$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft File: pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft (raw, json) Hash identifier: GgvEaM4T6M55eMBjR/gZZPU6se/Lwf8uhEfE09rNOVg= Subject key identifier: C0:70:FF:38:10:C3:6C:D8:D7:71:D2:5E:12:B0:7E:24:1A:60:47:E7 Authority key identifier: A5:9D:83:6E:1C:31:62:3C:C5:86:44:8A:A7:52:B7:46:85:3B:84:1D Certificate issuer: /CN=A91D1E4C/serialNumber=A59D836E1C31623CC586448AA752B746853B841D Certificate serial: 081D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft Manifest number: 0B08 Signing time: Wed 18 Jun 2025 20:39:00 +0000 Manifest this update: Wed 18 Jun 2025 20:38:59 +0000 Manifest next update: Wed 25 Jun 2025 20:38:59 +0000 Files and hashes: 1: pZ2DbhwxYjzFhkSKp1K3RoU7hB0.crl (hash: iTdNmOoacqApiWzNIJ1Rf7Y61ZmFuwN1ksvIll7rZTQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.crl rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 20:38:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2077 (0x81d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1E4C, serialNumber=A59D836E1C31623CC586448AA752B746853B841D Validity Not Before: Jun 18 20:38:59 2025 GMT Not After : Jun 25 20:38:59 2025 GMT Subject: CN=685323e4-bb1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0a:3b:87:cb:8d:c4:14:6c:75:29:ec:42:37: e3:58:f8:98:6f:f7:fe:22:09:f3:a2:f2:74:e1:a5: 4b:5b:d2:48:57:40:be:21:ab:85:1c:d0:91:0b:23: 6d:b9:e2:97:e3:fa:6f:a7:ac:b8:65:5e:00:ab:3f: 37:c7:09:a0:0f:7c:2f:82:8f:15:59:79:07:b5:8f: 89:17:b0:a9:fc:ee:14:6c:60:48:d6:e3:d6:67:9f: 3b:f4:f7:10:47:2d:6a:62:dd:79:f6:e2:d3:7a:14: 08:49:60:4b:35:20:7d:3d:34:f9:c9:cf:0c:07:1b: 2f:7b:61:91:12:0e:cb:e1:b3:9f:e1:fe:35:1a:74: 0b:1c:6b:8c:be:1c:78:99:a3:2f:4d:81:31:04:c5: 68:13:2d:26:8d:84:14:08:43:74:49:2d:4b:55:6c: 8a:ef:6d:ad:b5:ff:45:20:11:57:dc:28:67:7f:3e: c2:19:34:bd:9c:08:26:15:d3:07:f1:72:a3:93:e0: e5:3a:a2:85:40:31:f6:cc:c1:0a:a6:f1:15:30:c2: 1c:59:90:16:f5:fa:65:57:00:ee:2f:df:90:48:cf: 42:2a:99:5b:64:d7:0d:69:66:db:bb:a4:22:25:2f: d7:62:d1:4e:1c:3c:a7:ed:c4:04:25:f8:21:ab:eb: 6a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:70:FF:38:10:C3:6C:D8:D7:71:D2:5E:12:B0:7E:24:1A:60:47:E7 X509v3 Authority Key Identifier: keyid:A5:9D:83:6E:1C:31:62:3C:C5:86:44:8A:A7:52:B7:46:85:3B:84:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:58:ad:41:32:9d:7e:20:d9:ce:33:0e:62:9b:de:8b:21:e2: 1c:67:b5:ef:6c:90:a1:f8:8f:a1:e0:eb:8f:bd:21:51:42:c4: 36:ff:08:ac:8c:bc:d8:12:32:85:dc:99:70:cf:6b:63:f6:66: 04:0c:6f:40:c4:2e:b8:49:db:a7:fa:be:6a:04:7b:6c:17:52: 7c:c8:1f:f5:15:ae:5f:41:ef:47:6b:26:80:00:d5:2d:e3:04: ad:82:69:02:92:be:fa:08:bc:2b:fc:bb:ae:60:18:8f:ea:c7: b0:95:1d:fc:97:1c:02:6e:9b:a6:b2:e6:55:7e:6a:98:d8:e9: 6d:71:88:7d:1c:a3:02:61:0d:81:8d:ec:bd:01:42:21:2f:d7: 35:4f:30:77:c7:c6:20:9f:8d:2b:ac:e8:7d:e1:15:1b:a7:d7: c0:fd:02:cd:62:e4:f7:c5:8b:92:d0:fc:e5:d3:a1:26:05:f7: 09:72:b2:13:90:0c:d9:46:2c:d6:a5:65:3d:d5:0d:3a:d1:62: 5b:8a:4e:6e:18:e5:72:39:61:f6:6b:4e:86:1d:73:d3:81:2e: b8:6d:80:05:35:41:5e:e9:07:52:84:e1:29:63:48:41:47:07: c6:ad:ef:63:06:30:8b:99:e3:6f:33:23:31:bf:27:73:75:fb: 3e:94:67:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCB0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFFNEMxMTAvBgNVBAUTKEE1OUQ4MzZFMUMzMTYyM0NDNTg2NDQ4QUE3NTJCNzQ2 ODUzQjg0MUQwHhcNMjUwNjE4MjAzODU5WhcNMjUwNjI1MjAzODU5WjAYMRYwFAYD VQQDEw02ODUzMjNlNC1iYjFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtwo7h8uNxBRsdSnsQjfjWPiYb/f+IgnzovJ04aVLW9JIV0C+IauFHNCRCyNt ueKX4/pvp6y4ZV4Aqz83xwmgD3wvgo8VWXkHtY+JF7Cp/O4UbGBI1uPWZ5879PcQ Ry1qYt159uLTehQISWBLNSB9PTT5yc8MBxsve2GREg7L4bOf4f41GnQLHGuMvhx4 maMvTYExBMVoEy0mjYQUCEN0SS1LVWyK722ttf9FIBFX3Chnfz7CGTS9nAgmFdMH 8XKjk+DlOqKFQDH2zMEKpvEVMMIcWZAW9fplVwDuL9+QSM9CKplbZNcNaWbbu6Qi JS/XYtFOHDyn7cQEJfghq+tqTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMBw/zgQ w2zY13HSXhKwfiQaYEfnMB8GA1UdIwQYMBaAFKWdg24cMWI8xYZEiqdSt0aFO4Qd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUU0Qy83REFEQTU2Q0Q5 NEQxMUVBQTYwNEFDNTNDNEY5QUUwMi9wWjJEYmh3eFlqekZoa1NLcDFLM1JvVTdo QjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BaMkRiaHd4WWp6RmhrU0twMUszUm9VN2hCMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUU0Qy83REFEQTU2Q0Q5NEQxMUVBQTYwNEFDNTNDNEY5QUUwMi9wWjJEYmh3eFlq ekZoa1NLcDFLM1JvVTdoQjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFWK1BMp1+INnOMw5im96LIeIcZ7XvbJCh+I+h4OuPvSFRQsQ2/wis jLzYEjKF3Jlwz2tj9mYEDG9AxC64Sdun+r5qBHtsF1J8yB/1Fa5fQe9HayaAANUt 4wStgmkCkr76CLwr/LuuYBiP6sewlR38lxwCbpumsuZVfmqY2OltcYh9HKMCYQ2B jey9AUIhL9c1TzB3x8Ygn40rrOh94RUbp9fA/QLNYuT3xYuS0Pzl06EmBfcJcrIT kAzZRizWpWU91Q060WJbik5uGOVyOWH2a06GHXPTgS64bYAFNUFe6QdShOEpY0hB RwfGre9jBjCLmeNvMyMxvydzdfs+lGev -----END CERTIFICATE-----Generated at Thu Jun 19 01:25:11 2025 by rpki-client