$ rpki-client -vvf rpki.apnic.net/member_repository/A9169A3F/A371F684A24F11EFB6B0FF49C4F9AE02/v1I81vFmSFOJGRVeX58meDD28B4.mft File: v1I81vFmSFOJGRVeX58meDD28B4.mft (raw, json) Hash identifier: ZQDC1GNybbRZpUuLc0p3l6hNVflfvt6FO2Dzig+CVMA= Subject key identifier: B0:7A:CA:16:E9:4D:55:CE:5B:B7:CF:DB:75:24:3B:BF:EE:47:07:D4 Authority key identifier: BF:52:3C:D6:F1:66:48:53:89:19:15:5E:5F:9F:26:78:30:F6:F0:1E Certificate issuer: /CN=A9169A3F/serialNumber=BF523CD6F16648538919155E5F9F267830F6F01E Certificate serial: 67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1I81vFmSFOJGRVeX58meDD28B4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169A3F/A371F684A24F11EFB6B0FF49C4F9AE02/v1I81vFmSFOJGRVeX58meDD28B4.mft Manifest number: 67 Signing time: Sat 31 May 2025 06:33:45 +0000 Manifest this update: Sat 31 May 2025 06:33:44 +0000 Manifest next update: Sat 07 Jun 2025 06:33:44 +0000 Files and hashes: 1: v1I81vFmSFOJGRVeX58meDD28B4.crl (hash: GrKWxhAk7s5TNcpL0kL8vMK0GfL58Uxb5UP2TZenQM8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169A3F/A371F684A24F11EFB6B0FF49C4F9AE02/v1I81vFmSFOJGRVeX58meDD28B4.crl rsync://rpki.apnic.net/member_repository/A9169A3F/A371F684A24F11EFB6B0FF49C4F9AE02/v1I81vFmSFOJGRVeX58meDD28B4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1I81vFmSFOJGRVeX58meDD28B4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:33:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 103 (0x67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169A3F, serialNumber=BF523CD6F16648538919155E5F9F267830F6F01E Validity Not Before: May 31 06:33:44 2025 GMT Not After : Jun 7 06:33:44 2025 GMT Subject: CN=683aa2c8-a557 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a4:13:9e:ba:c2:9c:41:ae:df:10:3d:1f:66: d7:30:8e:5b:cc:fd:0d:ab:a9:11:0e:01:6e:cf:df: 71:84:70:b3:0f:11:1b:4f:be:56:35:f9:74:d3:6f: d5:52:10:48:96:5e:3d:76:d4:f1:cc:47:65:c1:9e: d8:8f:1e:a1:cb:5e:04:74:08:a4:ae:ce:ed:93:77: ca:57:76:cf:33:fc:20:cc:95:80:2d:6e:c8:58:3c: 4e:e1:e0:e8:da:d3:08:5a:8a:c9:c6:9b:ed:38:28: 82:17:96:61:e7:e4:0b:27:7a:2a:ef:12:a5:e2:40: 55:4e:70:3d:58:c8:af:aa:23:0d:3f:5e:32:ca:bf: 5d:3b:f5:7d:a0:67:8c:b8:fb:80:f5:f8:5d:c1:56: 83:96:4f:46:7e:89:79:d4:f9:89:f4:68:1c:99:8b: 41:27:20:1c:dc:63:07:8d:ca:d8:be:07:e7:47:0c: 12:3f:39:d6:27:88:8b:be:90:39:55:19:9e:31:d5: f2:95:e6:df:ec:ad:da:13:5c:2d:fd:6d:d6:7f:b9: 68:a9:2b:7d:2f:8a:bc:a2:04:04:85:cc:5d:15:8e: 95:82:cb:ca:5d:d4:58:ea:3a:17:dd:9e:73:bd:89: 13:f8:70:17:9e:87:06:d4:5c:02:0a:13:0d:f6:7f: 6e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:7A:CA:16:E9:4D:55:CE:5B:B7:CF:DB:75:24:3B:BF:EE:47:07:D4 X509v3 Authority Key Identifier: keyid:BF:52:3C:D6:F1:66:48:53:89:19:15:5E:5F:9F:26:78:30:F6:F0:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169A3F/A371F684A24F11EFB6B0FF49C4F9AE02/v1I81vFmSFOJGRVeX58meDD28B4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1I81vFmSFOJGRVeX58meDD28B4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169A3F/A371F684A24F11EFB6B0FF49C4F9AE02/v1I81vFmSFOJGRVeX58meDD28B4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:17:fe:78:ba:33:32:a0:81:fa:b6:61:0c:3a:51:5a:72:2b: 10:db:2c:ce:08:fe:db:ab:c6:39:01:44:3e:19:5d:0c:64:75: 68:3e:d8:50:32:8f:ea:1a:76:0c:d6:f1:71:e9:52:94:97:79: 03:8a:0d:d1:e3:e7:d2:bd:a3:77:be:1c:09:3c:6d:82:d5:c8: 12:71:99:5f:05:19:f2:92:95:12:53:dd:e7:10:a3:3b:41:4b: 7b:ca:eb:a2:27:eb:bf:4a:05:6f:09:a2:1a:58:c6:b5:78:61: c6:44:52:22:c8:cd:f5:fc:2e:b1:b1:f9:8c:9f:3c:fc:c7:36: 2d:2e:88:29:ff:33:57:01:55:40:d0:f4:d1:13:48:3e:f9:58: d2:1e:d0:9d:50:ba:59:20:35:16:8a:7f:d7:61:dc:ea:ed:0e: 44:bd:eb:a0:2c:3b:8b:c2:f0:c5:0c:b5:45:01:94:ea:8a:28: 24:dc:64:aa:74:9d:c5:eb:78:be:d2:1a:6c:aa:8e:f0:e8:45: 37:7a:25:5c:59:4a:6e:da:cc:a4:03:68:2e:f7:e8:65:7a:f2: c7:85:b5:b1:94:d4:7f:ac:07:c4:ed:70:5f:a1:06:78:71:df: 83:c5:1f:77:94:53:49:96:8f:b3:2e:44:da:c6:a6:5d:d5:d5: 7e:cc:08:c1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 OUEzRjExMC8GA1UEBRMoQkY1MjNDRDZGMTY2NDg1Mzg5MTkxNTVFNUY5RjI2Nzgz MEY2RjAxRTAeFw0yNTA1MzEwNjMzNDRaFw0yNTA2MDcwNjMzNDRaMBgxFjAUBgNV BAMTDTY4M2FhMmM4LWE1NTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSpBOeusKcQa7fED0fZtcwjlvM/Q2rqREOAW7P33GEcLMPERtPvlY1+XTTb9VS EEiWXj121PHMR2XBntiPHqHLXgR0CKSuzu2Td8pXds8z/CDMlYAtbshYPE7h4Oja 0whaisnGm+04KIIXlmHn5AsneirvEqXiQFVOcD1YyK+qIw0/XjLKv1079X2gZ4y4 +4D1+F3BVoOWT0Z+iXnU+Yn0aByZi0EnIBzcYweNyti+B+dHDBI/OdYniIu+kDlV GZ4x1fKV5t/srdoTXC39bdZ/uWipK30viryiBASFzF0VjpWCy8pd1FjqOhfdnnO9 iRP4cBeehwbUXAIKEw32f24lAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUsHrKFulN Vc5bt8/bdSQ7v+5HB9QwHwYDVR0jBBgwFoAUv1I81vFmSFOJGRVeX58meDD28B4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY5QTNGL0EzNzFGNjg0QTI0 RjExRUZCNkIwRkY0OUM0RjlBRTAyL3YxSTgxdkZtU0ZPSkdSVmVYNThtZUREMjhC NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdjFJODF2Rm1TRk9KR1JWZVg1OG1lREQyOEI0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY5 QTNGL0EzNzFGNjg0QTI0RjExRUZCNkIwRkY0OUM0RjlBRTAyL3YxSTgxdkZtU0ZP SkdSVmVYNThtZUREMjhCNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFEX/ni6MzKggfq2YQw6UVpyKxDbLM4I/turxjkBRD4ZXQxkdWg+2FAy j+oadgzW8XHpUpSXeQOKDdHj59K9o3e+HAk8bYLVyBJxmV8FGfKSlRJT3ecQoztB S3vK66In679KBW8JohpYxrV4YcZEUiLIzfX8LrGx+YyfPPzHNi0uiCn/M1cBVUDQ 9NETSD75WNIe0J1QulkgNRaKf9dh3OrtDkS966AsO4vC8MUMtUUBlOqKKCTcZKp0 ncXreL7SGmyqjvDoRTd6JVxZSm7azKQDaC736GV68seFtbGU1H+sB8TtcF+hBnhx 34PFH3eUU0mWj7MuRNrGpl3V1X7MCME= -----END CERTIFICATE-----Generated at Sat May 31 17:18:48 2025 by rpki-client