$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/rsioMoH-iyda7gQb4zzN2Ek7rAA.mft File: rsioMoH-iyda7gQb4zzN2Ek7rAA.mft (raw, json) Hash identifier: j8hnd+Jp3JA0xUZH8xfnuMcKXfFxA9797ows/sxpgWI= Subject key identifier: E0:77:7B:02:42:91:4A:7D:04:92:8E:A4:B4:D3:72:85:60:DC:7D:8E Authority key identifier: AE:C8:A8:32:81:FE:8B:27:5A:EE:04:1B:E3:3C:CD:D8:49:3B:AC:00 Certificate issuer: /CN=A91E6D5D/serialNumber=AEC8A83281FE8B275AEE041BE33CCDD8493BAC00 Certificate serial: 2B0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rsioMoH-iyda7gQb4zzN2Ek7rAA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/rsioMoH-iyda7gQb4zzN2Ek7rAA.mft Manifest number: 9F60 Signing time: Sat 14 Jun 2025 14:29:56 +0000 Manifest this update: Sat 14 Jun 2025 14:29:55 +0000 Manifest next update: Sat 21 Jun 2025 14:29:55 +0000 Files and hashes: 1: rsioMoH-iyda7gQb4zzN2Ek7rAA.crl (hash: 9Qc/aDAjhlTC8YdeJIpi9o2qWj2I/KqxQZExW7oSOpA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/rsioMoH-iyda7gQb4zzN2Ek7rAA.crl rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/rsioMoH-iyda7gQb4zzN2Ek7rAA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rsioMoH-iyda7gQb4zzN2Ek7rAA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 14:29:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11023 (0x2b0f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6D5D, serialNumber=AEC8A83281FE8B275AEE041BE33CCDD8493BAC00 Validity Not Before: Jun 14 14:29:55 2025 GMT Not After : Jun 21 14:29:55 2025 GMT Subject: CN=684d8764-630f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c9:cd:2b:24:05:f5:3c:5e:6b:3e:ba:eb:87: 63:61:94:c8:90:4b:bf:92:21:91:17:df:71:e0:3b: a0:5e:65:fb:a4:e1:da:02:f6:95:e7:2c:1f:11:32: b0:90:1e:99:f1:ee:a5:6f:ff:e5:81:61:dc:91:e0: 67:ad:87:1b:b1:3b:49:27:ea:6c:52:ba:55:a9:72: 00:6b:a8:3e:de:e3:b0:b0:91:60:09:24:57:e9:27: 99:01:95:da:c2:01:c2:57:ef:cb:1c:4c:18:ee:0b: d8:bc:e0:94:1b:75:24:6d:5d:0b:ba:7e:34:a1:85: 8c:4e:3b:96:14:27:80:4d:27:a1:1a:4a:62:24:e7: ae:c3:20:d8:d5:01:cd:86:88:6b:ed:4d:03:28:f3: 0e:4a:00:90:b6:53:e6:b8:33:21:9b:67:40:a4:6e: 20:c6:dd:75:ea:81:9e:67:d5:5f:40:ed:da:e9:cd: 06:c4:da:15:62:ca:eb:fc:de:7c:e3:37:84:66:e3: 22:36:00:00:46:01:63:db:a7:93:f4:ad:84:ba:31: f2:bd:b4:15:ea:d2:e8:a0:7e:d5:5a:a5:b9:85:18: ba:7c:0d:31:45:49:78:93:3e:ff:ab:3e:74:0a:a0: b9:15:90:5c:42:37:12:3c:44:64:5c:c8:d1:36:da: 59:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:77:7B:02:42:91:4A:7D:04:92:8E:A4:B4:D3:72:85:60:DC:7D:8E X509v3 Authority Key Identifier: keyid:AE:C8:A8:32:81:FE:8B:27:5A:EE:04:1B:E3:3C:CD:D8:49:3B:AC:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/rsioMoH-iyda7gQb4zzN2Ek7rAA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rsioMoH-iyda7gQb4zzN2Ek7rAA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/rsioMoH-iyda7gQb4zzN2Ek7rAA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:e4:22:3d:03:80:5c:9c:d5:db:62:3c:52:ab:c1:b9:aa:5a: 24:28:1e:97:04:a7:19:ed:9a:f0:97:4f:74:12:87:2b:42:f3: aa:21:13:b8:ba:16:81:23:dc:f8:2e:65:3a:96:41:c5:1b:27: d9:28:a8:69:1c:7c:fb:84:ae:fc:0f:5a:40:7a:2e:4d:fd:95: 1b:58:59:d9:14:32:39:88:13:d2:ab:11:b1:91:83:b5:b5:f1: 03:86:e0:ab:61:e0:84:bf:03:46:ad:b1:9b:02:7b:9e:a7:13: 4d:b8:7c:6c:da:2d:ef:16:10:eb:d9:87:2b:54:76:8d:57:37: b4:6b:9a:49:af:e3:c6:3d:ad:42:e2:3c:df:70:97:17:d0:53: 8c:1c:f4:27:e2:a7:e3:43:0f:59:3c:97:ee:f8:e7:89:03:94: 45:6a:0b:66:49:d8:1c:fb:72:7c:0d:67:f3:ee:79:62:63:4a: d1:d0:f6:9f:71:e0:c1:33:87:ee:49:30:84:5f:8f:44:3e:78: 0d:42:d2:2c:a9:8a:02:57:ee:a7:bc:a3:69:e6:c1:42:b2:47: 68:c0:9d:5f:63:24:8f:2b:c7:58:fe:81:58:81:e9:62:5f:36: 30:23:ae:bd:49:08:2a:7d:16:ee:23:c4:fe:f0:b1:b4:48:2d: 88:27:01:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKw8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZENUQxMTAvBgNVBAUTKEFFQzhBODMyODFGRThCMjc1QUVFMDQxQkUzM0NDREQ4 NDkzQkFDMDAwHhcNMjUwNjE0MTQyOTU1WhcNMjUwNjIxMTQyOTU1WjAYMRYwFAYD VQQDEw02ODRkODc2NC02MzBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAusnNKyQF9Txeaz6664djYZTIkEu/kiGRF99x4DugXmX7pOHaAvaV5ywfETKw kB6Z8e6lb//lgWHckeBnrYcbsTtJJ+psUrpVqXIAa6g+3uOwsJFgCSRX6SeZAZXa wgHCV+/LHEwY7gvYvOCUG3UkbV0Lun40oYWMTjuWFCeATSehGkpiJOeuwyDY1QHN hohr7U0DKPMOSgCQtlPmuDMhm2dApG4gxt116oGeZ9VfQO3a6c0GxNoVYsrr/N58 4zeEZuMiNgAARgFj26eT9K2EujHyvbQV6tLooH7VWqW5hRi6fA0xRUl4kz7/qz50 CqC5FZBcQjcSPERkXMjRNtpZSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOB3ewJC kUp9BJKOpLTTcoVg3H2OMB8GA1UdIwQYMBaAFK7IqDKB/osnWu4EG+M8zdhJO6wA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkQ1RC85RENCNjhFMDFE ODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9yc2lvTW9ILWl5ZGE3Z1FiNHp6TjJFazdy QUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JzaW9Nb0gtaXlkYTdnUWI0enpOMkVrN3JBQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkQ1RC85RENCNjhFMDFEODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9yc2lvTW9ILWl5 ZGE3Z1FiNHp6TjJFazdyQUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBC5CI9A4BcnNXbYjxSq8G5qlokKB6XBKcZ7Zrwl090EocrQvOqIRO4 uhaBI9z4LmU6lkHFGyfZKKhpHHz7hK78D1pAei5N/ZUbWFnZFDI5iBPSqxGxkYO1 tfEDhuCrYeCEvwNGrbGbAnuepxNNuHxs2i3vFhDr2YcrVHaNVze0a5pJr+PGPa1C 4jzfcJcX0FOMHPQn4qfjQw9ZPJfu+OeJA5RFagtmSdgc+3J8DWfz7nliY0rR0Paf ceDBM4fuSTCEX49EPngNQtIsqYoCV+6nvKNp5sFCskdowJ1fYySPK8dY/oFYgeli XzYwI669SQgqfRbuI8T+8LG0SC2IJwHR -----END CERTIFICATE-----Generated at Sun Jun 15 08:13:55 2025 by rpki-client