jun 2025 15:01:16 +0000 Manifest this update: Sat 14 Jun 2025 15:01:15 +0000 Manifest next update: Sat 21 Jun 2025 15:01:15 +0000 Files and hashes: 1: M5IbTpqJQaWGu92a-LGIWo8iX6I.crl (hash: ozG5EDS7FifnvCTm8O1XLREW5LK2zqvmTHztJ4OtTmQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.crl rsync://rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5IbTpqJQaWGu92a-LGIWo8iX6I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 15:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13451 (0x348b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195A3A, serialNumber=33921B4E9A8941A586BBDD9AF8B1885A8F225FA2 Validity Not Before: Jun 14 15:01:15 2025 GMT Not After : Jun 21 15:01:15 2025 GMT Subject: CN=684d8ebc-ca40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:73:23:e6:08:fa:1e:05:64:c6:83:06:16:40: 40:bb:c9:30:1a:a7:6e:f2:11:9c:d3:de:f8:d1:d1: 11:d0:68:e2:54:f0:2e:41:73:86:50:ef:06:3e:37: 79:ab:17:2c:8f:87:ba:88:ba:6b:e3:01:a7:9b:6c: 27:21:65:ec:58:4e:18:53:cf:74:af:a3:d8:a5:ba: 60:3c:19:79:c5:80:cb:72:44:fa:e2:76:f4:7e:d5: ed:a8:b3:95:f7:a2:3a:f0:5e:75:b1:45:c4:2e:30: d1:00:1a:7a:e4:c9:40:41:33:16:3d:95:37:59:9e: e0:88:56:4c:bb:49:d2:5d:9d:b6:56:6b:d0:b8:d7: 5a:c7:14:d6:ad:8e:5d:65:d6:77:b2:54:0d:bf:8f: 34:6d:71:fb:9a:83:2c:f9:13:73:08:e7:3c:c9:ba: 89:08:1b:33:80:34:bd:9d:72:bc:a4:67:30:a0:ea: 89:3c:21:c9:e3:ef:49:62:ef:be:24:42:0c:55:bc: e4:97:3f:62:52:13:e8:17:b2:7b:4c:83:7f:3b:fa: a4:fc:25:51:62:aa:aa:79:ba:f5:01:fa:f2:e4:72: 45:f4:e8:fc:14:10:98:09:88:19:45:a4:66:ad:42: 5e:e3:83:89:a6:9b:9e:28:a4:91:fa:2c:1f:ea:07: 4c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:CE:5A:62:70:29:14:37:C8:4C:A7:FD:45:D2:36:14:B7:5F:AE:32 X509v3 Authority Key Identifier: keyid:33:92:1B:4E:9A:89:41:A5:86:BB:DD:9A:F8:B1:88:5A:8F:22:5F:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5IbTpqJQaWGu92a-LGIWo8iX6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:28:3d:b4:8b:11:0b:4f:91:33:12:98:e9:1d:a0:be:0d:73: 99:bb:d2:28:c5:19:a3:9a:aa:3a:7f:93:91:e4:45:eb:85:92: 72:15:d6:3c:3b:93:5e:43:1d:32:07:f5:e6:c3:a2:18:9f:3e: 2e:6e:94:e1:b3:f0:57:d5:29:b0:5c:20:63:ef:ec:30:16:77: 66:8d:34:ef:44:ea:46:2f:1a:f0:be:9b:b4:31:fd:44:f9:1f: 5a:35:16:34:06:2d:c1:66:18:24:83:8e:92:7e:a2:27:2d:57: 95:a4:6c:ef:65:21:3d:9a:8a:f1:7a:d4:38:2c:5d:e0:ef:0d: b7:63:6e:da:3c:99:8a:b2:6f:0e:17:27:c3:ef:19:75:86:86: 6b:31:bf:ea:6d:80:dc:bc:bd:03:4c:04:a4:a4:53:c4:c4:0f: 0a:36:1e:40:c2:e7:82:b8:9a:5c:2d:ba:ee:4a:c3:d3:87:2e: 4a:24:b6:a6:8a:06:9c:a7:02:23:46:ce:21:31:20:c8:9d:7c: 73:04:c2:9f:f1:d5:76:fd:cc:9b:1d:36:ca:57:9a:cf:ef:62: 86:2b:95:32:51:df:85:dd:9d:ed:0d:d0:48:07:f5:17:5f:e0: 8f:e3:35:0b:46:77:eb:c3:cc:bc:56:3b:0b:e5:bb:27:de:53: 22:6d:a4:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVBM0ExMTAvBgNVBAUTKDMzOTIxQjRFOUE4OTQxQTU4NkJCREQ5QUY4QjE4ODVB OEYyMjVGQTIwHhcNMjUwNjE0MTUwMTE1WhcNMjUwNjIxMTUwMTE1WjAYMRYwFAYD VQQDEw02ODRkOGViYy1jYTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvHMj5gj6HgVkxoMGFkBAu8kwGqdu8hGc09740dER0GjiVPAuQXOGUO8GPjd5 qxcsj4e6iLpr4wGnm2wnIWXsWE4YU890r6PYpbpgPBl5xYDLckT64nb0ftXtqLOV 96I68F51sUXELjDRABp65MlAQTMWPZU3WZ7giFZMu0nSXZ22VmvQuNdaxxTWrY5d ZdZ3slQNv480bXH7moMs+RNzCOc8ybqJCBszgDS9nXK8pGcwoOqJPCHJ4+9JYu++ JEIMVbzklz9iUhPoF7J7TIN/O/qk/CVRYqqqebr1Afry5HJF9Oj8FBCYCYgZRaRm rUJe44OJppueKKSR+iwf6gdMFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLrOWmJw KRQ3yEyn/UXSNhS3X64yMB8GA1UdIwQYMBaAFDOSG06aiUGlhrvdmvixiFqPIl+i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUEzQS8yOThEMjU4ODFE OUYxMUUyOTY5MTkwOEYwOEIwMkNEMi9NNUliVHBxSlFhV0d1OTJhLUxHSVdvOGlY NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL001SWJUcHFKUWFXR3U5MmEtTEdJV284aVg2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUEzQS8yOThEMjU4ODFEOUYxMUUyOTY5MTkwOEYwOEIwMkNEMi9NNUliVHBxSlFh V0d1OTJhLUxHSVdvOGlYNkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzKD20ixELT5EzEpjpHaC+DXOZu9IoxRmjmqo6f5OR5EXrhZJyFdY8 O5NeQx0yB/Xmw6IYnz4ubpThs/BX1SmwXCBj7+wwFndmjTTvROpGLxrwvpu0Mf1E +R9aNRY0Bi3BZhgkg46SfqInLVeVpGzvZSE9morxetQ4LF3g7w23Y27aPJmKsm8O FyfD7xl1hoZrMb/qbYDcvL0DTASkpFPExA8KNh5AwueCuJpcLbruSsPThy5KJLam igacpwIjRs4hMSDInXxzBMKf8dV2/cybHTbKV5rP72KGK5UyUd+F3Z3tDdBIB/UX X+CP4zULRnfrw8y8VjsL5bsn3lMibaR0 -----END CERTIFICATE-----Generated at Sat Jun 14 19:04:54 2025 by rpki-client