$ rpki-client -vvf rpki.apnic.net/member_repository/A91389E7/A27FE6DC4C0911F09F38B628C4F9AE02/PwmXnYiKPadxYLPIBzfMNgDGuN4.mft File: PwmXnYiKPadxYLPIBzfMNgDGuN4.mft (raw, json) Hash identifier: Ar/p14bUh/gtS7ANBKQGFbM5KgKJuvLWg8rPEDOpB4Y= Subject key identifier: 64:26:35:BA:3A:4C:87:AC:DD:21:D7:05:7C:3A:04:44:4C:69:1A:67 Authority key identifier: 3F:09:97:9D:88:8A:3D:A7:71:60:B3:C8:07:37:CC:36:00:C6:B8:DE Certificate issuer: /CN=A91389E7/serialNumber=3F09979D888A3DA77160B3C80737CC3600C6B8DE Certificate serial: 09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PwmXnYiKPadxYLPIBzfMNgDGuN4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91389E7/A27FE6DC4C0911F09F38B628C4F9AE02/PwmXnYiKPadxYLPIBzfMNgDGuN4.mft Manifest number: 09 Signing time: Tue 01 Jul 2025 08:57:39 +0000 Manifest this update: Tue 01 Jul 2025 08:57:39 +0000 Manifest next update: Tue 08 Jul 2025 08:57:38 +0000 Files and hashes: 1: PwmXnYiKPadxYLPIBzfMNgDGuN4.crl (hash: eM0+NJkOJWl9ryHWytE80TACbrgzq45yQKTacmTfiLo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91389E7/A27FE6DC4C0911F09F38B628C4F9AE02/PwmXnYiKPadxYLPIBzfMNgDGuN4.crl rsync://rpki.apnic.net/member_repository/A91389E7/A27FE6DC4C0911F09F38B628C4F9AE02/PwmXnYiKPadxYLPIBzfMNgDGuN4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PwmXnYiKPadxYLPIBzfMNgDGuN4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91389E7, serialNumber=3F09979D888A3DA77160B3C80737CC3600C6B8DE Validity Not Before: Jul 1 08:57:39 2025 GMT Not After : Jul 8 08:57:38 2025 GMT Subject: CN=6863a303-ef54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:6a:eb:0d:d2:82:7a:39:b1:f9:18:ce:69:5a: 9b:92:dd:59:60:f3:2e:34:98:13:eb:1e:ba:f6:71: 5a:9f:8a:14:01:5a:4d:ce:33:7a:da:53:fd:4b:4a: 59:6b:c5:0f:af:63:74:20:9c:64:ce:da:07:95:af: e0:62:99:10:b5:20:9e:c4:44:e0:d3:9e:54:51:05: 42:26:4a:01:68:9e:b6:09:04:5a:bc:e3:4d:36:b7: c5:32:72:3b:4f:68:64:b1:3b:4e:67:04:85:fe:ac: aa:70:99:41:a7:39:52:5d:85:c0:e9:74:9e:2f:c6: 9c:14:c6:c0:76:d5:e1:97:54:55:9a:0a:54:b0:45: 10:5a:d8:dd:3f:4f:17:bf:d7:7c:bc:e8:d4:ac:dc: 32:71:b5:11:2d:ad:8e:16:7c:de:9b:80:37:8d:ed: bc:61:25:3e:f5:87:79:92:4a:c0:cb:72:10:53:58: dd:99:e6:99:85:3f:30:0b:f8:38:53:e5:35:71:b5: a0:e4:7e:e3:6b:e7:54:ba:b6:9e:b9:f9:47:aa:60: 28:06:ba:be:ce:c1:86:e2:b5:aa:00:07:52:a5:1b: da:e6:23:34:fb:1c:52:92:e8:3e:d1:a0:74:88:f3: 65:c9:4f:08:a3:56:44:b9:15:c7:6a:2e:13:24:8a: 50:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:26:35:BA:3A:4C:87:AC:DD:21:D7:05:7C:3A:04:44:4C:69:1A:67 X509v3 Authority Key Identifier: keyid:3F:09:97:9D:88:8A:3D:A7:71:60:B3:C8:07:37:CC:36:00:C6:B8:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91389E7/A27FE6DC4C0911F09F38B628C4F9AE02/PwmXnYiKPadxYLPIBzfMNgDGuN4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PwmXnYiKPadxYLPIBzfMNgDGuN4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91389E7/A27FE6DC4C0911F09F38B628C4F9AE02/PwmXnYiKPadxYLPIBzfMNgDGuN4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cf:39:e8:13:d1:03:19:16:ba:12:ba:f8:30:99:e4:17:ab:65: 86:f7:3c:3f:42:66:7e:51:63:a2:89:b0:27:33:8b:d4:bd:a9: 0f:bf:2b:01:5a:b0:ea:f1:0a:1f:76:e8:ae:42:e3:c2:48:13: 6b:a1:93:52:31:7f:cb:2a:21:5a:2d:9a:ba:e6:ab:6a:38:f8: b6:e3:24:8c:b0:95:dd:35:f8:93:8b:00:eb:1d:ff:b8:15:e6: 03:81:80:15:bf:45:d5:0e:01:d2:d0:12:fb:50:25:a7:25:c8: 99:eb:10:dc:85:b7:13:54:90:b1:59:03:de:11:e2:2b:eb:73: aa:2b:2c:ea:85:81:8f:e1:4c:87:7f:8d:c3:63:c5:51:09:d4: 3c:9d:6e:1c:37:3b:ce:00:e7:d5:a5:e5:e6:76:1f:de:3f:d0: 99:c0:7c:8f:19:ea:43:68:05:0c:41:8f:8b:56:96:93:bb:40: 8e:b9:28:64:5d:00:81:a7:e4:24:3f:3f:07:db:04:da:3e:d7: cb:76:bc:8b:be:8d:65:46:36:43:47:7d:92:7b:0e:ad:70:1d: 68:69:a1:95:48:32:d3:b8:23:6c:c4:67:47:c5:d8:04:c9:95: 06:aa:8f:79:be:2d:f3:f8:e9:2b:9f:1e:36:22:fb:c7:d5:a4: 4c:90:d8:8b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz ODlFNzExMC8GA1UEBRMoM0YwOTk3OUQ4ODhBM0RBNzcxNjBCM0M4MDczN0NDMzYw MEM2QjhERTAeFw0yNTA3MDEwODU3MzlaFw0yNTA3MDgwODU3MzhaMBgxFjAUBgNV BAMTDTY4NjNhMzAzLWVmNTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDhausN0oJ6ObH5GM5pWpuS3Vlg8y40mBPrHrr2cVqfihQBWk3OM3raU/1LSllr xQ+vY3QgnGTO2geVr+BimRC1IJ7ERODTnlRRBUImSgFonrYJBFq84002t8UycjtP aGSxO05nBIX+rKpwmUGnOVJdhcDpdJ4vxpwUxsB21eGXVFWaClSwRRBa2N0/Txe/ 13y86NSs3DJxtREtrY4WfN6bgDeN7bxhJT71h3mSSsDLchBTWN2Z5pmFPzAL+DhT 5TVxtaDkfuNr51S6tp65+UeqYCgGur7OwYbitaoAB1KlG9rmIzT7HFKS6D7RoHSI 82XJTwijVkS5FcdqLhMkilBpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZCY1ujpM h6zdIdcFfDoERExpGmcwHwYDVR0jBBgwFoAUPwmXnYiKPadxYLPIBzfMNgDGuN4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4OUU3L0EyN0ZFNkRDNEMw OTExRjA5RjM4QjYyOEM0RjlBRTAyL1B3bVhuWWlLUGFkeFlMUElCemZNTmdER3VO NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUHdtWG5ZaUtQYWR4WUxQSUJ6Zk1OZ0RHdU40LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4 OUU3L0EyN0ZFNkRDNEMwOTExRjA5RjM4QjYyOEM0RjlBRTAyL1B3bVhuWWlLUGFk eFlMUElCemZNTmdER3VONC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAM856BPRAxkWuhK6+DCZ5BerZYb3PD9CZn5RY6KJsCczi9S9qQ+/KwFa sOrxCh926K5C48JIE2uhk1Ixf8sqIVotmrrmq2o4+LbjJIywld01+JOLAOsd/7gV 5gOBgBW/RdUOAdLQEvtQJaclyJnrENyFtxNUkLFZA94R4ivrc6orLOqFgY/hTId/ jcNjxVEJ1Dydbhw3O84A59Wl5eZ2H94/0JnAfI8Z6kNoBQxBj4tWlpO7QI65KGRd AIGn5CQ/PwfbBNo+18t2vIu+jWVGNkNHfZJ7Dq1wHWhpoZVIMtO4I2zEZ0fF2ATJ lQaqj3m+LfP46SufHjYi+8fVpEyQ2Is= -----END CERTIFICATE-----Generated at Wed Jul 2 04:43:57 2025 by rpki-client