$ rpki-client -vvf rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft File: SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft (raw, json) Hash identifier: zbeeDBQVpmg0mzHtMnn+bIIDAdhbUzgNbbFN9YCDpRM= Subject key identifier: D9:99:93:7E:9A:B2:1D:32:3F:80:6A:51:41:FD:2E:03:74:6F:17:1B Authority key identifier: 48:0B:CD:9E:EA:88:F0:A6:DA:17:DF:98:43:B9:BA:6F:59:C2:7E:9E Certificate issuer: /CN=A918387F/serialNumber=480BCD9EEA88F0A6DA17DF9843B9BA6F59C27E9E Certificate serial: 0632 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft Manifest number: 0632 Signing time: Sat 31 May 2025 22:45:48 +0000 Manifest this update: Sat 31 May 2025 22:45:48 +0000 Manifest next update: Sat 07 Jun 2025 22:45:47 +0000 Files and hashes: 1: SAvNnuqI8KbaF9-YQ7m6b1nCfp4.crl (hash: 5In/stWg7oJ2gIIOetdDPIphxwV3dC0VX67sSIirc9E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.crl rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 22:45:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1586 (0x632) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918387F, serialNumber=480BCD9EEA88F0A6DA17DF9843B9BA6F59C27E9E Validity Not Before: May 31 22:45:48 2025 GMT Not After : Jun 7 22:45:47 2025 GMT Subject: CN=683b869c-a905 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ce:81:ad:1b:b1:44:fa:48:65:75:84:5b:ba: 2d:7e:01:1a:a0:48:06:fa:31:bc:8a:e2:4f:54:a9: b6:0f:dc:8b:28:0d:37:3a:0b:cb:fa:e4:d8:93:98: 80:16:65:83:67:e1:65:8c:72:c5:f4:e8:32:8b:5f: 41:aa:62:b1:b0:af:ff:db:e4:38:a4:9e:7d:5c:af: 59:6a:d3:41:b7:a2:fb:9e:e7:1f:47:ab:cc:e7:29: 28:ab:fc:fb:91:44:87:eb:dd:e6:6c:ac:a5:28:1b: a7:f6:61:40:4f:3d:6c:f4:c6:eb:fe:3c:d2:4d:74: b7:8b:78:80:b6:ef:c2:cc:d3:c6:dd:0a:8b:dc:b0: c9:c5:1c:c6:24:d3:be:2a:b5:2f:b9:e5:d9:89:d9: c6:22:14:9d:d0:f0:94:10:ac:7f:65:d7:04:a4:db: b9:28:c7:27:d5:42:6a:02:fd:38:ef:e1:c6:c8:22: 45:1d:31:d3:76:39:9b:8e:5f:b5:8f:25:92:8f:a9: d8:7d:97:81:57:0b:91:5e:18:4e:57:7d:0d:47:c8: 32:91:33:52:3d:76:f7:d2:7f:58:aa:65:e4:76:f8: d4:62:09:c2:55:33:63:e3:f0:c1:78:74:ad:36:b3: ab:6e:96:91:cb:25:99:63:13:e5:eb:95:2b:a5:0f: 62:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:99:93:7E:9A:B2:1D:32:3F:80:6A:51:41:FD:2E:03:74:6F:17:1B X509v3 Authority Key Identifier: keyid:48:0B:CD:9E:EA:88:F0:A6:DA:17:DF:98:43:B9:BA:6F:59:C2:7E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:38:32:8e:31:b0:a3:2e:36:9b:06:b0:ce:3b:c9:a1:88:de: 39:7e:45:a8:96:c8:50:76:0a:0b:d2:5e:0f:ad:fb:52:6d:3a: 34:3b:2f:75:bf:d8:d0:84:5e:33:1c:30:e6:92:39:f7:5c:68: bd:93:b0:ef:23:0e:93:9b:e6:b1:9a:b8:a3:6b:b8:16:4d:c9: 12:dc:06:72:8b:24:b0:b5:85:ff:1f:09:91:8d:88:95:cd:82: a6:7e:b6:67:ba:76:20:a7:8d:c4:11:91:cc:13:61:47:1d:a1: b2:c9:63:5d:45:49:fa:69:b8:f3:9d:ff:60:2d:9d:b7:42:6d: 21:c5:5d:8c:73:24:01:19:56:61:19:69:96:f1:2b:a7:54:c2: 46:18:23:2a:d0:7e:b4:f8:8a:cc:3e:58:3f:51:35:6b:bc:ae: bb:50:79:9c:d2:85:7c:de:22:b3:95:44:2d:0a:bf:9f:b6:1d: 49:24:68:67:42:a4:5d:bf:7d:3f:8d:fd:64:d4:d7:49:a9:10: b7:12:28:eb:ea:4c:43:66:80:eb:6f:c5:ba:4f:65:4d:59:16: de:84:ac:a1:a6:17:7c:b3:7f:00:ea:eb:9e:fb:0a:b6:cd:b0: 21:91:55:42:99:a8:b3:79:b4:ad:58:06:86:e9:56:4c:39:ff: ab:a7:95:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM4N0YxMTAvBgNVBAUTKDQ4MEJDRDlFRUE4OEYwQTZEQTE3REY5ODQzQjlCQTZG NTlDMjdFOUUwHhcNMjUwNTMxMjI0NTQ4WhcNMjUwNjA3MjI0NTQ3WjAYMRYwFAYD VQQDEw02ODNiODY5Yy1hOTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2s6BrRuxRPpIZXWEW7otfgEaoEgG+jG8iuJPVKm2D9yLKA03OgvL+uTYk5iA FmWDZ+FljHLF9Ogyi19BqmKxsK//2+Q4pJ59XK9ZatNBt6L7nucfR6vM5ykoq/z7 kUSH693mbKylKBun9mFATz1s9Mbr/jzSTXS3i3iAtu/CzNPG3QqL3LDJxRzGJNO+ KrUvueXZidnGIhSd0PCUEKx/ZdcEpNu5KMcn1UJqAv047+HGyCJFHTHTdjmbjl+1 jyWSj6nYfZeBVwuRXhhOV30NR8gykTNSPXb30n9YqmXkdvjUYgnCVTNj4/DBeHSt NrOrbpaRyyWZYxPl65UrpQ9iEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNmZk36a sh0yP4BqUUH9LgN0bxcbMB8GA1UdIwQYMBaAFEgLzZ7qiPCm2hffmEO5um9Zwn6e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Mzg3Ri9BQkEyMTk2Qzkz NDIxMUVCQTM3NjlCNzlDNEY5QUUwMi9TQXZObnVxSThLYmFGOS1ZUTdtNmIxbkNm cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1NBdk5udXFJOEtiYUY5LVlRN202YjFuQ2ZwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Mzg3Ri9BQkEyMTk2QzkzNDIxMUVCQTM3NjlCNzlDNEY5QUUwMi9TQXZObnVxSThL YmFGOS1ZUTdtNmIxbkNmcDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoODKOMbCjLjabBrDOO8mhiN45fkWolshQdgoL0l4PrftSbTo0Oy91 v9jQhF4zHDDmkjn3XGi9k7DvIw6Tm+axmrija7gWTckS3AZyiySwtYX/HwmRjYiV zYKmfrZnunYgp43EEZHME2FHHaGyyWNdRUn6abjznf9gLZ23Qm0hxV2McyQBGVZh GWmW8SunVMJGGCMq0H60+IrMPlg/UTVrvK67UHmc0oV83iKzlUQtCr+fth1JJGhn QqRdv30/jf1k1NdJqRC3Eijr6kxDZoDrb8W6T2VNWRbehKyhphd8s38A6uue+wq2 zbAhkVVCmaizebStWAaG6VZMOf+rp5Vg -----END CERTIFICATE-----Generated at Mon Jun 2 21:56:50 2025 by rpki-client