$ rpki-client -vvf rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/nT4CCLhd8EngI7NH2psYP8Vrqx4.mft File: nT4CCLhd8EngI7NH2psYP8Vrqx4.mft (raw, json) Hash identifier: EO566BQMEG21aCdiHC9N/tM4Pp2sJBmR5vviPQmDAzA= Subject key identifier: 6E:03:D1:02:86:7C:0A:6A:C6:6A:91:2F:DD:F2:E5:AF:D4:72:23:79 Authority key identifier: 9D:3E:02:08:B8:5D:F0:49:E0:23:B3:47:DA:9B:18:3F:C5:6B:AB:1E Certificate issuer: /CN=A919D6D8/serialNumber=9D3E0208B85DF049E023B347DA9B183FC56BAB1E Certificate serial: 0AB3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nT4CCLhd8EngI7NH2psYP8Vrqx4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/nT4CCLhd8EngI7NH2psYP8Vrqx4.mft Manifest number: 131B Signing time: Mon 02 Jun 2025 19:38:39 +0000 Manifest this update: Mon 02 Jun 2025 19:38:38 +0000 Manifest next update: Mon 09 Jun 2025 19:38:38 +0000 Files and hashes: 1: nT4CCLhd8EngI7NH2psYP8Vrqx4.crl (hash: qxTMlHIM80IKY8sB0+e9VDoGpjaCBAzIhg2zqw3k8sA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/nT4CCLhd8EngI7NH2psYP8Vrqx4.crl rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/nT4CCLhd8EngI7NH2psYP8Vrqx4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nT4CCLhd8EngI7NH2psYP8Vrqx4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 19:38:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2739 (0xab3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D6D8, serialNumber=9D3E0208B85DF049E023B347DA9B183FC56BAB1E Validity Not Before: Jun 2 19:38:38 2025 GMT Not After : Jun 9 19:38:38 2025 GMT Subject: CN=683dfdbf-8385 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4e:64:61:dc:ae:d1:2c:36:8f:4e:d5:ac:d4: 16:0f:51:94:e0:8d:49:ac:91:3b:f4:f2:24:03:51: b3:df:a0:0d:5f:5f:da:19:43:55:47:52:84:8b:c9: f5:73:93:b0:81:3c:be:fd:20:2b:58:65:b5:39:e3: 4c:5b:1c:ae:55:fe:dc:d3:45:5b:b7:59:0c:ba:04: f5:f7:92:78:44:9b:d2:4a:a5:f6:4e:cd:0e:9b:ad: fa:e5:57:69:38:67:82:ae:62:e8:6d:ef:fe:c4:a3: 34:6c:c2:89:61:ed:20:03:0d:96:38:53:0a:9b:55: af:5e:d0:08:ba:00:83:8a:15:d2:52:14:37:31:34: da:d5:3a:8a:aa:73:f4:77:b8:48:f5:08:9b:80:8b: 35:04:9e:7e:83:06:26:d0:a9:e6:c7:06:7d:7e:4c: f0:6d:6c:32:4f:6f:50:47:0e:a7:a8:75:60:e5:b2: 5c:25:ce:0f:57:17:2a:68:71:c1:eb:9d:9c:f5:4e: 7e:90:3a:93:0d:13:84:23:18:41:c6:7e:4a:3c:2c: 9f:b4:9e:45:44:00:47:1d:9d:69:85:03:5e:60:52: 07:43:db:02:84:9e:fe:ba:8e:41:4d:83:d1:17:48: 33:32:88:e6:8b:d1:4a:c1:c2:8a:2a:df:36:33:7b: dd:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:03:D1:02:86:7C:0A:6A:C6:6A:91:2F:DD:F2:E5:AF:D4:72:23:79 X509v3 Authority Key Identifier: keyid:9D:3E:02:08:B8:5D:F0:49:E0:23:B3:47:DA:9B:18:3F:C5:6B:AB:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/nT4CCLhd8EngI7NH2psYP8Vrqx4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nT4CCLhd8EngI7NH2psYP8Vrqx4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/nT4CCLhd8EngI7NH2psYP8Vrqx4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:12:47:70:11:d4:ff:d8:08:79:78:03:84:02:1c:47:f4:4a: 3c:4f:d1:bd:2e:3e:07:4e:1f:52:01:22:1c:0c:7a:96:1d:f1: 06:2d:01:3d:22:3b:5c:7c:e2:c8:84:43:9f:b5:b8:7c:72:49: 2b:46:34:6b:b0:53:43:0c:3e:a1:af:57:05:59:2d:c4:91:5f: b9:ea:88:66:bd:a9:d8:35:82:4a:6e:86:7b:8e:31:f8:a5:31: d1:81:7b:84:49:91:28:c2:9a:3c:a3:fe:12:f2:36:bf:1e:10: 1a:29:38:90:e3:93:ce:6b:67:58:e5:75:ab:bd:fb:bf:61:7c: 1e:3a:d4:63:c1:2d:0a:42:f7:de:b8:76:2d:ff:3a:a5:dd:db: 8b:42:71:79:ee:68:fe:b4:8e:8d:02:eb:2b:09:af:9f:12:4f: 87:93:e3:dd:4d:2b:00:21:63:2e:ca:61:75:59:84:e7:b1:2b: 40:45:cf:07:ae:73:8d:16:c6:10:ec:59:e0:5c:40:db:05:18: 82:83:46:3d:2a:1e:0a:6b:67:dc:c7:49:cd:ba:d7:f1:55:6f: 37:23:3a:17:35:88:49:d1:f9:e2:3b:3f:f7:05:76:15:93:a9: 0a:77:b1:1f:58:19:0f:7e:9f:58:bc:cf:6b:32:71:3e:0d:37: 4c:da:38:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCrMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ2RDgxMTAvBgNVBAUTKDlEM0UwMjA4Qjg1REYwNDlFMDIzQjM0N0RBOUIxODNG QzU2QkFCMUUwHhcNMjUwNjAyMTkzODM4WhcNMjUwNjA5MTkzODM4WjAYMRYwFAYD VQQDEw02ODNkZmRiZi04Mzg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvE5kYdyu0Sw2j07VrNQWD1GU4I1JrJE79PIkA1Gz36ANX1/aGUNVR1KEi8n1 c5OwgTy+/SArWGW1OeNMWxyuVf7c00Vbt1kMugT195J4RJvSSqX2Ts0Om6365Vdp OGeCrmLobe/+xKM0bMKJYe0gAw2WOFMKm1WvXtAIugCDihXSUhQ3MTTa1TqKqnP0 d7hI9QibgIs1BJ5+gwYm0KnmxwZ9fkzwbWwyT29QRw6nqHVg5bJcJc4PVxcqaHHB 652c9U5+kDqTDROEIxhBxn5KPCyftJ5FRABHHZ1phQNeYFIHQ9sChJ7+uo5BTYPR F0gzMojmi9FKwcKKKt82M3vdTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG4D0QKG fApqxmqRL93y5a/UciN5MB8GA1UdIwQYMBaAFJ0+Agi4XfBJ4COzR9qbGD/Fa6se MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDZEOC9BMDM3OTZERTUx QzAxMUVBQjI2NUU4ODBDNEY5QUUwMi9uVDRDQ0xoZDhFbmdJN05IMnBzWVA4VnJx eDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25UNENDTGhkOEVuZ0k3TkgycHNZUDhWcnF4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDZEOC9BMDM3OTZERTUxQzAxMUVBQjI2NUU4ODBDNEY5QUUwMi9uVDRDQ0xoZDhF bmdJN05IMnBzWVA4VnJxeDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKEkdwEdT/2Ah5eAOEAhxH9Eo8T9G9Lj4HTh9SASIcDHqWHfEGLQE9 IjtcfOLIhEOftbh8ckkrRjRrsFNDDD6hr1cFWS3EkV+56ohmvanYNYJKboZ7jjH4 pTHRgXuESZEowpo8o/4S8ja/HhAaKTiQ45POa2dY5XWrvfu/YXweOtRjwS0KQvfe uHYt/zql3duLQnF57mj+tI6NAusrCa+fEk+Hk+PdTSsAIWMuymF1WYTnsStARc8H rnONFsYQ7FngXEDbBRiCg0Y9Kh4Ka2fcx0nNutfxVW83IzoXNYhJ0fniOz/3BXYV k6kKd7EfWBkPfp9YvM9rMnE+DTdM2jhX -----END CERTIFICATE-----Generated at Wed Jun 4 00:22:10 2025 by rpki-client