$ rpki-client -vvf rpki.apnic.net/member_repository/A914530B/A6A544E0B79A11EFA0D6975DC4F9AE02/rlnHH9Y70mtGMCbgdJBGlwSo-5s.mft File: rlnHH9Y70mtGMCbgdJBGlwSo-5s.mft (raw, json) Hash identifier: LKpK0MOHM9YKrTsQHKTWLFxJ/zdyZU22gGyk3l/HtYY= Subject key identifier: 06:A5:3D:E9:7F:D1:79:A7:C0:BF:EF:3E:47:A0:22:AB:F2:C3:67:E9 Authority key identifier: AE:59:C7:1F:D6:3B:D2:6B:46:30:26:E0:74:90:46:97:04:A8:FB:9B Certificate issuer: /CN=A914530B/serialNumber=AE59C71FD63BD26B463026E07490469704A8FB9B Certificate serial: 59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rlnHH9Y70mtGMCbgdJBGlwSo-5s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914530B/A6A544E0B79A11EFA0D6975DC4F9AE02/rlnHH9Y70mtGMCbgdJBGlwSo-5s.mft Manifest number: 59 Signing time: Sat 31 May 2025 06:46:14 +0000 Manifest this update: Sat 31 May 2025 06:46:14 +0000 Manifest next update: Sat 07 Jun 2025 06:46:14 +0000 Files and hashes: 1: rlnHH9Y70mtGMCbgdJBGlwSo-5s.crl (hash: 5b/mrw22+RqkE/3zxbzBBHfVp4ymZM/a0R7xCGpnB70=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914530B/A6A544E0B79A11EFA0D6975DC4F9AE02/rlnHH9Y70mtGMCbgdJBGlwSo-5s.crl rsync://rpki.apnic.net/member_repository/A914530B/A6A544E0B79A11EFA0D6975DC4F9AE02/rlnHH9Y70mtGMCbgdJBGlwSo-5s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rlnHH9Y70mtGMCbgdJBGlwSo-5s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:46:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 89 (0x59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914530B, serialNumber=AE59C71FD63BD26B463026E07490469704A8FB9B Validity Not Before: May 31 06:46:14 2025 GMT Not After : Jun 7 06:46:14 2025 GMT Subject: CN=683aa5b6-c032 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:af:4c:da:79:96:c0:cc:25:f5:07:76:bc:63: e0:42:1c:7a:98:18:95:7e:0b:d7:4f:47:2e:6a:7a: e8:09:87:98:ed:39:68:b8:85:41:5e:f9:5c:fd:02: 5a:21:cb:80:9a:5e:7c:1d:6d:a5:47:5c:88:05:d6: 98:1f:ae:38:7f:20:46:e1:0b:77:b3:db:4f:18:e4: a5:b9:48:a7:ff:3f:70:e7:93:d0:9c:e5:b9:99:dd: 22:85:17:2b:78:31:14:83:b2:3d:cc:f2:0d:8c:4b: a5:0d:d4:cc:96:06:31:77:60:14:15:dc:35:5a:7b: fb:33:c8:f9:60:d4:79:65:87:af:8e:a2:fe:97:b4: ff:17:f4:24:7c:24:30:22:42:49:88:1e:6d:a7:0e: 48:67:80:c8:5a:eb:5f:c0:95:4b:aa:f6:27:5a:95: 32:4e:46:5a:b8:b0:08:65:08:34:8b:85:51:c7:c9: f3:b0:d3:fb:9d:cf:80:18:53:c6:e2:5b:ee:47:fd: 69:8d:ba:30:65:27:2d:ec:25:b9:9e:03:72:44:e8: 69:37:cf:2a:c3:2e:fb:2d:d4:76:c1:bb:51:7d:9d: ae:31:46:4b:f1:e2:8d:79:d6:d3:d0:86:6c:67:a6: f4:fe:dc:4d:43:9b:4d:7b:58:6a:9f:84:0a:60:f0: 4f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:A5:3D:E9:7F:D1:79:A7:C0:BF:EF:3E:47:A0:22:AB:F2:C3:67:E9 X509v3 Authority Key Identifier: keyid:AE:59:C7:1F:D6:3B:D2:6B:46:30:26:E0:74:90:46:97:04:A8:FB:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914530B/A6A544E0B79A11EFA0D6975DC4F9AE02/rlnHH9Y70mtGMCbgdJBGlwSo-5s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rlnHH9Y70mtGMCbgdJBGlwSo-5s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914530B/A6A544E0B79A11EFA0D6975DC4F9AE02/rlnHH9Y70mtGMCbgdJBGlwSo-5s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:9e:5a:1a:75:a3:7e:66:86:82:82:a6:4f:ba:3b:4c:a2:ca: ea:af:e8:0a:c8:11:c8:65:71:7f:d6:64:b4:96:3e:35:e0:c2: 70:ca:2b:91:0f:72:75:be:d9:16:fc:37:9b:ed:16:b5:47:d0: be:98:f6:86:cf:07:9b:af:9e:ee:a7:aa:f4:ed:94:2a:5a:21: 5f:2d:a4:41:c5:4d:fc:1d:98:a4:68:83:b3:1b:15:33:fa:69: 71:c6:d0:ef:af:89:b3:d0:d3:85:bb:df:fc:11:b6:1b:13:74: 1a:e6:30:f5:58:16:ec:30:66:97:3d:1e:4d:b0:f0:8c:93:79: 3a:ee:18:17:a3:17:3d:90:77:0c:54:5c:53:23:27:99:e9:1b: c5:53:fd:66:62:a9:77:8a:3c:1e:df:90:3f:9e:8e:52:67:4c: 48:97:91:01:84:c5:76:6b:99:21:51:cf:a2:9a:5e:21:fc:61: a7:00:a9:84:6a:c3:03:43:60:6c:a0:ea:d7:9b:0e:9c:71:2f: 54:0c:0f:18:9a:39:20:52:ff:e2:69:9d:95:d3:12:8e:df:24: c4:93:e0:7b:fa:1e:18:6d:4b:27:6e:31:26:f0:dc:49:91:36: ed:64:20:70:d6:ec:a4:4f:20:14:78:5a:66:0b:4f:b5:d0:c1: 6a:07:dd:1a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NTMwQjExMC8GA1UEBRMoQUU1OUM3MUZENjNCRDI2QjQ2MzAyNkUwNzQ5MDQ2OTcw NEE4RkI5QjAeFw0yNTA1MzEwNjQ2MTRaFw0yNTA2MDcwNjQ2MTRaMBgxFjAUBgNV BAMTDTY4M2FhNWI2LWMwMzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCkr0zaeZbAzCX1B3a8Y+BCHHqYGJV+C9dPRy5qeugJh5jtOWi4hUFe+Vz9Aloh y4CaXnwdbaVHXIgF1pgfrjh/IEbhC3ez208Y5KW5SKf/P3Dnk9Cc5bmZ3SKFFyt4 MRSDsj3M8g2MS6UN1MyWBjF3YBQV3DVae/szyPlg1Hllh6+Oov6XtP8X9CR8JDAi QkmIHm2nDkhngMha61/AlUuq9idalTJORlq4sAhlCDSLhVHHyfOw0/udz4AYU8bi W+5H/WmNujBlJy3sJbmeA3JE6Gk3zyrDLvst1HbBu1F9na4xRkvx4o151tPQhmxn pvT+3E1Dm017WGqfhApg8E/7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUBqU96X/R eafAv+8+R6Aiq/LDZ+kwHwYDVR0jBBgwFoAUrlnHH9Y70mtGMCbgdJBGlwSo+5sw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1MzBCL0E2QTU0NEUwQjc5 QTExRUZBMEQ2OTc1REM0RjlBRTAyL3JsbkhIOVk3MG10R01DYmdkSkJHbHdTby01 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcmxuSEg5WTcwbXRHTUNiZ2RKQkdsd1NvLTVzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1 MzBCL0E2QTU0NEUwQjc5QTExRUZBMEQ2OTc1REM0RjlBRTAyL3JsbkhIOVk3MG10 R01DYmdkSkJHbHdTby01cy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGyeWhp1o35mhoKCpk+6O0yiyuqv6ArIEchlcX/WZLSWPjXgwnDKK5EP cnW+2Rb8N5vtFrVH0L6Y9obPB5uvnu6nqvTtlCpaIV8tpEHFTfwdmKRog7MbFTP6 aXHG0O+vibPQ04W73/wRthsTdBrmMPVYFuwwZpc9Hk2w8IyTeTruGBejFz2QdwxU XFMjJ5npG8VT/WZiqXeKPB7fkD+ejlJnTEiXkQGExXZrmSFRz6KaXiH8YacAqYRq wwNDYGyg6tebDpxxL1QMDxiaOSBS/+JpnZXTEo7fJMST4Hv6HhhtSyduMSbw3EmR Nu1kIHDW7KRPIBR4WmYLT7XQwWoH3Ro= -----END CERTIFICATE-----Generated at Sat May 31 17:30:17 2025 by rpki-client