$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.mft File: Ii81OE7WK2pwdPiC574Cnw4E40M.mft (raw, json) Hash identifier: xBVkLWp9jf5/UNYXx9adSkZSX666jAEMtYL49cysPAM= Subject key identifier: CC:BB:F8:67:54:E1:39:47:75:F1:0B:58:20:05:D6:14:07:C1:D7:B5 Authority key identifier: 22:2F:35:38:4E:D6:2B:6A:70:74:F8:82:E7:BE:02:9F:0E:04:E3:43 Certificate issuer: /CN=A91E5D61/serialNumber=222F35384ED62B6A7074F882E7BE029F0E04E343 Certificate serial: 34AA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ii81OE7WK2pwdPiC574Cnw4E40M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.mft Manifest number: 4740 Signing time: Mon 16 Jun 2025 14:20:56 +0000 Manifest this update: Mon 16 Jun 2025 14:20:56 +0000 Manifest next update: Mon 23 Jun 2025 14:20:56 +0000 Files and hashes: 1: Ii81OE7WK2pwdPiC574Cnw4E40M.crl (hash: qOIUGOf0CAw/30JHbPdfjaxAj6/bEMQvmE235c938LQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.crl rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ii81OE7WK2pwdPiC574Cnw4E40M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 14:20:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13482 (0x34aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D61, serialNumber=222F35384ED62B6A7074F882E7BE029F0E04E343 Validity Not Before: Jun 16 14:20:56 2025 GMT Not After : Jun 23 14:20:56 2025 GMT Subject: CN=68502848-a1f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b8:02:22:84:d0:52:2d:4d:03:36:70:8a:3d: 6b:91:d2:2c:43:f0:11:d8:b2:17:54:6d:15:04:4e: a4:49:29:df:de:c6:90:de:3d:31:ed:53:c8:de:ad: 0c:59:37:5a:68:ab:c3:5b:ce:72:e4:40:48:e9:fe: 4c:ec:88:94:78:da:bb:8a:10:fc:83:0c:cb:23:0a: 83:2b:98:18:18:8d:b8:de:ed:df:76:d3:44:f7:2a: 10:b7:e5:6b:39:32:c6:00:46:6a:28:77:02:d2:8b: 7d:76:a4:27:e1:07:17:4a:1f:e5:0d:c8:91:ab:12: bf:9c:f9:fb:fa:85:f7:b1:6b:c2:f2:8d:6e:42:82: df:93:44:a6:80:7c:9b:a6:ec:da:14:af:4f:fb:05: 7d:0f:23:cc:b4:1c:8d:47:43:ed:34:19:12:91:6d: 31:27:ef:01:b6:9b:01:7e:eb:48:ca:3b:e5:f7:14: f5:2c:b4:41:a7:d5:46:89:40:60:21:4b:d3:34:62: 16:ad:02:95:e5:cb:37:e1:c8:50:e8:b4:71:db:75: cb:f7:77:f6:ce:62:a7:c4:74:26:dc:28:3f:09:8d: 68:46:45:0b:8e:9a:9e:45:06:29:63:a2:49:5e:43: e8:13:23:d0:01:e2:3a:98:b3:5e:61:ed:70:3e:8c: 36:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:BB:F8:67:54:E1:39:47:75:F1:0B:58:20:05:D6:14:07:C1:D7:B5 X509v3 Authority Key Identifier: keyid:22:2F:35:38:4E:D6:2B:6A:70:74:F8:82:E7:BE:02:9F:0E:04:E3:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ii81OE7WK2pwdPiC574Cnw4E40M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:34:f7:53:be:05:d0:a5:53:a6:4b:af:aa:b9:e4:20:8e:3b: 06:e8:71:21:63:92:46:c5:84:f3:53:b5:bd:de:1f:a9:f1:48: cb:3a:8a:c0:2f:56:22:3e:fb:95:ac:46:04:5e:69:e8:79:aa: df:d9:59:af:7b:82:c2:d3:b4:82:b8:eb:7c:21:be:00:3d:4a: f0:d5:5e:60:15:48:7b:66:39:e6:c5:fe:73:ce:db:d6:2a:c6: 37:22:db:85:78:1a:4b:57:b5:92:09:27:8b:88:0c:43:2d:ff: ec:c7:22:08:1d:a8:32:78:f2:48:9d:67:df:11:e8:80:c4:0e: 86:59:14:e4:79:05:74:70:6f:e0:5f:f8:ac:d3:1c:cc:30:da: bb:bb:77:69:e8:ff:69:9f:03:89:82:6f:4d:17:46:55:6f:8e: f7:c4:fd:59:fe:4a:20:07:b2:40:da:25:7d:0d:84:b6:60:82: a8:dd:10:75:97:04:2a:d4:ad:33:03:44:71:00:14:0a:c8:e7: d7:d9:da:9d:c1:f8:50:39:18:ea:ed:90:67:3b:c1:b3:47:a6: f9:8e:c6:23:94:9f:de:c3:e8:90:8b:7e:ed:df:e7:67:85:7e: a7:aa:03:6a:cd:30:70:cc:7b:61:ea:c0:70:67:e2:43:a9:b6: bf:ec:44:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVENjExMTAvBgNVBAUTKDIyMkYzNTM4NEVENjJCNkE3MDc0Rjg4MkU3QkUwMjlG MEUwNEUzNDMwHhcNMjUwNjE2MTQyMDU2WhcNMjUwNjIzMTQyMDU2WjAYMRYwFAYD VQQDEw02ODUwMjg0OC1hMWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAubgCIoTQUi1NAzZwij1rkdIsQ/AR2LIXVG0VBE6kSSnf3saQ3j0x7VPI3q0M WTdaaKvDW85y5EBI6f5M7IiUeNq7ihD8gwzLIwqDK5gYGI243u3fdtNE9yoQt+Vr OTLGAEZqKHcC0ot9dqQn4QcXSh/lDciRqxK/nPn7+oX3sWvC8o1uQoLfk0SmgHyb puzaFK9P+wV9DyPMtByNR0PtNBkSkW0xJ+8BtpsBfutIyjvl9xT1LLRBp9VGiUBg IUvTNGIWrQKV5cs34chQ6LRx23XL93f2zmKnxHQm3Cg/CY1oRkULjpqeRQYpY6JJ XkPoEyPQAeI6mLNeYe1wPow2zwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMy7+GdU 4TlHdfELWCAF1hQHwde1MB8GA1UdIwQYMBaAFCIvNThO1itqcHT4gue+Ap8OBOND MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUQ2MS9FRTY3RDhDMDFE NzgxMUUyODc5RTM4QzUwOEIwMkNEMi9JaTgxT0U3V0sycHdkUGlDNTc0Q253NEU0 ME0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0lpODFPRTdXSzJwd2RQaUM1NzRDbnc0RTQwTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUQ2MS9FRTY3RDhDMDFENzgxMUUyODc5RTM4QzUwOEIwMkNEMi9JaTgxT0U3V0sy cHdkUGlDNTc0Q253NEU0ME0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHNPdTvgXQpVOmS6+queQgjjsG6HEhY5JGxYTzU7W93h+p8UjLOorA L1YiPvuVrEYEXmnoearf2Vmve4LC07SCuOt8Ib4APUrw1V5gFUh7Zjnmxf5zztvW KsY3ItuFeBpLV7WSCSeLiAxDLf/sxyIIHagyePJInWffEeiAxA6GWRTkeQV0cG/g X/is0xzMMNq7u3dp6P9pnwOJgm9NF0ZVb473xP1Z/kogB7JA2iV9DYS2YIKo3RB1 lwQq1K0zA0RxABQKyOfX2dqdwfhQORjq7ZBnO8GzR6b5jsYjlJ/ew+iQi37t3+dn hX6nqgNqzTBwzHth6sBwZ+JDqba/7ERO -----END CERTIFICATE-----Generated at Mon Jun 16 23:43:34 2025 by rpki-client