$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5DB6/13F96B82186211E8B1E31729C4F9AE02/-BaXnSqJmynqWV8rVO6jmQokNvk.mft File: -BaXnSqJmynqWV8rVO6jmQokNvk.mft (raw, json) Hash identifier: WnvD2WMr/Jn1El/A7Kp8Mzzj3e+hMFwu+A4v1tp2Tds= Subject key identifier: 96:E3:A1:7F:DF:73:1B:33:DF:34:43:27:3F:0C:37:92:C7:8C:73:23 Authority key identifier: F8:16:97:9D:2A:89:9B:29:EA:59:5F:2B:54:EE:A3:99:0A:24:36:F9 Certificate issuer: /CN=A91D5DB6/serialNumber=F816979D2A899B29EA595F2B54EEA3990A2436F9 Certificate serial: 15FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-BaXnSqJmynqWV8rVO6jmQokNvk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5DB6/13F96B82186211E8B1E31729C4F9AE02/-BaXnSqJmynqWV8rVO6jmQokNvk.mft Manifest number: 15FB Signing time: Sat 14 Jun 2025 16:42:10 +0000 Manifest this update: Sat 14 Jun 2025 16:42:09 +0000 Manifest next update: Sat 21 Jun 2025 16:42:09 +0000 Files and hashes: 1: -BaXnSqJmynqWV8rVO6jmQokNvk.crl (hash: NjQ5vfOcRmW2mAGsVk2GH0+YqzCUnlS66dVZpqZL1zA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5DB6/13F96B82186211E8B1E31729C4F9AE02/-BaXnSqJmynqWV8rVO6jmQokNvk.crl rsync://rpki.apnic.net/member_repository/A91D5DB6/13F96B82186211E8B1E31729C4F9AE02/-BaXnSqJmynqWV8rVO6jmQokNvk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-BaXnSqJmynqWV8rVO6jmQokNvk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 16:42:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5627 (0x15fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5DB6, serialNumber=F816979D2A899B29EA595F2B54EEA3990A2436F9 Validity Not Before: Jun 14 16:42:09 2025 GMT Not After : Jun 21 16:42:09 2025 GMT Subject: CN=684da661-e1c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:7e:9d:40:35:e3:a5:74:3f:4b:d7:db:4d:64: c7:d7:fb:00:8d:70:e1:de:56:0c:f5:83:94:9a:44: 80:5a:61:03:56:83:b6:c2:e3:29:0c:b5:06:97:5f: 49:78:72:a8:34:d5:31:3f:0d:b0:7c:79:31:e4:39: df:87:81:d2:9b:f6:80:b2:c2:8f:d0:2a:44:05:78: e4:07:81:be:88:6f:ea:6d:ae:82:6c:2e:68:a7:50: 6e:55:d6:2c:d4:91:df:0b:51:a0:34:f7:8c:cd:d6: 88:2a:bc:3a:a3:15:43:f3:ad:05:bc:bc:d7:73:0c: b2:6d:35:66:3f:84:cc:ef:bf:7f:4d:8d:72:62:98: 0c:52:7c:2f:eb:78:a1:d6:df:17:ea:ed:21:20:cb: 49:be:c9:39:9d:f2:a3:b1:b3:20:a3:2d:5e:8f:78: 15:33:d4:41:48:c6:96:31:17:67:5d:c0:f9:e3:a1: 30:2f:5b:33:62:f9:31:f7:34:29:41:fa:8c:b9:07: ab:57:8d:eb:ce:f6:ab:d3:eb:49:ff:46:1b:2b:8e: 6f:e2:7e:e4:cc:fb:66:1d:53:74:c5:81:2d:55:83: d4:98:aa:7e:d2:3e:ce:6f:db:97:97:10:d5:66:2d: 98:db:6b:45:57:4f:9c:34:c8:92:87:9f:47:22:63: 1e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:E3:A1:7F:DF:73:1B:33:DF:34:43:27:3F:0C:37:92:C7:8C:73:23 X509v3 Authority Key Identifier: keyid:F8:16:97:9D:2A:89:9B:29:EA:59:5F:2B:54:EE:A3:99:0A:24:36:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5DB6/13F96B82186211E8B1E31729C4F9AE02/-BaXnSqJmynqWV8rVO6jmQokNvk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-BaXnSqJmynqWV8rVO6jmQokNvk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5DB6/13F96B82186211E8B1E31729C4F9AE02/-BaXnSqJmynqWV8rVO6jmQokNvk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:a8:77:5f:1d:8c:fd:83:02:44:50:3a:49:de:b6:22:66:62: d0:b8:58:60:b4:78:9c:4c:0a:1c:84:15:59:7c:e0:df:9c:9b: 2a:96:6b:3e:12:e2:31:69:92:8a:1e:d6:00:3a:65:c3:c1:69: e8:f4:03:9c:cc:6e:0e:7e:28:5e:ce:84:a9:d9:e1:ab:1d:a6: d7:63:4f:44:83:eb:04:01:58:fe:df:10:37:9e:4a:fd:e0:cc: 23:23:fc:94:71:83:e0:77:94:9a:e9:d2:0f:c7:a3:a2:60:2b: df:ae:ec:63:76:0f:68:1d:73:39:a1:25:4a:75:f7:23:ca:74: 4b:a0:e0:98:21:18:aa:10:d8:08:c7:24:9f:3d:e6:e7:06:2e: 19:c4:31:2a:f2:13:85:b6:92:7b:c1:53:ec:7d:a8:28:f3:fe: dc:49:61:a4:40:71:cc:db:47:53:ef:c6:2e:93:b7:a5:64:07: db:37:b3:6c:17:3d:ef:60:c7:2e:91:69:0f:25:6a:cf:55:bd: 8d:8e:67:5f:ea:af:32:80:65:97:37:5c:13:ea:89:2f:ce:07: c5:40:fd:fd:fb:cb:6a:82:8b:5a:a3:80:98:9d:b2:0e:6b:a5: 3e:8d:49:85:49:38:46:de:69:f8:9c:96:88:a5:13:2f:2a:da: 78:64:b7:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFfswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDVEQjYxMTAvBgNVBAUTKEY4MTY5NzlEMkE4OTlCMjlFQTU5NUYyQjU0RUVBMzk5 MEEyNDM2RjkwHhcNMjUwNjE0MTY0MjA5WhcNMjUwNjIxMTY0MjA5WjAYMRYwFAYD VQQDEw02ODRkYTY2MS1lMWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0H6dQDXjpXQ/S9fbTWTH1/sAjXDh3lYM9YOUmkSAWmEDVoO2wuMpDLUGl19J eHKoNNUxPw2wfHkx5Dnfh4HSm/aAssKP0CpEBXjkB4G+iG/qba6CbC5op1BuVdYs 1JHfC1GgNPeMzdaIKrw6oxVD860FvLzXcwyybTVmP4TM779/TY1yYpgMUnwv63ih 1t8X6u0hIMtJvsk5nfKjsbMgoy1ej3gVM9RBSMaWMRdnXcD546EwL1szYvkx9zQp QfqMuQerV43rzvar0+tJ/0YbK45v4n7kzPtmHVN0xYEtVYPUmKp+0j7Ob9uXlxDV Zi2Y22tFV0+cNMiSh59HImMe7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJbjoX/f cxsz3zRDJz8MN5LHjHMjMB8GA1UdIwQYMBaAFPgWl50qiZsp6llfK1Tuo5kKJDb5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENURCNi8xM0Y5NkI4MjE4 NjIxMUU4QjFFMzE3MjlDNEY5QUUwMi8tQmFYblNxSm15bnFXVjhyVk82am1Rb2tO dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1CYVhuU3FKbXlucVdWOHJWTzZqbVFva052ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NURCNi8xM0Y5NkI4MjE4NjIxMUU4QjFFMzE3MjlDNEY5QUUwMi8tQmFYblNxSm15 bnFXVjhyVk82am1Rb2tOdmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2qHdfHYz9gwJEUDpJ3rYiZmLQuFhgtHicTAochBVZfODfnJsqlms+ EuIxaZKKHtYAOmXDwWno9AOczG4OfihezoSp2eGrHabXY09Eg+sEAVj+3xA3nkr9 4MwjI/yUcYPgd5Sa6dIPx6OiYCvfruxjdg9oHXM5oSVKdfcjynRLoOCYIRiqENgI xySfPebnBi4ZxDEq8hOFtpJ7wVPsfago8/7cSWGkQHHM20dT78Yuk7elZAfbN7Ns Fz3vYMcukWkPJWrPVb2Njmdf6q8ygGWXN1wT6okvzgfFQP39+8tqgotao4CYnbIO a6U+jUmFSThG3mn4nJaIpRMvKtp4ZLfO -----END CERTIFICATE-----Generated at Sun Jun 15 09:42:25 2025 by rpki-client