$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.mft File: -c8El8-2fhYnKRCY8R8XhuuJ_1A.mft (raw, json) Hash identifier: rbhSo6NhUzfIYqJ4Cx/HO/VpWINFOVDIHBYsOVqVbd4= Subject key identifier: 91:28:3A:A2:9C:E3:DB:13:0F:F4:21:09:25:BF:D8:FD:7A:C5:AF:7F Authority key identifier: F9:CF:04:97:CF:B6:7E:16:27:29:10:98:F1:1F:17:86:EB:89:FF:50 Certificate issuer: /CN=A91B5073/serialNumber=F9CF0497CFB67E1627291098F11F1786EB89FF50 Certificate serial: 1098 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-c8El8-2fhYnKRCY8R8XhuuJ_1A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.mft Manifest number: 1934 Signing time: Sat 14 Jun 2025 17:17:19 +0000 Manifest this update: Sat 14 Jun 2025 17:17:18 +0000 Manifest next update: Sat 21 Jun 2025 17:17:18 +0000 Files and hashes: 1: -c8El8-2fhYnKRCY8R8XhuuJ_1A.crl (hash: NNb0BdvIHxjVTFzeQ1DIYp7UKmI0f4uePJg7ixRdfuA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.crl rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-c8El8-2fhYnKRCY8R8XhuuJ_1A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 17:13:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4248 (0x1098) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5073, serialNumber=F9CF0497CFB67E1627291098F11F1786EB89FF50 Validity Not Before: Jun 14 17:17:18 2025 GMT Not After : Jun 21 17:17:18 2025 GMT Subject: CN=684dae9f-c735 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:71:16:bf:84:e3:e6:03:e8:46:bc:b8:d3:be: c1:64:e5:49:94:1d:c7:b8:a2:40:52:d1:78:b5:80: 3f:42:88:fb:90:a3:75:b4:c7:cf:d4:f1:6f:8c:a1: bd:82:d8:b3:e7:10:2f:7f:68:09:44:0c:86:2c:99: 87:e8:88:04:dc:35:41:fb:8b:8d:97:06:bc:1a:3e: e1:1a:f2:35:12:02:16:49:07:2d:00:14:ff:2b:06: 73:49:bc:2d:87:67:72:a3:40:1e:ba:de:b0:78:db: 28:01:50:8f:56:36:1b:d5:56:5c:16:c2:89:47:86: 61:da:9c:6d:bb:d1:f5:ab:c9:b9:fe:8b:fa:a2:e2: 75:6d:97:3a:10:2b:4d:43:55:9d:52:cb:91:91:18: 8a:33:a1:0c:e2:d2:d8:8d:1b:d1:b2:75:83:cb:fe: e9:2d:eb:cb:87:04:5b:6b:1f:f0:72:65:7a:b8:3a: df:62:e0:1d:a3:8f:63:19:31:6b:48:63:c6:11:50: d9:9e:ea:52:81:58:fa:9f:aa:c0:84:26:51:e5:37: 8e:a5:32:51:37:ea:89:2b:74:9e:48:cd:0e:43:ff: 82:8d:58:b0:39:b0:42:0e:31:55:f1:ba:3f:3e:94: ac:98:cb:a5:27:2c:36:a8:5c:9a:0a:26:55:51:0f: 99:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:28:3A:A2:9C:E3:DB:13:0F:F4:21:09:25:BF:D8:FD:7A:C5:AF:7F X509v3 Authority Key Identifier: keyid:F9:CF:04:97:CF:B6:7E:16:27:29:10:98:F1:1F:17:86:EB:89:FF:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-c8El8-2fhYnKRCY8R8XhuuJ_1A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:a1:0a:0e:43:c9:fb:06:7e:d7:2b:fb:45:ac:37:95:4b:27: 75:bc:9f:7d:13:db:90:fd:38:75:5e:f7:03:dc:8c:7e:1f:d8: 8a:9a:d6:2e:bd:92:c6:e2:c1:d2:48:2c:40:11:78:e0:2f:d8: b7:73:24:88:83:b9:76:40:9a:7f:d9:87:cf:64:d8:02:c5:83: 16:41:0d:b6:13:09:c8:fe:ae:5f:f7:41:ef:99:d2:38:15:b5: 0d:b1:4e:96:28:84:f2:5f:16:6f:23:7b:b0:11:2a:6e:a2:66: 5c:98:dd:c4:b4:81:da:44:f1:5c:24:00:f6:e6:1c:26:c9:43: bd:7a:29:b1:25:49:d0:f4:c9:a3:12:96:8c:68:8b:41:3a:2c: 4e:0e:fb:2d:5f:a9:1e:0f:7b:7a:44:38:62:f8:cb:13:3d:98: e0:04:f6:4a:ce:d3:d8:65:52:f8:be:0d:e6:79:61:f8:73:ef: 92:1d:9e:eb:57:f9:50:98:57:e8:c7:a2:b1:1c:b0:95:72:58: 97:ce:1d:78:db:c3:3d:22:ac:88:b2:52:7d:09:70:98:73:30: 96:a4:58:23:fa:e9:70:71:7d:98:f8:90:5b:7d:ce:5d:66:f2: 80:19:07:8f:35:73:ad:39:cf:e4:93:4e:46:cd:90:a7:68:e3: f8:68:cd:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjUwNzMxMTAvBgNVBAUTKEY5Q0YwNDk3Q0ZCNjdFMTYyNzI5MTA5OEYxMUYxNzg2 RUI4OUZGNTAwHhcNMjUwNjE0MTcxNzE4WhcNMjUwNjIxMTcxNzE4WjAYMRYwFAYD VQQDEw02ODRkYWU5Zi1jNzM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvHEWv4Tj5gPoRry4077BZOVJlB3HuKJAUtF4tYA/Qoj7kKN1tMfP1PFvjKG9 gtiz5xAvf2gJRAyGLJmH6IgE3DVB+4uNlwa8Gj7hGvI1EgIWSQctABT/KwZzSbwt h2dyo0Aeut6weNsoAVCPVjYb1VZcFsKJR4Zh2pxtu9H1q8m5/ov6ouJ1bZc6ECtN Q1WdUsuRkRiKM6EM4tLYjRvRsnWDy/7pLevLhwRbax/wcmV6uDrfYuAdo49jGTFr SGPGEVDZnupSgVj6n6rAhCZR5TeOpTJRN+qJK3SeSM0OQ/+CjViwObBCDjFV8bo/ PpSsmMulJyw2qFyaCiZVUQ+ZJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJEoOqKc 49sTD/QhCSW/2P16xa9/MB8GA1UdIwQYMBaAFPnPBJfPtn4WJykQmPEfF4brif9Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTA3My80M0YxNjI2NDMz OTUxMUU5QkZCMUMyMUFDNEY5QUUwMi8tYzhFbDgtMmZoWW5LUkNZOFI4WGh1dUpf MUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1jOEVsOC0yZmhZbktSQ1k4UjhYaHV1Sl8xQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTA3My80M0YxNjI2NDMzOTUxMUU5QkZCMUMyMUFDNEY5QUUwMi8tYzhFbDgtMmZo WW5LUkNZOFI4WGh1dUpfMUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXoQoOQ8n7Bn7XK/tFrDeVSyd1vJ99E9uQ/Th1XvcD3Ix+H9iKmtYu vZLG4sHSSCxAEXjgL9i3cySIg7l2QJp/2YfPZNgCxYMWQQ22EwnI/q5f90HvmdI4 FbUNsU6WKITyXxZvI3uwESpuomZcmN3EtIHaRPFcJAD25hwmyUO9eimxJUnQ9Mmj EpaMaItBOixODvstX6keD3t6RDhi+MsTPZjgBPZKztPYZVL4vg3meWH4c++SHZ7r V/lQmFfox6KxHLCVcliXzh1428M9IqyIslJ9CXCYczCWpFgj+ulwcX2Y+JBbfc5d ZvKAGQePNXOtOc/kk05GzZCnaOP4aM15 -----END CERTIFICATE-----Generated at Sat Jun 14 19:30:55 2025 by rpki-client