$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/c5C6Rl4CIu4xQH5VCebenj-pENs.mft File: c5C6Rl4CIu4xQH5VCebenj-pENs.mft (raw, json) Hash identifier: nsmC4WWqS6xnQH8f4f1RxNjLtC1RbtKoAkukC4PMVx0= Subject key identifier: D4:3B:97:1E:2D:6C:DB:C1:BA:AA:3B:AB:51:45:B0:25:71:28:7A:32 Authority key identifier: 73:90:BA:46:5E:02:22:EE:31:40:7E:55:09:E6:DE:9E:3F:A9:10:DB Certificate issuer: /CN=A91CA6E6/serialNumber=7390BA465E0222EE31407E5509E6DE9E3FA910DB Certificate serial: CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5C6Rl4CIu4xQH5VCebenj-pENs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/c5C6Rl4CIu4xQH5VCebenj-pENs.mft Manifest number: 0256 Signing time: Sun 15 Jun 2025 02:47:46 +0000 Manifest this update: Sun 15 Jun 2025 02:47:45 +0000 Manifest next update: Sun 22 Jun 2025 02:47:45 +0000 Files and hashes: 1: c5C6Rl4CIu4xQH5VCebenj-pENs.crl (hash: zIX/GNhnwTVg3RGiz4mYj3s1MSKqnnztk+2xL0RK4IQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/c5C6Rl4CIu4xQH5VCebenj-pENs.crl rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/c5C6Rl4CIu4xQH5VCebenj-pENs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5C6Rl4CIu4xQH5VCebenj-pENs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:47:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 206 (0xce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA6E6, serialNumber=7390BA465E0222EE31407E5509E6DE9E3FA910DB Validity Not Before: Jun 15 02:47:45 2025 GMT Not After : Jun 22 02:47:45 2025 GMT Subject: CN=684e3452-cabb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d1:40:e6:16:6a:11:df:d5:d5:bd:53:f0:b5: 0d:fe:d7:45:f5:71:27:dc:50:20:d6:08:36:7e:a8: 9f:ae:d2:a3:1f:65:ea:4f:ae:a6:ae:a2:48:c0:07: 9a:4b:5d:71:44:ba:2c:2d:40:25:ef:9e:e3:c3:0a: 18:63:45:ba:4e:ab:00:97:05:25:47:d0:2b:7a:a7: a1:f8:4d:45:22:4a:4b:88:1d:37:7f:86:ec:7e:ad: 0d:0a:d5:0e:9a:30:22:b2:a7:eb:27:d3:bc:86:8e: 94:14:f1:05:2e:68:20:1f:56:24:14:37:d8:0d:b6: e7:ea:10:c1:95:7b:38:f0:6b:9e:44:b0:93:e9:7c: 73:9e:93:3b:c2:2d:3c:1b:a5:38:4b:1b:39:61:0b: 47:4c:11:ad:9a:f2:94:7a:8c:bd:4f:ce:7a:13:a0: 69:0a:b8:ca:a9:d8:44:df:d4:5c:e6:f1:18:82:26: ee:04:8e:1d:a3:fd:61:32:99:01:67:21:3e:87:ab: 30:e3:d5:2d:d2:ae:06:57:59:1e:65:9a:0e:66:95: 3f:1a:ef:4b:4d:77:7c:94:fc:60:ee:5f:5f:c6:7c: af:f3:a1:d6:82:69:16:da:aa:7c:c5:b6:9c:1c:4e: 89:16:d0:96:47:cc:4d:5a:a7:00:2a:20:6f:1e:5c: 05:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:3B:97:1E:2D:6C:DB:C1:BA:AA:3B:AB:51:45:B0:25:71:28:7A:32 X509v3 Authority Key Identifier: keyid:73:90:BA:46:5E:02:22:EE:31:40:7E:55:09:E6:DE:9E:3F:A9:10:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/c5C6Rl4CIu4xQH5VCebenj-pENs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5C6Rl4CIu4xQH5VCebenj-pENs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/c5C6Rl4CIu4xQH5VCebenj-pENs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:54:ae:9f:b8:ea:46:77:85:f4:54:b2:c1:19:c3:8a:34:d0: 8e:f5:c7:bb:04:f0:af:54:fc:f9:72:1e:f2:10:38:5a:ee:f2: d3:1d:e3:10:22:d5:ff:d2:a4:59:9a:c7:dc:3a:be:9d:f3:cd: 12:c4:2a:3c:98:e0:62:89:d0:23:40:18:16:a0:ed:a1:b2:47: b8:4b:b5:da:a7:f4:4f:e0:19:c7:37:b4:76:ee:59:0c:53:64: 2e:f0:ed:e3:c2:ab:5a:0e:ae:72:88:71:46:aa:7a:1b:6a:d5: 6f:59:bf:05:8c:97:6f:61:d7:c2:b1:13:b9:43:41:fe:fd:a0: 88:f6:2c:a6:1f:a2:da:b1:52:0e:bb:c4:4a:16:6d:d7:5a:3c: 7d:eb:99:25:71:85:2b:01:ce:a7:8e:d2:72:5b:d1:35:83:6f: 2c:9e:9e:ab:44:ac:8a:a8:6f:31:65:49:6e:ef:69:0f:72:e6: 77:76:d2:77:85:9e:64:be:bd:4f:64:cf:12:1a:44:88:d1:30: 23:b1:a6:f1:8d:06:eb:d0:48:5c:2c:45:fa:c4:65:c5:b7:8b: 0a:04:f8:77:b6:67:d6:fe:06:9f:e4:f0:ce:ff:80:66:5a:42: 2a:c8:4b:1f:55:b0:fc:55:d7:32:d6:bd:86:6f:a7:48:0b:bc: c7:66:1e:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0E2RTYxMTAvBgNVBAUTKDczOTBCQTQ2NUUwMjIyRUUzMTQwN0U1NTA5RTZERTlF M0ZBOTEwREIwHhcNMjUwNjE1MDI0NzQ1WhcNMjUwNjIyMDI0NzQ1WjAYMRYwFAYD VQQDEw02ODRlMzQ1Mi1jYWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz9FA5hZqEd/V1b1T8LUN/tdF9XEn3FAg1gg2fqifrtKjH2XqT66mrqJIwAea S11xRLosLUAl757jwwoYY0W6TqsAlwUlR9Areqeh+E1FIkpLiB03f4bsfq0NCtUO mjAisqfrJ9O8ho6UFPEFLmggH1YkFDfYDbbn6hDBlXs48GueRLCT6XxznpM7wi08 G6U4Sxs5YQtHTBGtmvKUeoy9T856E6BpCrjKqdhE39Rc5vEYgibuBI4do/1hMpkB ZyE+h6sw49Ut0q4GV1keZZoOZpU/Gu9LTXd8lPxg7l9fxnyv86HWgmkW2qp8xbac HE6JFtCWR8xNWqcAKiBvHlwFDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNQ7lx4t bNvBuqo7q1FFsCVxKHoyMB8GA1UdIwQYMBaAFHOQukZeAiLuMUB+VQnm3p4/qRDb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTZFNi8zQjgzQUZFMEYw RDAxMUVEODA1MDc2NkFDNEY5QUUwMi9jNUM2Umw0Q0l1NHhRSDVWQ2ViZW5qLXBF TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M1QzZSbDRDSXU0eFFINVZDZWJlbmotcEVOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTZFNi8zQjgzQUZFMEYwRDAxMUVEODA1MDc2NkFDNEY5QUUwMi9jNUM2Umw0Q0l1 NHhRSDVWQ2ViZW5qLXBFTnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKVK6fuOpGd4X0VLLBGcOKNNCO9ce7BPCvVPz5ch7yEDha7vLTHeMQ ItX/0qRZmsfcOr6d880SxCo8mOBiidAjQBgWoO2hske4S7Xap/RP4BnHN7R27lkM U2Qu8O3jwqtaDq5yiHFGqnobatVvWb8FjJdvYdfCsRO5Q0H+/aCI9iymH6LasVIO u8RKFm3XWjx965klcYUrAc6njtJyW9E1g28snp6rRKyKqG8xZUlu72kPcuZ3dtJ3 hZ5kvr1PZM8SGkSI0TAjsabxjQbr0EhcLEX6xGXFt4sKBPh3tmfW/gaf5PDO/4Bm WkIqyEsfVbD8Vdcy1r2Gb6dIC7zHZh5f -----END CERTIFICATE-----Generated at Sun Jun 15 08:50:26 2025 by rpki-client