$ rpki-client -vvf rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.mft File: 3nj3vVkkqAZ0kL-9MuR-f_q2dyA.mft (raw, json) Hash identifier: /OEKQ0mImifaPe4YvzyHeyTFhxcClDI3PCCdPoo/5hY= Subject key identifier: 0B:1D:49:EC:CC:54:39:D4:FD:7E:E8:27:8F:95:80:06:5F:29:71:12 Authority key identifier: DE:78:F7:BD:59:24:A8:06:74:90:BF:BD:32:E4:7E:7F:FA:B6:77:20 Certificate issuer: /CN=A9113C02/serialNumber=DE78F7BD5924A8067490BFBD32E47E7FFAB67720 Certificate serial: 0849 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.mft Manifest number: 2495 Signing time: Fri 30 May 2025 16:31:21 +0000 Manifest this update: Fri 30 May 2025 16:31:21 +0000 Manifest next update: Fri 06 Jun 2025 16:31:21 +0000 Files and hashes: 1: 3nj3vVkkqAZ0kL-9MuR-f_q2dyA.crl (hash: CMr0mE0QIPXSksQ68YovryQrsUc4bo6FlaRAm+ljIXY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.crl rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:31:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2121 (0x849) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113C02, serialNumber=DE78F7BD5924A8067490BFBD32E47E7FFAB67720 Validity Not Before: May 30 16:31:21 2025 GMT Not After : Jun 6 16:31:21 2025 GMT Subject: CN=6839dd59-7227 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:99:5d:55:5e:5f:59:67:5e:4d:2b:d9:5d:c5: d9:8a:ca:ba:b6:f2:82:65:d5:f8:74:95:b9:a7:d3: a9:88:ce:4b:ca:d1:71:db:02:78:74:b7:44:d5:35: 20:1b:6a:9b:36:84:51:82:83:34:75:94:38:a9:67: 10:1b:00:9f:4c:50:ad:bd:66:ac:d6:7c:7d:51:71: 7f:39:97:b3:41:67:48:2b:37:ff:16:22:7c:f1:2c: a9:5b:ad:75:a1:d4:f1:06:d0:46:11:09:eb:4e:18: ed:20:14:48:1f:ca:ce:ec:48:b3:e8:4c:31:91:75: 47:bd:d6:92:0e:a6:83:e0:b5:c1:69:b9:84:16:5b: 47:8a:5c:cf:b2:b4:b1:b4:37:02:7b:63:5c:ea:b2: 26:2e:b8:9c:fd:93:e8:7f:1f:42:56:b0:ca:1c:19: 30:af:9f:b9:1d:ab:59:53:6d:1c:d4:d0:1b:e6:10: 06:97:9f:48:53:21:21:1e:35:cf:3c:13:2c:f4:96: b0:e3:fc:0e:ed:ad:84:eb:56:88:9c:3e:88:4c:b1: e7:4c:aa:98:3e:be:ab:01:33:cb:17:2d:5a:66:93: ce:f2:0a:b1:bb:78:cb:e9:88:bd:94:cb:95:55:f2: dc:d3:9d:ce:42:3c:de:fe:5a:b6:a0:af:ed:43:95: 4f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:1D:49:EC:CC:54:39:D4:FD:7E:E8:27:8F:95:80:06:5F:29:71:12 X509v3 Authority Key Identifier: keyid:DE:78:F7:BD:59:24:A8:06:74:90:BF:BD:32:E4:7E:7F:FA:B6:77:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:74:1c:46:17:b3:f2:81:01:c3:06:92:ee:27:52:e9:43:42: 3f:68:56:42:39:aa:ed:56:b9:04:2e:91:49:02:a8:a4:91:7b: 78:5e:1e:e6:ad:12:84:04:1f:fb:cb:51:9f:20:aa:84:d9:60: ec:0d:ad:4b:f3:90:df:70:71:57:d0:19:f1:ab:fb:1d:42:66: 20:bb:5e:58:00:65:e1:82:88:35:bb:0f:cf:33:cb:06:80:3b: 6c:87:c0:65:d3:ab:ee:0f:77:a9:70:df:d3:1a:71:14:63:2f: d1:2f:bd:26:58:e0:e8:a7:41:4b:04:a4:0a:3d:e3:df:36:7f: 50:45:24:b1:88:d1:0e:f6:45:11:71:57:2a:e9:16:38:8b:43: 62:f1:05:0b:3a:b0:f8:92:b7:c1:30:8a:8a:65:a6:13:74:1d: 82:be:72:49:c1:e3:4b:99:25:0d:de:9e:7f:ee:5a:f7:11:a2: 33:b9:58:0d:a4:e7:0c:9c:2d:88:2b:53:34:59:9a:1a:ef:60: 20:c0:41:ff:4e:09:4f:bf:bc:2f:03:68:6d:69:f8:b7:7f:05: f3:9a:89:89:64:ce:ec:02:d6:d4:da:e7:98:fa:7b:80:b2:fc: 48:6b:7c:74:97:6a:5e:a4:81:29:50:bc:f7:97:fd:20:9e:14: 51:89:34:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCEkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTNDMDIxMTAvBgNVBAUTKERFNzhGN0JENTkyNEE4MDY3NDkwQkZCRDMyRTQ3RTdG RkFCNjc3MjAwHhcNMjUwNTMwMTYzMTIxWhcNMjUwNjA2MTYzMTIxWjAYMRYwFAYD VQQDEw02ODM5ZGQ1OS03MjI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtpldVV5fWWdeTSvZXcXZisq6tvKCZdX4dJW5p9OpiM5LytFx2wJ4dLdE1TUg G2qbNoRRgoM0dZQ4qWcQGwCfTFCtvWas1nx9UXF/OZezQWdIKzf/FiJ88SypW611 odTxBtBGEQnrThjtIBRIH8rO7Eiz6EwxkXVHvdaSDqaD4LXBabmEFltHilzPsrSx tDcCe2Nc6rImLric/ZPofx9CVrDKHBkwr5+5HatZU20c1NAb5hAGl59IUyEhHjXP PBMs9Jaw4/wO7a2E61aInD6ITLHnTKqYPr6rATPLFy1aZpPO8gqxu3jL6Yi9lMuV VfLc053OQjze/lq2oK/tQ5VPAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAsdSezM VDnU/X7oJ4+VgAZfKXESMB8GA1UdIwQYMBaAFN54971ZJKgGdJC/vTLkfn/6tncg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0MwMi80QzQwNkZCNjQw NTYxMUU3QUYwNDFBMzVDNEY5QUUwMi8zbmozdlZra3FBWjBrTC05TXVSLWZfcTJk eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNuajN2VmtrcUFaMGtMLTlNdVItZl9xMmR5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx M0MwMi80QzQwNkZCNjQwNTYxMUU3QUYwNDFBMzVDNEY5QUUwMi8zbmozdlZra3FB WjBrTC05TXVSLWZfcTJkeUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCodBxGF7PygQHDBpLuJ1LpQ0I/aFZCOartVrkELpFJAqikkXt4Xh7m rRKEBB/7y1GfIKqE2WDsDa1L85DfcHFX0Bnxq/sdQmYgu15YAGXhgog1uw/PM8sG gDtsh8Bl06vuD3epcN/TGnEUYy/RL70mWODop0FLBKQKPePfNn9QRSSxiNEO9kUR cVcq6RY4i0Ni8QULOrD4krfBMIqKZaYTdB2CvnJJweNLmSUN3p5/7lr3EaIzuVgN pOcMnC2IK1M0WZoa72AgwEH/TglPv7wvA2htafi3fwXzmomJZM7sAtbU2ueY+nuA svxIa3x0l2pepIEpULz3l/0gnhRRiTTm -----END CERTIFICATE-----Generated at Sat May 31 16:55:10 2025 by rpki-client