$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC3C9/C12CDAE4318E11F09C36DA7BC4F9AE02/vOn6bDd8lDSxLHe-_N1CpbcDT_I.mft File: vOn6bDd8lDSxLHe-_N1CpbcDT_I.mft (raw, json) Hash identifier: enAlIahVV8T3jk1yJfjIiF+HCsofkBGo+zeRkECOwaA= Subject key identifier: CC:37:1A:57:6B:22:54:E2:73:3B:A1:46:DF:50:86:37:6C:B5:6D:16 Authority key identifier: BC:E9:FA:6C:37:7C:94:34:B1:2C:77:BE:FC:DD:42:A5:B7:03:4F:F2 Certificate issuer: /CN=A91EC3C9/serialNumber=BCE9FA6C377C9434B12C77BEFCDD42A5B7034FF2 Certificate serial: 12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOn6bDd8lDSxLHe-_N1CpbcDT_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC3C9/C12CDAE4318E11F09C36DA7BC4F9AE02/vOn6bDd8lDSxLHe-_N1CpbcDT_I.mft Manifest number: 12 Signing time: Fri 13 Jun 2025 06:56:42 +0000 Manifest this update: Fri 13 Jun 2025 06:56:42 +0000 Manifest next update: Fri 20 Jun 2025 06:56:42 +0000 Files and hashes: 1: vOn6bDd8lDSxLHe-_N1CpbcDT_I.crl (hash: GOXmrcuWuYcgF9xEi0hCzl9MT7zkDxxr0QAkfF1Im5c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC3C9/C12CDAE4318E11F09C36DA7BC4F9AE02/vOn6bDd8lDSxLHe-_N1CpbcDT_I.crl rsync://rpki.apnic.net/member_repository/A91EC3C9/C12CDAE4318E11F09C36DA7BC4F9AE02/vOn6bDd8lDSxLHe-_N1CpbcDT_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOn6bDd8lDSxLHe-_N1CpbcDT_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 06:56:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC3C9, serialNumber=BCE9FA6C377C9434B12C77BEFCDD42A5B7034FF2 Validity Not Before: Jun 13 06:56:42 2025 GMT Not After : Jun 20 06:56:42 2025 GMT Subject: CN=684bcbaa-4f6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a1:c7:7a:c6:7a:da:3d:4b:0c:ef:4b:3f:7d: 75:62:9b:79:ec:6f:9e:6e:a6:c3:91:32:a4:cb:cc: fa:ff:45:d3:00:37:b2:26:77:1e:63:08:76:32:1e: f3:d0:0e:0c:a1:97:9a:49:d3:72:46:1c:58:f3:74: 09:88:fd:7c:97:b5:6d:65:4d:5c:8b:21:15:6a:9c: ec:80:8f:48:25:2b:6a:51:3b:83:59:0b:40:49:dd: 07:95:cc:aa:33:12:91:46:fa:a6:00:05:9b:97:f0: d7:ae:a6:13:ef:46:5a:6a:34:e3:73:2d:79:2f:69: f1:66:d4:aa:1e:bf:d2:8e:4d:b0:97:80:18:3d:c8: b5:b8:bd:b1:8e:1d:9c:1c:fd:6e:f6:71:aa:4f:e0: 71:9e:28:c8:07:0d:f4:99:cf:1f:1a:3f:43:04:96: 9f:be:f2:86:b7:8d:9a:5c:91:c2:7c:77:1d:b1:fa: e2:3b:fe:84:70:a2:04:56:80:bd:dd:3e:a4:71:44: b7:df:30:60:fa:ab:2a:31:1b:3b:98:da:8c:7c:c0: a8:ce:a0:27:f6:bd:dc:6f:8c:59:42:3d:82:91:d4: e8:37:03:c9:6e:f4:69:fc:8d:a5:f9:e3:a2:d1:d1: 12:e7:7e:cf:e2:35:33:f5:ef:f2:5a:bf:49:f7:51: c6:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:37:1A:57:6B:22:54:E2:73:3B:A1:46:DF:50:86:37:6C:B5:6D:16 X509v3 Authority Key Identifier: keyid:BC:E9:FA:6C:37:7C:94:34:B1:2C:77:BE:FC:DD:42:A5:B7:03:4F:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC3C9/C12CDAE4318E11F09C36DA7BC4F9AE02/vOn6bDd8lDSxLHe-_N1CpbcDT_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOn6bDd8lDSxLHe-_N1CpbcDT_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC3C9/C12CDAE4318E11F09C36DA7BC4F9AE02/vOn6bDd8lDSxLHe-_N1CpbcDT_I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:ca:0a:33:d1:17:57:3c:44:b2:d6:d3:56:0b:a3:9a:2d:5c: 3e:13:f1:93:f1:f0:59:d9:d3:91:7c:58:23:fe:4d:bb:de:4e: c2:95:ad:e2:43:2c:d0:94:6f:95:75:89:94:6a:c9:22:b3:d4: 9f:50:02:fd:22:d6:e0:86:f8:4c:1b:08:9f:cc:db:92:b2:42: f0:22:b9:64:84:e5:3b:81:07:2b:88:15:d3:0c:3d:72:74:e5: 1d:b2:e4:9f:35:d4:44:ac:08:73:6a:ee:d0:d7:11:fc:56:bc: ea:2d:93:73:6d:18:38:98:9b:ed:e7:a6:3c:71:6f:e1:ff:c4: 2c:5a:06:71:a9:c5:c6:ab:8b:e1:9c:d3:f6:47:3f:06:14:82: e5:df:fc:f8:1d:a0:af:ca:e6:73:31:91:e4:f1:11:9a:a9:7e: e4:6f:4d:16:fe:77:c6:fb:e3:4d:02:d4:7f:fd:a7:c2:96:b0: b8:ab:59:04:0f:85:5d:fe:6b:b6:fa:17:0b:4b:e7:76:13:40: 56:9e:35:59:5a:fc:2c:e6:6e:be:06:8f:cf:66:4c:1d:d9:85: 54:dc:c5:2d:20:52:ec:66:6e:f5:3d:24:9d:84:bb:15:43:77: d3:aa:2f:c4:31:f2:3a:0d:5e:7c:56:62:f8:cc:06:c7:a8:77: a2:13:3e:88 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QzNDOTExMC8GA1UEBRMoQkNFOUZBNkMzNzdDOTQzNEIxMkM3N0JFRkNERDQyQTVC NzAzNEZGMjAeFw0yNTA2MTMwNjU2NDJaFw0yNTA2MjAwNjU2NDJaMBgxFjAUBgNV BAMTDTY4NGJjYmFhLTRmNmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCaocd6xnraPUsM70s/fXVim3nsb55upsORMqTLzPr/RdMAN7Imdx5jCHYyHvPQ Dgyhl5pJ03JGHFjzdAmI/XyXtW1lTVyLIRVqnOyAj0glK2pRO4NZC0BJ3QeVzKoz EpFG+qYABZuX8NeuphPvRlpqNONzLXkvafFm1Koev9KOTbCXgBg9yLW4vbGOHZwc /W72capP4HGeKMgHDfSZzx8aP0MElp++8oa3jZpckcJ8dx2x+uI7/oRwogRWgL3d PqRxRLffMGD6qyoxGzuY2ox8wKjOoCf2vdxvjFlCPYKR1Og3A8lu9Gn8jaX546LR 0RLnfs/iNTP17/Jav0n3UcbfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzDcaV2si VOJzO6FG31CGN2y1bRYwHwYDVR0jBBgwFoAUvOn6bDd8lDSxLHe+/N1CpbcDT/Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVDM0M5L0MxMkNEQUU0MzE4 RTExRjA5QzM2REE3QkM0RjlBRTAyL3ZPbjZiRGQ4bERTeExIZS1fTjFDcGJjRFRf SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdk9uNmJEZDhsRFN4TEhlLV9OMUNwYmNEVF9JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVD M0M5L0MxMkNEQUU0MzE4RTExRjA5QzM2REE3QkM0RjlBRTAyL3ZPbjZiRGQ4bERT eExIZS1fTjFDcGJjRFRfSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ3KCjPRF1c8RLLW01YLo5otXD4T8ZPx8FnZ05F8WCP+TbveTsKVreJD LNCUb5V1iZRqySKz1J9QAv0i1uCG+EwbCJ/M25KyQvAiuWSE5TuBByuIFdMMPXJ0 5R2y5J811ESsCHNq7tDXEfxWvOotk3NtGDiYm+3npjxxb+H/xCxaBnGpxcari+Gc 0/ZHPwYUguXf/PgdoK/K5nMxkeTxEZqpfuRvTRb+d8b7400C1H/9p8KWsLirWQQP hV3+a7b6FwtL53YTQFaeNVla/Czmbr4Gj89mTB3ZhVTcxS0gUuxmbvU9JJ2EuxVD d9OqL8Qx8joNXnxWYvjMBseod6ITPog= -----END CERTIFICATE-----Generated at Sun Jun 15 05:17:40 2025 by rpki-client