$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.mft File: jos0Y56lTfgQuSvLp0JwTkyIQsI.mft (raw, json) Hash identifier: dNsKUB9jrQVewmJPl75s+eW10HgkiajsTbLADqoWtH4= Subject key identifier: 8C:9F:4C:BE:CC:DE:BF:F8:E9:BB:6D:31:60:53:46:12:AA:E3:31:0F Authority key identifier: 8E:8B:34:63:9E:A5:4D:F8:10:B9:2B:CB:A7:42:70:4E:4C:88:42:C2 Certificate issuer: /CN=A91B4C1B/serialNumber=8E8B34639EA54DF810B92BCBA742704E4C8842C2 Certificate serial: 96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jos0Y56lTfgQuSvLp0JwTkyIQsI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.mft Manifest number: 96 Signing time: Sun 15 Jun 2025 05:28:38 +0000 Manifest this update: Sun 15 Jun 2025 05:28:37 +0000 Manifest next update: Sun 22 Jun 2025 05:28:37 +0000 Files and hashes: 1: jos0Y56lTfgQuSvLp0JwTkyIQsI.crl (hash: tbc5Tcqn5DE42ZWlI2KT3UNOhMrdn4eRyb5+B+bFV2g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.crl rsync://rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jos0Y56lTfgQuSvLp0JwTkyIQsI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 150 (0x96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4C1B, serialNumber=8E8B34639EA54DF810B92BCBA742704E4C8842C2 Validity Not Before: Jun 15 05:28:37 2025 GMT Not After : Jun 22 05:28:37 2025 GMT Subject: CN=684e5a06-6d87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fd:bd:d6:5d:57:f8:0e:a3:99:de:e1:d6:2f: 17:41:6f:b1:5d:0b:66:ef:0e:66:17:d2:d1:22:27: a8:af:09:b4:b2:41:77:13:9e:e1:41:d1:a0:6f:32: 63:a6:6b:0e:e2:a3:a6:66:61:a8:7f:20:2c:da:cb: 47:c6:62:34:c0:47:b8:b9:2d:ea:4c:43:7d:ef:f7: 2b:67:a3:37:b9:a7:06:4e:cc:3c:65:3b:18:a2:c5: e5:14:b3:ff:7d:84:bc:10:2a:13:a3:03:fa:df:9d: ff:51:15:ab:bb:53:7c:71:ed:1e:fe:c8:60:09:b3: 15:e4:0c:30:6c:ad:28:ca:65:75:99:4c:f9:6c:ad: f1:d2:40:4d:52:90:1c:29:7b:db:fd:1a:4b:2a:0c: 8d:34:3e:27:c1:f5:ff:42:72:35:b6:8b:c7:b4:28: 01:31:dc:62:42:fe:f1:0c:db:b2:f4:66:c9:36:97: 70:94:0b:fb:e5:e1:73:1d:7a:3e:84:3d:bf:19:8c: 34:2d:b1:1e:ae:7d:e2:7a:b4:34:5d:56:4d:f6:7d: 17:f2:2e:13:ba:d6:86:aa:35:f2:34:7f:fb:30:24: 96:9e:fe:a8:21:69:ba:19:45:f7:c3:d3:98:c3:04: 54:59:48:2c:52:0d:bd:fe:61:1b:71:65:64:48:37: 7d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:9F:4C:BE:CC:DE:BF:F8:E9:BB:6D:31:60:53:46:12:AA:E3:31:0F X509v3 Authority Key Identifier: keyid:8E:8B:34:63:9E:A5:4D:F8:10:B9:2B:CB:A7:42:70:4E:4C:88:42:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jos0Y56lTfgQuSvLp0JwTkyIQsI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:63:57:97:39:fc:83:2c:6d:97:74:e5:35:bd:96:24:56:00: 94:c9:df:ca:8a:fe:06:b5:e3:f6:22:91:0e:b1:b2:da:56:74: 18:5e:3c:da:82:05:31:d8:13:1c:6f:58:cd:8a:97:a9:00:42: 59:92:28:ff:e4:2b:ff:ad:f1:4c:d6:7c:29:62:19:6a:88:19: b9:d5:55:eb:10:ac:b1:0f:3b:7f:fc:36:78:07:b3:73:2a:6f: c6:35:04:34:44:45:80:13:78:77:3b:0d:bb:1c:90:63:9b:f7: 8f:79:c3:05:18:b5:c3:d1:8e:b7:8c:93:c0:86:09:da:cd:10: 87:3a:ab:f9:b3:01:b0:55:f6:a5:22:ab:01:6a:c2:00:08:7d: 73:2e:4a:ed:08:5f:7f:86:a3:0b:80:a7:53:25:18:4e:66:32: 59:d6:52:71:d8:63:56:10:33:e1:b5:dd:a4:30:ce:4b:9b:c6: 7d:44:de:12:18:e4:c1:a7:61:93:3e:a4:6d:c8:19:62:c3:6c: b6:53:3d:9f:3e:2a:b6:da:e9:c6:96:58:c7:47:13:f4:d3:d6: d4:01:d2:a4:47:9e:92:ce:e1:4e:5d:e6:b1:e8:69:4e:46:c1: 65:55:0d:95:f5:eb:3d:c1:18:d4:1c:67:9a:eb:83:7c:69:13: fc:02:84:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjRDMUIxMTAvBgNVBAUTKDhFOEIzNDYzOUVBNTRERjgxMEI5MkJDQkE3NDI3MDRF NEM4ODQyQzIwHhcNMjUwNjE1MDUyODM3WhcNMjUwNjIyMDUyODM3WjAYMRYwFAYD VQQDEw02ODRlNWEwNi02ZDg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsv291l1X+A6jmd7h1i8XQW+xXQtm7w5mF9LRIieorwm0skF3E57hQdGgbzJj pmsO4qOmZmGofyAs2stHxmI0wEe4uS3qTEN97/crZ6M3uacGTsw8ZTsYosXlFLP/ fYS8ECoTowP6353/URWru1N8ce0e/shgCbMV5AwwbK0oymV1mUz5bK3x0kBNUpAc KXvb/RpLKgyNND4nwfX/QnI1tovHtCgBMdxiQv7xDNuy9GbJNpdwlAv75eFzHXo+ hD2/GYw0LbEern3ierQ0XVZN9n0X8i4TutaGqjXyNH/7MCSWnv6oIWm6GUX3w9OY wwRUWUgsUg29/mEbcWVkSDd9DwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIyfTL7M 3r/46bttMWBTRhKq4zEPMB8GA1UdIwQYMBaAFI6LNGOepU34ELkry6dCcE5MiELC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEMxQi9EOTY1QkE0MDY0 MUIxMUVGOTg5MTU0N0ZDNEY5QUUwMi9qb3MwWTU2bFRmZ1F1U3ZMcDBKd1RreUlR c0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pvczBZNTZsVGZnUXVTdkxwMEp3VGt5SVFzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEMxQi9EOTY1QkE0MDY0MUIxMUVGOTg5MTU0N0ZDNEY5QUUwMi9qb3MwWTU2bFRm Z1F1U3ZMcDBKd1RreUlRc0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBY1eXOfyDLG2XdOU1vZYkVgCUyd/Kiv4GteP2IpEOsbLaVnQYXjza ggUx2BMcb1jNipepAEJZkij/5Cv/rfFM1nwpYhlqiBm51VXrEKyxDzt//DZ4B7Nz Km/GNQQ0REWAE3h3Ow27HJBjm/ePecMFGLXD0Y63jJPAhgnazRCHOqv5swGwVfal IqsBasIACH1zLkrtCF9/hqMLgKdTJRhOZjJZ1lJx2GNWEDPhtd2kMM5Lm8Z9RN4S GOTBp2GTPqRtyBliw2y2Uz2fPiq22unGlljHRxP009bUAdKkR56SzuFOXeax6GlO RsFlVQ2V9es9wRjUHGea64N8aRP8AoRr -----END CERTIFICATE-----Generated at Sun Jun 15 08:49:41 2025 by rpki-client