$ rpki-client -vvf rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.mft File: x67AwRtt8SmLElCYMaTMAkTa3PI.mft (raw, json) Hash identifier: 5/Y5FHGeVAlTA+3ytbZXGycz8/AD41yNMDuQziTZ0iY= Subject key identifier: C9:67:6D:16:B8:C1:C2:22:F1:07:C8:11:AF:CD:F8:62:D4:76:09:A2 Authority key identifier: C7:AE:C0:C1:1B:6D:F1:29:8B:12:50:98:31:A4:CC:02:44:DA:DC:F2 Certificate issuer: /CN=A91C612E/serialNumber=C7AEC0C11B6DF1298B12509831A4CC0244DADCF2 Certificate serial: 06BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x67AwRtt8SmLElCYMaTMAkTa3PI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.mft Manifest number: 12DC Signing time: Thu 12 Jun 2025 18:26:03 +0000 Manifest this update: Thu 12 Jun 2025 18:26:02 +0000 Manifest next update: Thu 19 Jun 2025 18:26:02 +0000 Files and hashes: 1: x67AwRtt8SmLElCYMaTMAkTa3PI.crl (hash: zb1NT44V9uGwwa6ETHJQD2hSZaR6VYAv4ELrT7V1eFY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.crl rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x67AwRtt8SmLElCYMaTMAkTa3PI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 18:26:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1725 (0x6bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C612E, serialNumber=C7AEC0C11B6DF1298B12509831A4CC0244DADCF2 Validity Not Before: Jun 12 18:26:02 2025 GMT Not After : Jun 19 18:26:02 2025 GMT Subject: CN=684b1bbb-bb51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:db:89:db:aa:63:71:c7:f5:65:c9:3a:70:e3: 54:3e:45:ff:70:11:d6:49:22:62:49:d6:e3:c0:e3: 55:5d:60:3c:55:d0:a3:64:24:ec:6d:c5:e5:12:eb: 02:6f:78:0c:10:82:e4:60:09:70:79:6e:00:2f:79: c2:c7:dd:c1:e9:af:5f:4a:3e:6d:aa:12:20:b2:3c: a9:fb:43:11:da:e5:48:0c:78:f4:8c:99:47:48:f5: a8:55:dd:26:b2:78:24:7f:87:a7:48:f5:24:24:bc: 14:30:18:ca:e0:26:bc:34:41:72:48:a2:fd:83:28: af:ec:f4:0c:e9:be:f5:6c:2a:c6:4e:44:be:1b:c2: 01:0d:46:d6:92:fc:74:fa:2b:2f:92:6f:cb:88:78: ca:88:9f:19:2c:0f:a3:d4:84:6f:03:5c:10:e2:8b: 57:7a:69:dd:ee:55:b4:b0:53:e7:5e:1d:a0:03:ce: e8:be:09:77:25:ee:80:da:36:66:8d:64:86:90:ce: 83:1a:fc:71:a4:45:34:91:7c:99:7c:1f:db:d8:40: 33:49:d6:b1:f0:3a:44:f0:75:9e:2a:79:9d:49:07: 20:ee:12:41:50:dc:f8:4c:14:bf:f5:32:5f:f4:e0: cc:53:50:a3:6c:07:96:ef:82:42:ac:37:67:e4:f8: d5:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:67:6D:16:B8:C1:C2:22:F1:07:C8:11:AF:CD:F8:62:D4:76:09:A2 X509v3 Authority Key Identifier: keyid:C7:AE:C0:C1:1B:6D:F1:29:8B:12:50:98:31:A4:CC:02:44:DA:DC:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x67AwRtt8SmLElCYMaTMAkTa3PI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:c3:e5:50:85:30:5d:86:13:27:72:82:db:8e:dc:77:15:15: 8a:97:3f:b8:89:c1:2f:01:06:47:e3:ac:81:94:62:68:33:d5: 00:a6:3c:77:3d:6e:93:16:30:b6:b0:38:07:d0:47:cb:a5:b9: cb:1b:00:3f:9f:69:b1:94:22:3a:4b:2b:85:5d:24:15:53:56: 17:0d:33:94:72:37:65:b1:ba:67:71:b0:d4:56:cf:91:4b:c2: 6e:cf:50:7c:d4:12:64:7f:8d:db:58:19:42:0c:b0:44:a9:c8: 05:05:60:6a:71:3a:f5:fe:fa:cf:97:55:84:43:60:c6:09:93: eb:8d:2b:a8:91:04:cc:3b:44:80:9e:b4:53:5f:e8:a0:b2:6a: f0:b2:51:81:7d:62:69:5b:9d:23:e4:67:fe:88:c1:58:0c:d8: e1:ad:49:5c:d8:b2:d4:ec:9b:f2:6c:13:0e:e6:12:c4:1e:ce: a1:91:4a:99:f0:cf:bc:18:55:bb:c8:3d:c6:c5:5e:aa:1b:99: b7:7d:2a:df:d0:02:c9:7f:2d:84:66:73:1a:39:02:f1:d6:ad: 4d:5b:35:49:4e:92:c3:da:e3:19:12:31:a5:54:b7:5c:b5:9a: 34:4d:a3:d9:be:d3:66:e4:15:60:e1:32:64:62:2e:1a:6b:2a: 1a:d0:04:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBr0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYxMkUxMTAvBgNVBAUTKEM3QUVDMEMxMUI2REYxMjk4QjEyNTA5ODMxQTRDQzAy NDREQURDRjIwHhcNMjUwNjEyMTgyNjAyWhcNMjUwNjE5MTgyNjAyWjAYMRYwFAYD VQQDEw02ODRiMWJiYi1iYjUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyNuJ26pjccf1Zck6cONUPkX/cBHWSSJiSdbjwONVXWA8VdCjZCTsbcXlEusC b3gMEILkYAlweW4AL3nCx93B6a9fSj5tqhIgsjyp+0MR2uVIDHj0jJlHSPWoVd0m sngkf4enSPUkJLwUMBjK4Ca8NEFySKL9gyiv7PQM6b71bCrGTkS+G8IBDUbWkvx0 +isvkm/LiHjKiJ8ZLA+j1IRvA1wQ4otXemnd7lW0sFPnXh2gA87ovgl3Je6A2jZm jWSGkM6DGvxxpEU0kXyZfB/b2EAzSdax8DpE8HWeKnmdSQcg7hJBUNz4TBS/9TJf 9ODMU1CjbAeW74JCrDdn5PjVCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMlnbRa4 wcIi8QfIEa/N+GLUdgmiMB8GA1UdIwQYMBaAFMeuwMEbbfEpixJQmDGkzAJE2tzy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjEyRS82NUJDMTdEMjBC NjExMUVBQUYwNDJGNjhDNEY5QUUwMi94NjdBd1J0dDhTbUxFbENZTWFUTUFrVGEz UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g2N0F3UnR0OFNtTEVsQ1lNYVRNQWtUYTNQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjEyRS82NUJDMTdEMjBCNjExMUVBQUYwNDJGNjhDNEY5QUUwMi94NjdBd1J0dDhT bUxFbENZTWFUTUFrVGEzUEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaw+VQhTBdhhMncoLbjtx3FRWKlz+4icEvAQZH46yBlGJoM9UApjx3 PW6TFjC2sDgH0EfLpbnLGwA/n2mxlCI6SyuFXSQVU1YXDTOUcjdlsbpncbDUVs+R S8Juz1B81BJkf43bWBlCDLBEqcgFBWBqcTr1/vrPl1WEQ2DGCZPrjSuokQTMO0SA nrRTX+igsmrwslGBfWJpW50j5Gf+iMFYDNjhrUlc2LLU7JvybBMO5hLEHs6hkUqZ 8M+8GFW7yD3GxV6qG5m3fSrf0ALJfy2EZnMaOQLx1q1NWzVJTpLD2uMZEjGlVLdc tZo0TaPZvtNm5BVg4TJkYi4aayoa0AQS -----END CERTIFICATE-----Generated at Sat Jun 14 17:47:13 2025 by rpki-client