$ rpki-client -vvf rpki.apnic.net/member_repository/A91D837B/1D7B63BCB99C11EF9638F769C4F9AE02/rQGfA1v_PzsXMjzbuxSgfV3o7DM.mft File: rQGfA1v_PzsXMjzbuxSgfV3o7DM.mft (raw, json) Hash identifier: xvOuxg+xFiIO24lkhVdV+QS+DOD7HvBoJphVy2DrWdw= Subject key identifier: BF:76:DA:66:E6:7F:CD:32:B1:0F:05:49:3E:B0:8D:9E:87:DD:E1:00 Authority key identifier: AD:01:9F:03:5B:FF:3F:3B:17:32:3C:DB:BB:14:A0:7D:5D:E8:EC:33 Certificate issuer: /CN=A91D837B/serialNumber=AD019F035BFF3F3B17323CDBBB14A07D5DE8EC33 Certificate serial: 5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQGfA1v_PzsXMjzbuxSgfV3o7DM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D837B/1D7B63BCB99C11EF9638F769C4F9AE02/rQGfA1v_PzsXMjzbuxSgfV3o7DM.mft Manifest number: 5F Signing time: Sun 15 Jun 2025 06:13:08 +0000 Manifest this update: Sun 15 Jun 2025 06:13:07 +0000 Manifest next update: Sun 22 Jun 2025 06:13:06 +0000 Files and hashes: 1: rQGfA1v_PzsXMjzbuxSgfV3o7DM.crl (hash: 8ZRzykPGrvs7gOgZU2CCtu/QhVhGtNHvwCgtPmJM/iM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D837B/1D7B63BCB99C11EF9638F769C4F9AE02/rQGfA1v_PzsXMjzbuxSgfV3o7DM.crl rsync://rpki.apnic.net/member_repository/A91D837B/1D7B63BCB99C11EF9638F769C4F9AE02/rQGfA1v_PzsXMjzbuxSgfV3o7DM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQGfA1v_PzsXMjzbuxSgfV3o7DM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 06:13:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 95 (0x5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D837B, serialNumber=AD019F035BFF3F3B17323CDBBB14A07D5DE8EC33 Validity Not Before: Jun 15 06:13:07 2025 GMT Not After : Jun 22 06:13:06 2025 GMT Subject: CN=684e6473-c12b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:bd:fa:47:41:5a:b6:a8:fd:28:eb:10:c3:74: de:0e:04:fa:46:ab:e3:85:a1:2d:b5:08:a1:0d:c0: 54:68:3e:20:81:df:c4:82:8b:c0:40:61:26:70:02: a2:42:85:bc:59:99:4c:8a:ec:fc:d4:f4:04:7f:ce: 83:98:dd:a0:2f:26:4f:fe:c8:62:8e:9f:c8:e8:69: 57:5e:b9:2f:ba:26:3b:eb:3a:ff:ab:a3:09:f6:8d: 1c:be:73:c3:38:45:98:8c:74:0e:ef:5e:30:aa:b9: cc:e2:ea:97:2d:25:23:2e:03:6c:a3:36:cf:7b:ac: a9:ac:95:78:e7:b4:70:4c:0f:26:c8:38:de:8e:7e: fb:4d:0d:e9:9d:15:6e:bd:9a:c9:aa:a0:58:84:d5: 02:25:3d:27:77:d5:f7:61:52:6d:60:30:d3:df:8a: fe:67:2b:42:1c:92:de:fd:04:51:dd:fd:eb:2f:e3: 0a:be:f0:82:eb:f6:59:7a:80:28:59:25:eb:bc:e4: 58:31:01:d7:bb:23:99:6e:74:24:14:f4:82:16:ff: 55:f0:53:e8:a9:de:ec:12:c5:97:0c:6d:e9:8c:d4: fb:40:dd:fd:e4:f7:37:44:9c:4e:8a:04:23:62:c7: 4d:ea:d9:27:ba:dc:a5:27:0c:2d:04:73:cd:56:fd: dc:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:76:DA:66:E6:7F:CD:32:B1:0F:05:49:3E:B0:8D:9E:87:DD:E1:00 X509v3 Authority Key Identifier: keyid:AD:01:9F:03:5B:FF:3F:3B:17:32:3C:DB:BB:14:A0:7D:5D:E8:EC:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D837B/1D7B63BCB99C11EF9638F769C4F9AE02/rQGfA1v_PzsXMjzbuxSgfV3o7DM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQGfA1v_PzsXMjzbuxSgfV3o7DM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D837B/1D7B63BCB99C11EF9638F769C4F9AE02/rQGfA1v_PzsXMjzbuxSgfV3o7DM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:9f:3a:25:82:1e:89:59:a0:65:5a:2c:cd:60:1e:3c:2f:a1: 93:de:1e:1e:de:03:d9:39:8b:04:71:9e:a7:44:24:96:df:22: 1d:10:f5:28:a4:c2:66:a4:e1:e2:aa:5c:69:37:4e:ae:ff:9a: 08:a2:1b:72:26:67:03:48:cf:ed:f3:f5:c1:5a:db:a9:6e:a3: e7:4b:7a:c2:84:e4:72:fe:6a:87:f1:f4:7f:4e:2f:4e:ff:ce: 38:a5:45:13:b7:18:39:15:fc:89:21:ca:f4:0a:ca:f0:d9:8f: e2:60:41:fe:51:ab:2b:bd:0c:a2:44:e1:8b:b3:7b:43:41:15: 1a:2f:f1:4b:78:1d:34:01:89:72:60:af:d8:9d:fe:b1:96:62: ba:2a:8a:d9:53:bc:b0:15:10:88:1a:9a:d2:a7:78:7b:98:e7: b0:2f:e3:73:f7:73:ce:e5:ec:4f:c2:9f:a6:97:56:86:b4:92: 05:88:77:a1:f1:33:bf:1e:cc:87:9c:97:34:37:ae:4d:0e:08: f5:d3:28:54:c7:61:c6:a6:61:c5:45:26:73:7e:58:bb:65:99: 7d:fe:8e:1e:f1:b5:ed:55:8a:1a:26:4c:6d:53:16:b0:64:a0: 8f:ac:cb:3c:3b:06:23:0b:a8:71:b0:53:9f:1c:5c:6e:1c:b9: 87:cd:cb:da -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE ODM3QjExMC8GA1UEBRMoQUQwMTlGMDM1QkZGM0YzQjE3MzIzQ0RCQkIxNEEwN0Q1 REU4RUMzMzAeFw0yNTA2MTUwNjEzMDdaFw0yNTA2MjIwNjEzMDZaMBgxFjAUBgNV BAMTDTY4NGU2NDczLWMxMmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4vfpHQVq2qP0o6xDDdN4OBPpGq+OFoS21CKENwFRoPiCB38SCi8BAYSZwAqJC hbxZmUyK7PzU9AR/zoOY3aAvJk/+yGKOn8joaVdeuS+6JjvrOv+rown2jRy+c8M4 RZiMdA7vXjCquczi6pctJSMuA2yjNs97rKmslXjntHBMDybION6OfvtNDemdFW69 msmqoFiE1QIlPSd31fdhUm1gMNPfiv5nK0Ickt79BFHd/esv4wq+8ILr9ll6gChZ Jeu85FgxAde7I5ludCQU9IIW/1XwU+ip3uwSxZcMbemM1PtA3f3k9zdEnE6KBCNi x03q2Se63KUnDC0Ec81W/dyZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUv3baZuZ/ zTKxDwVJPrCNnofd4QAwHwYDVR0jBBgwFoAUrQGfA1v/PzsXMjzbuxSgfV3o7DMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4MzdCLzFEN0I2M0JDQjk5 QzExRUY5NjM4Rjc2OUM0RjlBRTAyL3JRR2ZBMXZfUHpzWE1qemJ1eFNnZlYzbzdE TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvclFHZkExdl9QenNYTWp6YnV4U2dmVjNvN0RNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4 MzdCLzFEN0I2M0JDQjk5QzExRUY5NjM4Rjc2OUM0RjlBRTAyL3JRR2ZBMXZfUHpz WE1qemJ1eFNnZlYzbzdETS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACufOiWCHolZoGVaLM1gHjwvoZPeHh7eA9k5iwRxnqdEJJbfIh0Q9Sik wmak4eKqXGk3Tq7/mgiiG3ImZwNIz+3z9cFa26luo+dLesKE5HL+aofx9H9OL07/ zjilRRO3GDkV/IkhyvQKyvDZj+JgQf5Rqyu9DKJE4Yuze0NBFRov8Ut4HTQBiXJg r9id/rGWYroqitlTvLAVEIgamtKneHuY57Av43P3c87l7E/Cn6aXVoa0kgWId6Hx M78ezIeclzQ3rk0OCPXTKFTHYcamYcVFJnN+WLtlmX3+jh7xte1VihomTG1TFrBk oI+syzw7BiMLqHGwU58cXG4cuYfNy9o= -----END CERTIFICATE-----Generated at Tue Jun 17 04:03:37 2025 by rpki-client