$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED2B/04F7A58045B111EFBD598B77C4F9AE02/RevxDdQ0xSgZEpy5XhoT7ML81e0.mft File: RevxDdQ0xSgZEpy5XhoT7ML81e0.mft (raw, json) Hash identifier: kyjfX6zKsdgEnSiTZz6oAJT8u01t/1acQsUiNUmEG4U= Subject key identifier: BD:16:A9:ED:40:70:5E:FA:4D:64:72:54:A6:13:BB:9F:42:6D:8D:5C Authority key identifier: 45:EB:F1:0D:D4:34:C5:28:19:12:9C:B9:5E:1A:13:EC:C2:FC:D5:ED Certificate issuer: /CN=A916ED2B/serialNumber=45EBF10DD434C52819129CB95E1A13ECC2FCD5ED Certificate serial: A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RevxDdQ0xSgZEpy5XhoT7ML81e0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916ED2B/04F7A58045B111EFBD598B77C4F9AE02/RevxDdQ0xSgZEpy5XhoT7ML81e0.mft Manifest number: A3 Signing time: Sun 01 Jun 2025 05:54:12 +0000 Manifest this update: Sun 01 Jun 2025 05:54:12 +0000 Manifest next update: Sun 08 Jun 2025 05:54:12 +0000 Files and hashes: 1: RevxDdQ0xSgZEpy5XhoT7ML81e0.crl (hash: QJT+Gbnby5GLE/oTM0gulRjEQ29vAudBtcuxc41GQmI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916ED2B/04F7A58045B111EFBD598B77C4F9AE02/RevxDdQ0xSgZEpy5XhoT7ML81e0.crl rsync://rpki.apnic.net/member_repository/A916ED2B/04F7A58045B111EFBD598B77C4F9AE02/RevxDdQ0xSgZEpy5XhoT7ML81e0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RevxDdQ0xSgZEpy5XhoT7ML81e0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 05:54:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163 (0xa3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916ED2B, serialNumber=45EBF10DD434C52819129CB95E1A13ECC2FCD5ED Validity Not Before: Jun 1 05:54:12 2025 GMT Not After : Jun 8 05:54:12 2025 GMT Subject: CN=683beb04-dafb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:5a:54:cd:83:ba:3f:a2:a1:94:16:c5:35:6b: b3:e2:a4:a9:bd:1c:9b:73:71:42:ea:34:65:09:eb: 20:a5:5b:73:e5:21:c9:87:df:ec:5d:b7:98:03:4f: 1e:89:08:8b:37:9f:8a:6f:ee:9c:93:c1:07:c4:26: fa:ef:b4:e5:ff:a6:57:63:5f:65:a1:c3:f9:af:38: 67:de:17:5d:f3:0f:d0:1b:16:59:4d:d9:1f:75:da: c4:6d:d7:1f:13:e4:87:8a:a1:38:fc:61:93:e2:51: 5c:69:79:9e:72:90:81:79:db:8a:0f:ec:8e:3c:00: 6d:f5:71:25:96:85:d0:23:33:6e:31:6d:78:76:26: e7:16:64:f1:6b:0f:96:1a:02:ad:78:28:79:61:1d: 8a:21:5b:68:c1:80:5d:45:d5:87:88:8a:d0:fc:8e: bf:4d:d0:04:95:8d:36:ff:0a:b2:67:03:e7:cc:99: ba:e1:c4:cd:cd:f1:db:32:96:82:61:3a:0b:fc:c7: 4e:6d:1b:c5:c7:6c:41:e1:fa:1f:a3:08:8a:6a:2e: 06:84:7d:25:36:c3:74:51:ce:b6:39:85:e2:f4:1e: 72:3d:e1:b2:13:63:0b:e2:78:b4:83:1b:e3:20:ba: 2d:ed:22:b8:b6:a6:9d:ed:f4:a8:ef:53:ad:23:0a: 5b:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:16:A9:ED:40:70:5E:FA:4D:64:72:54:A6:13:BB:9F:42:6D:8D:5C X509v3 Authority Key Identifier: keyid:45:EB:F1:0D:D4:34:C5:28:19:12:9C:B9:5E:1A:13:EC:C2:FC:D5:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916ED2B/04F7A58045B111EFBD598B77C4F9AE02/RevxDdQ0xSgZEpy5XhoT7ML81e0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RevxDdQ0xSgZEpy5XhoT7ML81e0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED2B/04F7A58045B111EFBD598B77C4F9AE02/RevxDdQ0xSgZEpy5XhoT7ML81e0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:64:7c:e1:62:85:c1:7a:84:d2:82:31:24:4c:8d:24:1e:8f: 97:80:94:09:9a:1b:77:14:23:18:64:59:5b:fc:0a:b2:ae:68: 4e:da:2a:88:66:4f:a8:4b:5f:9b:79:e9:c8:0a:89:e5:e3:e9: 74:89:ee:d4:76:8c:88:3c:f3:64:bd:84:a9:14:1d:d4:b4:33: 3c:a0:54:44:c6:bd:b5:49:e7:44:27:22:cb:5d:75:c4:e0:f7: dd:65:bc:34:15:79:b1:19:fa:ff:6a:de:23:27:71:e4:af:dc: f3:0c:fc:64:9c:64:ae:36:78:7c:d9:a4:f7:dd:0a:59:c8:aa: 96:aa:e2:4e:bd:11:63:bb:3e:90:b8:08:2a:9c:63:ee:63:ff: 62:43:00:1c:2e:64:c7:ac:74:55:cc:c0:c9:02:21:9d:b3:a1: 41:4f:82:d2:bf:03:3b:8b:d6:d8:d7:d3:61:e7:80:99:2d:07: 08:ef:a3:bc:9e:1e:06:6f:b1:15:b0:1a:e5:61:ba:a3:f9:b0: 96:af:77:58:7d:9b:18:3c:28:9c:db:9a:a1:13:cc:bc:b8:a1: ab:7f:36:5f:45:43:e8:69:69:6e:bf:b6:49:d2:45:97:9d:d1: e7:c0:4a:0b:89:86:0d:34:c9:ee:dd:b2:8e:25:8e:85:52:82: f8:e5:63:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVEMkIxMTAvBgNVBAUTKDQ1RUJGMTBERDQzNEM1MjgxOTEyOUNCOTVFMUExM0VD QzJGQ0Q1RUQwHhcNMjUwNjAxMDU1NDEyWhcNMjUwNjA4MDU1NDEyWjAYMRYwFAYD VQQDEw02ODNiZWIwNC1kYWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2lpUzYO6P6KhlBbFNWuz4qSpvRybc3FC6jRlCesgpVtz5SHJh9/sXbeYA08e iQiLN5+Kb+6ck8EHxCb677Tl/6ZXY19locP5rzhn3hdd8w/QGxZZTdkfddrEbdcf E+SHiqE4/GGT4lFcaXmecpCBeduKD+yOPABt9XElloXQIzNuMW14dibnFmTxaw+W GgKteCh5YR2KIVtowYBdRdWHiIrQ/I6/TdAElY02/wqyZwPnzJm64cTNzfHbMpaC YToL/MdObRvFx2xB4fofowiKai4GhH0lNsN0Uc62OYXi9B5yPeGyE2ML4ni0gxvj ILot7SK4tqad7fSo71OtIwpbKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL0Wqe1A cF76TWRyVKYTu59CbY1cMB8GA1UdIwQYMBaAFEXr8Q3UNMUoGRKcuV4aE+zC/NXt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUQyQi8wNEY3QTU4MDQ1 QjExMUVGQkQ1OThCNzdDNEY5QUUwMi9SZXZ4RGRRMHhTZ1pFcHk1WGhvVDdNTDgx ZTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JldnhEZFEweFNnWkVweTVYaG9UN01MODFlMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUQyQi8wNEY3QTU4MDQ1QjExMUVGQkQ1OThCNzdDNEY5QUUwMi9SZXZ4RGRRMHhT Z1pFcHk1WGhvVDdNTDgxZTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkZHzhYoXBeoTSgjEkTI0kHo+XgJQJmht3FCMYZFlb/AqyrmhO2iqI Zk+oS1+beenIConl4+l0ie7UdoyIPPNkvYSpFB3UtDM8oFRExr21SedEJyLLXXXE 4PfdZbw0FXmxGfr/at4jJ3Hkr9zzDPxknGSuNnh82aT33QpZyKqWquJOvRFjuz6Q uAgqnGPuY/9iQwAcLmTHrHRVzMDJAiGds6FBT4LSvwM7i9bY19Nh54CZLQcI76O8 nh4Gb7EVsBrlYbqj+bCWr3dYfZsYPCic25qhE8y8uKGrfzZfRUPoaWluv7ZJ0kWX ndHnwEoLiYYNNMnu3bKOJY6FUoL45WNr -----END CERTIFICATE-----Generated at Mon Jun 2 06:34:55 2025 by rpki-client