$ rpki-client -vvf rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.mft File: 1mk-41xy689CY8aYRW2C9o5xT1w.mft (raw, json) Hash identifier: 4cblVdmB8IIeDtQtVpHJ8QH5Oq+GJTxDZ3o0U7YZz78= Subject key identifier: 97:95:1F:18:AD:58:7A:CA:5D:7B:67:85:0A:B8:DD:B9:77:3A:41:67 Authority key identifier: D6:69:3E:E3:5C:72:EB:CF:42:63:C6:98:45:6D:82:F6:8E:71:4F:5C Certificate issuer: /CN=A916EF5E/serialNumber=D6693EE35C72EBCF4263C698456D82F68E714F5C Certificate serial: 0982 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1mk-41xy689CY8aYRW2C9o5xT1w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.mft Manifest number: 0982 Signing time: Fri 06 Jun 2025 16:45:21 +0000 Manifest this update: Fri 06 Jun 2025 16:45:20 +0000 Manifest next update: Fri 13 Jun 2025 16:45:20 +0000 Files and hashes: 1: 1mk-41xy689CY8aYRW2C9o5xT1w.crl (hash: buISgNf1F14VcDXVpercWao0KUJiJy/BTBHA7ckk8gw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.crl rsync://rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1mk-41xy689CY8aYRW2C9o5xT1w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Jun 2025 16:45:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2434 (0x982) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916EF5E, serialNumber=D6693EE35C72EBCF4263C698456D82F68E714F5C Validity Not Before: Jun 6 16:45:20 2025 GMT Not After : Jun 13 16:45:20 2025 GMT Subject: CN=68431b21-d37b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ab:97:97:0a:c6:f0:4b:28:67:33:48:7b:47: f5:1a:f4:2e:a1:b4:6b:fa:4b:10:f8:c6:91:76:ee: ec:35:03:3b:ff:f7:2d:ef:a0:4a:dd:3b:e2:cf:7a: 83:69:de:89:e7:a0:30:0b:5c:47:c9:17:66:d8:e3: 16:89:bf:2a:06:9a:21:47:8d:8d:e6:a3:7d:12:0a: b3:6f:ba:b6:ae:03:05:34:81:76:80:c1:7f:ff:0c: bf:7e:25:ce:a1:61:00:65:f7:87:1a:d4:d9:c7:3f: 57:4a:65:ec:98:03:c1:9e:8f:87:3a:60:30:b1:9b: 3a:70:cf:3e:1d:4f:4e:ab:70:0b:3a:20:57:c5:62: 47:60:2c:bf:df:60:33:9a:7f:3a:d8:37:16:3d:b7: f5:86:02:38:7d:57:ae:69:fe:73:3d:72:2b:0b:be: 87:3a:a0:f8:93:56:cc:1d:41:b8:29:dc:62:88:86: d2:c6:ca:62:96:94:cd:a7:af:8d:fb:20:07:cb:96: 89:8a:8f:92:28:fc:6d:4d:e4:80:6f:37:b4:bb:87: af:02:50:10:a6:73:ae:e8:fb:d0:84:aa:6e:88:1f: 96:02:4e:64:94:07:ff:b8:da:64:c7:1a:a8:b3:44: 0a:88:fe:c8:01:e0:61:d4:b9:38:fb:00:1e:0a:d3: e1:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:95:1F:18:AD:58:7A:CA:5D:7B:67:85:0A:B8:DD:B9:77:3A:41:67 X509v3 Authority Key Identifier: keyid:D6:69:3E:E3:5C:72:EB:CF:42:63:C6:98:45:6D:82:F6:8E:71:4F:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1mk-41xy689CY8aYRW2C9o5xT1w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:de:4e:82:9a:79:17:23:f5:37:60:ad:a5:96:a9:f4:b8:6d: ea:35:c1:e0:c5:8e:45:6a:4b:0d:37:a3:fa:ca:49:18:86:40: 3f:f7:b4:4e:f1:8f:07:20:3b:ff:65:bd:d1:a6:b2:77:7a:de: d9:56:5a:85:80:0a:dd:da:16:8c:2c:c6:46:66:60:4d:70:bc: 48:03:35:38:54:34:fd:af:0d:1c:67:3f:50:07:a5:c6:41:92: e7:22:ff:fc:6f:b3:4e:c0:2f:4a:1f:d8:5f:07:5e:ac:4c:98: 1a:3a:f6:fe:45:51:fa:8a:29:4e:41:5e:81:b2:f4:5c:85:a0: c3:c4:67:b7:c7:10:b2:56:26:2e:23:ae:6b:30:86:c4:18:d9: fb:40:5d:c0:a1:97:b9:96:38:73:7a:1b:f1:a2:f4:da:43:24: 95:14:2a:b7:3c:9f:cb:ab:5d:df:63:3a:68:26:ba:1b:9d:59: 8b:40:84:1c:46:63:66:bf:27:8a:c0:03:a3:f5:6b:f7:03:bb: 60:9e:3a:04:a7:be:cb:be:bc:55:57:2b:9e:89:e8:18:41:74: 6f:e7:bd:5c:4b:b8:36:75:d3:b1:51:dc:fc:9b:8d:7b:bc:08: 9e:b8:ee:b3:9b:91:68:23:81:bd:5e:28:65:19:19:e3:3f:26: d5:11:11:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVGNUUxMTAvBgNVBAUTKEQ2NjkzRUUzNUM3MkVCQ0Y0MjYzQzY5ODQ1NkQ4MkY2 OEU3MTRGNUMwHhcNMjUwNjA2MTY0NTIwWhcNMjUwNjEzMTY0NTIwWjAYMRYwFAYD VQQDEw02ODQzMWIyMS1kMzdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuauXlwrG8EsoZzNIe0f1GvQuobRr+ksQ+MaRdu7sNQM7//ct76BK3Tviz3qD ad6J56AwC1xHyRdm2OMWib8qBpohR42N5qN9Egqzb7q2rgMFNIF2gMF//wy/fiXO oWEAZfeHGtTZxz9XSmXsmAPBno+HOmAwsZs6cM8+HU9Oq3ALOiBXxWJHYCy/32Az mn862DcWPbf1hgI4fVeuaf5zPXIrC76HOqD4k1bMHUG4KdxiiIbSxspilpTNp6+N +yAHy5aJio+SKPxtTeSAbze0u4evAlAQpnOu6PvQhKpuiB+WAk5klAf/uNpkxxqo s0QKiP7IAeBh1Lk4+wAeCtPhFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJeVHxit WHrKXXtnhQq43bl3OkFnMB8GA1UdIwQYMBaAFNZpPuNccuvPQmPGmEVtgvaOcU9c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUY1RS8yQ0U0OTRDMDhG OTYxMUVBOUFDQjdFN0ZDNEY5QUUwMi8xbWstNDF4eTY4OUNZOGFZUlcyQzlvNXhU MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFtay00MXh5Njg5Q1k4YVlSVzJDOW81eFQxdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUY1RS8yQ0U0OTRDMDhGOTYxMUVBOUFDQjdFN0ZDNEY5QUUwMi8xbWstNDF4eTY4 OUNZOGFZUlcyQzlvNXhUMXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDG3k6CmnkXI/U3YK2llqn0uG3qNcHgxY5FaksNN6P6ykkYhkA/97RO 8Y8HIDv/Zb3RprJ3et7ZVlqFgArd2haMLMZGZmBNcLxIAzU4VDT9rw0cZz9QB6XG QZLnIv/8b7NOwC9KH9hfB16sTJgaOvb+RVH6iilOQV6BsvRchaDDxGe3xxCyViYu I65rMIbEGNn7QF3AoZe5ljhzehvxovTaQySVFCq3PJ/Lq13fYzpoJrobnVmLQIQc RmNmvyeKwAOj9Wv3A7tgnjoEp77LvrxVVyueiegYQXRv571cS7g2ddOxUdz8m417 vAieuO6zm5FoI4G9XihlGRnjPybVEREE -----END CERTIFICATE-----Generated at Sat Jun 7 18:13:26 2025 by rpki-client