$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.mft File: 0q268NfVLLlNShOXizIFO833eg8.mft (raw, json) Hash identifier: JjpE92k1vaLNIE03p5vEwDU6cUD/FIIoDWJrTyWX8Cc= Subject key identifier: 22:73:B9:C2:22:D7:2D:ED:04:E3:98:C6:2F:CB:BB:F1:7B:78:BE:F9 Authority key identifier: D2:AD:BA:F0:D7:D5:2C:B9:4D:4A:13:97:8B:32:05:3B:CD:F7:7A:0F Certificate issuer: /CN=A91BE514/serialNumber=D2ADBAF0D7D52CB94D4A13978B32053BCDF77A0F Certificate serial: 0138 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0q268NfVLLlNShOXizIFO833eg8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.mft Manifest number: 0136 Signing time: Sun 15 Jun 2025 03:40:21 +0000 Manifest this update: Sun 15 Jun 2025 03:40:20 +0000 Manifest next update: Sun 22 Jun 2025 03:40:20 +0000 Files and hashes: 1: 0q268NfVLLlNShOXizIFO833eg8.crl (hash: 8noTopG7A2+qVvnhH6DhM/X8lZGaOStYx6M3fH0Qm7c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.crl rsync://rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0q268NfVLLlNShOXizIFO833eg8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 312 (0x138) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE514, serialNumber=D2ADBAF0D7D52CB94D4A13978B32053BCDF77A0F Validity Not Before: Jun 15 03:40:20 2025 GMT Not After : Jun 22 03:40:20 2025 GMT Subject: CN=684e40a5-dd6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:79:06:68:75:2a:12:3e:71:ef:2c:72:d2:ce: 9e:5d:64:9c:b0:45:2c:89:43:23:bb:25:2e:d1:ac: 35:53:4c:45:ae:55:7f:ed:97:df:34:39:af:b3:aa: f1:18:5f:e3:9a:92:be:93:44:fa:f9:b1:c7:ad:d0: 45:54:47:e0:39:df:49:09:b1:51:11:81:b7:e6:48: 35:57:4f:26:4b:9e:71:61:c0:e5:ed:d1:9d:6c:8c: 8c:2f:ea:b2:66:4c:36:d5:a0:64:38:86:18:34:26: 9c:ce:5f:9f:45:ff:d6:f4:3a:6b:1e:3a:2e:1f:0d: 30:b7:d7:68:5a:78:8a:87:73:13:02:fb:76:11:49: 7f:bb:3b:70:f0:10:16:76:1f:e6:dd:36:21:81:7a: d3:64:f7:f1:99:a0:f7:1e:45:30:8b:85:68:18:3f: 0e:0e:64:ce:a1:48:2c:f5:bf:fb:ae:ca:8b:97:2e: 0c:3d:60:d1:f8:31:7f:4c:ba:1c:66:d2:c5:af:ae: 72:24:95:46:1a:1a:38:2a:81:35:cf:35:02:2a:64: 37:d6:12:e1:cd:c0:34:c5:61:5c:43:72:26:87:db: 3c:67:f5:73:7e:a5:df:74:98:83:75:40:06:72:3c: 91:85:49:bb:8a:06:72:c4:73:e7:65:a3:8f:05:61: 07:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:73:B9:C2:22:D7:2D:ED:04:E3:98:C6:2F:CB:BB:F1:7B:78:BE:F9 X509v3 Authority Key Identifier: keyid:D2:AD:BA:F0:D7:D5:2C:B9:4D:4A:13:97:8B:32:05:3B:CD:F7:7A:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0q268NfVLLlNShOXizIFO833eg8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:2f:44:06:c1:05:40:4f:cc:bc:10:d1:b3:96:b2:d2:ae:30: 94:af:cd:7a:5f:44:2f:98:3f:3c:fe:07:08:d0:91:e7:fd:c9: 36:1e:9e:43:96:d0:64:cb:fb:5e:d8:f0:f3:f8:0b:ba:1e:b3: 9b:5e:45:73:b1:d2:d1:29:9e:f3:76:46:ff:2a:48:05:23:6e: 9d:bd:c6:76:b9:3d:cd:4a:0e:64:39:64:ea:62:a8:6e:03:89: 93:e8:09:6c:eb:22:4f:16:8c:87:52:b8:81:24:6b:b5:ce:76: 32:4d:18:6c:55:b2:35:33:e9:d5:91:79:46:56:60:aa:39:02: fe:99:27:25:7b:58:24:2b:d0:77:12:4a:00:11:43:66:ce:42: 41:96:c5:15:22:7e:85:7f:1c:8f:d4:2a:5c:bf:d1:bf:48:2a: 0c:82:51:c1:f9:d2:3e:a1:c5:b4:3f:8c:28:95:3f:fe:bc:85: dd:bf:25:1a:34:69:a4:14:11:d5:d7:e2:77:b2:f6:21:be:b0: 7f:20:d3:da:dc:0d:1b:f6:fe:c4:83:61:14:ac:e8:04:e6:92: e9:b2:ee:7b:1e:fb:81:74:9e:97:3c:0a:b8:30:3c:19:3b:a7: 71:91:3b:d3:47:be:e4:bc:ea:b0:56:38:17:fc:50:65:df:50: 06:6f:84:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkU1MTQxMTAvBgNVBAUTKEQyQURCQUYwRDdENTJDQjk0RDRBMTM5NzhCMzIwNTNC Q0RGNzdBMEYwHhcNMjUwNjE1MDM0MDIwWhcNMjUwNjIyMDM0MDIwWjAYMRYwFAYD VQQDEw02ODRlNDBhNS1kZDZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsXkGaHUqEj5x7yxy0s6eXWScsEUsiUMjuyUu0aw1U0xFrlV/7ZffNDmvs6rx GF/jmpK+k0T6+bHHrdBFVEfgOd9JCbFREYG35kg1V08mS55xYcDl7dGdbIyML+qy Zkw21aBkOIYYNCaczl+fRf/W9DprHjouHw0wt9doWniKh3MTAvt2EUl/uztw8BAW dh/m3TYhgXrTZPfxmaD3HkUwi4VoGD8ODmTOoUgs9b/7rsqLly4MPWDR+DF/TLoc ZtLFr65yJJVGGho4KoE1zzUCKmQ31hLhzcA0xWFcQ3Imh9s8Z/VzfqXfdJiDdUAG cjyRhUm7igZyxHPnZaOPBWEH6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCJzucIi 1y3tBOOYxi/Lu/F7eL75MB8GA1UdIwQYMBaAFNKtuvDX1Sy5TUoTl4syBTvN93oP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTUxNC9EOEVERjY4RTZF RjUxMUVFQkQxODBBMzJDNEY5QUUwMi8wcTI2OE5mVkxMbE5TaE9YaXpJRk84MzNl ZzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBxMjY4TmZWTExsTlNoT1hpeklGTzgzM2VnOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RTUxNC9EOEVERjY4RTZFRjUxMUVFQkQxODBBMzJDNEY5QUUwMi8wcTI2OE5mVkxM bE5TaE9YaXpJRk84MzNlZzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhL0QGwQVAT8y8ENGzlrLSrjCUr816X0QvmD88/gcI0JHn/ck2Hp5D ltBky/te2PDz+Au6HrObXkVzsdLRKZ7zdkb/KkgFI26dvcZ2uT3NSg5kOWTqYqhu A4mT6Als6yJPFoyHUriBJGu1znYyTRhsVbI1M+nVkXlGVmCqOQL+mScle1gkK9B3 EkoAEUNmzkJBlsUVIn6FfxyP1Cpcv9G/SCoMglHB+dI+ocW0P4wolT/+vIXdvyUa NGmkFBHV1+J3svYhvrB/INPa3A0b9v7Eg2EUrOgE5pLpsu57HvuBdJ6XPAq4MDwZ O6dxkTvTR77kvOqwVjgX/FBl31AGb4R7 -----END CERTIFICATE-----Generated at Sun Jun 15 09:35:49 2025 by rpki-client