$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.mft File: 8YaDAEWuVIbpCXNDfanSB6VmhpE.mft (raw, json) Hash identifier: +lNLy7jB3ACd5zj1gmdy7XPYIl/X0yQt9kp3Qfp/4e4= Subject key identifier: 33:CE:C0:82:20:24:46:2B:2B:CD:7D:1C:56:37:FD:1D:D2:0A:79:AD Authority key identifier: F1:86:83:00:45:AE:54:86:E9:09:73:43:7D:A9:D2:07:A5:66:86:91 Certificate issuer: /CN=A91F5AAA/serialNumber=F186830045AE5486E90973437DA9D207A5668691 Certificate serial: 31F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YaDAEWuVIbpCXNDfanSB6VmhpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.mft Manifest number: 31F2 Signing time: Sat 14 Jun 2025 15:24:37 +0000 Manifest this update: Sat 14 Jun 2025 15:24:36 +0000 Manifest next update: Sat 21 Jun 2025 15:24:36 +0000 Files and hashes: 1: 8YaDAEWuVIbpCXNDfanSB6VmhpE.crl (hash: k3qUlOG0C5/qHXBb0vtEMSg2/anJJFGPtBFn8LU6GsA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.crl rsync://rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YaDAEWuVIbpCXNDfanSB6VmhpE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 15:24:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12786 (0x31f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5AAA, serialNumber=F186830045AE5486E90973437DA9D207A5668691 Validity Not Before: Jun 14 15:24:36 2025 GMT Not After : Jun 21 15:24:36 2025 GMT Subject: CN=684d9434-310c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:63:0f:2a:5c:35:8f:cc:0c:47:bd:cc:f5:b7: 26:cc:87:91:2b:5b:db:8a:d9:d1:b0:e6:38:55:69: 8c:dd:70:53:df:e9:0f:12:22:28:28:96:d0:6f:2f: f0:c4:46:f0:e2:03:0f:a0:d3:78:19:cd:59:64:fc: e5:5d:38:84:eb:72:d5:c6:37:cd:87:10:b7:46:dc: 4e:cb:c9:e2:c8:8d:64:5b:30:cc:ec:36:52:a0:1a: 66:11:30:3f:3d:e5:ff:e9:70:9e:8d:c8:91:9f:aa: b8:37:1e:01:8a:25:31:34:51:f5:a4:d6:67:9d:71: 51:82:0a:d2:c0:57:2d:90:3a:6c:23:ae:b7:a4:02: 3b:7e:d8:a2:31:ab:ff:7e:34:c8:c3:a8:09:25:8c: ad:20:d9:49:7d:d8:ea:47:ed:80:7a:cc:66:d3:17: 52:e3:34:e3:3d:8f:47:97:03:db:09:d3:96:9b:5d: 1b:2f:ab:a3:88:b7:a6:e9:b7:46:94:ad:cd:33:f3: 24:16:2f:fa:45:13:02:97:64:e4:90:a8:dd:35:ef: e9:fa:9c:dc:f0:6b:ab:66:b9:46:49:10:a4:b3:19: a1:1a:94:17:c3:e8:da:44:73:8f:53:f9:db:06:56: 9b:5b:aa:22:b6:1c:39:92:16:9e:dc:ac:15:4c:4d: b5:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:CE:C0:82:20:24:46:2B:2B:CD:7D:1C:56:37:FD:1D:D2:0A:79:AD X509v3 Authority Key Identifier: keyid:F1:86:83:00:45:AE:54:86:E9:09:73:43:7D:A9:D2:07:A5:66:86:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YaDAEWuVIbpCXNDfanSB6VmhpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:97:16:f7:be:38:45:b8:fe:ba:98:26:e3:28:a2:d1:3a:29: d5:cd:e6:86:84:f7:a7:49:e2:40:bb:6d:58:d5:6a:b9:65:45: 47:90:88:6c:84:0d:97:f3:66:18:9f:ce:36:9a:e1:a9:a3:cb: 88:d7:61:d2:fa:ac:f9:ef:46:46:e6:34:cf:87:8a:18:7a:62: d4:3d:6f:2e:4a:b2:b9:8c:11:7c:ec:84:78:64:f1:4c:88:26: 10:0b:1b:0f:ef:3f:d6:8c:46:16:d6:08:8a:17:3c:91:a5:52: 50:42:bf:90:4f:12:b8:85:e9:c9:40:d5:eb:8e:64:88:42:e0: 3b:33:14:ca:a0:4b:db:b9:da:78:fd:f8:8c:44:18:9d:71:89: 29:e8:f4:d9:71:2c:df:08:9f:60:69:29:81:6d:96:be:76:db: e5:a4:e4:17:8b:dd:b4:bd:9d:0d:aa:33:bc:2a:13:13:20:b0: 26:60:fe:d8:4b:da:43:d8:5e:d2:52:7d:01:27:b2:ef:be:76: 0f:f8:e3:cd:ab:3f:58:12:fa:5a:b1:87:ff:bc:ef:2e:fb:3f: e7:09:e8:92:c5:33:e2:0d:de:4d:0d:f6:dd:3a:fc:64:03:0a: 4b:bf:79:fb:04:4a:97:ae:5d:54:6b:21:c5:97:cf:07:a7:0f: 56:45:5c:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMfIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjVBQUExMTAvBgNVBAUTKEYxODY4MzAwNDVBRTU0ODZFOTA5NzM0MzdEQTlEMjA3 QTU2Njg2OTEwHhcNMjUwNjE0MTUyNDM2WhcNMjUwNjIxMTUyNDM2WjAYMRYwFAYD VQQDEw02ODRkOTQzNC0zMTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxWMPKlw1j8wMR73M9bcmzIeRK1vbitnRsOY4VWmM3XBT3+kPEiIoKJbQby/w xEbw4gMPoNN4Gc1ZZPzlXTiE63LVxjfNhxC3RtxOy8niyI1kWzDM7DZSoBpmETA/ PeX/6XCejciRn6q4Nx4BiiUxNFH1pNZnnXFRggrSwFctkDpsI663pAI7ftiiMav/ fjTIw6gJJYytINlJfdjqR+2Aesxm0xdS4zTjPY9HlwPbCdOWm10bL6ujiLem6bdG lK3NM/MkFi/6RRMCl2TkkKjdNe/p+pzc8GurZrlGSRCksxmhGpQXw+jaRHOPU/nb BlabW6oithw5khae3KwVTE21FwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDPOwIIg JEYrK819HFY3/R3SCnmtMB8GA1UdIwQYMBaAFPGGgwBFrlSG6QlzQ32p0gelZoaR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNUFBQS84QjI4MjQ1MjlG RjcxMUUyQUQ5Q0VERUUyRjVBNzc1NC84WWFEQUVXdVZJYnBDWE5EZmFuU0I2Vm1o cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhZYURBRVd1VklicENYTkRmYW5TQjZWbWhwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NUFBQS84QjI4MjQ1MjlGRjcxMUUyQUQ5Q0VERUUyRjVBNzc1NC84WWFEQUVXdVZJ YnBDWE5EZmFuU0I2Vm1ocEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCslxb3vjhFuP66mCbjKKLROinVzeaGhPenSeJAu21Y1Wq5ZUVHkIhs hA2X82YYn842muGpo8uI12HS+qz570ZG5jTPh4oYemLUPW8uSrK5jBF87IR4ZPFM iCYQCxsP7z/WjEYW1giKFzyRpVJQQr+QTxK4henJQNXrjmSIQuA7MxTKoEvbudp4 /fiMRBidcYkp6PTZcSzfCJ9gaSmBbZa+dtvlpOQXi920vZ0NqjO8KhMTILAmYP7Y S9pD2F7SUn0BJ7LvvnYP+OPNqz9YEvpasYf/vO8u+z/nCeiSxTPiDd5NDfbdOvxk AwpLv3n7BEqXrl1UayHFl88Hpw9WRVyU -----END CERTIFICATE-----Generated at Sun Jun 15 10:06:14 2025 by rpki-client