$ rpki-client -vvf rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.mft File: kUa3guuCRnsZ2LQdHMQOvwSJkGY.mft (raw, json) Hash identifier: cRKDXp0bfRevSnjxuDqyMYaNplNZ4rsEZtyzt9u9t8U= Subject key identifier: 61:AD:B2:43:5B:11:61:BB:C5:EA:50:87:46:66:96:26:7D:94:28:63 Authority key identifier: 91:46:B7:82:EB:82:46:7B:19:D8:B4:1D:1C:C4:0E:BF:04:89:90:66 Certificate issuer: /CN=A9155806/serialNumber=9146B782EB82467B19D8B41D1CC40EBF04899066 Certificate serial: 88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUa3guuCRnsZ2LQdHMQOvwSJkGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.mft Manifest number: 88 Signing time: Sun 01 Jun 2025 06:15:54 +0000 Manifest this update: Sun 01 Jun 2025 06:15:54 +0000 Manifest next update: Sun 08 Jun 2025 06:15:54 +0000 Files and hashes: 1: kUa3guuCRnsZ2LQdHMQOvwSJkGY.crl (hash: HA5vchLCV2gbJCWhQxr6GdCyy5gINTJjZId1sIHoQbk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.crl rsync://rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUa3guuCRnsZ2LQdHMQOvwSJkGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 06:15:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 136 (0x88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155806, serialNumber=9146B782EB82467B19D8B41D1CC40EBF04899066 Validity Not Before: Jun 1 06:15:54 2025 GMT Not After : Jun 8 06:15:54 2025 GMT Subject: CN=683bf01a-823f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:dd:6b:c6:2a:bc:ff:c2:2a:76:a5:f9:ff:00: fa:8c:65:a0:93:b9:96:75:cd:65:d8:5a:dd:f4:4c: 39:b3:0c:0b:42:39:a8:65:fc:a7:06:fc:0d:d5:be: 02:86:a9:84:dc:c5:1f:4d:5d:af:7b:ff:90:6e:87: 99:6c:6b:b0:40:44:56:e7:20:8b:9d:fd:51:b3:b9: ca:0d:16:f3:7b:67:94:61:8b:e2:95:60:5b:88:dd: df:ac:77:53:cb:b2:f9:5c:f4:b7:39:3a:ed:ef:a0: 1b:dd:64:2c:05:76:5c:a1:9c:45:b0:9d:0b:bf:41: d1:e3:84:63:88:ff:94:13:01:9c:c3:b9:c3:41:eb: 7b:9c:6b:af:55:ee:66:76:75:da:20:2b:49:9f:a2: a8:7a:1d:39:55:07:34:8f:28:a8:15:46:42:0a:73: 71:ea:3c:95:c0:f5:ec:4f:5e:a0:e9:85:75:50:5b: bd:ca:0b:2e:16:e7:72:dc:39:73:f5:92:d6:3a:be: 5b:8b:1d:72:fb:cd:ce:7d:30:6d:1f:6a:fa:00:02: 41:b7:db:9a:47:76:67:9f:63:34:9c:e0:d8:75:4e: 48:bd:7f:04:29:66:94:75:4d:59:6d:47:5a:ea:a7: c6:bf:64:71:34:5c:ef:d2:85:c8:83:5a:e6:ca:0d: 12:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:AD:B2:43:5B:11:61:BB:C5:EA:50:87:46:66:96:26:7D:94:28:63 X509v3 Authority Key Identifier: keyid:91:46:B7:82:EB:82:46:7B:19:D8:B4:1D:1C:C4:0E:BF:04:89:90:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUa3guuCRnsZ2LQdHMQOvwSJkGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:c6:a7:27:fd:a8:b8:7c:7d:62:3a:1c:fc:8c:94:b4:ca:77: ee:1f:20:81:f9:07:da:34:0d:df:a2:8f:41:26:75:d0:61:f4: 48:0b:e3:fd:09:60:cb:50:e9:d8:e5:62:79:2c:cf:e0:cc:75: 38:36:55:b1:2b:cc:2c:97:57:a1:6e:fc:81:46:57:1c:73:03: 52:89:1e:2c:e3:2a:b2:98:b5:c2:08:c8:6d:56:b4:4b:f2:98: 73:e8:85:2c:cb:c1:5c:b5:04:31:06:ab:d3:c5:b0:f0:81:8f: df:38:3f:74:b0:a8:b9:bc:3b:6f:1a:70:b7:6b:0f:eb:eb:4c: 65:43:a3:fe:3b:57:9f:a2:52:14:c1:4d:50:68:11:8d:2f:21: 32:85:45:b5:57:8a:2f:78:ae:45:e7:78:a9:63:21:48:54:30: 01:23:a1:85:9f:a6:51:c2:18:50:5d:5e:c1:bb:76:33:1b:f8: 34:51:c1:62:67:2a:d6:7d:6d:9b:ce:51:7a:a9:49:5a:62:b7: 70:23:8c:eb:78:51:3d:28:73:9d:15:71:7c:60:60:4d:38:6b: 92:4a:eb:13:cc:03:0c:1d:39:03:eb:46:7a:34:aa:4b:a9:9b: c9:27:49:de:ab:27:77:33:ab:dc:81:c1:e6:86:69:00:93:76: 2a:24:89:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU4MDYxMTAvBgNVBAUTKDkxNDZCNzgyRUI4MjQ2N0IxOUQ4QjQxRDFDQzQwRUJG MDQ4OTkwNjYwHhcNMjUwNjAxMDYxNTU0WhcNMjUwNjA4MDYxNTU0WjAYMRYwFAYD VQQDEw02ODNiZjAxYS04MjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAst1rxiq8/8IqdqX5/wD6jGWgk7mWdc1l2Frd9Ew5swwLQjmoZfynBvwN1b4C hqmE3MUfTV2ve/+QboeZbGuwQERW5yCLnf1Rs7nKDRbze2eUYYvilWBbiN3frHdT y7L5XPS3OTrt76Ab3WQsBXZcoZxFsJ0Lv0HR44RjiP+UEwGcw7nDQet7nGuvVe5m dnXaICtJn6Koeh05VQc0jyioFUZCCnNx6jyVwPXsT16g6YV1UFu9ygsuFudy3Dlz 9ZLWOr5bix1y+83OfTBtH2r6AAJBt9uaR3Znn2M0nODYdU5IvX8EKWaUdU1ZbUda 6qfGv2RxNFzv0oXIg1rmyg0SLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGGtskNb EWG7xepQh0ZmliZ9lChjMB8GA1UdIwQYMBaAFJFGt4LrgkZ7Gdi0HRzEDr8EiZBm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTgwNi9EMEM1RjRFMjZF OTExMUVGQTYyQjRDM0ZDNEY5QUUwMi9rVWEzZ3V1Q1Juc1oyTFFkSE1RT3Z3U0pr R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tVYTNndXVDUm5zWjJMUWRITVFPdndTSmtHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTgwNi9EMEM1RjRFMjZFOTExMUVGQTYyQjRDM0ZDNEY5QUUwMi9rVWEzZ3V1Q1Ju c1oyTFFkSE1RT3Z3U0prR1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZxqcn/ai4fH1iOhz8jJS0ynfuHyCB+QfaNA3foo9BJnXQYfRIC+P9 CWDLUOnY5WJ5LM/gzHU4NlWxK8wsl1ehbvyBRlcccwNSiR4s4yqymLXCCMhtVrRL 8phz6IUsy8FctQQxBqvTxbDwgY/fOD90sKi5vDtvGnC3aw/r60xlQ6P+O1efolIU wU1QaBGNLyEyhUW1V4oveK5F53ipYyFIVDABI6GFn6ZRwhhQXV7Bu3YzG/g0UcFi ZyrWfW2bzlF6qUlaYrdwI4zreFE9KHOdFXF8YGBNOGuSSusTzAMMHTkD60Z6NKpL qZvJJ0neqyd3M6vcgcHmhmkAk3YqJInP -----END CERTIFICATE-----Generated at Mon Jun 2 07:11:42 2025 by rpki-client