$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7EFC/1D9382EC45BC11F0AB97CC09C4F9AE02/_DR_mfrUz-7KsxUhAkJ3GusIbXU.mft File: _DR_mfrUz-7KsxUhAkJ3GusIbXU.mft (raw, json) Hash identifier: cznMdt/Tk3cxYYcjkIuaNZwXU9LZu3MZo5iR1ZqNhA8= Subject key identifier: B8:0F:BC:63:7D:3B:0D:06:2F:60:3F:E1:14:6A:6A:B0:35:CD:51:15 Authority key identifier: FC:34:7F:99:FA:D4:CF:EE:CA:B3:15:21:02:42:77:1A:EB:08:6D:75 Certificate issuer: /CN=A91F7EFC/serialNumber=FC347F99FAD4CFEECAB315210242771AEB086D75 Certificate serial: 04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_DR_mfrUz-7KsxUhAkJ3GusIbXU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7EFC/1D9382EC45BC11F0AB97CC09C4F9AE02/_DR_mfrUz-7KsxUhAkJ3GusIbXU.mft Manifest number: 04 Signing time: Fri 13 Jun 2025 07:05:24 +0000 Manifest this update: Fri 13 Jun 2025 07:05:23 +0000 Manifest next update: Fri 20 Jun 2025 07:05:23 +0000 Files and hashes: 1: _DR_mfrUz-7KsxUhAkJ3GusIbXU.crl (hash: y43heFaBNt6pA/ym0afdFjS2+IPLdKGVdvwznnIOCPM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7EFC/1D9382EC45BC11F0AB97CC09C4F9AE02/_DR_mfrUz-7KsxUhAkJ3GusIbXU.crl rsync://rpki.apnic.net/member_repository/A91F7EFC/1D9382EC45BC11F0AB97CC09C4F9AE02/_DR_mfrUz-7KsxUhAkJ3GusIbXU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_DR_mfrUz-7KsxUhAkJ3GusIbXU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 07:05:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7EFC, serialNumber=FC347F99FAD4CFEECAB315210242771AEB086D75 Validity Not Before: Jun 13 07:05:23 2025 GMT Not After : Jun 20 07:05:23 2025 GMT Subject: CN=684bcdb3-c0c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:63:e8:e3:fa:83:30:36:29:8e:9a:4d:b9:99: 2e:3c:cd:1a:fd:87:99:bb:fe:dd:7d:b2:6c:05:66: ae:ca:99:97:97:32:59:b7:0f:3f:04:28:fc:c6:61: d7:39:bf:fd:7c:b4:5d:9a:3d:12:ca:89:8c:9e:c5: 09:9e:51:f4:b0:49:b4:84:a9:b8:88:80:20:c5:74: 3e:54:a6:8a:34:81:87:98:05:fc:ed:0a:20:83:36: 68:65:f5:1a:98:04:a7:aa:4d:77:80:b4:8c:78:8a: 87:00:58:a7:f7:df:a8:d5:fe:8b:9c:ee:cb:21:cb: 0f:e1:ab:7a:9d:6c:7c:2e:9a:4a:b2:91:a4:05:95: c7:25:2e:2c:81:04:da:c2:ed:4a:77:24:ad:dd:42: 4f:94:d9:d8:93:3d:45:76:4d:1f:c0:97:e0:63:16: a9:ec:80:eb:1e:1c:75:5b:6a:03:c6:f8:da:5b:f7: 23:06:f2:8b:25:f2:a6:4a:ad:c9:40:51:8f:d1:5b: 6e:e9:64:34:14:fc:d0:11:57:f2:1b:7c:3b:b4:86: 30:c0:dc:2f:6d:da:41:b5:ad:31:48:fd:c2:4b:de: 54:43:91:6d:b2:63:68:fe:fe:32:26:eb:15:81:55: 40:6b:07:c0:f1:e8:23:f9:7a:28:66:f5:99:f6:57: a0:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:0F:BC:63:7D:3B:0D:06:2F:60:3F:E1:14:6A:6A:B0:35:CD:51:15 X509v3 Authority Key Identifier: keyid:FC:34:7F:99:FA:D4:CF:EE:CA:B3:15:21:02:42:77:1A:EB:08:6D:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7EFC/1D9382EC45BC11F0AB97CC09C4F9AE02/_DR_mfrUz-7KsxUhAkJ3GusIbXU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_DR_mfrUz-7KsxUhAkJ3GusIbXU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7EFC/1D9382EC45BC11F0AB97CC09C4F9AE02/_DR_mfrUz-7KsxUhAkJ3GusIbXU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:5b:59:2a:fc:73:9b:b3:1f:00:16:38:20:44:18:e9:d0:d0: 86:63:ef:6a:75:2f:50:83:f9:25:30:b0:4b:5a:5f:7e:98:41: 33:00:bf:41:b6:7a:f7:24:7c:2b:16:1d:1a:58:32:01:50:85: c2:59:8e:1d:05:19:ce:c6:e7:33:b5:1b:2e:a3:dc:b9:ea:f6: b0:6c:f8:aa:60:e6:ba:f4:a0:08:c8:07:ab:8e:71:63:be:d8: 37:e7:88:85:f1:c4:4c:c0:a3:17:fe:ac:01:7d:4f:f0:5d:bc: 76:3e:0f:22:c5:eb:e7:c3:45:fd:e7:7d:f5:71:9c:e6:4f:25: 4c:a6:7f:8b:90:e0:80:02:09:0b:81:8e:d0:4a:a4:57:13:06: 62:88:87:b5:b4:91:8a:a9:9b:7d:dc:a5:b9:25:29:83:d4:b7: 9e:df:91:2d:a0:93:dd:44:83:a8:fb:cb:a5:29:3a:81:f1:cd: 59:02:58:77:eb:e8:41:5d:c5:e9:b8:7a:6b:81:2f:34:3d:3f: 73:c2:27:f0:cd:ef:cb:db:55:33:f2:0e:19:88:8b:eb:80:83: e6:56:2e:fa:84:90:12:dd:ce:d4:53:01:3f:e2:67:b2:58:71: 31:6c:4f:df:ec:e9:e3:a1:9c:1b:8e:36:5f:ff:6a:c9:11:b7: 4a:5f:f6:f7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG N0VGQzExMC8GA1UEBRMoRkMzNDdGOTlGQUQ0Q0ZFRUNBQjMxNTIxMDI0Mjc3MUFF QjA4NkQ3NTAeFw0yNTA2MTMwNzA1MjNaFw0yNTA2MjAwNzA1MjNaMBgxFjAUBgNV BAMTDTY4NGJjZGIzLWMwYzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsY+jj+oMwNimOmk25mS48zRr9h5m7/t19smwFZq7KmZeXMlm3Dz8EKPzGYdc5 v/18tF2aPRLKiYyexQmeUfSwSbSEqbiIgCDFdD5Upoo0gYeYBfztCiCDNmhl9RqY BKeqTXeAtIx4iocAWKf336jV/ouc7sshyw/hq3qdbHwumkqykaQFlcclLiyBBNrC 7Up3JK3dQk+U2diTPUV2TR/Al+BjFqnsgOseHHVbagPG+Npb9yMG8osl8qZKrclA UY/RW27pZDQU/NARV/IbfDu0hjDA3C9t2kG1rTFI/cJL3lRDkW2yY2j+/jIm6xWB VUBrB8Dx6CP5eihm9Zn2V6A7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUuA+8Y307 DQYvYD/hFGpqsDXNURUwHwYDVR0jBBgwFoAU/DR/mfrUz+7KsxUhAkJ3GusIbXUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY3RUZDLzFEOTM4MkVDNDVC QzExRjBBQjk3Q0MwOUM0RjlBRTAyL19EUl9tZnJVei03S3N4VWhBa0ozR3VzSWJY VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvX0RSX21mclV6LTdLc3hVaEFrSjNHdXNJYlhVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY3 RUZDLzFEOTM4MkVDNDVCQzExRjBBQjk3Q0MwOUM0RjlBRTAyL19EUl9tZnJVei03 S3N4VWhBa0ozR3VzSWJYVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALVbWSr8c5uzHwAWOCBEGOnQ0IZj72p1L1CD+SUwsEtaX36YQTMAv0G2 evckfCsWHRpYMgFQhcJZjh0FGc7G5zO1Gy6j3Lnq9rBs+Kpg5rr0oAjIB6uOcWO+ 2DfniIXxxEzAoxf+rAF9T/BdvHY+DyLF6+fDRf3nffVxnOZPJUymf4uQ4IACCQuB jtBKpFcTBmKIh7W0kYqpm33cpbklKYPUt57fkS2gk91Eg6j7y6UpOoHxzVkCWHfr 6EFdxem4emuBLzQ9P3PCJ/DN78vbVTPyDhmIi+uAg+ZWLvqEkBLdztRTAT/iZ7JY cTFsT9/s6eOhnBuONl//askRt0pf9vc= -----END CERTIFICATE-----Generated at Sat Jun 14 18:48:06 2025 by rpki-client