$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA409/0289F6FC9CAC11EFAB595516C4F9AE02/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.mft File: N3g1zaK9Y2fvD-tepYGY-Bg6h8E.mft (raw, json) Hash identifier: w/uXVD+gIsbrQZx0W8XLa3uUneEZni37DFIHkw4XIGE= Subject key identifier: 6A:FF:2A:DC:5C:31:F8:02:7A:7E:68:76:9B:7B:32:EA:0F:8F:EE:4A Authority key identifier: 37:78:35:CD:A2:BD:63:67:EF:0F:EB:5E:A5:81:98:F8:18:3A:87:C1 Certificate issuer: /CN=A91EA409/serialNumber=377835CDA2BD6367EF0FEB5EA58198F8183A87C1 Certificate serial: 73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA409/0289F6FC9CAC11EFAB595516C4F9AE02/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.mft Manifest number: 73 Signing time: Thu 19 Jun 2025 06:10:58 +0000 Manifest this update: Thu 19 Jun 2025 06:10:57 +0000 Manifest next update: Thu 26 Jun 2025 06:10:57 +0000 Files and hashes: 1: N3g1zaK9Y2fvD-tepYGY-Bg6h8E.crl (hash: Sg3iia7OosBxovOCH09pap8uJv9oh0L2ZBbA6IPfl5k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA409/0289F6FC9CAC11EFAB595516C4F9AE02/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.crl rsync://rpki.apnic.net/member_repository/A91EA409/0289F6FC9CAC11EFAB595516C4F9AE02/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 06:10:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 115 (0x73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA409, serialNumber=377835CDA2BD6367EF0FEB5EA58198F8183A87C1 Validity Not Before: Jun 19 06:10:57 2025 GMT Not After : Jun 26 06:10:57 2025 GMT Subject: CN=6853a9f2-966d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:45:87:a0:8d:92:96:14:fb:6d:c9:d6:fc:ec: da:07:92:39:15:ab:c6:c8:4a:04:ef:eb:f1:c5:0f: 03:ec:14:d4:1d:15:e0:3e:43:40:17:b5:a7:3a:e3: 76:8a:33:48:c6:6d:e4:3b:ca:e4:84:e2:b7:a4:d7: ef:2c:96:a1:a9:2e:e5:35:69:14:da:01:52:c7:6d: fb:7f:ba:09:c4:02:80:7a:b2:29:1e:2a:9e:3e:f1: bb:eb:f0:9d:3a:84:6f:78:f5:ea:b1:a2:fe:0d:02: 47:f9:49:c3:12:40:e6:62:53:9f:56:0e:06:b0:78: 4b:b8:27:85:2a:25:e4:45:88:77:8f:8f:cd:34:bb: 23:31:13:d5:6b:1f:d8:1c:29:7e:d7:35:3e:37:c3: fb:ab:06:71:b0:a2:58:cd:50:c7:6b:14:1f:d5:96: 2b:2e:d4:c4:da:dd:bc:8b:58:7e:6a:7b:f9:6f:03: c7:36:48:a6:70:0b:8f:bb:8e:f6:fa:0d:1b:2c:ce: ec:ee:54:6e:61:68:e6:c9:d4:96:ee:ad:2f:82:7f: 69:aa:8d:58:b0:cf:57:0c:1f:11:3b:cc:0f:77:31: 2d:5f:38:60:61:e9:16:86:b6:56:ce:64:ad:65:af: 44:54:2a:8f:73:8c:4d:ed:fc:51:e1:d2:bc:40:09: 82:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:FF:2A:DC:5C:31:F8:02:7A:7E:68:76:9B:7B:32:EA:0F:8F:EE:4A X509v3 Authority Key Identifier: keyid:37:78:35:CD:A2:BD:63:67:EF:0F:EB:5E:A5:81:98:F8:18:3A:87:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA409/0289F6FC9CAC11EFAB595516C4F9AE02/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA409/0289F6FC9CAC11EFAB595516C4F9AE02/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:ab:40:c0:8c:20:e1:95:88:a1:fd:a5:d8:09:1c:bc:71:e6: 7c:55:07:f3:40:ce:41:74:36:ed:d7:4b:26:1b:37:7d:36:3d: 0e:76:98:b4:7f:74:48:46:2e:33:02:a6:60:29:aa:d7:7c:c5: 9a:bd:32:59:2f:43:4c:c5:ee:2b:00:5b:4f:f9:2b:88:06:3b: f8:1c:ac:11:c3:94:e9:8e:fc:77:04:21:47:79:34:24:3e:78: 1b:91:16:6e:cb:7f:27:bd:8d:4c:c5:77:a5:8b:25:45:98:a0: b3:fe:b2:a2:d7:4b:d8:b9:3f:fe:33:f4:3e:cc:57:e3:08:27: 52:b3:6f:b6:d5:ba:4c:02:28:ca:2b:9e:f7:ba:c8:a9:35:3c: 02:e7:a3:44:d2:0c:2c:50:e8:69:62:c4:0b:cb:ab:bc:75:5f: ee:5a:01:a1:6a:69:42:24:f9:ff:c6:0e:c6:72:3b:f5:06:c7: 0f:c7:46:67:cd:e2:0c:fd:30:9a:a6:bd:a0:b7:4a:7c:99:04: 03:6e:b4:81:7f:dd:dc:06:f7:8d:c9:5a:7e:ef:e3:00:57:ec: c5:7d:ab:17:c4:70:0d:8d:e6:94:85:a0:82:5f:1a:92:41:b3: d4:77:7a:d2:fd:e9:a4:42:53:e9:d3:a5:48:0d:16:de:bd:4b: ce:f9:d9:af -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBczANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QTQwOTExMC8GA1UEBRMoMzc3ODM1Q0RBMkJENjM2N0VGMEZFQjVFQTU4MTk4Rjgx ODNBODdDMTAeFw0yNTA2MTkwNjEwNTdaFw0yNTA2MjYwNjEwNTdaMBgxFjAUBgNV BAMTDTY4NTNhOWYyLTk2NmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJRYegjZKWFPttydb87NoHkjkVq8bISgTv6/HFDwPsFNQdFeA+Q0AXtac643aK M0jGbeQ7yuSE4rek1+8slqGpLuU1aRTaAVLHbft/ugnEAoB6sikeKp4+8bvr8J06 hG949eqxov4NAkf5ScMSQOZiU59WDgaweEu4J4UqJeRFiHePj800uyMxE9VrH9gc KX7XNT43w/urBnGwoljNUMdrFB/Vlisu1MTa3byLWH5qe/lvA8c2SKZwC4+7jvb6 DRsszuzuVG5haObJ1JburS+Cf2mqjViwz1cMHxE7zA93MS1fOGBh6RaGtlbOZK1l r0RUKo9zjE3t/FHh0rxACYIVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUav8q3Fwx +AJ6fmh2m3sy6g+P7kowHwYDVR0jBBgwFoAUN3g1zaK9Y2fvD+tepYGY+Bg6h8Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVBNDA5LzAyODlGNkZDOUNB QzExRUZBQjU5NTUxNkM0RjlBRTAyL04zZzF6YUs5WTJmdkQtdGVwWUdZLUJnNmg4 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTjNnMXphSzlZMmZ2RC10ZXBZR1ktQmc2aDhFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVB NDA5LzAyODlGNkZDOUNBQzExRUZBQjU5NTUxNkM0RjlBRTAyL04zZzF6YUs5WTJm dkQtdGVwWUdZLUJnNmg4RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABOrQMCMIOGViKH9pdgJHLxx5nxVB/NAzkF0Nu3XSyYbN302PQ52mLR/ dEhGLjMCpmApqtd8xZq9MlkvQ0zF7isAW0/5K4gGO/gcrBHDlOmO/HcEIUd5NCQ+ eBuRFm7Lfye9jUzFd6WLJUWYoLP+sqLXS9i5P/4z9D7MV+MIJ1Kzb7bVukwCKMor nve6yKk1PALno0TSDCxQ6GlixAvLq7x1X+5aAaFqaUIk+f/GDsZyO/UGxw/HRmfN 4gz9MJqmvaC3SnyZBANutIF/3dwG943JWn7v4wBX7MV9qxfEcA2N5pSFoIJfGpJB s9R3etL96aRCU+nTpUgNFt69S8752a8= -----END CERTIFICATE-----Generated at Sat Jun 21 03:44:50 2025 by rpki-client