$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.mft File: 08Yi55Dx3vFpKLvlVBgXJ8-MiPg.mft (raw, json) Hash identifier: em3aDerA1Q6kK11kq66T+jyGqHw/4LTQcFc6tfWAKzk= Subject key identifier: 98:44:32:B9:30:F8:FA:3F:3D:CF:85:23:7A:64:25:9E:3D:4A:8E:C3 Authority key identifier: D3:C6:22:E7:90:F1:DE:F1:69:28:BB:E5:54:18:17:27:CF:8C:88:F8 Certificate issuer: /CN=A91D1234/serialNumber=D3C622E790F1DEF16928BBE554181727CF8C88F8 Certificate serial: 0320 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.mft Manifest number: 031C Signing time: Sun 15 Jun 2025 00:52:25 +0000 Manifest this update: Sun 15 Jun 2025 00:52:25 +0000 Manifest next update: Sun 22 Jun 2025 00:52:25 +0000 Files and hashes: 1: 08Yi55Dx3vFpKLvlVBgXJ8-MiPg.crl (hash: tle5v11AgsC42yj7Jpcdjb4z+UsLRnp+cUmTP1vw4lI=) 2: 84A0C6B4D02811ECB2472344C4F9AE02.roa (hash: 2T9vsc4C1WKjq9QaM+1XQHhjEU7ftzmE6rg4euSNxbQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.crl rsync://rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 00:52:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 800 (0x320) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1234, serialNumber=D3C622E790F1DEF16928BBE554181727CF8C88F8 Validity Not Before: Jun 15 00:52:25 2025 GMT Not After : Jun 22 00:52:25 2025 GMT Subject: CN=684e1949-2409 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:f5:4b:1f:12:f6:fa:08:5b:ff:4c:f0:95:16: 02:1e:59:3b:43:42:6b:b8:68:9d:24:bf:7f:f7:b1: f7:0c:0d:94:d9:06:2a:1b:47:02:dd:52:39:06:01: ef:94:3d:6b:b1:90:fa:db:ab:21:0f:cd:19:c0:64: 8b:f3:d1:7b:82:71:9c:af:3c:db:36:09:d3:4a:a9: d4:80:8e:6b:f9:58:1d:94:85:9c:9e:5d:17:37:28: c8:a2:4f:b3:8b:5c:15:20:bc:1a:6b:ca:79:2c:67: da:37:eb:c2:8a:11:eb:5f:5b:9d:4d:9c:f1:ec:60: c2:e6:93:c7:e3:88:1a:90:52:01:76:59:26:f2:8c: 75:39:97:2d:3e:da:ac:c7:4b:40:1e:4b:5c:c3:05: 1a:1c:52:ee:e8:a8:d2:cb:4f:f2:2c:05:0b:84:49: 48:12:61:02:b8:de:23:75:66:f4:83:7c:68:85:30: 19:8e:a3:26:21:58:0e:40:9b:ef:c3:71:d4:62:42: 5b:9a:4b:92:c2:6a:9f:2c:25:f9:50:da:e7:9a:5b: 60:85:9f:8a:08:7d:20:ba:f0:8d:89:7a:ec:52:57: f4:20:bd:4b:6e:a2:d1:42:43:1e:c3:44:b2:72:16: 9d:43:7f:24:13:c3:ed:8e:b6:38:ed:cc:eb:01:63: 00:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:44:32:B9:30:F8:FA:3F:3D:CF:85:23:7A:64:25:9E:3D:4A:8E:C3 X509v3 Authority Key Identifier: keyid:D3:C6:22:E7:90:F1:DE:F1:69:28:BB:E5:54:18:17:27:CF:8C:88:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:e5:bc:0a:65:26:0c:cd:ff:2d:4b:b8:5a:3a:6d:18:6e:15: e5:dc:25:e0:1c:94:e9:ae:32:10:f4:a7:7c:81:b1:b6:e9:37: b2:82:e9:c9:05:bd:fe:26:25:0d:2e:ac:3f:e3:21:e2:f4:06: 90:ac:3d:52:6c:2f:a5:e3:b2:9a:ef:f3:a0:ff:5f:42:95:72: 94:ef:3c:fa:44:65:8e:9b:62:3e:0c:c2:85:31:02:e8:39:01: 6d:02:16:03:c2:46:ac:3c:f5:06:f4:d8:eb:92:fb:ee:c9:a8: d2:b6:7e:fd:45:81:ea:47:e0:3c:19:6f:73:8c:0d:09:1f:b9: a1:d1:8c:84:3b:0e:59:64:2e:53:8e:a9:e2:32:41:e6:8e:61: 74:73:2f:09:41:04:f0:ff:a8:ae:74:93:7a:8a:6e:b0:7d:99: 00:21:a7:c7:9f:01:59:dd:22:00:cf:45:86:cf:18:96:80:be: 23:6a:dc:d4:17:8d:88:58:c1:f6:da:b1:ab:d5:d6:ca:ab:c0: a9:91:f2:5e:36:17:8b:b4:5e:3c:7c:46:0d:48:d7:ea:67:39: 42:3c:ec:e1:ab:8e:c6:9f:2a:5e:e0:66:b5:35:bd:df:25:ec: 13:1e:ee:ca:5c:d7:d8:bd:5e:55:65:fc:41:21:75:e5:c7:0d: 6c:f1:a1:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAyAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDEyMzQxMTAvBgNVBAUTKEQzQzYyMkU3OTBGMURFRjE2OTI4QkJFNTU0MTgxNzI3 Q0Y4Qzg4RjgwHhcNMjUwNjE1MDA1MjI1WhcNMjUwNjIyMDA1MjI1WjAYMRYwFAYD VQQDEw02ODRlMTk0OS0yNDA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9vVLHxL2+ghb/0zwlRYCHlk7Q0JruGidJL9/97H3DA2U2QYqG0cC3VI5BgHv lD1rsZD626shD80ZwGSL89F7gnGcrzzbNgnTSqnUgI5r+VgdlIWcnl0XNyjIok+z i1wVILwaa8p5LGfaN+vCihHrX1udTZzx7GDC5pPH44gakFIBdlkm8ox1OZctPtqs x0tAHktcwwUaHFLu6KjSy0/yLAULhElIEmECuN4jdWb0g3xohTAZjqMmIVgOQJvv w3HUYkJbmkuSwmqfLCX5UNrnmltghZ+KCH0guvCNiXrsUlf0IL1LbqLRQkMew0Sy chadQ38kE8PtjrY47czrAWMANQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJhEMrkw +Po/Pc+FI3pkJZ49So7DMB8GA1UdIwQYMBaAFNPGIueQ8d7xaSi75VQYFyfPjIj4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTIzNC9CMEZGMzBGRUQw MjUxMUVDQTAxMjU1M0ZDNEY5QUUwMi8wOFlpNTVEeDN2RnBLTHZsVkJnWEo4LU1p UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA4WWk1NUR4M3ZGcEtMdmxWQmdYSjgtTWlQZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTIzNC9CMEZGMzBGRUQwMjUxMUVDQTAxMjU1M0ZDNEY5QUUwMi8wOFlpNTVEeDN2 RnBLTHZsVkJnWEo4LU1pUGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+5bwKZSYMzf8tS7haOm0YbhXl3CXgHJTprjIQ9Kd8gbG26TeygunJ Bb3+JiUNLqw/4yHi9AaQrD1SbC+l47Ka7/Og/19ClXKU7zz6RGWOm2I+DMKFMQLo OQFtAhYDwkasPPUG9NjrkvvuyajStn79RYHqR+A8GW9zjA0JH7mh0YyEOw5ZZC5T jqniMkHmjmF0cy8JQQTw/6iudJN6im6wfZkAIafHnwFZ3SIAz0WGzxiWgL4jatzU F42IWMH22rGr1dbKq8CpkfJeNheLtF48fEYNSNfqZzlCPOzhq47Gnype4Ga1Nb3f JewTHu7KXNfYvV5VZfxBIXXlxw1s8aGP -----END CERTIFICATE-----Generated at Sun Jun 15 05:45:47 2025 by rpki-client