$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.mft File: -sRVX74xo4CWkO4YeF16u-KnJ6M.mft (raw, json) Hash identifier: eUfauiVXv+QWCWYqdT9IeUBW2tI8U3G7+F957TYdmbw= Subject key identifier: 6E:6E:20:7D:A6:C7:FF:D9:95:15:EC:3F:2A:AA:6B:A0:47:B3:A9:67 Authority key identifier: FA:C4:55:5F:BE:31:A3:80:96:90:EE:18:78:5D:7A:BB:E2:A7:27:A3 Certificate issuer: /CN=A91C4204/serialNumber=FAC4555FBE31A3809690EE18785D7ABBE2A727A3 Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sRVX74xo4CWkO4YeF16u-KnJ6M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.mft Manifest number: 10 Signing time: Fri 13 Jun 2025 06:55:36 +0000 Manifest this update: Fri 13 Jun 2025 06:55:35 +0000 Manifest next update: Fri 20 Jun 2025 06:55:35 +0000 Files and hashes: 1: -sRVX74xo4CWkO4YeF16u-KnJ6M.crl (hash: s2mHZDwd2GCPtWhtnDZf8tEClEEF8aWCbjr1FzjCQvs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.crl rsync://rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sRVX74xo4CWkO4YeF16u-KnJ6M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 06:55:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4204, serialNumber=FAC4555FBE31A3809690EE18785D7ABBE2A727A3 Validity Not Before: Jun 13 06:55:35 2025 GMT Not After : Jun 20 06:55:35 2025 GMT Subject: CN=684bcb67-fd21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:92:c9:d7:c4:da:5d:8b:ef:28:67:eb:86:1e: a8:b0:d7:c3:4d:b0:19:ba:e3:83:1f:8a:6d:20:bf: e5:17:d6:5e:a1:73:2d:20:f0:ec:ac:49:ee:8c:6c: 49:c6:c1:ba:f2:75:52:4d:0e:58:7d:66:e8:d7:d8: 9e:86:e9:70:17:5d:8a:29:11:2f:9e:3d:16:e5:a1: eb:c4:6c:57:72:45:01:36:32:d4:e4:92:87:4a:92: fb:7e:0c:59:10:e4:63:38:d8:36:62:f2:e1:13:8f: fb:4d:a5:53:96:ee:94:fc:60:7c:f6:d4:5b:c5:50: e5:a9:95:1a:25:dc:c8:e0:87:ae:da:a3:ba:2e:c2: f9:cc:38:c0:38:11:9d:bf:a5:86:4b:ea:82:95:ef: 8a:35:60:e1:a7:01:80:41:a4:c4:1b:75:8e:18:8d: b7:0f:35:1f:45:10:ab:8b:20:5e:95:cf:3c:ee:6c: bd:47:a5:52:f3:71:78:02:01:c0:cb:be:9c:f5:b1: 3c:e4:82:e1:34:10:c9:c5:86:0d:5d:79:7b:40:40: ef:77:ac:7d:e7:11:2f:0c:56:16:e5:fc:b9:4f:23: 55:b3:bc:e2:30:42:bc:b9:09:5a:2c:34:89:7a:15: 4b:ea:05:5c:85:03:27:15:43:be:0f:74:39:dc:9f: 86:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:6E:20:7D:A6:C7:FF:D9:95:15:EC:3F:2A:AA:6B:A0:47:B3:A9:67 X509v3 Authority Key Identifier: keyid:FA:C4:55:5F:BE:31:A3:80:96:90:EE:18:78:5D:7A:BB:E2:A7:27:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sRVX74xo4CWkO4YeF16u-KnJ6M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:ba:a3:ff:b6:1b:67:be:59:ac:9f:2b:a9:04:12:fc:cf:5d: 64:00:30:3f:88:be:c6:9f:5f:20:e4:98:39:f8:f6:82:5e:23: 14:13:90:6e:08:d2:9f:83:ab:59:86:11:fa:6a:19:d8:a0:e9: a3:cb:4d:01:7f:f7:48:70:da:99:3a:05:ff:3b:cd:05:02:2d: a5:4d:fe:ea:da:26:57:35:69:62:da:28:ca:f5:22:3e:66:ea: 86:d7:6f:19:e7:70:7e:26:61:bd:34:57:80:5a:de:c0:28:fe: 84:be:ae:b8:ac:a9:ce:9e:17:da:a5:89:fa:1a:e6:84:0d:e0: 95:ad:a4:90:b1:df:2b:13:b5:53:91:10:ff:30:71:0a:9c:ef: b8:4d:e6:93:cb:74:0f:2b:62:57:75:c6:ea:8d:31:a0:45:b9: f6:de:f5:ee:4a:89:db:4b:6c:83:c4:fe:c8:5e:95:8c:e3:6b: 13:70:d1:de:6b:8c:b9:56:9f:9e:e8:29:73:dc:fa:17:ec:51: 9a:a4:17:e7:8c:fa:23:f7:30:3f:a2:99:c8:4c:83:cf:23:b5: 20:ff:fc:9b:e3:8f:a2:45:1e:d3:53:3f:23:b6:76:b6:79:12: cc:d6:ad:66:5c:1a:84:82:b3:60:6f:27:af:97:26:8b:6d:18: 0a:d1:03:49 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NDIwNDExMC8GA1UEBRMoRkFDNDU1NUZCRTMxQTM4MDk2OTBFRTE4Nzg1RDdBQkJF MkE3MjdBMzAeFw0yNTA2MTMwNjU1MzVaFw0yNTA2MjAwNjU1MzVaMBgxFjAUBgNV BAMTDTY4NGJjYjY3LWZkMjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDtksnXxNpdi+8oZ+uGHqiw18NNsBm644Mfim0gv+UX1l6hcy0g8OysSe6MbEnG wbrydVJNDlh9ZujX2J6G6XAXXYopES+ePRbloevEbFdyRQE2MtTkkodKkvt+DFkQ 5GM42DZi8uETj/tNpVOW7pT8YHz21FvFUOWplRol3Mjgh67ao7ouwvnMOMA4EZ2/ pYZL6oKV74o1YOGnAYBBpMQbdY4YjbcPNR9FEKuLIF6VzzzubL1HpVLzcXgCAcDL vpz1sTzkguE0EMnFhg1deXtAQO93rH3nES8MVhbl/LlPI1WzvOIwQry5CVosNIl6 FUvqBVyFAycVQ74PdDncn4ZLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUbm4gfabH /9mVFew/KqproEezqWcwHwYDVR0jBBgwFoAU+sRVX74xo4CWkO4YeF16u+KnJ6Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM0MjA0LzRDNUQyRURFMzAw OTExRjBBMEFBN0QzREM0RjlBRTAyLy1zUlZYNzR4bzRDV2tPNFllRjE2dS1Lbko2 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLXNSVlg3NHhvNENXa080WWVGMTZ1LUtuSjZNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM0 MjA0LzRDNUQyRURFMzAwOTExRjBBMEFBN0QzREM0RjlBRTAyLy1zUlZYNzR4bzRD V2tPNFllRjE2dS1Lbko2TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADy6o/+2G2e+WayfK6kEEvzPXWQAMD+IvsafXyDkmDn49oJeIxQTkG4I 0p+Dq1mGEfpqGdig6aPLTQF/90hw2pk6Bf87zQUCLaVN/uraJlc1aWLaKMr1Ij5m 6obXbxnncH4mYb00V4Ba3sAo/oS+rrisqc6eF9qlifoa5oQN4JWtpJCx3ysTtVOR EP8wcQqc77hN5pPLdA8rYld1xuqNMaBFufbe9e5KidtLbIPE/shelYzjaxNw0d5r jLlWn57oKXPc+hfsUZqkF+eM+iP3MD+imchMg88jtSD//Jvjj6JFHtNTPyO2drZ5 EszWrWZcGoSCs2BvJ6+XJottGArRA0k= -----END CERTIFICATE-----Generated at Sat Jun 14 19:28:13 2025 by rpki-client