$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC8BD/119CC22040FD11EEA6AD2935C4F9AE02/72Nt-xWS8CIgFrAPrKJwNXP00oI.mft File: 72Nt-xWS8CIgFrAPrKJwNXP00oI.mft (raw, json) Hash identifier: ilcLqOcX+Ta958qGzX8nPAdIJG2dBQOQEfr9Au5StmE= Subject key identifier: AD:5E:BA:86:2E:FB:04:1B:D4:C3:F9:47:FA:08:11:05:68:D8:8D:F2 Authority key identifier: EF:63:6D:FB:15:92:F0:22:20:16:B0:0F:AC:A2:70:35:73:F4:D2:82 Certificate issuer: /CN=A91DC8BD/serialNumber=EF636DFB1592F0222016B00FACA2703573F4D282 Certificate serial: 0155 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72Nt-xWS8CIgFrAPrKJwNXP00oI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC8BD/119CC22040FD11EEA6AD2935C4F9AE02/72Nt-xWS8CIgFrAPrKJwNXP00oI.mft Manifest number: 0155 Signing time: Sun 15 Jun 2025 03:18:36 +0000 Manifest this update: Sun 15 Jun 2025 03:18:36 +0000 Manifest next update: Sun 22 Jun 2025 03:18:36 +0000 Files and hashes: 1: 72Nt-xWS8CIgFrAPrKJwNXP00oI.crl (hash: g5nQLRNara5eto9bJwUHAKjjR1n9byv7MnCO8FnaJlA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC8BD/119CC22040FD11EEA6AD2935C4F9AE02/72Nt-xWS8CIgFrAPrKJwNXP00oI.crl rsync://rpki.apnic.net/member_repository/A91DC8BD/119CC22040FD11EEA6AD2935C4F9AE02/72Nt-xWS8CIgFrAPrKJwNXP00oI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72Nt-xWS8CIgFrAPrKJwNXP00oI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 341 (0x155) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC8BD, serialNumber=EF636DFB1592F0222016B00FACA2703573F4D282 Validity Not Before: Jun 15 03:18:36 2025 GMT Not After : Jun 22 03:18:36 2025 GMT Subject: CN=684e3b8c-af8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b0:df:ff:ce:ad:d8:0d:46:5e:82:ec:33:50: 69:73:86:9f:47:2f:8d:f9:0a:c1:d4:a9:1a:da:4d: ba:90:e1:f3:d8:fc:da:4a:9a:a9:72:4e:b1:68:99: 39:a3:38:40:67:f5:da:db:b6:33:9b:93:43:45:41: c6:7a:7e:ae:77:78:7e:06:72:c6:71:5a:c4:6e:eb: 8c:5a:91:25:4e:c2:f3:9c:7c:62:38:69:16:90:55: 16:5c:01:f3:d1:f5:26:4a:99:5d:e5:ea:4d:79:e8: 00:42:54:7f:39:d4:36:0f:43:d6:91:c0:94:58:2f: a6:be:f8:38:cb:ac:0b:10:6a:4e:f0:f0:80:bd:90: a7:13:f6:ff:05:5f:6c:f0:26:64:43:83:48:75:72: 2c:ff:a1:97:a7:7b:e3:b3:01:2f:51:b7:cd:00:4e: 1f:e4:33:c4:27:53:12:f4:a0:78:17:f3:55:07:0b: f3:1d:0e:c8:39:4f:d8:86:14:ac:26:ae:ca:1a:a4: ce:6b:83:32:67:f8:0a:de:d1:f8:18:dc:40:9f:b6: a0:f7:b2:7d:fe:05:37:3d:58:95:bf:9d:c3:87:54: 1e:e0:30:4a:e0:c6:29:72:07:ee:ab:b1:18:89:cc: 1a:84:cd:3d:e7:b0:92:e8:6d:ca:fb:e0:65:fc:ed: 56:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:5E:BA:86:2E:FB:04:1B:D4:C3:F9:47:FA:08:11:05:68:D8:8D:F2 X509v3 Authority Key Identifier: keyid:EF:63:6D:FB:15:92:F0:22:20:16:B0:0F:AC:A2:70:35:73:F4:D2:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC8BD/119CC22040FD11EEA6AD2935C4F9AE02/72Nt-xWS8CIgFrAPrKJwNXP00oI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72Nt-xWS8CIgFrAPrKJwNXP00oI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC8BD/119CC22040FD11EEA6AD2935C4F9AE02/72Nt-xWS8CIgFrAPrKJwNXP00oI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:92:15:33:ef:15:02:36:ab:0d:99:e1:0e:cd:7c:cf:91:c2: 6f:0d:11:37:f6:61:27:e3:29:65:e9:ed:97:67:89:97:c1:ea: fc:38:1a:96:b3:3b:be:5c:88:39:68:a1:7a:92:06:f3:81:5e: 8d:44:9c:f4:87:06:03:95:c5:0d:46:c9:c1:5e:df:98:90:34: 78:4e:fc:de:49:4c:a1:4a:0f:6f:f2:a3:42:f2:af:8d:3f:70: fc:86:d2:d8:e0:bb:69:62:28:20:91:29:7f:40:83:71:b0:f9: ca:c6:0f:45:5f:95:34:0e:e7:2a:ad:1c:92:c8:74:42:5c:56: 4a:a4:e3:62:2b:46:76:b3:bc:8d:c7:d5:f0:ac:00:d8:cb:2e: c9:f7:03:88:ee:b2:e8:62:a2:d7:0c:45:3c:27:c3:54:06:84: c2:4d:2f:25:f9:ba:50:1d:78:c1:df:78:8a:70:a1:de:dd:1c: fe:37:b7:de:fa:af:7e:75:c8:da:34:56:01:14:60:ac:55:36: 14:64:fb:d6:e6:50:92:46:b1:63:be:06:e1:16:2a:7f:26:97: 8d:7b:15:83:04:7e:97:78:90:ce:d0:bc:02:87:0f:9d:66:e9: 51:0b:e4:f2:90:da:f5:87:4f:29:9b:b5:03:73:0f:d8:39:a6: 08:5a:c2:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM4QkQxMTAvBgNVBAUTKEVGNjM2REZCMTU5MkYwMjIyMDE2QjAwRkFDQTI3MDM1 NzNGNEQyODIwHhcNMjUwNjE1MDMxODM2WhcNMjUwNjIyMDMxODM2WjAYMRYwFAYD VQQDEw02ODRlM2I4Yy1hZjhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3LDf/86t2A1GXoLsM1Bpc4afRy+N+QrB1Kka2k26kOHz2PzaSpqpck6xaJk5 ozhAZ/Xa27Yzm5NDRUHGen6ud3h+BnLGcVrEbuuMWpElTsLznHxiOGkWkFUWXAHz 0fUmSpld5epNeegAQlR/OdQ2D0PWkcCUWC+mvvg4y6wLEGpO8PCAvZCnE/b/BV9s 8CZkQ4NIdXIs/6GXp3vjswEvUbfNAE4f5DPEJ1MS9KB4F/NVBwvzHQ7IOU/YhhSs Jq7KGqTOa4MyZ/gK3tH4GNxAn7ag97J9/gU3PViVv53Dh1Qe4DBK4MYpcgfuq7EY icwahM0957CS6G3K++Bl/O1WaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK1euoYu +wQb1MP5R/oIEQVo2I3yMB8GA1UdIwQYMBaAFO9jbfsVkvAiIBawD6yicDVz9NKC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzhCRC8xMTlDQzIyMDQw RkQxMUVFQTZBRDI5MzVDNEY5QUUwMi83Mk50LXhXUzhDSWdGckFQcktKd05YUDAw b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzcyTnQteFdTOENJZ0ZyQVByS0p3TlhQMDBvSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzhCRC8xMTlDQzIyMDQwRkQxMUVFQTZBRDI5MzVDNEY5QUUwMi83Mk50LXhXUzhD SWdGckFQcktKd05YUDAwb0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPkhUz7xUCNqsNmeEOzXzPkcJvDRE39mEn4yll6e2XZ4mXwer8OBqW szu+XIg5aKF6kgbzgV6NRJz0hwYDlcUNRsnBXt+YkDR4TvzeSUyhSg9v8qNC8q+N P3D8htLY4LtpYiggkSl/QINxsPnKxg9FX5U0DucqrRySyHRCXFZKpONiK0Z2s7yN x9XwrADYyy7J9wOI7rLoYqLXDEU8J8NUBoTCTS8l+bpQHXjB33iKcKHe3Rz+N7fe +q9+dcjaNFYBFGCsVTYUZPvW5lCSRrFjvgbhFip/JpeNexWDBH6XeJDO0LwChw+d ZulRC+TykNr1h08pm7UDcw/YOaYIWsJq -----END CERTIFICATE-----Generated at Sun Jun 15 05:51:35 2025 by rpki-client