$ rpki-client -vvf rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/mIulA6dlHjJofEyW9u3hh8c9BDg.mft File: mIulA6dlHjJofEyW9u3hh8c9BDg.mft (raw, json) Hash identifier: navrIMfPAy26Msx98Rb4MvPD1zfKWYtzjCjnxYa/Fjg= Subject key identifier: EE:0E:A5:AB:DC:CD:CA:07:27:96:38:68:20:C0:33:32:C1:4D:1A:53 Authority key identifier: 98:8B:A5:03:A7:65:1E:32:68:7C:4C:96:F6:ED:E1:87:C7:3D:04:38 Certificate issuer: /CN=A91E923A/serialNumber=988BA503A7651E32687C4C96F6EDE187C73D0438 Certificate serial: 0CDE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mIulA6dlHjJofEyW9u3hh8c9BDg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/mIulA6dlHjJofEyW9u3hh8c9BDg.mft Manifest number: 0E1C Signing time: Sat 14 Jun 2025 18:00:42 +0000 Manifest this update: Sat 14 Jun 2025 18:00:42 +0000 Manifest next update: Sat 21 Jun 2025 18:00:42 +0000 Files and hashes: 1: mIulA6dlHjJofEyW9u3hh8c9BDg.crl (hash: 1ObWqkyTTMwXgNT0pSABFFgt0sE9eyQERHeAvAfpySU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/mIulA6dlHjJofEyW9u3hh8c9BDg.crl rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/mIulA6dlHjJofEyW9u3hh8c9BDg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mIulA6dlHjJofEyW9u3hh8c9BDg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3294 (0xcde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E923A, serialNumber=988BA503A7651E32687C4C96F6EDE187C73D0438 Validity Not Before: Jun 14 18:00:42 2025 GMT Not After : Jun 21 18:00:42 2025 GMT Subject: CN=684db8ca-48e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:5b:37:42:5d:ba:02:a0:6f:ec:76:40:43:60: 06:d2:3e:a6:ce:08:e2:5c:7f:21:11:ac:34:13:40: 03:e7:33:bb:e4:d3:18:2e:69:90:89:fc:ab:b3:95: 13:4e:d1:09:b0:b3:d1:48:30:b9:35:1f:07:81:bd: 16:d0:bc:02:6d:10:09:7e:a9:6b:52:13:6d:9b:e3: ac:a1:d7:13:f9:56:35:28:21:ab:41:e7:7b:df:9f: 6b:ea:4f:f8:3f:9a:a5:4a:3d:e0:c9:2b:df:23:24: b8:4c:d8:5d:dc:61:48:4a:03:29:8d:61:31:22:39: c4:5f:b1:60:c4:48:4f:43:b0:86:94:7b:c3:42:c4: de:5e:d8:69:9e:98:75:a0:2f:3f:89:1f:41:c1:f2: 0e:39:4b:b5:9c:80:5c:69:34:b7:0e:31:6e:52:e8: 33:8a:a1:ba:a4:a0:90:a3:34:21:a6:61:02:66:4e: cb:2d:7a:db:23:63:6a:ee:a1:7a:ff:0a:bf:b0:d4: 4d:2f:28:1e:7b:5a:db:cb:da:71:ea:f5:3a:7e:7c: 63:df:af:ab:4c:a8:9c:b9:23:46:49:1a:b7:7f:9e: f8:3a:77:76:3d:48:29:16:36:ae:d8:bd:75:b9:d5: 8f:1e:ca:94:1c:7c:89:b3:2e:8e:2c:30:70:5b:d7: 1f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:0E:A5:AB:DC:CD:CA:07:27:96:38:68:20:C0:33:32:C1:4D:1A:53 X509v3 Authority Key Identifier: keyid:98:8B:A5:03:A7:65:1E:32:68:7C:4C:96:F6:ED:E1:87:C7:3D:04:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/mIulA6dlHjJofEyW9u3hh8c9BDg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mIulA6dlHjJofEyW9u3hh8c9BDg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/mIulA6dlHjJofEyW9u3hh8c9BDg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:3b:5e:af:18:60:a5:ad:8c:22:35:8f:b1:56:65:0a:e8:f9: 51:29:dc:14:6c:28:24:53:29:ae:7a:43:27:04:7c:ed:83:81: 0f:ee:c4:61:bd:78:b1:25:f4:68:4b:58:d3:01:b1:5e:4f:84: fc:ee:66:13:a0:6e:82:da:9d:8b:2d:30:d0:a3:f6:05:24:0b: 74:a7:89:98:64:3f:eb:5f:d7:0e:a5:ac:93:1a:79:a5:cd:1a: be:b0:c3:13:fa:22:e6:27:43:a4:cc:c8:80:71:af:b5:eb:c0: 29:6c:fa:a3:69:fc:ea:37:66:e3:4f:44:63:8c:41:8a:54:88: e5:fc:33:76:53:43:e5:ec:c8:82:c0:07:5c:ca:d4:45:19:01: 6d:06:21:fc:56:64:34:89:60:ca:20:8a:3f:05:03:40:27:d0: bb:ff:c6:0b:5e:4a:53:42:7e:db:0d:1a:ce:9c:68:50:ab:c0: cf:76:74:54:49:69:6f:6c:02:db:7e:bb:2f:a4:d8:e1:bb:2d: f2:5e:d1:6e:56:41:24:4f:b8:96:36:95:70:a6:c9:6d:fc:f2: 6c:2d:81:be:5d:01:be:d6:f8:72:9a:68:af:97:45:12:28:15: 8f:43:02:63:34:46:f6:a3:f7:15:aa:db:35:04:52:fa:c7:a5: b2:cb:e9:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTkyM0ExMTAvBgNVBAUTKDk4OEJBNTAzQTc2NTFFMzI2ODdDNEM5NkY2RURFMTg3 QzczRDA0MzgwHhcNMjUwNjE0MTgwMDQyWhcNMjUwNjIxMTgwMDQyWjAYMRYwFAYD VQQDEw02ODRkYjhjYS00OGU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoFs3Ql26AqBv7HZAQ2AG0j6mzgjiXH8hEaw0E0AD5zO75NMYLmmQifyrs5UT TtEJsLPRSDC5NR8Hgb0W0LwCbRAJfqlrUhNtm+OsodcT+VY1KCGrQed7359r6k/4 P5qlSj3gySvfIyS4TNhd3GFISgMpjWExIjnEX7FgxEhPQ7CGlHvDQsTeXthpnph1 oC8/iR9BwfIOOUu1nIBcaTS3DjFuUugziqG6pKCQozQhpmECZk7LLXrbI2Nq7qF6 /wq/sNRNLygee1rby9px6vU6fnxj36+rTKicuSNGSRq3f574Ond2PUgpFjau2L11 udWPHsqUHHyJsy6OLDBwW9cfGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO4Opavc zcoHJ5Y4aCDAMzLBTRpTMB8GA1UdIwQYMBaAFJiLpQOnZR4yaHxMlvbt4YfHPQQ4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTIzQS9DOUIzQ0M1NEVD MTExMUU5OEUwRjg2NDdDNEY5QUUwMi9tSXVsQTZkbEhqSm9mRXlXOXUzaGg4YzlC RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21JdWxBNmRsSGpKb2ZFeVc5dTNoaDhjOUJEZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTIzQS9DOUIzQ0M1NEVDMTExMUU5OEUwRjg2NDdDNEY5QUUwMi9tSXVsQTZkbEhq Sm9mRXlXOXUzaGg4YzlCRGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEO16vGGClrYwiNY+xVmUK6PlRKdwUbCgkUymuekMnBHztg4EP7sRh vXixJfRoS1jTAbFeT4T87mYToG6C2p2LLTDQo/YFJAt0p4mYZD/rX9cOpayTGnml zRq+sMMT+iLmJ0OkzMiAca+168ApbPqjafzqN2bjT0RjjEGKVIjl/DN2U0Pl7MiC wAdcytRFGQFtBiH8VmQ0iWDKIIo/BQNAJ9C7/8YLXkpTQn7bDRrOnGhQq8DPdnRU SWlvbALbfrsvpNjhuy3yXtFuVkEkT7iWNpVwpslt/PJsLYG+XQG+1vhymmivl0US KBWPQwJjNEb2o/cVqts1BFL6x6Wyy+mo -----END CERTIFICATE-----Generated at Sun Jun 15 09:48:50 2025 by rpki-client