$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft File: tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft (raw, json) Hash identifier: MJcRv4Zqw79U6cIoA8Qv8unDLxLAKN6abFpPebWg8y8= Subject key identifier: C9:FE:84:25:5E:8F:24:D7:ED:63:E4:BB:9D:BB:9D:D5:E4:1E:16:3B Authority key identifier: B6:38:97:91:BD:54:09:6A:D0:09:99:A7:59:1F:B2:04:18:9A:F1:98 Certificate issuer: /CN=A91DB551/serialNumber=B6389791BD54096AD00999A7591FB204189AF198 Certificate serial: 0CF0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjiXkb1UCWrQCZmnWR-yBBia8Zg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft Manifest number: 0CF0 Signing time: Sat 14 Jun 2025 17:58:58 +0000 Manifest this update: Sat 14 Jun 2025 17:58:57 +0000 Manifest next update: Sat 21 Jun 2025 17:58:57 +0000 Files and hashes: 1: tjiXkb1UCWrQCZmnWR-yBBia8Zg.crl (hash: ISVBRURroQMcCd+KKP517rq2oc4oIcaBekXdjqAfmPU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.crl rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjiXkb1UCWrQCZmnWR-yBBia8Zg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 17:13:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3312 (0xcf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB551, serialNumber=B6389791BD54096AD00999A7591FB204189AF198 Validity Not Before: Jun 14 17:58:57 2025 GMT Not After : Jun 21 17:58:57 2025 GMT Subject: CN=684db861-b632 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:cc:e8:c7:5f:86:67:01:c1:3e:02:85:26:98: b1:9d:d8:e0:0c:29:aa:ae:fe:2c:46:fc:00:64:57: 91:55:c1:63:09:36:32:3a:25:8d:8d:23:01:0e:8d: 0a:1f:f7:59:03:03:6a:9d:21:4b:bb:bd:26:4d:ef: 10:58:48:cb:0e:90:6b:ff:98:19:81:86:a1:08:fd: d9:30:79:02:e2:83:db:19:cd:9e:30:fb:5b:54:8b: 7c:d0:3a:93:c0:f8:4f:66:7f:5e:bf:32:7d:8e:92: fa:a3:cc:bd:f0:62:3f:40:10:c8:41:84:8c:68:1a: 67:31:a5:a7:b6:16:6d:6d:e3:5e:5f:7d:16:57:2a: 4a:d9:5d:f1:7e:4f:ad:8b:86:21:00:25:fa:64:76: d5:97:42:f0:a7:7d:44:a3:c8:13:51:51:68:a7:88: dd:e3:db:b8:4e:89:c3:35:bd:ce:d8:fb:ad:bb:64: f8:87:aa:05:98:00:08:f4:45:36:f0:0d:8d:3b:a6: 9f:fe:06:12:d6:6d:5a:d1:6a:04:7b:d3:6a:3b:47: ab:9a:c7:54:10:ea:ae:f6:80:e3:d0:59:9b:03:02: c2:bd:d0:4e:de:34:f0:89:4f:e3:f0:ff:83:a6:49: dc:17:87:6d:c3:72:1f:ce:a9:e8:20:29:56:ad:31: 79:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:FE:84:25:5E:8F:24:D7:ED:63:E4:BB:9D:BB:9D:D5:E4:1E:16:3B X509v3 Authority Key Identifier: keyid:B6:38:97:91:BD:54:09:6A:D0:09:99:A7:59:1F:B2:04:18:9A:F1:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjiXkb1UCWrQCZmnWR-yBBia8Zg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:a4:a9:05:d2:0e:37:f9:b3:a1:71:d8:20:4d:b2:e7:a8:81: 86:db:fc:33:84:6a:63:79:55:61:22:3b:3d:67:d0:b8:70:e2: 24:ae:aa:b8:db:e7:be:cb:1e:a1:1c:24:f7:71:d6:7f:d4:21: e5:88:72:61:86:a6:79:ee:aa:f9:43:3f:57:84:97:82:d5:3d: 80:84:94:d6:19:83:d5:6e:d8:c4:88:5f:ac:18:33:38:a3:37: 8d:bd:e9:f9:01:df:1f:66:3f:50:bb:cc:a0:75:f2:46:4b:e8: 71:41:98:50:0d:ff:d8:b2:4b:bb:f4:3f:a4:b4:42:f4:d6:ec: df:62:82:a0:48:6d:d8:16:d6:3c:64:c0:2d:f4:3a:17:b8:01: d5:0e:ce:a7:94:4a:e4:7a:fd:33:e2:99:ab:c3:90:cd:68:65: f3:34:7a:4f:cd:71:76:14:51:43:8b:cb:82:c4:91:2e:eb:e5: f9:d7:80:24:e8:b4:66:17:c0:40:4a:5b:28:fd:b9:c3:4c:e4: 0e:3d:6a:f0:a0:55:26:ad:db:b4:91:ef:7a:55:1e:8f:c3:61: 08:4c:56:0d:a1:49:62:84:43:4b:fb:27:40:6d:a6:26:b1:b4: 86:9d:1d:49:b7:83:56:82:4a:0d:da:f6:a7:37:18:3c:cc:5e: d9:09:23:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI1NTExMTAvBgNVBAUTKEI2Mzg5NzkxQkQ1NDA5NkFEMDA5OTlBNzU5MUZCMjA0 MTg5QUYxOTgwHhcNMjUwNjE0MTc1ODU3WhcNMjUwNjIxMTc1ODU3WjAYMRYwFAYD VQQDEw02ODRkYjg2MS1iNjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Mzox1+GZwHBPgKFJpixndjgDCmqrv4sRvwAZFeRVcFjCTYyOiWNjSMBDo0K H/dZAwNqnSFLu70mTe8QWEjLDpBr/5gZgYahCP3ZMHkC4oPbGc2eMPtbVIt80DqT wPhPZn9evzJ9jpL6o8y98GI/QBDIQYSMaBpnMaWnthZtbeNeX30WVypK2V3xfk+t i4YhACX6ZHbVl0Lwp31Eo8gTUVFop4jd49u4TonDNb3O2Putu2T4h6oFmAAI9EU2 8A2NO6af/gYS1m1a0WoEe9NqO0ermsdUEOqu9oDj0FmbAwLCvdBO3jTwiU/j8P+D pkncF4dtw3IfzqnoIClWrTF5yQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMn+hCVe jyTX7WPku527ndXkHhY7MB8GA1UdIwQYMBaAFLY4l5G9VAlq0AmZp1kfsgQYmvGY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjU1MS9EQkY2RTFENEUy RTQxMUU5OUNEMEE5NjlDNEY5QUUwMi90amlYa2IxVUNXclFDWm1uV1IteUJCaWE4 WmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RqaVhrYjFVQ1dyUUNabW5XUi15QkJpYThaZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjU1MS9EQkY2RTFENEUyRTQxMUU5OUNEMEE5NjlDNEY5QUUwMi90amlYa2IxVUNX clFDWm1uV1IteUJCaWE4WmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACpKkF0g43+bOhcdggTbLnqIGG2/wzhGpjeVVhIjs9Z9C4cOIkrqq4 2+e+yx6hHCT3cdZ/1CHliHJhhqZ57qr5Qz9XhJeC1T2AhJTWGYPVbtjEiF+sGDM4 ozeNven5Ad8fZj9Qu8ygdfJGS+hxQZhQDf/Ysku79D+ktEL01uzfYoKgSG3YFtY8 ZMAt9DoXuAHVDs6nlErkev0z4pmrw5DNaGXzNHpPzXF2FFFDi8uCxJEu6+X514Ak 6LRmF8BASlso/bnDTOQOPWrwoFUmrdu0ke96VR6Pw2EITFYNoUlihENL+ydAbaYm sbSGnR1Jt4NWgkoN2vanNxg8zF7ZCSPU -----END CERTIFICATE-----Generated at Sat Jun 14 19:31:00 2025 by rpki-client