$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9019/28AE43D8347611ED867E9512C4F9AE02/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.mft File: 0AKr6qWyzcSP6gmDsEqOwoYM-Sk.mft (raw, json) Hash identifier: cNo1tpyy9pmiwBgB/n3rSQPx0gECbsgDN1uiES3bNO0= Subject key identifier: B9:40:6A:34:18:90:9F:98:BE:F1:AF:E3:C3:BF:C2:7D:E4:93:F3:90 Authority key identifier: D0:02:AB:EA:A5:B2:CD:C4:8F:EA:09:83:B0:4A:8E:C2:86:0C:F9:29 Certificate issuer: /CN=A91C9019/serialNumber=D002ABEAA5B2CDC48FEA0983B04A8EC2860CF929 Certificate serial: 021B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9019/28AE43D8347611ED867E9512C4F9AE02/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.mft Manifest number: 021B Signing time: Thu 19 Jun 2025 01:47:28 +0000 Manifest this update: Thu 19 Jun 2025 01:47:28 +0000 Manifest next update: Thu 26 Jun 2025 01:47:28 +0000 Files and hashes: 1: 0AKr6qWyzcSP6gmDsEqOwoYM-Sk.crl (hash: 49+bLP9VPaE4TwxY0EF8CVPbkrfmq2+Ynapoc6yAAjo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9019/28AE43D8347611ED867E9512C4F9AE02/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.crl rsync://rpki.apnic.net/member_repository/A91C9019/28AE43D8347611ED867E9512C4F9AE02/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 01:47:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 539 (0x21b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9019, serialNumber=D002ABEAA5B2CDC48FEA0983B04A8EC2860CF929 Validity Not Before: Jun 19 01:47:28 2025 GMT Not After : Jun 26 01:47:28 2025 GMT Subject: CN=68536c30-55a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:75:04:cd:af:ce:ad:f8:2c:09:29:49:cd:5d: 6b:01:96:ef:61:ed:d1:6c:66:61:89:12:6c:55:84: 90:e1:3c:59:d1:5d:f4:97:b5:b0:52:fd:1a:75:a1: a0:bb:93:fb:8f:d4:18:bb:a4:4f:bf:19:4a:4a:31: 90:91:1d:6e:37:68:5a:37:42:2b:d2:a7:de:b9:15: bb:8f:4a:e2:84:a1:44:9e:40:3b:f0:cc:79:9b:e5: 2f:83:dd:d7:7f:0f:20:27:78:cc:fe:a2:60:35:4d: 2a:06:a1:4a:ad:a5:b9:92:83:bc:ef:5c:b6:f4:e0: 33:d6:bc:bf:b2:09:60:d0:27:30:20:cd:cd:05:e7: 7d:55:da:85:da:f5:97:69:a1:df:6e:8e:00:f4:34: 9c:a5:a4:2a:25:f5:21:eb:a6:5d:ec:25:a0:e6:76: 63:4d:11:11:b5:ed:d1:26:c2:94:6b:36:76:2b:f2: 86:82:63:38:3b:bd:bb:17:0b:0f:be:9f:30:4a:15: 04:cd:fc:bc:4b:51:60:83:67:08:41:ab:8e:b4:6d: 16:3e:9b:8f:97:5c:f5:d5:c0:42:fe:df:a8:0e:2f: c0:a9:1b:ca:cf:5b:65:d2:8f:0d:6a:d1:f3:0b:98: fd:18:2f:07:5d:54:66:da:da:2f:14:bd:52:68:8c: eb:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:40:6A:34:18:90:9F:98:BE:F1:AF:E3:C3:BF:C2:7D:E4:93:F3:90 X509v3 Authority Key Identifier: keyid:D0:02:AB:EA:A5:B2:CD:C4:8F:EA:09:83:B0:4A:8E:C2:86:0C:F9:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9019/28AE43D8347611ED867E9512C4F9AE02/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9019/28AE43D8347611ED867E9512C4F9AE02/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:d9:16:fc:a7:f7:66:4b:5d:72:f2:88:21:9d:e4:05:00:1a: f1:08:32:66:ab:32:73:11:58:22:59:71:31:f4:4e:56:b4:c3: 26:a1:83:4b:93:1d:2d:49:aa:ad:68:c6:37:91:a4:af:d8:e1: 71:b2:42:7e:a2:04:ec:73:d3:07:73:a7:2f:78:4d:16:44:47: 2f:f1:aa:0e:84:5c:05:8e:f2:c7:fb:1e:ff:a6:61:cb:c8:cc: 49:90:bc:a8:24:61:c3:f7:0c:22:48:30:78:94:4b:ea:2a:6c: a6:25:5c:4f:70:66:5e:41:f1:69:a5:79:60:e3:eb:72:3d:95: c5:b4:36:1d:f9:93:02:69:3b:db:4c:8f:ea:ba:65:32:40:ce: b3:89:94:2c:6b:d1:e0:4a:55:4e:7f:4d:ad:03:15:01:a2:36: a1:6a:3e:99:0c:aa:73:79:25:a3:e1:93:2a:ac:f2:22:9a:80: ae:87:da:49:da:82:06:b1:ce:91:56:23:dc:81:66:68:86:31: f9:e0:bf:a3:a6:88:ff:da:f8:84:bb:8b:11:78:d5:00:64:3b: 1b:df:4d:70:f2:d9:71:ee:dc:5e:0e:79:98:69:d7:7b:5d:c2: 3e:e1:d8:6d:39:d6:b7:93:cd:18:96:d5:3e:ff:a3:dd:bf:c9: 44:a5:79:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkwMTkxMTAvBgNVBAUTKEQwMDJBQkVBQTVCMkNEQzQ4RkVBMDk4M0IwNEE4RUMy ODYwQ0Y5MjkwHhcNMjUwNjE5MDE0NzI4WhcNMjUwNjI2MDE0NzI4WjAYMRYwFAYD VQQDEw02ODUzNmMzMC01NWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5HUEza/OrfgsCSlJzV1rAZbvYe3RbGZhiRJsVYSQ4TxZ0V30l7WwUv0adaGg u5P7j9QYu6RPvxlKSjGQkR1uN2haN0Ir0qfeuRW7j0rihKFEnkA78Mx5m+Uvg93X fw8gJ3jM/qJgNU0qBqFKraW5koO871y29OAz1ry/sglg0CcwIM3NBed9VdqF2vWX aaHfbo4A9DScpaQqJfUh66Zd7CWg5nZjTRERte3RJsKUazZ2K/KGgmM4O727FwsP vp8wShUEzfy8S1Fgg2cIQauOtG0WPpuPl1z11cBC/t+oDi/AqRvKz1tl0o8NatHz C5j9GC8HXVRm2tovFL1SaIzrNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLlAajQY kJ+YvvGv48O/wn3kk/OQMB8GA1UdIwQYMBaAFNACq+qlss3Ej+oJg7BKjsKGDPkp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTAxOS8yOEFFNDNEODM0 NzYxMUVEODY3RTk1MTJDNEY5QUUwMi8wQUtyNnFXeXpjU1A2Z21Ec0VxT3dvWU0t U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBBS3I2cVd5emNTUDZnbURzRXFPd29ZTS1Tay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTAxOS8yOEFFNDNEODM0NzYxMUVEODY3RTk1MTJDNEY5QUUwMi8wQUtyNnFXeXpj U1A2Z21Ec0VxT3dvWU0tU2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAm2Rb8p/dmS11y8oghneQFABrxCDJmqzJzEVgiWXEx9E5WtMMmoYNL kx0tSaqtaMY3kaSv2OFxskJ+ogTsc9MHc6cveE0WREcv8aoOhFwFjvLH+x7/pmHL yMxJkLyoJGHD9wwiSDB4lEvqKmymJVxPcGZeQfFppXlg4+tyPZXFtDYd+ZMCaTvb TI/qumUyQM6ziZQsa9HgSlVOf02tAxUBojahaj6ZDKpzeSWj4ZMqrPIimoCuh9pJ 2oIGsc6RViPcgWZohjH54L+jpoj/2viEu4sReNUAZDsb301w8tlx7txeDnmYadd7 XcI+4dhtOda3k80YltU+/6Pdv8lEpXn+ -----END CERTIFICATE-----Generated at Fri Jun 20 18:08:51 2025 by rpki-client