$ rpki-client -vvf rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.mft File: pOwXtf0tRM0t3QVb9TQTn2j8aZA.mft (raw, json) Hash identifier: vEIVT705QDQCrQ19ZaTEGRj0DEy4i34OnGq0GcYXn/8= Subject key identifier: 38:CC:BD:9B:37:9B:87:5D:FF:85:D3:24:F2:57:32:D3:F7:E8:B7:C5 Authority key identifier: A4:EC:17:B5:FD:2D:44:CD:2D:DD:05:5B:F5:34:13:9F:68:FC:69:90 Certificate issuer: /CN=A9138506/serialNumber=A4EC17B5FD2D44CD2DDD055BF534139F68FC6990 Certificate serial: 05D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOwXtf0tRM0t3QVb9TQTn2j8aZA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.mft Manifest number: 05D7 Signing time: Wed 04 Jun 2025 22:49:55 +0000 Manifest this update: Wed 04 Jun 2025 22:49:55 +0000 Manifest next update: Wed 11 Jun 2025 22:49:55 +0000 Files and hashes: 1: pOwXtf0tRM0t3QVb9TQTn2j8aZA.crl (hash: lDeViULXdYg2w+1x2rNHHIGopo6xbgZlEW6oG2ISUFg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.crl rsync://rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOwXtf0tRM0t3QVb9TQTn2j8aZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 22:49:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1495 (0x5d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138506, serialNumber=A4EC17B5FD2D44CD2DDD055BF534139F68FC6990 Validity Not Before: Jun 4 22:49:55 2025 GMT Not After : Jun 11 22:49:55 2025 GMT Subject: CN=6840cd93-7fb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:9e:f7:cb:b5:42:24:41:c9:04:77:78:2d:90: 8c:c9:b7:ee:f6:45:56:cb:19:39:1d:d1:cc:1c:23: c6:92:54:bd:ab:d1:c7:05:8a:d5:fb:02:de:13:06: b3:e7:d5:ed:9c:91:a4:f4:69:62:d6:3d:38:eb:13: b9:5b:12:7d:cf:b3:dd:8b:78:67:3b:b5:20:6a:5b: b6:28:f5:8a:5d:9c:dd:b0:10:2f:8c:dd:51:8d:b0: b8:45:2a:f9:45:91:25:ba:5d:11:9b:b1:e6:1b:b7: ca:44:18:27:e8:63:1f:77:b4:f5:1a:91:75:34:eb: 53:79:1e:29:86:10:39:a2:f1:9d:5a:8b:e0:5b:88: 4e:75:14:fd:72:9d:57:69:8a:33:e2:07:99:a0:cf: b6:2d:10:96:ba:79:12:eb:c1:e2:d9:78:7b:62:9b: 9c:e0:f6:fd:32:ad:20:4d:54:a0:eb:18:d6:01:00: e5:19:cb:4e:47:94:5d:02:00:18:37:ae:15:4a:bc: aa:b9:7c:ca:53:33:83:e0:5a:d4:d9:c0:12:e8:4e: 06:12:2c:97:af:8a:09:13:c3:ce:a5:d2:9b:bb:be: 21:31:07:c2:1d:d0:46:2d:41:c7:d8:5d:4e:a5:93: 41:32:8d:fb:0c:84:3f:ad:e5:e8:c6:95:d9:05:30: 4b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:CC:BD:9B:37:9B:87:5D:FF:85:D3:24:F2:57:32:D3:F7:E8:B7:C5 X509v3 Authority Key Identifier: keyid:A4:EC:17:B5:FD:2D:44:CD:2D:DD:05:5B:F5:34:13:9F:68:FC:69:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOwXtf0tRM0t3QVb9TQTn2j8aZA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:47:27:ab:cb:6a:f3:31:64:16:39:d7:ff:7f:a1:b0:03:e7: a4:d7:8c:ff:38:7d:8f:8c:45:88:6c:52:6e:ee:2f:15:09:37: 19:02:95:08:18:2e:2b:0a:af:4c:06:80:ca:60:9a:85:e6:40: 94:37:58:be:3e:a0:74:29:a0:eb:3b:62:7d:11:57:c0:0a:75: 0c:f6:cf:ed:52:4b:9c:24:2f:ad:8a:f9:b3:f7:ec:bc:c0:b8: 40:28:1d:cc:d9:2b:92:dd:35:00:e5:81:71:a6:f8:f8:e2:c1: 04:a2:22:32:82:0c:82:83:1a:75:5b:c5:fd:11:14:87:b3:e9: 03:fd:55:03:f9:95:df:9d:b5:82:d8:65:32:6f:6a:d8:a3:f8: 23:d7:a9:ca:63:61:2b:59:6a:6d:c7:d8:f4:2c:c4:25:74:a1: 22:55:eb:68:80:ca:8b:69:fb:d9:b3:d2:a7:f9:72:1a:db:8b: c9:02:57:8b:8c:24:a3:21:61:7f:d7:0f:e7:2f:ae:37:d5:1f: fe:40:eb:c7:57:a6:df:5a:eb:e8:2c:85:de:02:b4:de:d4:b3: 18:9c:da:f2:9f:a7:95:a0:8d:54:c9:7c:86:fd:57:97:61:1a: 34:74:bd:6c:3e:d2:6a:2e:c7:18:7f:73:07:7a:99:8e:5d:9b: d5:b5:41:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBdcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzg1MDYxMTAvBgNVBAUTKEE0RUMxN0I1RkQyRDQ0Q0QyREREMDU1QkY1MzQxMzlG NjhGQzY5OTAwHhcNMjUwNjA0MjI0OTU1WhcNMjUwNjExMjI0OTU1WjAYMRYwFAYD VQQDEw02ODQwY2Q5My03ZmIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyJ73y7VCJEHJBHd4LZCMybfu9kVWyxk5HdHMHCPGklS9q9HHBYrV+wLeEwaz 59XtnJGk9Gli1j046xO5WxJ9z7Pdi3hnO7Ugalu2KPWKXZzdsBAvjN1RjbC4RSr5 RZElul0Rm7HmG7fKRBgn6GMfd7T1GpF1NOtTeR4phhA5ovGdWovgW4hOdRT9cp1X aYoz4geZoM+2LRCWunkS68Hi2Xh7Ypuc4Pb9Mq0gTVSg6xjWAQDlGctOR5RdAgAY N64VSryquXzKUzOD4FrU2cAS6E4GEiyXr4oJE8POpdKbu74hMQfCHdBGLUHH2F1O pZNBMo37DIQ/reXoxpXZBTBLJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDjMvZs3 m4dd/4XTJPJXMtP36LfFMB8GA1UdIwQYMBaAFKTsF7X9LUTNLd0FW/U0E59o/GmQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODUwNi8xNTlFQjY5MkI3 QzIxMUVCQkFGQjdFNjVDNEY5QUUwMi9wT3dYdGYwdFJNMHQzUVZiOVRRVG4yajhh WkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BPd1h0ZjB0Uk0wdDNRVmI5VFFUbjJqOGFaQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODUwNi8xNTlFQjY5MkI3QzIxMUVCQkFGQjdFNjVDNEY5QUUwMi9wT3dYdGYwdFJN MHQzUVZiOVRRVG4yajhhWkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcRyery2rzMWQWOdf/f6GwA+ek14z/OH2PjEWIbFJu7i8VCTcZApUI GC4rCq9MBoDKYJqF5kCUN1i+PqB0KaDrO2J9EVfACnUM9s/tUkucJC+tivmz9+y8 wLhAKB3M2SuS3TUA5YFxpvj44sEEoiIyggyCgxp1W8X9ERSHs+kD/VUD+ZXfnbWC 2GUyb2rYo/gj16nKY2ErWWptx9j0LMQldKEiVetogMqLafvZs9Kn+XIa24vJAleL jCSjIWF/1w/nL6431R/+QOvHV6bfWuvoLIXeArTe1LMYnNryn6eVoI1UyXyG/VeX YRo0dL1sPtJqLscYf3MHepmOXZvVtUEB -----END CERTIFICATE-----Generated at Thu Jun 5 19:18:52 2025 by rpki-client