$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.mft File: foUuJJ2cR8tllecBfQfeJ8OUrwk.mft (raw, json) Hash identifier: mAUzzBMxTg8GfEOXistzFUo1tskaIHe/THlfxnS63I4= Subject key identifier: 5F:F4:75:0F:2A:D2:FF:98:2B:CD:C0:9C:AF:E9:BD:7B:71:08:B6:A1 Authority key identifier: 7E:85:2E:24:9D:9C:47:CB:65:95:E7:01:7D:07:DE:27:C3:94:AF:09 Certificate issuer: /CN=A91E5D61/serialNumber=7E852E249D9C47CB6595E7017D07DE27C394AF09 Certificate serial: 34D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/foUuJJ2cR8tllecBfQfeJ8OUrwk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.mft Manifest number: 4791 Signing time: Sat 14 Jun 2025 14:20:51 +0000 Manifest this update: Sat 14 Jun 2025 14:20:50 +0000 Manifest next update: Sat 21 Jun 2025 14:20:50 +0000 Files and hashes: 1: foUuJJ2cR8tllecBfQfeJ8OUrwk.crl (hash: GQleo0WpbXIWCsoALLwOkoVFJEqQlh4f8zB0ggzoUUg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.crl rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/foUuJJ2cR8tllecBfQfeJ8OUrwk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 14:20:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13524 (0x34d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D61, serialNumber=7E852E249D9C47CB6595E7017D07DE27C394AF09 Validity Not Before: Jun 14 14:20:50 2025 GMT Not After : Jun 21 14:20:50 2025 GMT Subject: CN=684d8542-dc4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e7:fb:24:65:13:31:5a:d5:c2:e5:e4:0a:ab: f7:64:28:06:60:c8:ba:8c:ed:8c:6a:89:18:fe:49: a2:24:db:39:84:e5:cc:1e:f2:e8:ac:f2:cc:8f:f8: bb:24:28:68:60:aa:21:91:3b:c2:f6:a7:5d:88:f1: ed:e0:f7:02:4f:6c:06:37:c1:53:c3:17:73:17:b8: 06:3d:05:af:9d:89:57:82:8e:90:f3:fb:6f:ec:61: bb:b0:d0:44:1b:8e:f8:a8:02:ab:77:c2:bd:66:19: 01:44:0c:4d:a5:05:e2:71:cf:4c:e9:e8:ca:af:e9: 1e:b6:71:8d:ae:f7:6e:48:06:26:cd:73:48:d6:e4: b6:71:15:12:80:74:ae:9e:e7:83:9d:64:f6:02:c6: 5c:89:8a:80:3f:71:4b:a2:7f:51:bb:58:1c:ed:86: ce:a0:5f:09:8e:00:6e:51:de:74:63:53:66:31:88: e7:eb:a7:b2:4a:17:26:41:5d:cd:90:86:05:6c:a5: 93:78:d3:17:da:77:fe:3b:50:76:58:53:59:91:16: 8c:e7:59:8f:95:18:3d:c7:a2:cc:d1:34:8c:0c:1b: 59:b7:40:b9:01:62:6c:b4:b8:31:ad:0b:2f:4c:6c: f1:95:7f:03:ce:e2:b5:89:9d:37:2d:e1:df:b6:9a: c7:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:F4:75:0F:2A:D2:FF:98:2B:CD:C0:9C:AF:E9:BD:7B:71:08:B6:A1 X509v3 Authority Key Identifier: keyid:7E:85:2E:24:9D:9C:47:CB:65:95:E7:01:7D:07:DE:27:C3:94:AF:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/foUuJJ2cR8tllecBfQfeJ8OUrwk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:09:85:d9:40:30:ab:a9:ff:95:90:4b:1f:a5:fc:5a:f7:53: 17:c0:6e:6b:9a:4f:ba:b3:09:3c:5d:aa:35:54:28:5b:54:b9: a0:d3:e8:6b:94:e0:05:12:28:58:5f:9e:19:21:74:3d:98:aa: 13:80:64:bd:ba:8f:a8:7f:6b:8c:de:5c:b6:61:32:2e:eb:d5: 1f:35:ff:e9:36:5e:ca:c0:3b:76:88:c9:bf:f2:d0:85:5a:de: ec:55:8a:5c:7e:f1:9d:e3:8c:30:8b:9e:41:f4:eb:32:4e:cd: 36:5b:5b:bb:1a:fa:2a:b7:48:d2:fd:0e:13:3e:34:ed:42:ad: 5b:2a:a2:83:b4:7c:cf:3f:ce:95:c8:63:6f:8e:39:06:e6:c0: 81:b6:88:91:3f:89:f5:a7:0d:d8:03:93:96:0e:85:e3:e7:17: 0d:22:3b:dd:7f:90:95:63:f5:d6:13:a6:f6:9d:70:f9:b3:1a: 1e:1a:93:26:ee:0e:ca:2b:15:9c:9e:3f:2c:ec:9f:c0:32:74: 9b:e9:1a:81:3a:0c:91:4e:02:31:82:88:05:db:c0:c8:ed:ba: d8:3c:40:f3:57:97:84:06:68:3d:06:86:1d:ee:80:1f:e8:55: 95:03:f7:e2:2d:fa:43:c6:10:ec:06:7c:87:b2:b9:8e:c8:d1: 88:75:2c:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVENjExMTAvBgNVBAUTKDdFODUyRTI0OUQ5QzQ3Q0I2NTk1RTcwMTdEMDdERTI3 QzM5NEFGMDkwHhcNMjUwNjE0MTQyMDUwWhcNMjUwNjIxMTQyMDUwWjAYMRYwFAYD VQQDEw02ODRkODU0Mi1kYzRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Of7JGUTMVrVwuXkCqv3ZCgGYMi6jO2MaokY/kmiJNs5hOXMHvLorPLMj/i7 JChoYKohkTvC9qddiPHt4PcCT2wGN8FTwxdzF7gGPQWvnYlXgo6Q8/tv7GG7sNBE G474qAKrd8K9ZhkBRAxNpQXicc9M6ejKr+ketnGNrvduSAYmzXNI1uS2cRUSgHSu nueDnWT2AsZciYqAP3FLon9Ru1gc7YbOoF8JjgBuUd50Y1NmMYjn66eyShcmQV3N kIYFbKWTeNMX2nf+O1B2WFNZkRaM51mPlRg9x6LM0TSMDBtZt0C5AWJstLgxrQsv TGzxlX8DzuK1iZ03LeHftprHDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF/0dQ8q 0v+YK83AnK/pvXtxCLahMB8GA1UdIwQYMBaAFH6FLiSdnEfLZZXnAX0H3ifDlK8J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUQ2MS8wQzZBMEM5RTFE NzkxMUUyODc5RTM4QzUwOEIwMkNEMi9mb1V1SkoyY1I4dGxsZWNCZlFmZUo4T1Vy d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZvVXVKSjJjUjh0bGxlY0JmUWZlSjhPVXJ3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUQ2MS8wQzZBMEM5RTFENzkxMUUyODc5RTM4QzUwOEIwMkNEMi9mb1V1SkoyY1I4 dGxsZWNCZlFmZUo4T1Vyd2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDGCYXZQDCrqf+VkEsfpfxa91MXwG5rmk+6swk8Xao1VChbVLmg0+hr lOAFEihYX54ZIXQ9mKoTgGS9uo+of2uM3ly2YTIu69UfNf/pNl7KwDt2iMm/8tCF Wt7sVYpcfvGd44wwi55B9OsyTs02W1u7Gvoqt0jS/Q4TPjTtQq1bKqKDtHzPP86V yGNvjjkG5sCBtoiRP4n1pw3YA5OWDoXj5xcNIjvdf5CVY/XWE6b2nXD5sxoeGpMm 7g7KKxWcnj8s7J/AMnSb6RqBOgyRTgIxgogF28DI7brYPEDzV5eEBmg9BoYd7oAf 6FWVA/fiLfpDxhDsBnyHsrmOyNGIdSw/ -----END CERTIFICATE-----Generated at Sun Jun 15 09:45:57 2025 by rpki-client