$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft File: pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft (raw, json) Hash identifier: hEijxZv+oiwxgDzYzXHk/2XcaabYD/wSj/yRhiBrWm8= Subject key identifier: 67:B9:9F:69:76:D6:62:0A:00:7F:7A:90:F2:F3:95:D7:8A:71:6B:6A Authority key identifier: A5:6E:04:33:AE:B8:B0:FC:C5:9E:FE:91:F0:EA:F5:06:1B:70:D1:18 Certificate issuer: /CN=A91D6552/serialNumber=A56E0433AEB8B0FCC59EFE91F0EAF5061B70D118 Certificate serial: 348A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft Manifest number: 348A Signing time: Sat 14 Jun 2025 14:53:43 +0000 Manifest this update: Sat 14 Jun 2025 14:53:43 +0000 Manifest next update: Sat 21 Jun 2025 14:53:43 +0000 Files and hashes: 1: pW4EM664sPzFnv6R8Or1Bhtw0Rg.crl (hash: cnryyDz0niIFSDVUfi4ezGBJUxdzGhK1yutSG4mX/7o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.crl rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 14:53:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13450 (0x348a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6552, serialNumber=A56E0433AEB8B0FCC59EFE91F0EAF5061B70D118 Validity Not Before: Jun 14 14:53:43 2025 GMT Not After : Jun 21 14:53:43 2025 GMT Subject: CN=684d8cf7-35ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4d:c9:7c:13:e2:e3:33:28:3b:54:d4:90:2e: 86:7a:02:fb:32:ee:03:5d:a0:27:36:6f:a6:84:0e: 42:0e:78:e5:fb:0f:94:30:e6:48:1d:48:90:4b:fc: af:b6:e5:54:2b:67:35:40:d2:62:66:8f:a7:91:6c: 0c:18:0a:4a:66:ca:ab:ee:69:57:24:77:ba:b1:cf: be:65:29:bc:f3:a9:e1:7a:ea:cc:1e:68:7b:fd:6b: b9:ab:df:b3:31:38:77:21:52:81:a5:35:c7:ee:25: 67:14:fe:63:6e:c3:e5:7f:0c:a5:b2:8b:f4:4a:0a: 00:1d:fc:21:1a:14:30:e3:95:08:3b:19:a7:88:af: 67:e4:27:2a:9c:67:db:e2:4f:99:8a:f6:0a:74:30: 28:c9:20:67:fd:2f:77:62:2a:f8:99:c5:33:85:1f: 6f:fd:b1:fc:25:3e:61:7d:11:67:80:f6:e5:19:3e: 56:ee:2b:4f:99:f2:a5:07:66:f2:ef:8e:69:a3:51: 20:96:03:8b:ea:74:fa:c3:66:43:2b:15:19:ba:c9: b5:99:01:ff:cb:fe:17:64:c5:a4:60:72:b6:03:4b: 24:d7:77:32:50:de:33:5e:17:56:ac:2f:46:4f:cc: 2d:8b:3c:ba:ff:90:f9:e8:31:0b:84:7e:a9:20:89: 98:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:B9:9F:69:76:D6:62:0A:00:7F:7A:90:F2:F3:95:D7:8A:71:6B:6A X509v3 Authority Key Identifier: keyid:A5:6E:04:33:AE:B8:B0:FC:C5:9E:FE:91:F0:EA:F5:06:1B:70:D1:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:58:1a:9e:f9:e7:51:3c:33:73:03:c9:cc:2c:84:a8:27:32: f4:22:f6:3e:bb:68:ae:6a:ad:85:2b:32:ec:cb:b9:5e:d1:5c: 3c:3f:c2:9e:79:0d:c7:77:07:2c:fb:d1:11:e9:4d:8a:b2:1c: 8c:30:23:d1:39:13:f4:89:8e:a2:4a:a6:1d:fa:f0:1f:49:41: 6a:53:66:65:d2:e0:1c:03:9e:29:dd:77:12:9c:b5:d0:a3:17: 1c:cd:c4:93:33:cd:cd:80:b5:70:22:d4:b2:81:90:3a:3e:14: 62:4b:b1:61:9b:18:f4:45:a1:39:4c:3a:fe:4e:4d:dc:28:5c: 81:d7:bd:89:45:10:b5:f5:37:6b:65:8d:fd:7a:1b:e8:ff:f4: 0e:59:93:19:1d:2c:63:0c:0b:9f:25:c4:ac:c1:be:90:4f:af: 28:b6:9b:82:9f:c2:d9:bf:3a:1f:b4:66:23:15:4f:2c:df:5e: 7c:cc:0c:5b:63:52:38:80:ec:4c:63:6d:00:7d:2b:60:2e:df: 08:b1:3f:d6:5a:2e:62:16:f9:c9:02:53:e4:b0:fe:16:07:34: 25:bb:63:40:c4:1d:ac:a9:0d:3e:73:fd:89:df:31:0d:46:57: 7f:c8:cb:61:3c:26:b7:03:7c:6e:7c:db:db:55:09:23:6c:d6: 84:e4:5c:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY1NTIxMTAvBgNVBAUTKEE1NkUwNDMzQUVCOEIwRkNDNTlFRkU5MUYwRUFGNTA2 MUI3MEQxMTgwHhcNMjUwNjE0MTQ1MzQzWhcNMjUwNjIxMTQ1MzQzWjAYMRYwFAYD VQQDEw02ODRkOGNmNy0zNWFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuk3JfBPi4zMoO1TUkC6GegL7Mu4DXaAnNm+mhA5CDnjl+w+UMOZIHUiQS/yv tuVUK2c1QNJiZo+nkWwMGApKZsqr7mlXJHe6sc++ZSm886nheurMHmh7/Wu5q9+z MTh3IVKBpTXH7iVnFP5jbsPlfwylsov0SgoAHfwhGhQw45UIOxmniK9n5CcqnGfb 4k+ZivYKdDAoySBn/S93Yir4mcUzhR9v/bH8JT5hfRFngPblGT5W7itPmfKlB2by 745po1EglgOL6nT6w2ZDKxUZusm1mQH/y/4XZMWkYHK2A0sk13cyUN4zXhdWrC9G T8wtizy6/5D56DELhH6pIImY9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGe5n2l2 1mIKAH96kPLzldeKcWtqMB8GA1UdIwQYMBaAFKVuBDOuuLD8xZ7+kfDq9QYbcNEY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjU1Mi84ODdENzUxMjFE OTkxMUUyQkE1RjI1ODYwOEIwMkNEMi9wVzRFTTY2NHNQekZudjZSOE9yMUJodHcw UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BXNEVNNjY0c1B6Rm52NlI4T3IxQmh0dzBSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjU1Mi84ODdENzUxMjFEOTkxMUUyQkE1RjI1ODYwOEIwMkNEMi9wVzRFTTY2NHNQ ekZudjZSOE9yMUJodHcwUmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGWBqe+edRPDNzA8nMLISoJzL0IvY+u2iuaq2FKzLsy7le0Vw8P8Ke eQ3Hdwcs+9ER6U2KshyMMCPRORP0iY6iSqYd+vAfSUFqU2Zl0uAcA54p3XcSnLXQ oxcczcSTM83NgLVwItSygZA6PhRiS7Fhmxj0RaE5TDr+Tk3cKFyB172JRRC19Tdr ZY39ehvo//QOWZMZHSxjDAufJcSswb6QT68otpuCn8LZvzoftGYjFU8s3158zAxb Y1I4gOxMY20AfStgLt8IsT/WWi5iFvnJAlPksP4WBzQlu2NAxB2sqQ0+c/2J3zEN Rld/yMthPCa3A3xufNvbVQkjbNaE5Fyf -----END CERTIFICATE-----Generated at Sun Jun 15 17:58:39 2025 by rpki-client