$ rpki-client -vvf rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.mft File: rBnGa8SzHOuTC6auDW63R7EKtgY.mft (raw, json) Hash identifier: i1RHyZ94xAejV8TL+RE6JhSAJJE+rj/mI25e/N2JukA= Subject key identifier: E1:0D:13:85:F9:A0:5A:D2:89:FE:89:69:8D:6A:69:FA:71:BE:4F:DA Authority key identifier: AC:19:C6:6B:C4:B3:1C:EB:93:0B:A6:AE:0D:6E:B7:47:B1:0A:B6:06 Certificate issuer: /CN=A9141E28/serialNumber=AC19C66BC4B31CEB930BA6AE0D6EB747B10AB606 Certificate serial: 348D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rBnGa8SzHOuTC6auDW63R7EKtgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.mft Manifest number: 348D Signing time: Sat 31 May 2025 14:39:45 +0000 Manifest this update: Sat 31 May 2025 14:39:45 +0000 Manifest next update: Sat 07 Jun 2025 14:39:45 +0000 Files and hashes: 1: rBnGa8SzHOuTC6auDW63R7EKtgY.crl (hash: 6xHH9yydEqJsQVIFDmx+r0C7ZlJL0x+BsuEteXsO1Mo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.crl rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rBnGa8SzHOuTC6auDW63R7EKtgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 14:18:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13453 (0x348d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141E28, serialNumber=AC19C66BC4B31CEB930BA6AE0D6EB747B10AB606 Validity Not Before: May 31 14:39:45 2025 GMT Not After : Jun 7 14:39:45 2025 GMT Subject: CN=683b14b1-ffbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:8d:17:6a:8e:be:a7:ca:76:dd:e3:4c:93:8d: 8f:e0:1c:91:01:fa:8e:aa:85:4d:71:37:94:06:8a: 23:f0:00:80:4a:05:d3:7f:d1:c6:8f:39:00:39:fd: 05:3c:c5:a7:71:c7:27:e4:78:11:0e:be:bf:2e:82: 69:e9:9f:6d:ac:2d:30:41:62:19:77:e6:37:a2:c0: 44:ec:b8:f6:89:c7:9b:0c:07:08:28:c0:b4:8f:6d: 4a:92:c1:ff:84:9a:5f:9f:01:c5:55:33:9f:3e:ba: 95:ee:cd:27:a3:71:76:09:ef:15:53:7f:2a:77:33: 5c:4f:33:ed:21:f9:06:fc:92:2b:2c:81:1c:70:4e: 98:e4:ba:25:43:f6:cd:d3:7c:0d:47:1a:af:e2:c3: 13:d1:f1:51:1b:c0:d8:c5:24:33:07:2e:51:38:ce: c8:e2:d7:15:22:0c:5f:fd:95:9f:54:73:54:fa:cc: b7:6c:89:49:b1:c2:86:29:85:97:a1:53:37:c3:0e: 09:6b:73:62:b0:aa:89:9a:79:b1:48:f0:d0:2e:f7: 7a:c3:68:55:02:ec:db:60:a3:47:cd:33:52:23:92: 2e:e0:11:24:67:6f:06:77:78:72:6f:62:59:09:00: 86:dc:98:39:2a:60:61:0a:64:f3:2e:6a:a1:3d:16: 13:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:0D:13:85:F9:A0:5A:D2:89:FE:89:69:8D:6A:69:FA:71:BE:4F:DA X509v3 Authority Key Identifier: keyid:AC:19:C6:6B:C4:B3:1C:EB:93:0B:A6:AE:0D:6E:B7:47:B1:0A:B6:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rBnGa8SzHOuTC6auDW63R7EKtgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:61:70:5b:71:d9:86:45:cb:7b:b0:21:9c:f9:4a:96:3e:6a: 18:db:0a:ce:6d:43:10:b8:d1:c8:58:7b:2c:95:51:9d:8c:f0: a0:e6:6b:ec:1a:75:bf:36:f0:ad:de:52:c3:8e:15:0c:88:43: ea:83:7b:d7:88:a0:99:2d:56:aa:9d:f5:62:ed:1c:96:3d:f3: d2:62:45:73:01:85:86:a2:ef:27:9f:ce:bb:c4:f3:1a:28:8c: 99:db:ba:ce:a6:8c:c3:77:9f:fa:20:2d:62:8a:46:c9:1e:e1: 66:c0:6c:bf:90:6c:ca:bc:06:ae:90:e7:5f:bb:80:6e:27:f8: d4:31:b1:87:7b:67:19:a6:39:36:3c:76:90:89:8c:57:93:cf: 2f:87:62:4a:4e:63:a5:ae:5f:57:39:4a:1b:a2:94:41:44:29: e4:02:f6:64:f8:6a:11:77:9f:e9:9f:08:5b:b7:65:51:03:54: 92:5d:9e:61:06:54:14:f7:95:3d:d0:8e:55:c0:c7:01:9c:44: 97:b1:90:47:97:4e:35:56:00:5b:7d:18:2a:b1:69:ae:71:11: ac:f8:20:86:61:97:c1:de:4f:4f:3e:d5:0f:1b:da:9d:69:54: 39:c4:c4:02:3b:6f:7f:77:2a:94:72:1f:1a:04:ef:02:ec:99: 56:12:ef:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDFFMjgxMTAvBgNVBAUTKEFDMTlDNjZCQzRCMzFDRUI5MzBCQTZBRTBENkVCNzQ3 QjEwQUI2MDYwHhcNMjUwNTMxMTQzOTQ1WhcNMjUwNjA3MTQzOTQ1WjAYMRYwFAYD VQQDEw02ODNiMTRiMS1mZmJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr40Xao6+p8p23eNMk42P4ByRAfqOqoVNcTeUBooj8ACASgXTf9HGjzkAOf0F PMWncccn5HgRDr6/LoJp6Z9trC0wQWIZd+Y3osBE7Lj2icebDAcIKMC0j21KksH/ hJpfnwHFVTOfPrqV7s0no3F2Ce8VU38qdzNcTzPtIfkG/JIrLIEccE6Y5LolQ/bN 03wNRxqv4sMT0fFRG8DYxSQzBy5ROM7I4tcVIgxf/ZWfVHNU+sy3bIlJscKGKYWX oVM3ww4Ja3NisKqJmnmxSPDQLvd6w2hVAuzbYKNHzTNSI5Iu4BEkZ28Gd3hyb2JZ CQCG3Jg5KmBhCmTzLmqhPRYTNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOENE4X5 oFrSif6JaY1qafpxvk/aMB8GA1UdIwQYMBaAFKwZxmvEsxzrkwumrg1ut0exCrYG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MUUyOC84NDU4QjkxMDFE OEYxMUUyQUIwM0EyRUUwOEIwMkNEMi9yQm5HYThTekhPdVRDNmF1RFc2M1I3RUt0 Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JCbkdhOFN6SE91VEM2YXVEVzYzUjdFS3RnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MUUyOC84NDU4QjkxMDFEOEYxMUUyQUIwM0EyRUUwOEIwMkNEMi9yQm5HYThTekhP dVRDNmF1RFc2M1I3RUt0Z1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQYXBbcdmGRct7sCGc+UqWPmoY2wrObUMQuNHIWHsslVGdjPCg5mvs GnW/NvCt3lLDjhUMiEPqg3vXiKCZLVaqnfVi7RyWPfPSYkVzAYWGou8nn867xPMa KIyZ27rOpozDd5/6IC1iikbJHuFmwGy/kGzKvAaukOdfu4BuJ/jUMbGHe2cZpjk2 PHaQiYxXk88vh2JKTmOlrl9XOUobopRBRCnkAvZk+GoRd5/pnwhbt2VRA1SSXZ5h BlQU95U90I5VwMcBnESXsZBHl041VgBbfRgqsWmucRGs+CCGYZfB3k9PPtUPG9qd aVQ5xMQCO29/dyqUch8aBO8C7JlWEu95 -----END CERTIFICATE-----Generated at Sat May 31 16:57:52 2025 by rpki-client