$ rpki-client -vvf rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.mft File: 4BlKpTtYIbm9DFx7g1K7E4GFP50.mft (raw, json) Hash identifier: Rg7MIQGW63E1ac/GTM+eN3me/gcsw8+lqJMBLDnOrGY= Subject key identifier: F6:16:96:58:C2:88:3C:E3:82:0A:70:16:FB:ED:73:D7:29:4A:44:D1 Authority key identifier: E0:19:4A:A5:3B:58:21:B9:BD:0C:5C:7B:83:52:BB:13:81:85:3F:9D Certificate issuer: /CN=A914E0B6/serialNumber=E0194AA53B5821B9BD0C5C7B8352BB1381853F9D Certificate serial: F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BlKpTtYIbm9DFx7g1K7E4GFP50.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.mft Manifest number: F9 Signing time: Sat 31 May 2025 04:48:37 +0000 Manifest this update: Sat 31 May 2025 04:48:37 +0000 Manifest next update: Sat 07 Jun 2025 04:48:37 +0000 Files and hashes: 1: 4BlKpTtYIbm9DFx7g1K7E4GFP50.crl (hash: Uwy0HAWsl4kgZi/kZKEydZ4BrRqfod4ttCFYlDca14o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.crl rsync://rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BlKpTtYIbm9DFx7g1K7E4GFP50.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:48:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 249 (0xf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E0B6, serialNumber=E0194AA53B5821B9BD0C5C7B8352BB1381853F9D Validity Not Before: May 31 04:48:37 2025 GMT Not After : Jun 7 04:48:37 2025 GMT Subject: CN=683a8a25-44d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:25:bb:40:ee:0c:d0:85:10:b3:02:1f:36:0e: c1:a2:e0:31:1a:a3:f3:09:f5:74:81:04:0b:d7:bb: ca:9b:6d:7c:be:92:7c:80:55:b7:d5:3e:90:25:be: 7d:eb:9d:63:3f:fa:27:40:ae:73:89:81:c3:4d:42: 30:a4:ff:70:76:60:02:59:21:d2:e5:96:5a:de:c4: 57:38:4a:ae:0f:41:15:14:6e:5c:89:3b:70:08:2f: 03:fa:17:bb:c5:0e:1c:d9:04:a3:c9:e2:85:5d:d0: 0f:0c:f9:9c:7b:cc:5e:c9:56:93:47:83:83:34:0a: 99:0f:d6:15:82:98:e0:f5:5e:b8:bd:d3:e9:51:78: 24:fa:d2:db:26:98:8b:98:ed:cb:b6:76:d2:38:d4: 4f:7d:69:f7:c5:81:f5:19:f6:01:8a:3b:7b:7a:e8: df:26:e4:9b:d8:61:5b:2c:11:f8:a8:9f:a3:7a:9a: fd:e3:c0:b2:e9:57:c4:8c:80:18:1b:b7:56:f8:08: e7:55:84:dc:89:5c:3a:d3:ec:7a:ff:d6:ce:38:a7: e2:52:aa:14:83:05:ea:bb:6a:41:ef:16:47:11:32: 2f:d0:ac:b6:39:e4:50:8a:5f:93:d7:68:cb:5d:b8: 14:e5:5a:ea:f4:a8:5c:2a:33:1b:bb:9c:c9:12:e2: 9b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:16:96:58:C2:88:3C:E3:82:0A:70:16:FB:ED:73:D7:29:4A:44:D1 X509v3 Authority Key Identifier: keyid:E0:19:4A:A5:3B:58:21:B9:BD:0C:5C:7B:83:52:BB:13:81:85:3F:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BlKpTtYIbm9DFx7g1K7E4GFP50.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:dc:fe:e4:3b:3a:6f:8e:d0:2b:98:53:8c:d9:24:c2:0f:6a: 14:cf:ce:71:16:26:f4:99:4c:86:c7:fb:ba:47:8d:86:eb:c8: 84:ef:0a:56:8b:03:54:df:09:c6:28:b3:cf:db:72:71:be:fc: 02:18:35:a3:0a:0f:af:e7:3b:8b:32:7b:2e:04:45:2d:3a:0d: fa:31:05:f5:2b:99:ca:28:78:ff:00:21:b7:fa:99:bc:a8:a6: e2:43:cc:c5:2d:1d:94:2e:f4:da:af:d2:c8:b6:2b:bb:6d:2b: 08:26:c3:38:4c:a5:c1:6b:e8:a3:05:07:5c:3a:fc:93:01:3a: 80:1b:96:03:b3:d6:d5:0d:1e:40:9a:6c:3e:1a:e1:da:01:20: 85:9f:42:ad:ed:2a:27:2f:c2:ae:21:3f:fe:04:0e:f9:ec:82: d2:2d:ec:a6:03:28:dd:e5:43:78:61:fc:fa:39:19:82:d2:89: a4:2e:a3:60:41:c4:dd:16:48:0b:8f:61:41:88:7e:2c:ff:72: f4:fa:2f:de:b3:20:8b:51:7a:ce:42:5f:c9:03:6e:d9:08:c7: a9:f2:97:17:bc:17:49:f0:9c:74:e2:6a:8e:10:d4:01:a8:52: f7:f9:e7:c7:02:ac:5e:d5:7f:2b:f1:3e:8e:f1:b0:1f:29:6f: 78:9f:3b:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUwQjYxMTAvBgNVBAUTKEUwMTk0QUE1M0I1ODIxQjlCRDBDNUM3QjgzNTJCQjEz ODE4NTNGOUQwHhcNMjUwNTMxMDQ0ODM3WhcNMjUwNjA3MDQ0ODM3WjAYMRYwFAYD VQQDEw02ODNhOGEyNS00NGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwiW7QO4M0IUQswIfNg7BouAxGqPzCfV0gQQL17vKm218vpJ8gFW31T6QJb59 651jP/onQK5ziYHDTUIwpP9wdmACWSHS5ZZa3sRXOEquD0EVFG5ciTtwCC8D+he7 xQ4c2QSjyeKFXdAPDPmce8xeyVaTR4ODNAqZD9YVgpjg9V64vdPpUXgk+tLbJpiL mO3LtnbSONRPfWn3xYH1GfYBijt7eujfJuSb2GFbLBH4qJ+jepr948Cy6VfEjIAY G7dW+AjnVYTciVw60+x6/9bOOKfiUqoUgwXqu2pB7xZHETIv0Ky2OeRQil+T12jL XbgU5Vrq9KhcKjMbu5zJEuKbewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPYWlljC iDzjggpwFvvtc9cpSkTRMB8GA1UdIwQYMBaAFOAZSqU7WCG5vQxce4NSuxOBhT+d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTBCNi82OTU2QUUzRUJG MzAxMUVFQkU0RjNDMUVDNEY5QUUwMi80QmxLcFR0WUlibTlERng3ZzFLN0U0R0ZQ NTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRCbEtwVHRZSWJtOURGeDdnMUs3RTRHRlA1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTBCNi82OTU2QUUzRUJGMzAxMUVFQkU0RjNDMUVDNEY5QUUwMi80QmxLcFR0WUli bTlERng3ZzFLN0U0R0ZQNTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCW3P7kOzpvjtArmFOM2STCD2oUz85xFib0mUyGx/u6R42G68iE7wpW iwNU3wnGKLPP23JxvvwCGDWjCg+v5zuLMnsuBEUtOg36MQX1K5nKKHj/ACG3+pm8 qKbiQ8zFLR2ULvTar9LItiu7bSsIJsM4TKXBa+ijBQdcOvyTATqAG5YDs9bVDR5A mmw+GuHaASCFn0Kt7SonL8KuIT/+BA757ILSLeymAyjd5UN4Yfz6ORmC0omkLqNg QcTdFkgLj2FBiH4s/3L0+i/esyCLUXrOQl/JA27ZCMep8pcXvBdJ8Jx04mqOENQB qFL3+efHAqxe1X8r8T6O8bAfKW94nztO -----END CERTIFICATE-----Generated at Sat May 31 17:28:54 2025 by rpki-client