$ rpki-client -vvf rpki.apnic.net/member_repository/A918F1EE/F32CF4E8E75111EFBED81B0EC4F9AE02/9ncWp9N92wPcVtA6uQKnIDfqGdk.mft File: 9ncWp9N92wPcVtA6uQKnIDfqGdk.mft (raw, json) Hash identifier: sB3p8JlYzT1IU3unMj7eM25hoeU88Het7jLD+2CXuj8= Subject key identifier: B1:FA:FE:FB:41:99:5A:FB:04:FF:67:68:B1:D7:FD:63:07:06:0C:F8 Authority key identifier: F6:77:16:A7:D3:7D:DB:03:DC:56:D0:3A:B9:02:A7:20:37:EA:19:D9 Certificate issuer: /CN=A918F1EE/serialNumber=F67716A7D37DDB03DC56D03AB902A72037EA19D9 Certificate serial: 3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ncWp9N92wPcVtA6uQKnIDfqGdk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F1EE/F32CF4E8E75111EFBED81B0EC4F9AE02/9ncWp9N92wPcVtA6uQKnIDfqGdk.mft Manifest number: 3A Signing time: Sun 01 Jun 2025 07:14:56 +0000 Manifest this update: Sun 01 Jun 2025 07:14:55 +0000 Manifest next update: Sun 08 Jun 2025 07:14:55 +0000 Files and hashes: 1: 9ncWp9N92wPcVtA6uQKnIDfqGdk.crl (hash: XVNlypgdqj25lIDl9N7tFNKTA39EAmZkaPREbXa3rMQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F1EE/F32CF4E8E75111EFBED81B0EC4F9AE02/9ncWp9N92wPcVtA6uQKnIDfqGdk.crl rsync://rpki.apnic.net/member_repository/A918F1EE/F32CF4E8E75111EFBED81B0EC4F9AE02/9ncWp9N92wPcVtA6uQKnIDfqGdk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ncWp9N92wPcVtA6uQKnIDfqGdk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 07:14:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58 (0x3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F1EE, serialNumber=F67716A7D37DDB03DC56D03AB902A72037EA19D9 Validity Not Before: Jun 1 07:14:55 2025 GMT Not After : Jun 8 07:14:55 2025 GMT Subject: CN=683bfdef-f20d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:bc:68:53:30:c7:7e:76:f5:05:cb:fc:81:07: 07:ba:37:6b:61:cf:9a:02:6c:da:24:df:0d:8f:b2: fb:db:b6:a1:75:e8:06:a3:28:33:0c:fb:8b:03:c0: 82:db:42:49:d2:1e:2c:3e:1d:ec:f5:38:7d:31:3e: a5:38:87:54:47:b8:ee:80:c9:39:46:4b:16:18:71: a8:e9:4a:de:02:6c:05:6c:6c:62:cd:f2:bd:af:90: 35:46:b4:66:23:a0:5c:e6:14:02:d1:64:94:a5:cc: 16:ed:c0:80:8a:2c:3a:c9:16:1a:f5:87:bd:6e:b0: bb:52:84:84:c7:13:7f:51:1f:8d:d9:f9:45:de:ed: 38:74:9a:50:a2:17:51:4b:63:93:12:69:f4:cd:5e: d3:81:ce:78:d4:5e:ce:16:74:b6:d9:dc:99:93:1e: 0c:d5:6a:3c:4d:d2:66:41:4a:d8:0b:7c:0b:17:8d: d7:1a:91:7d:10:f3:8c:01:45:25:13:9a:a5:59:d3: c3:54:ae:59:4b:a9:ef:f2:52:5d:3a:bd:b7:f6:c0: f4:df:4d:ec:5f:a0:0e:95:46:02:54:64:20:95:a9: 49:e4:70:9d:a3:05:af:29:f9:9f:d8:66:93:74:c6: e0:b1:52:cc:db:66:98:42:2b:c6:2c:ba:64:cc:ff: 7b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:FA:FE:FB:41:99:5A:FB:04:FF:67:68:B1:D7:FD:63:07:06:0C:F8 X509v3 Authority Key Identifier: keyid:F6:77:16:A7:D3:7D:DB:03:DC:56:D0:3A:B9:02:A7:20:37:EA:19:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F1EE/F32CF4E8E75111EFBED81B0EC4F9AE02/9ncWp9N92wPcVtA6uQKnIDfqGdk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ncWp9N92wPcVtA6uQKnIDfqGdk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F1EE/F32CF4E8E75111EFBED81B0EC4F9AE02/9ncWp9N92wPcVtA6uQKnIDfqGdk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:d4:8b:c7:bb:fe:b3:4b:68:3d:32:28:76:19:a0:ac:22:c4: 9a:d1:4e:62:ab:39:b9:b1:5c:23:e1:7e:d3:0c:70:a0:34:20: ba:80:d0:c3:34:8b:0f:df:09:31:ba:9f:6f:73:b7:56:23:b2: d6:08:00:f5:01:8d:13:89:eb:3f:3f:14:eb:cb:b8:ca:5a:a3: b8:2c:19:92:f1:0a:df:65:20:fc:a6:40:f4:b7:f3:70:2e:92: f9:af:af:62:92:26:87:b1:24:80:64:a2:0c:53:16:b8:a5:03: 75:27:a4:94:bf:64:62:01:79:9b:ff:61:21:22:58:52:fc:ab: 60:ab:ad:ca:5f:3f:98:fb:49:1c:e6:7e:b2:b1:49:6d:47:c4: 21:65:01:4c:5d:93:72:2b:ef:84:32:ef:ea:54:7d:48:85:53: 37:b3:20:58:fb:84:43:46:98:02:9c:66:aa:2e:6d:c0:2a:bb: 9b:84:ae:09:24:6a:d6:24:f2:df:ef:60:36:ff:e1:37:9b:46: 9e:67:cb:26:a0:64:80:fb:99:a3:f7:76:46:7b:37:82:90:b9: 75:e1:8f:ce:69:89:26:f2:40:f6:97:eb:8f:52:bd:da:b6:53: 6c:65:13:04:bb:eb:11:50:76:64:50:07:d3:48:4b:92:0e:3a: 87:52:17:58 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RjFFRTExMC8GA1UEBRMoRjY3NzE2QTdEMzdEREIwM0RDNTZEMDNBQjkwMkE3MjAz N0VBMTlEOTAeFw0yNTA2MDEwNzE0NTVaFw0yNTA2MDgwNzE0NTVaMBgxFjAUBgNV BAMTDTY4M2JmZGVmLWYyMGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrvGhTMMd+dvUFy/yBBwe6N2thz5oCbNok3w2PsvvbtqF16AajKDMM+4sDwILb QknSHiw+Hez1OH0xPqU4h1RHuO6AyTlGSxYYcajpSt4CbAVsbGLN8r2vkDVGtGYj oFzmFALRZJSlzBbtwICKLDrJFhr1h71usLtShITHE39RH43Z+UXe7Th0mlCiF1FL Y5MSafTNXtOBznjUXs4WdLbZ3JmTHgzVajxN0mZBStgLfAsXjdcakX0Q84wBRSUT mqVZ08NUrllLqe/yUl06vbf2wPTfTexfoA6VRgJUZCCVqUnkcJ2jBa8p+Z/YZpN0 xuCxUszbZphCK8YsumTM/3sjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUsfr++0GZ WvsE/2dosdf9YwcGDPgwHwYDVR0jBBgwFoAU9ncWp9N92wPcVtA6uQKnIDfqGdkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThGMUVFL0YzMkNGNEU4RTc1 MTExRUZCRUQ4MUIwRUM0RjlBRTAyLzluY1dwOU45MndQY1Z0QTZ1UUtuSURmcUdk ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOW5jV3A5Tjkyd1BjVnRBNnVRS25JRGZxR2RrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThG MUVFL0YzMkNGNEU4RTc1MTExRUZCRUQ4MUIwRUM0RjlBRTAyLzluY1dwOU45MndQ Y1Z0QTZ1UUtuSURmcUdkay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABDUi8e7/rNLaD0yKHYZoKwixJrRTmKrObmxXCPhftMMcKA0ILqA0MM0 iw/fCTG6n29zt1YjstYIAPUBjROJ6z8/FOvLuMpao7gsGZLxCt9lIPymQPS383Au kvmvr2KSJoexJIBkogxTFrilA3UnpJS/ZGIBeZv/YSEiWFL8q2CrrcpfP5j7SRzm frKxSW1HxCFlAUxdk3Ir74Qy7+pUfUiFUzezIFj7hENGmAKcZqoubcAqu5uErgkk atYk8t/vYDb/4TebRp5nyyagZID7maP3dkZ7N4KQuXXhj85piSbyQPaX649Svdq2 U2xlEwS76xFQdmRQB9NIS5IOOodSF1g= -----END CERTIFICATE-----Generated at Mon Jun 2 07:10:24 2025 by rpki-client