$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.mft File: msqKXCR04g_6ZzTz9yVL__GFE_4.mft (raw, json) Hash identifier: 7DcxwL9ag15q0CunJ/uYjnO7AcAOW18MNgc6QpWdWKg= Subject key identifier: 83:60:96:FE:7A:17:86:01:FB:2A:6C:A7:DD:4B:B0:61:E0:19:A1:AC Authority key identifier: 9A:CA:8A:5C:24:74:E2:0F:FA:67:34:F3:F7:25:4B:FF:F1:85:13:FE Certificate issuer: /CN=A91A8A96/serialNumber=9ACA8A5C2474E20FFA6734F3F7254BFFF18513FE Certificate serial: 3487 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msqKXCR04g_6ZzTz9yVL__GFE_4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.mft Manifest number: 3487 Signing time: Sat 14 Jun 2025 15:07:08 +0000 Manifest this update: Sat 14 Jun 2025 15:07:08 +0000 Manifest next update: Sat 21 Jun 2025 15:07:08 +0000 Files and hashes: 1: msqKXCR04g_6ZzTz9yVL__GFE_4.crl (hash: 27sAqHjxzS5Oz17pAjC+K33xc4g3I+2NScKUKcz9Srg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.crl rsync://rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msqKXCR04g_6ZzTz9yVL__GFE_4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 15:07:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13447 (0x3487) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8A96, serialNumber=9ACA8A5C2474E20FFA6734F3F7254BFFF18513FE Validity Not Before: Jun 14 15:07:08 2025 GMT Not After : Jun 21 15:07:08 2025 GMT Subject: CN=684d901c-5e99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ca:e3:67:cc:8f:87:e9:be:46:08:5f:c6:3b: e9:99:8f:18:38:7c:9f:16:9b:59:87:ea:b0:19:11: 5a:d8:2e:bf:11:e2:24:d6:ec:e1:12:2a:8e:1d:b3: bc:d9:61:a5:72:3f:20:56:13:bf:57:18:5e:14:a5: a1:68:17:21:4f:67:d5:9d:eb:a3:72:97:87:5a:1b: db:1a:9a:42:7c:0b:1c:ce:85:70:44:83:60:07:5e: da:1b:e2:fd:fb:d6:35:fe:f2:8b:f3:e5:ef:8c:0b: 8f:e5:ff:9c:56:48:03:3f:03:82:91:d3:87:93:38: b4:63:8a:94:a5:99:80:1b:01:b4:b4:83:e5:84:c3: 4b:e7:0b:14:c4:56:b1:a9:9b:80:dc:27:a7:ec:03: 79:a6:b2:b4:16:05:39:7e:cf:3a:80:8b:65:c1:5b: 10:7a:f0:bb:5e:2d:b0:8c:ae:3d:39:c8:4d:64:2a: e8:a6:af:4a:9b:d7:a8:2b:3e:02:e1:81:59:cf:8a: 7d:5a:3e:c9:ff:93:8b:f3:74:c9:17:62:c8:05:4c: 94:13:58:fb:93:bb:05:98:3e:9c:40:13:c2:14:f1: 9b:b6:4e:66:c5:93:6f:f2:54:9c:06:f6:62:e4:06: a9:2f:9a:f6:44:c9:9b:e9:e2:47:48:14:c0:17:5c: 46:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:60:96:FE:7A:17:86:01:FB:2A:6C:A7:DD:4B:B0:61:E0:19:A1:AC X509v3 Authority Key Identifier: keyid:9A:CA:8A:5C:24:74:E2:0F:FA:67:34:F3:F7:25:4B:FF:F1:85:13:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msqKXCR04g_6ZzTz9yVL__GFE_4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:47:4f:4b:34:ad:33:f8:b2:16:16:cb:f7:bf:0a:21:3c:8d: 14:28:b2:2e:54:32:a5:8e:cc:a8:92:c3:98:89:dc:5d:60:4a: 3e:f8:dd:7c:d0:4f:99:01:e1:e5:92:e5:3b:fa:6c:19:3e:61: b9:5f:f6:d2:d9:58:54:aa:57:42:1f:f3:ea:97:b8:82:8a:e8: c0:36:c9:9f:0b:87:ea:26:00:eb:9a:3a:65:bd:78:cf:bf:7d: 5e:01:98:5a:01:00:52:46:2b:10:ed:67:ed:7c:fa:04:c4:5d: b3:61:d2:e1:1d:a8:a0:db:0c:1a:f6:ad:fd:b0:37:4d:b4:bd: b2:52:c1:4b:18:e3:3d:90:b1:a5:0d:4e:c6:65:3d:72:37:ed: df:86:3e:2a:37:51:a6:1f:f0:67:f2:29:15:19:e3:75:ed:31: 76:26:ab:02:ec:7d:4c:99:d6:ee:ce:4d:58:12:d5:46:f4:aa: 4a:57:ca:4b:be:73:c4:63:65:b8:08:98:b8:69:99:aa:5f:c2: 17:bc:58:4c:dd:03:db:8f:7e:d5:82:89:a7:27:27:b7:06:33: 79:f2:ea:42:a7:1a:a9:2e:fa:92:10:38:ab:01:54:df:2e:95: 6b:99:d4:b4:67:6e:a1:fc:32:5a:9f:85:a6:78:19:fc:38:20: 09:10:8d:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThBOTYxMTAvBgNVBAUTKDlBQ0E4QTVDMjQ3NEUyMEZGQTY3MzRGM0Y3MjU0QkZG RjE4NTEzRkUwHhcNMjUwNjE0MTUwNzA4WhcNMjUwNjIxMTUwNzA4WjAYMRYwFAYD VQQDEw02ODRkOTAxYy01ZTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1MrjZ8yPh+m+RghfxjvpmY8YOHyfFptZh+qwGRFa2C6/EeIk1uzhEiqOHbO8 2WGlcj8gVhO/VxheFKWhaBchT2fVneujcpeHWhvbGppCfAsczoVwRINgB17aG+L9 +9Y1/vKL8+XvjAuP5f+cVkgDPwOCkdOHkzi0Y4qUpZmAGwG0tIPlhMNL5wsUxFax qZuA3Cen7AN5prK0FgU5fs86gItlwVsQevC7Xi2wjK49OchNZCropq9Km9eoKz4C 4YFZz4p9Wj7J/5OL83TJF2LIBUyUE1j7k7sFmD6cQBPCFPGbtk5mxZNv8lScBvZi 5AapL5r2RMmb6eJHSBTAF1xGawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFINglv56 F4YB+ypsp91LsGHgGaGsMB8GA1UdIwQYMBaAFJrKilwkdOIP+mc08/clS//xhRP+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEE5Ni85MDlENzQ5MDFE QTMxMUUyQTAwQjA2OTkwOEIwMkNEMi9tc3FLWENSMDRnXzZaelR6OXlWTF9fR0ZF XzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21zcUtYQ1IwNGdfNlp6VHo5eVZMX19HRkVfNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEE5Ni85MDlENzQ5MDFEQTMxMUUyQTAwQjA2OTkwOEIwMkNEMi9tc3FLWENSMDRn XzZaelR6OXlWTF9fR0ZFXzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuR09LNK0z+LIWFsv3vwohPI0UKLIuVDKljsyoksOYidxdYEo++N18 0E+ZAeHlkuU7+mwZPmG5X/bS2VhUqldCH/Pql7iCiujANsmfC4fqJgDrmjplvXjP v31eAZhaAQBSRisQ7WftfPoExF2zYdLhHaig2wwa9q39sDdNtL2yUsFLGOM9kLGl DU7GZT1yN+3fhj4qN1GmH/Bn8ikVGeN17TF2JqsC7H1Mmdbuzk1YEtVG9KpKV8pL vnPEY2W4CJi4aZmqX8IXvFhM3QPbj37VgomnJye3BjN58upCpxqpLvqSEDirAVTf LpVrmdS0Z26h/DJan4WmeBn8OCAJEI3D -----END CERTIFICATE-----Generated at Mon Jun 16 08:33:35 2025 by rpki-client