$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3FC6/019C027E3F6511EB8BE95A22C4F9AE02/pVqOdK-92uYpENDGe6Ip1p4eyXg.mft File: pVqOdK-92uYpENDGe6Ip1p4eyXg.mft (raw, json) Hash identifier: 4YtIb1Mq5k5+dHOMisUF1fbuhDNZILV3bAvQYhTX4oc= Subject key identifier: 57:0F:B8:1A:F3:F9:FE:47:DC:79:2A:1E:9B:12:9A:97:D6:08:7F:5F Authority key identifier: A5:5A:8E:74:AF:BD:DA:E6:29:10:D0:C6:7B:A2:29:D6:9E:1E:C9:78 Certificate issuer: /CN=A91A3FC6/serialNumber=A55A8E74AFBDDAE62910D0C67BA229D69E1EC978 Certificate serial: 070F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pVqOdK-92uYpENDGe6Ip1p4eyXg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3FC6/019C027E3F6511EB8BE95A22C4F9AE02/pVqOdK-92uYpENDGe6Ip1p4eyXg.mft Manifest number: 070E Signing time: Thu 12 Jun 2025 21:33:11 +0000 Manifest this update: Thu 12 Jun 2025 21:33:11 +0000 Manifest next update: Thu 19 Jun 2025 21:33:11 +0000 Files and hashes: 1: pVqOdK-92uYpENDGe6Ip1p4eyXg.crl (hash: Zw0dX0XnFiQQQd6hRapvVN6PRVsW4daPFTk26QNu9bQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3FC6/019C027E3F6511EB8BE95A22C4F9AE02/pVqOdK-92uYpENDGe6Ip1p4eyXg.crl rsync://rpki.apnic.net/member_repository/A91A3FC6/019C027E3F6511EB8BE95A22C4F9AE02/pVqOdK-92uYpENDGe6Ip1p4eyXg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pVqOdK-92uYpENDGe6Ip1p4eyXg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 21:33:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1807 (0x70f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3FC6, serialNumber=A55A8E74AFBDDAE62910D0C67BA229D69E1EC978 Validity Not Before: Jun 12 21:33:11 2025 GMT Not After : Jun 19 21:33:11 2025 GMT Subject: CN=684b4797-3fe6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:68:53:89:f8:81:a0:18:51:6e:a5:ad:e0:ff: cd:1a:56:8a:68:0d:a0:b7:da:c8:df:d7:2f:d3:03: 67:6b:bb:f7:79:dc:e5:9c:f4:0f:3b:e4:8e:c3:7b: 8f:b4:1c:cb:03:5f:08:11:8b:56:c7:67:a7:04:90: 74:a1:70:65:23:96:84:9b:40:1c:4d:f1:55:01:3a: fb:41:c4:66:32:94:24:db:03:a2:04:ae:78:e6:f0: 9e:03:98:27:c3:70:81:c2:c1:60:a7:03:db:40:a8: c0:ed:f8:34:8e:53:cb:88:71:e1:dc:9a:3b:06:8b: 0d:91:02:75:40:19:c5:e1:66:0c:06:71:cf:95:91: 6f:dd:b2:da:44:f0:cb:71:ec:4f:fa:d1:cd:83:cf: 35:9d:b3:cf:e8:a7:d9:8c:fa:93:21:b4:ab:bf:37: c8:7c:cf:4f:c7:1b:fd:34:8c:5e:31:77:ec:17:fc: 4f:3c:a3:c7:87:9f:fb:72:b1:7f:9c:4c:e2:9a:2a: a7:ec:68:05:ff:4c:66:38:cb:1e:7c:cd:42:13:04: 08:19:03:bc:88:12:cf:92:73:d9:93:a3:45:61:87: f6:6b:a2:70:f1:c2:ec:51:4d:0e:f0:91:bc:67:1c: 66:75:fd:1b:36:ed:9e:96:45:e7:2a:b7:6b:33:8a: 9b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:0F:B8:1A:F3:F9:FE:47:DC:79:2A:1E:9B:12:9A:97:D6:08:7F:5F X509v3 Authority Key Identifier: keyid:A5:5A:8E:74:AF:BD:DA:E6:29:10:D0:C6:7B:A2:29:D6:9E:1E:C9:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3FC6/019C027E3F6511EB8BE95A22C4F9AE02/pVqOdK-92uYpENDGe6Ip1p4eyXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pVqOdK-92uYpENDGe6Ip1p4eyXg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3FC6/019C027E3F6511EB8BE95A22C4F9AE02/pVqOdK-92uYpENDGe6Ip1p4eyXg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:bb:cf:bf:ac:83:84:ed:2b:a8:0a:82:a3:49:72:b0:6f:7d: ac:42:86:22:03:1c:25:ef:60:32:d7:63:d2:6f:98:5b:21:40: 53:f9:9d:ad:fd:ea:49:d8:fd:e7:44:b1:43:2b:78:2a:c7:91: 0c:3a:f5:c1:e9:9f:de:f3:d2:c1:3d:70:28:f9:0f:b3:cc:e7: e6:69:8b:c3:b5:06:a3:c2:14:10:e0:71:88:45:67:14:ef:09: 61:36:ed:70:f2:64:68:51:bb:c4:c7:49:c3:d9:24:ef:8d:8f: d8:1b:75:08:8c:27:b5:92:db:5e:46:86:ef:30:4c:b6:4a:a4: 4c:ef:69:37:c2:74:68:30:ea:2b:ac:cd:a8:08:49:2d:4f:c4: f6:ca:13:b3:92:32:2f:a4:15:66:84:b2:15:42:dc:c1:ae:53: 2b:0b:ef:09:81:09:dc:b4:cd:6b:3f:f0:4d:bc:68:25:32:49: f0:e1:a7:a3:fc:f3:06:c3:57:6d:19:37:1e:9f:71:4f:ae:42: a4:d7:1f:4d:03:1a:aa:a7:a2:3e:6d:fe:97:e2:35:8c:c0:8e: 4a:34:be:a0:52:88:dd:18:e3:ef:fb:c6:90:a4:de:d9:37:66: 2d:7c:59:ba:2c:7c:b7:0e:4e:42:2e:43:f7:d3:7b:a3:f3:b6: 72:75:0b:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBw8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTNGQzYxMTAvBgNVBAUTKEE1NUE4RTc0QUZCRERBRTYyOTEwRDBDNjdCQTIyOUQ2 OUUxRUM5NzgwHhcNMjUwNjEyMjEzMzExWhcNMjUwNjE5MjEzMzExWjAYMRYwFAYD VQQDEw02ODRiNDc5Ny0zZmU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqmhTifiBoBhRbqWt4P/NGlaKaA2gt9rI39cv0wNna7v3edzlnPQPO+SOw3uP tBzLA18IEYtWx2enBJB0oXBlI5aEm0AcTfFVATr7QcRmMpQk2wOiBK545vCeA5gn w3CBwsFgpwPbQKjA7fg0jlPLiHHh3Jo7BosNkQJ1QBnF4WYMBnHPlZFv3bLaRPDL cexP+tHNg881nbPP6KfZjPqTIbSrvzfIfM9Pxxv9NIxeMXfsF/xPPKPHh5/7crF/ nEzimiqn7GgF/0xmOMsefM1CEwQIGQO8iBLPknPZk6NFYYf2a6Jw8cLsUU0O8JG8 Zxxmdf0bNu2elkXnKrdrM4qb9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFcPuBrz +f5H3HkqHpsSmpfWCH9fMB8GA1UdIwQYMBaAFKVajnSvvdrmKRDQxnuiKdaeHsl4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0ZDNi8wMTlDMDI3RTNG NjUxMUVCOEJFOTVBMjJDNEY5QUUwMi9wVnFPZEstOTJ1WXBFTkRHZTZJcDFwNGV5 WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BWcU9kSy05MnVZcEVOREdlNklwMXA0ZXlYZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB M0ZDNi8wMTlDMDI3RTNGNjUxMUVCOEJFOTVBMjJDNEY5QUUwMi9wVnFPZEstOTJ1 WXBFTkRHZTZJcDFwNGV5WGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3u8+/rIOE7SuoCoKjSXKwb32sQoYiAxwl72Ay12PSb5hbIUBT+Z2t /epJ2P3nRLFDK3gqx5EMOvXB6Z/e89LBPXAo+Q+zzOfmaYvDtQajwhQQ4HGIRWcU 7wlhNu1w8mRoUbvEx0nD2STvjY/YG3UIjCe1ktteRobvMEy2SqRM72k3wnRoMOor rM2oCEktT8T2yhOzkjIvpBVmhLIVQtzBrlMrC+8JgQnctM1rP/BNvGglMknw4aej /PMGw1dtGTcen3FPrkKk1x9NAxqqp6I+bf6X4jWMwI5KNL6gUojdGOPv+8aQpN7Z N2YtfFm6LHy3Dk5CLkP303uj87ZydQtF -----END CERTIFICATE-----Generated at Sat Jun 14 19:22:46 2025 by rpki-client