$ rpki-client -vvf rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.mft File: jNoITiPVt1Cao6ktrKCxrcnZ-0g.mft (raw, json) Hash identifier: UslVW4w7FnM0PyGTVZqClWsR1Jx1oayBY7YkEuaDRjM= Subject key identifier: F7:3D:B8:E3:A8:D3:E4:16:75:95:46:D7:7E:0A:8F:30:48:39:1E:4C Authority key identifier: 8C:DA:08:4E:23:D5:B7:50:9A:A3:A9:2D:AC:A0:B1:AD:C9:D9:FB:48 Certificate issuer: /CN=A91684D0/serialNumber=8CDA084E23D5B7509AA3A92DACA0B1ADC9D9FB48 Certificate serial: 01E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNoITiPVt1Cao6ktrKCxrcnZ-0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.mft Manifest number: 01DF Signing time: Sat 07 Jun 2025 02:14:47 +0000 Manifest this update: Sat 07 Jun 2025 02:14:46 +0000 Manifest next update: Sat 14 Jun 2025 02:14:46 +0000 Files and hashes: 1: jNoITiPVt1Cao6ktrKCxrcnZ-0g.crl (hash: 00M/55+I3GiYh77VgpY5WoYiJ2esbBm1MEjxnZ/rOAQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.crl rsync://rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNoITiPVt1Cao6ktrKCxrcnZ-0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Jun 2025 02:14:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 480 (0x1e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91684D0, serialNumber=8CDA084E23D5B7509AA3A92DACA0B1ADC9D9FB48 Validity Not Before: Jun 7 02:14:46 2025 GMT Not After : Jun 14 02:14:46 2025 GMT Subject: CN=6843a097-7ba7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d0:1e:db:36:5a:7b:1d:c7:32:53:68:6e:40: 0b:22:8f:03:40:08:73:ea:25:60:d4:ef:33:06:9e: 36:ea:ee:29:a7:8e:5f:ea:86:e7:a0:33:da:fa:6a: 6e:1b:fb:fa:c5:d7:23:4b:5a:10:76:fc:a5:ac:da: 9b:a5:99:9b:04:62:4d:e9:99:34:6f:03:19:18:19: 3b:ae:28:54:4e:d5:50:4a:7f:39:2d:f5:d3:03:1d: e7:f8:4a:cc:d6:97:18:1b:0c:6a:1c:0b:26:6b:c7: 05:51:b7:df:ff:86:a8:0b:a7:8c:bf:0d:db:25:f9: 83:21:11:4d:28:93:73:61:23:48:45:c6:30:da:b7: b9:51:f8:51:88:1e:00:e4:dc:d2:74:a3:65:d4:48: 40:b8:4d:74:1c:84:c5:0f:8c:a7:6b:c2:7e:a5:6d: da:b4:96:4e:d6:52:41:28:26:b8:ab:03:e0:ef:55: 29:26:d0:53:8e:92:7e:c2:23:c9:79:44:d1:6c:3f: df:01:89:32:04:81:30:5b:5e:2b:a0:7b:e6:a3:91: ab:4e:2f:f4:d0:65:91:21:09:68:f4:04:71:1c:4e: 67:69:75:d6:92:cf:8e:8f:d3:50:c9:77:61:fc:34: 95:92:ce:cf:47:28:92:3d:3c:3a:ad:fa:59:b7:12: 4b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:3D:B8:E3:A8:D3:E4:16:75:95:46:D7:7E:0A:8F:30:48:39:1E:4C X509v3 Authority Key Identifier: keyid:8C:DA:08:4E:23:D5:B7:50:9A:A3:A9:2D:AC:A0:B1:AD:C9:D9:FB:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNoITiPVt1Cao6ktrKCxrcnZ-0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:5f:73:c3:6d:fb:3a:a8:bd:86:49:68:bf:e6:65:16:76:15: cc:8a:13:3d:bd:72:51:71:a1:2c:6c:51:9e:27:3b:59:85:e3: 86:3f:cc:88:54:73:d9:02:cc:b8:36:08:a4:a5:b3:a5:73:29: 50:97:18:c8:a5:f7:ec:63:73:b3:4f:b2:c3:eb:30:60:e8:06: c9:b2:01:e4:81:46:ae:69:3d:5b:d7:22:bb:00:7e:67:e4:e0: 8a:8b:50:fa:36:85:47:62:1e:57:ba:00:ee:d2:87:20:53:60: 46:45:e8:9c:f5:d7:30:a9:10:94:42:10:f6:5f:be:3b:97:69: fa:d6:92:75:2e:bf:cc:5b:08:3b:73:c6:18:44:b0:59:ea:ef: 38:98:0a:7b:ab:2c:ef:c4:1c:02:35:66:78:91:e2:a7:12:9b: fb:d3:5c:97:14:5c:c0:93:52:aa:ff:15:1c:85:fb:ee:a8:5a: 01:c9:59:00:eb:3a:8d:a6:5f:a5:6c:a0:2b:ab:e3:22:98:07: 30:4c:81:db:ff:63:9f:57:03:d1:ed:26:09:c1:b1:67:49:85: f5:62:d3:ec:6e:8c:c4:62:1b:87:73:88:22:26:cd:ff:04:f6: 61:ca:3b:e3:9c:cc:9d:c1:03:46:8a:6e:b8:7c:a8:0f:93:a1: c9:46:a8:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg0RDAxMTAvBgNVBAUTKDhDREEwODRFMjNENUI3NTA5QUEzQTkyREFDQTBCMUFE QzlEOUZCNDgwHhcNMjUwNjA3MDIxNDQ2WhcNMjUwNjE0MDIxNDQ2WjAYMRYwFAYD VQQDEw02ODQzYTA5Ny03YmE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzNAe2zZaex3HMlNobkALIo8DQAhz6iVg1O8zBp426u4pp45f6obnoDPa+mpu G/v6xdcjS1oQdvylrNqbpZmbBGJN6Zk0bwMZGBk7rihUTtVQSn85LfXTAx3n+ErM 1pcYGwxqHAsma8cFUbff/4aoC6eMvw3bJfmDIRFNKJNzYSNIRcYw2re5UfhRiB4A 5NzSdKNl1EhAuE10HITFD4yna8J+pW3atJZO1lJBKCa4qwPg71UpJtBTjpJ+wiPJ eUTRbD/fAYkyBIEwW14roHvmo5GrTi/00GWRIQlo9ARxHE5naXXWks+Oj9NQyXdh /DSVks7PRyiSPTw6rfpZtxJL5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPc9uOOo 0+QWdZVG134KjzBIOR5MMB8GA1UdIwQYMBaAFIzaCE4j1bdQmqOpLaygsa3J2ftI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODREMC9EQ0NENThCNjVF OEYxMUVEOEM5OTY5NjNDNEY5QUUwMi9qTm9JVGlQVnQxQ2FvNmt0cktDeHJjblot MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pOb0lUaVBWdDFDYW82a3RyS0N4cmNuWi0wZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODREMC9EQ0NENThCNjVFOEYxMUVEOEM5OTY5NjNDNEY5QUUwMi9qTm9JVGlQVnQx Q2FvNmt0cktDeHJjblotMGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtX3PDbfs6qL2GSWi/5mUWdhXMihM9vXJRcaEsbFGeJztZheOGP8yI VHPZAsy4NgikpbOlcylQlxjIpffsY3OzT7LD6zBg6AbJsgHkgUauaT1b1yK7AH5n 5OCKi1D6NoVHYh5XugDu0ocgU2BGReic9dcwqRCUQhD2X747l2n61pJ1Lr/MWwg7 c8YYRLBZ6u84mAp7qyzvxBwCNWZ4keKnEpv701yXFFzAk1Kq/xUchfvuqFoByVkA 6zqNpl+lbKArq+MimAcwTIHb/2OfVwPR7SYJwbFnSYX1YtPsbozEYhuHc4giJs3/ BPZhyjvjnMydwQNGim64fKgPk6HJRqi1 -----END CERTIFICATE-----Generated at Sat Jun 7 14:49:49 2025 by rpki-client