$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB246/F1C5C9523C0D11F096CCDB5FC4F9AE02/Vn4yHa9K90Q7DXnjKsAweXUn8dk.mft File: Vn4yHa9K90Q7DXnjKsAweXUn8dk.mft (raw, json) Hash identifier: d8d1eCfebRpwDRjNkYUHawWuoDpPN9tLhlphL8uC8BU= Subject key identifier: 15:10:D7:AC:D0:F7:9C:7D:B7:6E:2A:F1:37:BB:40:D3:93:4C:15:3F Authority key identifier: 56:7E:32:1D:AF:4A:F7:44:3B:0D:79:E3:2A:C0:30:79:75:27:F1:D9 Certificate issuer: /CN=A91BB246/serialNumber=567E321DAF4AF7443B0D79E32AC030797527F1D9 Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vn4yHa9K90Q7DXnjKsAweXUn8dk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB246/F1C5C9523C0D11F096CCDB5FC4F9AE02/Vn4yHa9K90Q7DXnjKsAweXUn8dk.mft Manifest number: 0B Signing time: Sun 15 Jun 2025 07:12:24 +0000 Manifest this update: Sun 15 Jun 2025 07:12:23 +0000 Manifest next update: Sun 22 Jun 2025 07:12:23 +0000 Files and hashes: 1: Vn4yHa9K90Q7DXnjKsAweXUn8dk.crl (hash: bZVRMcdbeRzdLi0ZHh4qcu0qqjSEJlX8iY+NCKI4uak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB246/F1C5C9523C0D11F096CCDB5FC4F9AE02/Vn4yHa9K90Q7DXnjKsAweXUn8dk.crl rsync://rpki.apnic.net/member_repository/A91BB246/F1C5C9523C0D11F096CCDB5FC4F9AE02/Vn4yHa9K90Q7DXnjKsAweXUn8dk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vn4yHa9K90Q7DXnjKsAweXUn8dk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 07:12:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB246, serialNumber=567E321DAF4AF7443B0D79E32AC030797527F1D9 Validity Not Before: Jun 15 07:12:23 2025 GMT Not After : Jun 22 07:12:23 2025 GMT Subject: CN=684e7258-f4a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a7:1d:e2:ce:72:84:43:1d:42:da:90:89:75: 9b:49:2e:35:c3:43:e1:3a:c3:0c:98:15:28:45:6a: a5:58:1b:d2:12:c5:63:f7:63:fd:e5:e7:8f:03:84: b5:12:83:84:cc:5a:5b:ab:b9:2c:d5:0f:16:a8:0b: ec:39:79:cf:09:c3:0f:15:82:a6:ee:09:9d:26:52: 8e:0f:f3:e3:24:37:76:10:be:2b:e4:57:6b:8a:bb: 9d:10:38:71:ff:54:71:d4:71:3b:c6:53:32:40:56: c9:1a:40:17:18:c3:21:a2:6c:7b:38:79:64:6f:1f: 04:04:52:0a:05:f3:ff:5b:fb:21:8c:21:27:a2:68: db:da:3d:9b:e1:a5:a8:ee:d6:d2:d2:6d:f8:75:a9: 4a:aa:2f:f3:19:53:d0:d9:64:f9:d0:7c:dc:f0:d6: 05:fc:df:d6:81:7a:00:24:da:6d:2b:db:68:34:8d: 51:49:03:a9:eb:1f:86:eb:98:72:19:58:da:56:60: 98:0a:4e:42:04:c6:57:dd:fa:6a:7a:23:bf:cf:40: 97:a8:21:46:10:1a:37:c4:1b:9c:30:76:67:63:c0: 95:3d:c1:1f:f2:2a:5f:d4:a6:3c:06:ae:50:5f:1a: d3:6e:cd:4f:12:87:5b:72:79:16:48:53:9b:c0:5c: 9c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:10:D7:AC:D0:F7:9C:7D:B7:6E:2A:F1:37:BB:40:D3:93:4C:15:3F X509v3 Authority Key Identifier: keyid:56:7E:32:1D:AF:4A:F7:44:3B:0D:79:E3:2A:C0:30:79:75:27:F1:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB246/F1C5C9523C0D11F096CCDB5FC4F9AE02/Vn4yHa9K90Q7DXnjKsAweXUn8dk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vn4yHa9K90Q7DXnjKsAweXUn8dk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB246/F1C5C9523C0D11F096CCDB5FC4F9AE02/Vn4yHa9K90Q7DXnjKsAweXUn8dk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:fb:12:22:76:93:9c:27:b8:28:53:2a:41:1c:3c:1a:3d:91: ac:07:06:73:88:1d:4c:4c:e3:96:a1:09:fa:ff:77:c6:5b:91: 05:0e:ad:bd:15:56:a9:1d:03:21:e6:04:c0:4f:02:77:ca:ea: 7d:55:cf:c9:a8:6b:0a:58:29:a8:6f:8d:ff:a8:ac:a9:2c:01: 93:37:31:3a:7b:73:fc:b3:43:61:35:d4:dc:91:25:2a:b4:f7: 0c:2d:7d:8b:3a:ec:23:96:0c:30:b2:17:21:1c:b0:7a:5f:84: eb:5f:d2:bf:91:f4:c6:21:b4:9f:54:ed:29:00:3c:6c:ba:90: 4a:a2:d0:d3:db:3f:0e:6e:0b:3a:02:25:bd:e0:00:74:fd:18: d2:e1:82:93:bb:8f:5d:13:ac:a8:46:4b:e4:59:38:56:80:14: fd:c9:9b:11:ef:4b:76:df:66:28:d0:4c:ae:ff:cf:df:67:02: d8:31:d9:ea:43:33:59:2f:da:d2:45:f6:a7:49:60:c2:c3:67: 0e:8c:2c:93:f1:d9:83:9c:65:e2:57:1e:a3:35:58:89:69:cf: 73:66:a1:61:00:37:65:d8:1c:78:a7:92:97:59:19:80:42:16: e6:04:5b:e9:15:b2:96:9a:68:9c:9e:35:06:b0:03:cc:13:ce: 6a:3d:cf:8f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QjI0NjExMC8GA1UEBRMoNTY3RTMyMURBRjRBRjc0NDNCMEQ3OUUzMkFDMDMwNzk3 NTI3RjFEOTAeFw0yNTA2MTUwNzEyMjNaFw0yNTA2MjIwNzEyMjNaMBgxFjAUBgNV BAMTDTY4NGU3MjU4LWY0YTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwpx3iznKEQx1C2pCJdZtJLjXDQ+E6wwyYFShFaqVYG9ISxWP3Y/3l548DhLUS g4TMWluruSzVDxaoC+w5ec8Jww8VgqbuCZ0mUo4P8+MkN3YQvivkV2uKu50QOHH/ VHHUcTvGUzJAVskaQBcYwyGibHs4eWRvHwQEUgoF8/9b+yGMISeiaNvaPZvhpaju 1tLSbfh1qUqqL/MZU9DZZPnQfNzw1gX839aBegAk2m0r22g0jVFJA6nrH4brmHIZ WNpWYJgKTkIExlfd+mp6I7/PQJeoIUYQGjfEG5wwdmdjwJU9wR/yKl/UpjwGrlBf GtNuzU8Sh1tyeRZIU5vAXJwJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUFRDXrND3 nH23birxN7tA05NMFT8wHwYDVR0jBBgwFoAUVn4yHa9K90Q7DXnjKsAweXUn8dkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJCMjQ2L0YxQzVDOTUyM0Mw RDExRjA5NkNDREI1RkM0RjlBRTAyL1ZuNHlIYTlLOTBRN0RYbmpLc0F3ZVhVbjhk ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVm40eUhhOUs5MFE3RFhuaktzQXdlWFVuOGRrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJC MjQ2L0YxQzVDOTUyM0MwRDExRjA5NkNDREI1RkM0RjlBRTAyL1ZuNHlIYTlLOTBR N0RYbmpLc0F3ZVhVbjhkay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFb7EiJ2k5wnuChTKkEcPBo9kawHBnOIHUxM45ahCfr/d8ZbkQUOrb0V VqkdAyHmBMBPAnfK6n1Vz8moawpYKahvjf+orKksAZM3MTp7c/yzQ2E11NyRJSq0 9wwtfYs67COWDDCyFyEcsHpfhOtf0r+R9MYhtJ9U7SkAPGy6kEqi0NPbPw5uCzoC Jb3gAHT9GNLhgpO7j10TrKhGS+RZOFaAFP3JmxHvS3bfZijQTK7/z99nAtgx2epD M1kv2tJF9qdJYMLDZw6MLJPx2YOcZeJXHqM1WIlpz3NmoWEAN2XYHHinkpdZGYBC FuYEW+kVspaaaJyeNQawA8wTzmo9z48= -----END CERTIFICATE-----Generated at Mon Jun 16 21:33:49 2025 by rpki-client