$ rpki-client -vvf rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.mft File: 1N8l4OzS44CPaHDuVvcPJVgYkz4.mft (raw, json) Hash identifier: sCZuP0ZX42btzrBbkNeAIcoZJkolq0tWqNgD0I9xvyQ= Subject key identifier: AE:A3:22:52:77:F7:BE:61:E7:22:73:84:F1:44:3A:2D:5E:EF:61:1C Authority key identifier: D4:DF:25:E0:EC:D2:E3:80:8F:68:70:EE:56:F7:0F:25:58:18:93:3E Certificate issuer: /CN=A91D260A/serialNumber=D4DF25E0ECD2E3808F6870EE56F70F255818933E Certificate serial: AD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1N8l4OzS44CPaHDuVvcPJVgYkz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.mft Manifest number: AD Signing time: Thu 19 Jun 2025 05:24:45 +0000 Manifest this update: Thu 19 Jun 2025 05:24:44 +0000 Manifest next update: Thu 26 Jun 2025 05:24:44 +0000 Files and hashes: 1: 1N8l4OzS44CPaHDuVvcPJVgYkz4.crl (hash: eQ6MU6ZyWorE6MS459rfFEHOIrgLWoaSHs/sHb4YYiU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.crl rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1N8l4OzS44CPaHDuVvcPJVgYkz4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 05:24:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 173 (0xad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D260A, serialNumber=D4DF25E0ECD2E3808F6870EE56F70F255818933E Validity Not Before: Jun 19 05:24:44 2025 GMT Not After : Jun 26 05:24:44 2025 GMT Subject: CN=68539f1c-dacb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:f2:1d:9b:1b:b9:a9:18:78:aa:3a:ef:95:d1: 90:5d:91:2a:fb:20:5a:29:ba:60:73:ed:70:f9:c6: dc:1d:8a:2e:a3:cb:79:88:62:40:d9:87:b2:65:cb: be:9c:81:d9:56:1e:19:24:67:68:b6:91:af:cc:87: 61:d1:66:ad:cc:c3:52:84:88:95:08:30:25:61:06: dd:1b:b6:43:54:e7:9d:05:1b:78:49:ba:26:8b:b8: c5:34:25:73:26:96:cb:90:3c:ec:74:72:59:f4:44: 94:d6:f2:56:cb:d2:3e:e6:30:96:80:ef:6e:f4:df: bf:06:af:ad:40:92:53:22:7c:1c:59:88:0d:05:4c: 4e:99:9b:c9:95:7c:8e:4f:20:76:15:3d:76:6e:86: 48:b6:86:3a:3e:4e:66:23:30:d1:29:ef:79:ac:5f: 27:73:fa:7a:a4:04:96:4f:2f:30:46:e8:3f:6f:45: a5:30:b1:fb:87:33:88:12:19:95:93:7d:75:1a:e1: 2f:53:36:48:2b:17:9e:64:80:f1:9d:47:7c:89:a9: bc:34:5b:c2:84:14:0a:e5:f6:d0:6b:42:bb:b1:ae: 0a:15:5b:1e:b3:c7:e0:5f:4c:f8:7b:53:1a:0a:05: 8b:e5:3f:8b:f2:53:87:6c:fe:5c:81:09:92:75:2b: ff:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:A3:22:52:77:F7:BE:61:E7:22:73:84:F1:44:3A:2D:5E:EF:61:1C X509v3 Authority Key Identifier: keyid:D4:DF:25:E0:EC:D2:E3:80:8F:68:70:EE:56:F7:0F:25:58:18:93:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1N8l4OzS44CPaHDuVvcPJVgYkz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:a5:34:02:f7:11:9b:40:68:6b:88:55:2a:29:21:86:b4:f3: e2:93:18:82:cf:33:7e:83:f4:87:cf:d0:5c:be:da:d6:69:17: 39:1a:ee:b9:b3:0f:e5:2f:8d:ee:32:d7:e2:35:21:0d:45:af: c4:00:30:f5:9f:3f:0f:4a:87:79:15:9a:20:92:a1:c4:12:39: 5e:86:06:cf:7c:19:a4:0f:fc:75:f9:bb:78:d9:6d:05:39:58: 0a:c9:0f:de:45:e2:13:c7:85:69:5b:1d:98:1f:3d:2c:24:63: d2:08:5e:47:92:b8:d6:f5:58:8d:e6:a6:75:d2:65:53:6a:ed: 04:6a:29:e0:51:50:74:fb:aa:07:a5:1a:96:4d:47:27:18:f2: 86:01:5d:af:28:2d:4d:2f:8f:7e:74:ee:3d:4d:ae:f5:7e:0a: f7:f6:e8:6c:d5:5f:f9:63:a5:dc:29:cb:34:25:47:ba:d5:c2: 27:fe:31:e1:c0:ed:6d:ac:ae:14:29:1a:2e:77:d4:5f:39:80: 70:9a:83:e3:c8:d4:28:92:cf:90:a9:d2:d9:cf:b6:8d:94:34: 6c:a8:a6:90:c3:b7:e6:a6:0a:0e:86:4c:74:7b:fe:7c:d2:aa: df:c7:3a:ab:e1:4b:a8:7a:e5:08:cb:57:f1:29:bb:06:ff:3a: c9:65:45:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI2MEExMTAvBgNVBAUTKEQ0REYyNUUwRUNEMkUzODA4RjY4NzBFRTU2RjcwRjI1 NTgxODkzM0UwHhcNMjUwNjE5MDUyNDQ0WhcNMjUwNjI2MDUyNDQ0WjAYMRYwFAYD VQQDEw02ODUzOWYxYy1kYWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3fIdmxu5qRh4qjrvldGQXZEq+yBaKbpgc+1w+cbcHYouo8t5iGJA2YeyZcu+ nIHZVh4ZJGdotpGvzIdh0WatzMNShIiVCDAlYQbdG7ZDVOedBRt4Sbomi7jFNCVz JpbLkDzsdHJZ9ESU1vJWy9I+5jCWgO9u9N+/Bq+tQJJTInwcWYgNBUxOmZvJlXyO TyB2FT12boZItoY6Pk5mIzDRKe95rF8nc/p6pASWTy8wRug/b0WlMLH7hzOIEhmV k311GuEvUzZIKxeeZIDxnUd8iam8NFvChBQK5fbQa0K7sa4KFVses8fgX0z4e1Ma CgWL5T+L8lOHbP5cgQmSdSv/rwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK6jIlJ3 975h5yJzhPFEOi1e72EcMB8GA1UdIwQYMBaAFNTfJeDs0uOAj2hw7lb3DyVYGJM+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjYwQS9CNkRDRjFEQzQ0 OTUxMUVGQTQ1OTBDM0RDNEY5QUUwMi8xTjhsNE96UzQ0Q1BhSER1VnZjUEpWZ1lr ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFOOGw0T3pTNDRDUGFIRHVWdmNQSlZnWWt6NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjYwQS9CNkRDRjFEQzQ0OTUxMUVGQTQ1OTBDM0RDNEY5QUUwMi8xTjhsNE96UzQ0 Q1BhSER1VnZjUEpWZ1lrejQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKpTQC9xGbQGhriFUqKSGGtPPikxiCzzN+g/SHz9BcvtrWaRc5Gu65 sw/lL43uMtfiNSENRa/EADD1nz8PSod5FZogkqHEEjlehgbPfBmkD/x1+bt42W0F OVgKyQ/eReITx4VpWx2YHz0sJGPSCF5HkrjW9ViN5qZ10mVTau0EaingUVB0+6oH pRqWTUcnGPKGAV2vKC1NL49+dO49Ta71fgr39uhs1V/5Y6XcKcs0JUe61cIn/jHh wO1trK4UKRoud9RfOYBwmoPjyNQoks+QqdLZz7aNlDRsqKaQw7fmpgoOhkx0e/58 0qrfxzqr4UuoeuUIy1fxKbsG/zrJZUUn -----END CERTIFICATE-----Generated at Thu Jun 19 14:03:31 2025 by rpki-client