$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.mft File: I8MbHNaMzE0c6105mlAbYFD9HUY.mft (raw, json) Hash identifier: vS2DEbUEJurcngxP15v4+QApQUCwf0IF2318VCso5II= Subject key identifier: 0E:C4:CC:AA:26:BF:77:12:9A:7E:9D:85:90:DB:26:4C:F5:D0:47:01 Authority key identifier: 23:C3:1B:1C:D6:8C:CC:4D:1C:EB:5D:39:9A:50:1B:60:50:FD:1D:46 Certificate issuer: /CN=A91A0FC0/serialNumber=23C31B1CD68CCC4D1CEB5D399A501B6050FD1D46 Certificate serial: 03B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8MbHNaMzE0c6105mlAbYFD9HUY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.mft Manifest number: 047E Signing time: Fri 13 Jun 2025 00:15:28 +0000 Manifest this update: Fri 13 Jun 2025 00:15:27 +0000 Manifest next update: Fri 20 Jun 2025 00:15:27 +0000 Files and hashes: 1: I8MbHNaMzE0c6105mlAbYFD9HUY.crl (hash: kX2RoRMt7JwOWHHhgP6zw1w1A5g9cjuz4I4PHBgAiCo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.crl rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8MbHNaMzE0c6105mlAbYFD9HUY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 00:15:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 951 (0x3b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0FC0, serialNumber=23C31B1CD68CCC4D1CEB5D399A501B6050FD1D46 Validity Not Before: Jun 13 00:15:27 2025 GMT Not After : Jun 20 00:15:27 2025 GMT Subject: CN=684b6d9f-d7e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0f:d7:f5:59:bc:00:15:b3:de:5e:09:c5:a8: 66:7d:8b:96:ab:ad:43:c1:f6:bc:10:8a:b3:66:f1: 68:3c:5d:f4:6e:9d:4a:f8:f1:1e:93:fb:bb:ee:67: 91:b0:2b:fe:02:7d:c5:55:b1:5c:90:db:63:6b:d2: 44:5d:c9:1a:a5:67:8f:91:f4:81:61:de:f6:4d:55: 2d:de:7f:47:43:f9:2f:f4:71:f6:1f:f7:5e:a6:86: 8e:54:df:ef:42:92:ba:fe:61:54:d9:88:03:4b:5f: 24:61:ea:6c:29:b6:68:a2:95:01:49:6f:12:5c:2c: 23:0e:d8:d1:6e:a1:15:89:01:2f:b6:37:75:01:34: 56:63:6c:d3:87:cc:cc:de:08:da:1c:97:c1:a7:22: 36:20:9b:9e:bc:11:df:15:5b:7a:4d:bb:f4:37:11: 5f:00:cb:4f:b1:e4:b8:24:15:3d:cc:a5:ec:5c:dd: ae:be:5d:c4:e3:af:88:90:bc:92:c7:c4:a8:97:47: 5a:ad:89:d2:0b:34:dd:9a:a3:f9:ca:82:d1:b2:59: 75:17:c4:f5:c7:3c:7a:92:7a:65:24:a0:d8:08:03: b4:6b:2b:04:98:12:6f:a4:c0:e7:55:c6:c9:39:2a: 63:05:dc:62:9b:2a:d8:c3:da:c6:94:6f:40:0f:25: 95:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:C4:CC:AA:26:BF:77:12:9A:7E:9D:85:90:DB:26:4C:F5:D0:47:01 X509v3 Authority Key Identifier: keyid:23:C3:1B:1C:D6:8C:CC:4D:1C:EB:5D:39:9A:50:1B:60:50:FD:1D:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8MbHNaMzE0c6105mlAbYFD9HUY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:16:46:f7:9c:d8:ab:ce:38:e8:a9:c7:89:e4:33:c8:f1:18: f1:c0:bd:1f:13:f1:8e:f2:ca:7b:c0:a4:81:75:57:7e:93:4f: b6:22:68:a3:87:a1:54:e5:19:58:45:46:b7:ac:66:a9:a4:40: c6:83:cc:74:50:57:67:a2:1e:2e:eb:a3:a3:6e:f1:96:1c:64: 56:24:d1:13:63:3c:74:4e:32:da:d7:43:88:25:58:f1:d7:9d: ba:48:9e:af:cd:dc:85:09:ae:f8:87:6d:5f:66:db:d7:13:50: ce:a4:56:4e:99:f1:1c:bd:75:c0:37:cc:5f:b8:96:f9:e5:0a: 08:e6:a9:ba:96:f5:a7:69:13:f7:c4:31:d0:16:be:a7:67:ae: 52:09:e0:d1:66:5a:6b:3a:9f:b9:15:7a:4d:a7:79:0a:b4:aa: 42:cc:8d:f0:29:e4:29:ff:8f:5f:ae:1b:07:d9:d6:c6:51:20: 62:4e:71:53:b1:e1:7e:9e:c0:05:75:31:16:76:43:0e:21:8e: 93:61:3f:0e:d3:ec:78:bc:93:39:e4:93:70:18:f7:a5:c1:c9: 43:81:56:33:41:b8:32:54:6b:0e:8e:cf:d7:dd:a4:10:19:6d: 24:5f:b3:4a:2c:b4:df:ff:fc:55:fb:db:be:6e:68:07:ef:6f: f3:33:e1:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTBGQzAxMTAvBgNVBAUTKDIzQzMxQjFDRDY4Q0NDNEQxQ0VCNUQzOTlBNTAxQjYw NTBGRDFENDYwHhcNMjUwNjEzMDAxNTI3WhcNMjUwNjIwMDAxNTI3WjAYMRYwFAYD VQQDEw02ODRiNmQ5Zi1kN2UwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxg/X9Vm8ABWz3l4JxahmfYuWq61Dwfa8EIqzZvFoPF30bp1K+PEek/u77meR sCv+An3FVbFckNtja9JEXckapWePkfSBYd72TVUt3n9HQ/kv9HH2H/depoaOVN/v QpK6/mFU2YgDS18kYepsKbZoopUBSW8SXCwjDtjRbqEViQEvtjd1ATRWY2zTh8zM 3gjaHJfBpyI2IJuevBHfFVt6Tbv0NxFfAMtPseS4JBU9zKXsXN2uvl3E46+IkLyS x8Sol0darYnSCzTdmqP5yoLRsll1F8T1xzx6knplJKDYCAO0aysEmBJvpMDnVcbJ OSpjBdximyrYw9rGlG9ADyWV3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA7EzKom v3cSmn6dhZDbJkz10EcBMB8GA1UdIwQYMBaAFCPDGxzWjMxNHOtdOZpQG2BQ/R1G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEZDMC9DREUwOTg3Njk1 NzgxMUVDQTMyQ0NGNTVDNEY5QUUwMi9JOE1iSE5hTXpFMGM2MTA1bWxBYllGRDlI VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0k4TWJITmFNekUwYzYxMDVtbEFiWUZEOUhVWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MEZDMC9DREUwOTg3Njk1NzgxMUVDQTMyQ0NGNTVDNEY5QUUwMi9JOE1iSE5hTXpF MGM2MTA1bWxBYllGRDlIVVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkFkb3nNirzjjoqceJ5DPI8RjxwL0fE/GO8sp7wKSBdVd+k0+2Imij h6FU5RlYRUa3rGappEDGg8x0UFdnoh4u66OjbvGWHGRWJNETYzx0TjLa10OIJVjx 1526SJ6vzdyFCa74h21fZtvXE1DOpFZOmfEcvXXAN8xfuJb55QoI5qm6lvWnaRP3 xDHQFr6nZ65SCeDRZlprOp+5FXpNp3kKtKpCzI3wKeQp/49frhsH2dbGUSBiTnFT seF+nsAFdTEWdkMOIY6TYT8O0+x4vJM55JNwGPelwclDgVYzQbgyVGsOjs/X3aQQ GW0kX7NKLLTf//xV+9u+bmgH72/zM+HS -----END CERTIFICATE-----Generated at Sat Jun 14 19:02:43 2025 by rpki-client