$ rpki-client -vvf rpki.apnic.net/member_repository/A91F522D/6C0AD092FCB511EA88BF130FC4F9AE02/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.mft File: a2zd63E5qdk2Z22DpT7FZ_HW8Z8.mft (raw, json) Hash identifier: 1cLD7Ag6TWpp0Pynn4EK9vpoFnKCm78SGYeW1riIes0= Subject key identifier: EA:5F:ED:D3:84:62:A0:04:0D:68:E3:B6:27:7B:70:21:A1:EB:E3:CF Authority key identifier: 6B:6C:DD:EB:71:39:A9:D9:36:67:6D:83:A5:3E:C5:67:F1:D6:F1:9F Certificate issuer: /CN=A91F522D/serialNumber=6B6CDDEB7139A9D936676D83A53EC567F1D6F19F Certificate serial: 07C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F522D/6C0AD092FCB511EA88BF130FC4F9AE02/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.mft Manifest number: 07BE Signing time: Thu 12 Jun 2025 20:52:01 +0000 Manifest this update: Thu 12 Jun 2025 20:52:01 +0000 Manifest next update: Thu 19 Jun 2025 20:52:01 +0000 Files and hashes: 1: a2zd63E5qdk2Z22DpT7FZ_HW8Z8.crl (hash: 0PClsSmg91+3FU+MCcFdXv4+ooZLczEi31aVdoWeqM4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F522D/6C0AD092FCB511EA88BF130FC4F9AE02/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.crl rsync://rpki.apnic.net/member_repository/A91F522D/6C0AD092FCB511EA88BF130FC4F9AE02/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 20:52:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1987 (0x7c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F522D, serialNumber=6B6CDDEB7139A9D936676D83A53EC567F1D6F19F Validity Not Before: Jun 12 20:52:01 2025 GMT Not After : Jun 19 20:52:01 2025 GMT Subject: CN=684b3df1-9d21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:87:ad:c9:cc:ac:a0:1e:7a:33:27:7c:ba:fc: 73:9a:64:8b:c5:d8:88:2e:dd:61:5f:d5:ef:bb:20: c7:fb:49:8b:21:49:0c:c9:5b:a5:76:0d:4d:54:30: 7f:a8:36:e0:ae:c4:57:f3:81:58:02:27:16:f1:c8: a3:5b:ee:82:ce:57:6d:b9:cf:0e:4e:6b:c8:5e:64: 34:dd:df:32:5b:ca:31:8c:70:b3:f5:69:d4:ce:ec: 0c:0b:43:52:7c:45:c2:d0:e8:59:54:21:21:73:25: 62:6a:41:78:df:40:d2:66:33:b8:4f:34:7a:21:d8: a6:51:c3:1f:02:7e:20:cc:48:38:5f:68:b5:e0:06: ef:64:1f:29:54:d1:da:4c:f4:74:f8:4b:6a:de:f6: d5:3a:7f:c1:24:bd:af:7f:c2:66:7b:a3:f4:72:29: 8d:d8:62:35:54:62:2d:e4:1d:a7:45:11:63:ef:2d: 41:a5:23:e0:13:71:f8:c0:79:29:e9:44:4f:02:c5: 39:dd:72:25:6f:49:9a:00:b6:91:db:a5:6e:91:da: 77:9b:29:38:da:6d:7a:df:ac:4c:18:e5:61:56:d4: a2:d2:6f:e9:84:03:8c:70:c4:5a:bf:f8:e6:a2:64: 24:cb:00:53:fa:65:d3:17:64:d6:2f:68:09:79:e2: 0b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:5F:ED:D3:84:62:A0:04:0D:68:E3:B6:27:7B:70:21:A1:EB:E3:CF X509v3 Authority Key Identifier: keyid:6B:6C:DD:EB:71:39:A9:D9:36:67:6D:83:A5:3E:C5:67:F1:D6:F1:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F522D/6C0AD092FCB511EA88BF130FC4F9AE02/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F522D/6C0AD092FCB511EA88BF130FC4F9AE02/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:ea:17:96:2b:1a:cf:77:df:63:8f:14:08:20:dc:3e:4f:c4: 5c:1c:d7:f1:b0:ac:ec:61:25:44:06:47:35:c8:4c:68:b3:c4: 0a:8a:9b:78:96:1c:28:a3:e9:26:06:10:2f:e8:7d:30:fc:2b: 72:26:69:7c:cf:a3:0b:57:94:f3:75:7d:18:54:40:bf:e4:18: 57:74:cb:36:e9:c2:70:49:f6:9a:67:f9:66:e8:48:52:51:ec: ef:71:36:3f:0d:6a:fe:ac:c5:81:33:19:d6:4e:dc:70:63:06: 56:e1:96:9d:b3:8e:06:93:f2:dc:5a:f5:61:50:6f:f9:62:ea: 1f:55:6e:94:d6:4d:98:23:96:7a:4e:a0:19:44:b4:be:50:f1: 12:3b:f9:3b:f0:3d:20:67:3d:10:b3:15:ed:2e:44:38:e8:21: 51:a1:86:17:d3:f9:e9:d9:e1:38:0c:d5:88:7c:6d:39:cd:a8: 09:91:5a:bd:00:99:1b:e9:c6:f0:97:8b:bc:27:54:81:93:9c: a4:a6:2f:25:25:94:b1:3b:32:66:4e:a8:39:75:b9:52:ea:06: 27:6b:70:f9:d8:3d:a9:ad:d5:54:8c:ef:12:e9:97:b2:df:14: 61:62:0f:ab:b5:42:62:0d:a7:1b:24:b2:20:23:75:a1:dc:42: 4b:74:20:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjUyMkQxMTAvBgNVBAUTKDZCNkNEREVCNzEzOUE5RDkzNjY3NkQ4M0E1M0VDNTY3 RjFENkYxOUYwHhcNMjUwNjEyMjA1MjAxWhcNMjUwNjE5MjA1MjAxWjAYMRYwFAYD VQQDEw02ODRiM2RmMS05ZDIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq4etycysoB56Myd8uvxzmmSLxdiILt1hX9XvuyDH+0mLIUkMyVuldg1NVDB/ qDbgrsRX84FYAicW8cijW+6Czldtuc8OTmvIXmQ03d8yW8oxjHCz9WnUzuwMC0NS fEXC0OhZVCEhcyViakF430DSZjO4TzR6IdimUcMfAn4gzEg4X2i14AbvZB8pVNHa TPR0+Etq3vbVOn/BJL2vf8Jme6P0cimN2GI1VGIt5B2nRRFj7y1BpSPgE3H4wHkp 6URPAsU53XIlb0maALaR26Vukdp3myk42m1636xMGOVhVtSi0m/phAOMcMRav/jm omQkywBT+mXTF2TWL2gJeeIL4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOpf7dOE YqAEDWjjtid7cCGh6+PPMB8GA1UdIwQYMBaAFGts3etxOanZNmdtg6U+xWfx1vGf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTIyRC82QzBBRDA5MkZD QjUxMUVBODhCRjEzMEZDNEY5QUUwMi9hMnpkNjNFNXFkazJaMjJEcFQ3RlpfSFc4 WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2EyemQ2M0U1cWRrMloyMkRwVDdGWl9IVzhaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTIyRC82QzBBRDA5MkZDQjUxMUVBODhCRjEzMEZDNEY5QUUwMi9hMnpkNjNFNXFk azJaMjJEcFQ3RlpfSFc4WjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB06heWKxrPd99jjxQIINw+T8RcHNfxsKzsYSVEBkc1yExos8QKipt4 lhwoo+kmBhAv6H0w/CtyJml8z6MLV5TzdX0YVEC/5BhXdMs26cJwSfaaZ/lm6EhS UezvcTY/DWr+rMWBMxnWTtxwYwZW4Zads44Gk/LcWvVhUG/5YuofVW6U1k2YI5Z6 TqAZRLS+UPESO/k78D0gZz0QsxXtLkQ46CFRoYYX0/np2eE4DNWIfG05zagJkVq9 AJkb6cbwl4u8J1SBk5ykpi8lJZSxOzJmTqg5dblS6gYna3D52D2prdVUjO8S6Zey 3xRhYg+rtUJiDacbJLIgI3Wh3EJLdCAT -----END CERTIFICATE-----Generated at Sat Jun 14 17:15:05 2025 by rpki-client