$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8BB1/5AD769B03D2511F080C48955C4F9AE02/x_AoN9JFy4-rzUdBz6K0paL3Pq0.mft File: x_AoN9JFy4-rzUdBz6K0paL3Pq0.mft (raw, json) Hash identifier: RJsMMzterIM/ZE7dRSXoaYV4Ig7TzVsQShjnt4CRrwY= Subject key identifier: 7F:45:B0:53:C7:A5:33:F0:84:97:E2:C2:E0:28:D4:AC:DF:99:4D:00 Authority key identifier: C7:F0:28:37:D2:45:CB:8F:AB:CD:47:41:CF:A2:B4:A5:A2:F7:3E:AD Certificate issuer: /CN=A91D8BB1/serialNumber=C7F02837D245CB8FABCD4741CFA2B4A5A2F73EAD Certificate serial: 0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x_AoN9JFy4-rzUdBz6K0paL3Pq0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8BB1/5AD769B03D2511F080C48955C4F9AE02/x_AoN9JFy4-rzUdBz6K0paL3Pq0.mft Manifest number: 0A Signing time: Fri 13 Jun 2025 07:02:27 +0000 Manifest this update: Fri 13 Jun 2025 07:02:26 +0000 Manifest next update: Fri 20 Jun 2025 07:02:26 +0000 Files and hashes: 1: x_AoN9JFy4-rzUdBz6K0paL3Pq0.crl (hash: Hy06nPL+BPUhEa3wamzTyHmMbhBkGt9CdE7ZpHHgW+Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8BB1/5AD769B03D2511F080C48955C4F9AE02/x_AoN9JFy4-rzUdBz6K0paL3Pq0.crl rsync://rpki.apnic.net/member_repository/A91D8BB1/5AD769B03D2511F080C48955C4F9AE02/x_AoN9JFy4-rzUdBz6K0paL3Pq0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x_AoN9JFy4-rzUdBz6K0paL3Pq0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 07:02:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8BB1, serialNumber=C7F02837D245CB8FABCD4741CFA2B4A5A2F73EAD Validity Not Before: Jun 13 07:02:26 2025 GMT Not After : Jun 20 07:02:26 2025 GMT Subject: CN=684bcd02-2a95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:81:93:92:df:da:94:d4:7f:34:58:a3:ea:3e: 95:2c:87:bd:b5:11:99:65:83:a6:af:b1:ef:1d:50: 0e:4e:e2:7d:b6:b7:c3:b7:d1:54:c9:fd:82:62:df: ac:24:18:5e:a2:de:25:d9:6d:e3:07:06:7f:3a:41: d7:ec:2a:19:c6:32:d3:b8:0e:84:14:3a:48:28:6b: d1:ca:95:4f:34:a7:35:60:23:ce:8c:01:2f:50:7e: 1e:b8:49:11:5d:d4:89:2f:63:83:37:5b:38:cd:92: 24:0f:e7:b3:9b:67:b9:07:9a:82:51:ca:27:bb:06: 3a:a7:ee:6e:1f:33:57:a4:b9:5d:c9:f3:9d:73:da: 78:43:b3:ba:83:21:91:c8:39:bf:39:74:c6:84:8e: a5:62:6e:e6:2e:0c:76:7f:45:e2:79:f1:45:ea:30: d1:f3:82:cc:60:a9:c3:38:b7:c6:85:00:59:85:74: 5c:de:4e:65:4d:14:0e:8b:37:8f:18:33:72:a6:de: f0:a6:03:65:8a:b0:45:60:38:de:bb:1c:48:2a:5e: 0f:33:c7:88:12:a0:7e:b4:18:6e:9f:02:8c:90:7d: e7:19:bc:6f:28:06:f6:7e:e1:db:9b:1a:18:ae:d0: 5d:6d:27:f7:bf:c7:1f:9a:70:3c:db:5d:25:18:9e: ad:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:45:B0:53:C7:A5:33:F0:84:97:E2:C2:E0:28:D4:AC:DF:99:4D:00 X509v3 Authority Key Identifier: keyid:C7:F0:28:37:D2:45:CB:8F:AB:CD:47:41:CF:A2:B4:A5:A2:F7:3E:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8BB1/5AD769B03D2511F080C48955C4F9AE02/x_AoN9JFy4-rzUdBz6K0paL3Pq0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x_AoN9JFy4-rzUdBz6K0paL3Pq0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8BB1/5AD769B03D2511F080C48955C4F9AE02/x_AoN9JFy4-rzUdBz6K0paL3Pq0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:85:64:74:79:70:30:01:f7:b0:1f:a1:01:8f:a0:98:4b:83: bb:9c:93:56:59:01:40:54:ec:eb:c4:b7:22:ab:a4:05:a4:72: 4f:56:4c:82:ee:7f:ca:5b:4c:2c:25:d4:85:ea:2f:04:2e:28: d2:65:67:94:5e:1e:d9:0f:7c:2a:1a:92:a0:ab:c5:63:21:10: 29:11:f9:45:69:8e:3e:3c:1b:c8:a9:a7:49:5c:7d:1d:d9:d6: 16:27:95:80:6d:8f:5e:ec:6e:12:24:8d:63:a5:d2:71:b6:66: b8:f1:f0:69:9e:7a:a7:a5:0f:50:ab:78:43:31:fd:25:20:e1: 41:7c:e1:54:a2:5b:64:05:28:cb:6b:f6:d7:9a:c7:3b:bd:13: 4f:c9:82:4c:cd:db:42:b2:04:34:60:a5:1c:3e:c3:5e:92:c7: 7f:14:65:cd:02:f0:8d:a6:62:33:79:a4:71:e8:9d:80:4b:e9: 13:a4:5b:07:d5:9d:0e:dd:47:40:7d:e9:47:bc:e4:3e:f7:fc: 0b:18:22:f2:04:8b:c3:56:b6:99:c4:76:a3:95:0f:ba:d8:4c: 06:ed:47:8c:45:c4:cc:7c:d1:41:98:f0:27:6c:21:37:74:c0: f5:87:e4:e7:ae:27:94:3a:f8:e3:66:7e:01:1c:cb:79:af:5d: e6:b7:f3:88 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE OEJCMTExMC8GA1UEBRMoQzdGMDI4MzdEMjQ1Q0I4RkFCQ0Q0NzQxQ0ZBMkI0QTVB MkY3M0VBRDAeFw0yNTA2MTMwNzAyMjZaFw0yNTA2MjAwNzAyMjZaMBgxFjAUBgNV BAMTDTY4NGJjZDAyLTJhOTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDegZOS39qU1H80WKPqPpUsh721EZllg6avse8dUA5O4n22t8O30VTJ/YJi36wk GF6i3iXZbeMHBn86QdfsKhnGMtO4DoQUOkgoa9HKlU80pzVgI86MAS9Qfh64SRFd 1IkvY4M3WzjNkiQP57ObZ7kHmoJRyie7Bjqn7m4fM1ekuV3J851z2nhDs7qDIZHI Ob85dMaEjqVibuYuDHZ/ReJ58UXqMNHzgsxgqcM4t8aFAFmFdFzeTmVNFA6LN48Y M3Km3vCmA2WKsEVgON67HEgqXg8zx4gSoH60GG6fAoyQfecZvG8oBvZ+4dubGhiu 0F1tJ/e/xx+acDzbXSUYnq0vAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUf0WwU8el M/CEl+LC4CjUrN+ZTQAwHwYDVR0jBBgwFoAUx/AoN9JFy4+rzUdBz6K0paL3Pq0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4QkIxLzVBRDc2OUIwM0Qy NTExRjA4MEM0ODk1NUM0RjlBRTAyL3hfQW9OOUpGeTQtcnpVZEJ6NkswcGFMM1Bx MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveF9Bb045SkZ5NC1yelVkQno2SzBwYUwzUHEwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4 QkIxLzVBRDc2OUIwM0QyNTExRjA4MEM0ODk1NUM0RjlBRTAyL3hfQW9OOUpGeTQt cnpVZEJ6NkswcGFMM1BxMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAE6FZHR5cDAB97AfoQGPoJhLg7uck1ZZAUBU7OvEtyKrpAWkck9WTILu f8pbTCwl1IXqLwQuKNJlZ5ReHtkPfCoakqCrxWMhECkR+UVpjj48G8ipp0lcfR3Z 1hYnlYBtj17sbhIkjWOl0nG2Zrjx8GmeeqelD1CreEMx/SUg4UF84VSiW2QFKMtr 9teaxzu9E0/JgkzN20KyBDRgpRw+w16Sx38UZc0C8I2mYjN5pHHonYBL6ROkWwfV nQ7dR0B96Ue85D73/AsYIvIEi8NWtpnEdqOVD7rYTAbtR4xFxMx80UGY8CdsITd0 wPWH5OeuJ5Q6+ONmfgEcy3mvXea384g= -----END CERTIFICATE-----Generated at Sun Jun 15 08:27:16 2025 by rpki-client