$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.mft File: P9f1Vfx9b8I1OaOmIe8tBI1MfMc.mft (raw, json) Hash identifier: sg0RM3VzWriS/ZdlmbfVv2Kbf9/KUdGvu5k7QZXup+Y= Subject key identifier: E1:DE:52:C5:29:05:5D:B3:64:BA:73:55:74:AC:C1:12:EC:99:02:6C Authority key identifier: 3F:D7:F5:55:FC:7D:6F:C2:35:39:A3:A6:21:EF:2D:04:8D:4C:7C:C7 Certificate issuer: /CN=A91C4A80/serialNumber=3FD7F555FC7D6FC23539A3A621EF2D048D4C7CC7 Certificate serial: 43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.mft Manifest number: 43 Signing time: Sun 15 Jun 2025 06:31:25 +0000 Manifest this update: Sun 15 Jun 2025 06:31:24 +0000 Manifest next update: Sun 22 Jun 2025 06:31:24 +0000 Files and hashes: 1: P9f1Vfx9b8I1OaOmIe8tBI1MfMc.crl (hash: dsyqIsxLhJhBHR7fQH6W9PFloA93x38nQDd0qqIBDZI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.crl rsync://rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 06:31:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4A80, serialNumber=3FD7F555FC7D6FC23539A3A621EF2D048D4C7CC7 Validity Not Before: Jun 15 06:31:24 2025 GMT Not After : Jun 22 06:31:24 2025 GMT Subject: CN=684e68bd-36c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e9:3a:e6:98:06:e5:53:4e:6a:59:60:a1:13: bc:80:8f:72:18:61:52:b9:d0:7c:51:88:89:18:85: a5:50:67:2b:32:03:74:32:31:db:19:4c:21:b3:09: b5:fd:68:be:f8:bb:da:fe:12:ba:6a:2f:5f:33:d1: e3:aa:27:3b:f1:36:82:52:36:a7:c5:a9:2c:35:c6: 59:53:3d:b0:50:a6:3b:6b:e7:a0:c5:06:de:3e:97: 35:5a:ee:de:92:8a:09:47:a5:6a:75:ba:62:56:18: 62:5b:f1:01:66:36:1c:93:ee:aa:52:c9:3e:fa:0f: 6a:3a:89:ff:8f:8c:72:3f:87:3b:c3:73:a3:30:81: 2c:d0:f4:90:94:7a:32:c8:02:20:d7:1d:c9:03:d2: f3:a7:87:ef:a8:18:1f:94:53:b4:86:4f:d5:6b:90: cf:c7:3d:fe:71:36:cb:e9:65:db:c2:d9:7f:8b:c2: 40:74:1f:0b:72:8b:6c:3e:16:67:ee:d0:dd:f4:47: d0:46:1d:fe:5c:76:a0:7d:1d:d2:af:de:46:15:8e: a1:58:ea:01:fd:e1:22:09:7d:0d:8a:8d:fe:73:0b: 01:06:00:4b:c7:9f:56:cc:ce:d5:34:6f:6d:a2:7b: f1:ed:29:b5:22:88:97:1b:90:43:52:51:9d:b7:c0: f4:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:DE:52:C5:29:05:5D:B3:64:BA:73:55:74:AC:C1:12:EC:99:02:6C X509v3 Authority Key Identifier: keyid:3F:D7:F5:55:FC:7D:6F:C2:35:39:A3:A6:21:EF:2D:04:8D:4C:7C:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:af:52:20:c2:2c:7c:00:8f:40:b6:dd:d5:0d:ab:80:8b:6f: ba:5b:c0:33:57:48:a5:b9:63:2e:c2:4f:dd:67:55:d9:a0:2f: 95:07:5a:c7:24:72:b7:3d:1e:fa:95:11:03:9f:42:24:3e:2a: 3b:5a:47:a7:b5:be:ec:95:1e:ca:50:dd:e0:c4:cc:45:12:1e: 5e:20:b0:50:1d:d4:d3:05:a6:ea:c9:ae:b7:e4:0b:ae:64:52: 0b:37:5e:45:1c:df:50:60:d1:f4:d0:1b:10:73:9a:db:1d:c0: 4e:90:78:8d:7a:df:40:6e:01:82:bf:c0:ca:a1:9f:d9:a3:1e: 56:bf:c6:b7:87:d0:b5:f6:ca:19:4a:98:a2:45:f4:89:ca:a0: a8:ee:e1:1b:7b:84:36:fb:7c:1e:97:cc:af:00:04:ef:7b:25: 91:2f:7b:77:a0:15:ea:2f:45:52:af:1e:8a:ca:24:90:2d:44: 76:09:36:8f:b6:ee:e4:39:8b:e4:6a:8b:4c:d0:1c:a8:4c:5e: 2a:a9:3e:22:11:47:0f:3b:5c:a7:48:f7:68:bf:24:91:53:63: 90:1b:d9:d4:8d:1b:53:33:7d:ba:66:a5:79:cd:91:5e:eb:0a: 7c:d0:50:60:a1:c8:12:73:47:bf:99:ff:11:05:22:63:67:c2: 35:d9:21:fa -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NEE4MDExMC8GA1UEBRMoM0ZEN0Y1NTVGQzdENkZDMjM1MzlBM0E2MjFFRjJEMDQ4 RDRDN0NDNzAeFw0yNTA2MTUwNjMxMjRaFw0yNTA2MjIwNjMxMjRaMBgxFjAUBgNV BAMTDTY4NGU2OGJkLTM2YzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC76TrmmAblU05qWWChE7yAj3IYYVK50HxRiIkYhaVQZysyA3QyMdsZTCGzCbX9 aL74u9r+ErpqL18z0eOqJzvxNoJSNqfFqSw1xllTPbBQpjtr56DFBt4+lzVa7t6S iglHpWp1umJWGGJb8QFmNhyT7qpSyT76D2o6if+PjHI/hzvDc6MwgSzQ9JCUejLI AiDXHckD0vOnh++oGB+UU7SGT9VrkM/HPf5xNsvpZdvC2X+LwkB0Hwtyi2w+Fmfu 0N30R9BGHf5cdqB9HdKv3kYVjqFY6gH94SIJfQ2Kjf5zCwEGAEvHn1bMztU0b22i e/HtKbUiiJcbkENSUZ23wPTZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4d5SxSkF XbNkunNVdKzBEuyZAmwwHwYDVR0jBBgwFoAUP9f1Vfx9b8I1OaOmIe8tBI1MfMcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM0QTgwLzI5RUM3M0JBRTRF RjExRUZCNzE0RTU2Q0M0RjlBRTAyL1A5ZjFWZng5YjhJMU9hT21JZTh0QkkxTWZN Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUDlmMVZmeDliOEkxT2FPbUllOHRCSTFNZk1jLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM0 QTgwLzI5RUM3M0JBRTRFRjExRUZCNzE0RTU2Q0M0RjlBRTAyL1A5ZjFWZng5YjhJ MU9hT21JZTh0QkkxTWZNYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH6vUiDCLHwAj0C23dUNq4CLb7pbwDNXSKW5Yy7CT91nVdmgL5UHWsck crc9HvqVEQOfQiQ+KjtaR6e1vuyVHspQ3eDEzEUSHl4gsFAd1NMFpurJrrfkC65k Ugs3XkUc31Bg0fTQGxBzmtsdwE6QeI1630BuAYK/wMqhn9mjHla/xreH0LX2yhlK mKJF9InKoKju4Rt7hDb7fB6XzK8ABO97JZEve3egFeovRVKvHorKJJAtRHYJNo+2 7uQ5i+Rqi0zQHKhMXiqpPiIRRw87XKdI92i/JJFTY5Ab2dSNG1MzfbpmpXnNkV7r CnzQUGChyBJzR7+Z/xEFImNnwjXZIfo= -----END CERTIFICATE-----Generated at Tue Jun 17 01:31:33 2025 by rpki-client