$ rpki-client -vvf rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.mft File: 48M322aHKgqTXJ1VXltt01MHLHQ.mft (raw, json) Hash identifier: 2pbgcoYbGNmXq8gDLTjBQIZzC4rxc4IxqmSkMD799i0= Subject key identifier: A7:6B:30:A0:57:32:8C:41:8D:12:43:DE:84:3C:AF:C3:AA:85:99:00 Authority key identifier: E3:C3:37:DB:66:87:2A:0A:93:5C:9D:55:5E:5B:6D:D3:53:07:2C:74 Certificate issuer: /CN=A912B0A3/serialNumber=E3C337DB66872A0A935C9D555E5B6DD353072C74 Certificate serial: 07AC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/48M322aHKgqTXJ1VXltt01MHLHQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.mft Manifest number: 07AC Signing time: Sat 31 May 2025 21:19:17 +0000 Manifest this update: Sat 31 May 2025 21:19:17 +0000 Manifest next update: Sat 07 Jun 2025 21:19:17 +0000 Files and hashes: 1: 48M322aHKgqTXJ1VXltt01MHLHQ.crl (hash: v7gyRFZ2/mg/QzvFcYh8xb2tjwWrucFvW0VErURyGIg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.crl rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/48M322aHKgqTXJ1VXltt01MHLHQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 21:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1964 (0x7ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B0A3, serialNumber=E3C337DB66872A0A935C9D555E5B6DD353072C74 Validity Not Before: May 31 21:19:17 2025 GMT Not After : Jun 7 21:19:17 2025 GMT Subject: CN=683b7255-6f38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e1:45:27:27:cb:ec:33:ec:45:39:2f:2f:7a: e7:38:3f:e5:48:6e:ab:0b:ad:98:4f:2a:92:18:ae: 4a:b9:a5:3e:f5:cd:80:fb:d4:6e:e3:bf:e9:33:e8: e1:15:54:0f:48:b6:d7:54:e8:d4:4f:ba:95:de:9d: d9:4e:bf:8d:b3:f4:4c:9a:2b:31:cd:8b:be:56:be: 77:22:98:4e:79:cd:da:2c:98:0b:f5:b8:3e:00:67: 33:30:0c:90:74:43:b4:b9:5c:5b:3f:9e:c6:99:9c: b2:39:e9:e1:91:88:e0:a9:0d:67:86:21:e8:16:fc: 45:ac:30:22:f0:f2:4f:4b:5c:ac:0d:21:65:90:62: d0:3c:f0:90:d6:4f:0c:f6:32:88:aa:e8:1e:89:88: 87:76:c1:e6:d2:c6:cc:25:d0:c5:62:36:0a:61:c4: b8:c0:a8:9d:3b:5c:5e:56:0b:22:ee:5c:6f:32:fb: 1c:14:0a:73:f2:e4:d6:77:c0:05:c5:ea:5e:e5:11: 43:0a:d2:b9:e1:12:51:3d:ee:9f:33:3f:5f:df:cb: 5a:45:0d:4a:47:04:39:f0:c6:1d:70:37:c0:dd:19: d5:f0:ac:be:62:f4:e6:11:f3:dd:d2:49:15:d0:2e: fc:eb:27:7e:99:4a:d0:15:72:4f:ea:d9:ba:bf:dd: 6b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:6B:30:A0:57:32:8C:41:8D:12:43:DE:84:3C:AF:C3:AA:85:99:00 X509v3 Authority Key Identifier: keyid:E3:C3:37:DB:66:87:2A:0A:93:5C:9D:55:5E:5B:6D:D3:53:07:2C:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/48M322aHKgqTXJ1VXltt01MHLHQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:c1:7e:d2:90:99:1f:78:55:5d:de:32:92:fc:97:c0:7e:93: bd:3d:fc:27:6c:41:6c:09:ff:c9:1c:9f:9b:d9:bb:84:42:16: c0:71:b3:30:f2:3d:f7:14:dc:5f:1d:a6:77:20:91:31:e4:1e: 6c:a2:a4:55:5d:48:74:a9:ca:47:e9:75:b5:d0:bd:ed:fa:00: 81:65:69:97:e9:69:d5:ab:e7:0c:1e:a3:ca:de:87:40:77:a2: 06:a8:d6:5c:c2:0b:9a:57:39:2e:5a:d4:6d:ab:4a:a7:09:9f: e6:78:21:2e:ba:a6:9b:e9:50:4c:ac:51:63:79:f6:de:ee:84: 9e:7d:cf:73:b1:ff:eb:94:8c:7e:19:57:46:20:ee:77:83:d5: ed:09:76:9c:3e:c5:31:44:b9:f7:a3:c6:49:53:2c:7d:e7:c4: 0b:9c:d5:ca:14:50:b7:24:59:11:68:d9:0e:3f:08:5c:4f:e8: be:45:5f:8c:0a:b2:c4:b1:b5:65:f8:a7:93:91:23:77:8a:25: f4:2e:c4:fd:74:c3:2a:2d:ac:de:3f:b0:4b:e2:d6:20:5f:34: 82:38:4f:7a:bd:e2:2e:9d:ef:e8:0f:7e:29:74:7e:20:c8:51: 06:e1:b5:ca:62:5d:df:40:12:77:cc:1f:93:ac:b5:c3:bc:76: 6e:29:52:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkIwQTMxMTAvBgNVBAUTKEUzQzMzN0RCNjY4NzJBMEE5MzVDOUQ1NTVFNUI2REQz NTMwNzJDNzQwHhcNMjUwNTMxMjExOTE3WhcNMjUwNjA3MjExOTE3WjAYMRYwFAYD VQQDEw02ODNiNzI1NS02ZjM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1uFFJyfL7DPsRTkvL3rnOD/lSG6rC62YTyqSGK5KuaU+9c2A+9Ru47/pM+jh FVQPSLbXVOjUT7qV3p3ZTr+Ns/RMmisxzYu+Vr53IphOec3aLJgL9bg+AGczMAyQ dEO0uVxbP57GmZyyOenhkYjgqQ1nhiHoFvxFrDAi8PJPS1ysDSFlkGLQPPCQ1k8M 9jKIqugeiYiHdsHm0sbMJdDFYjYKYcS4wKidO1xeVgsi7lxvMvscFApz8uTWd8AF xepe5RFDCtK54RJRPe6fMz9f38taRQ1KRwQ58MYdcDfA3RnV8Ky+YvTmEfPd0kkV 0C786yd+mUrQFXJP6tm6v91rHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKdrMKBX MoxBjRJD3oQ8r8OqhZkAMB8GA1UdIwQYMBaAFOPDN9tmhyoKk1ydVV5bbdNTByx0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjBBMy82RTJGRkVERTAz QjcxMUVCOTdGQkU1NjhDNEY5QUUwMi80OE0zMjJhSEtncVRYSjFWWGx0dDAxTUhM SFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzQ4TTMyMmFIS2dxVFhKMVZYbHR0MDFNSExIUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjBBMy82RTJGRkVERTAzQjcxMUVCOTdGQkU1NjhDNEY5QUUwMi80OE0zMjJhSEtn cVRYSjFWWGx0dDAxTUhMSFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNwX7SkJkfeFVd3jKS/JfAfpO9PfwnbEFsCf/JHJ+b2buEQhbAcbMw 8j33FNxfHaZ3IJEx5B5soqRVXUh0qcpH6XW10L3t+gCBZWmX6WnVq+cMHqPK3odA d6IGqNZcwguaVzkuWtRtq0qnCZ/meCEuuqab6VBMrFFjefbe7oSefc9zsf/rlIx+ GVdGIO53g9XtCXacPsUxRLn3o8ZJUyx958QLnNXKFFC3JFkRaNkOPwhcT+i+RV+M CrLEsbVl+KeTkSN3iiX0LsT9dMMqLazeP7BL4tYgXzSCOE96veIune/oD34pdH4g yFEG4bXKYl3fQBJ3zB+TrLXDvHZuKVKN -----END CERTIFICATE-----Generated at Mon Jun 2 20:37:43 2025 by rpki-client