$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.mft File: F4AJbMkKtq6vCNeasYxUx7d6U6A.mft (raw, json) Hash identifier: 6R+JcJMMK+jzohdvYJNpX18Zp557zy33t97s9F2uQ6k= Subject key identifier: 9D:F9:43:36:B4:E1:A2:B2:18:0F:C5:F8:E1:F9:5C:9C:81:7C:69:2E Authority key identifier: 17:80:09:6C:C9:0A:B6:AE:AF:08:D7:9A:B1:8C:54:C7:B7:7A:53:A0 Certificate issuer: /CN=A91A4543/serialNumber=1780096CC90AB6AEAF08D79AB18C54C7B77A53A0 Certificate serial: 06 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4AJbMkKtq6vCNeasYxUx7d6U6A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.mft Manifest number: 06 Signing time: Wed 04 Jun 2025 20:47:37 +0000 Manifest this update: Wed 04 Jun 2025 20:47:37 +0000 Manifest next update: Wed 11 Jun 2025 20:47:37 +0000 Files and hashes: 1: F4AJbMkKtq6vCNeasYxUx7d6U6A.crl (hash: zPVgJmbciX2xpi7qySfTLJCV/oIYQgb73vlwrS/qfco=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.crl rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4AJbMkKtq6vCNeasYxUx7d6U6A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 20:47:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6 (0x6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4543, serialNumber=1780096CC90AB6AEAF08D79AB18C54C7B77A53A0 Validity Not Before: Jun 4 20:47:37 2025 GMT Not After : Jun 11 20:47:37 2025 GMT Subject: CN=6840b0e9-9002 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5d:b8:2b:be:fc:fe:09:66:ab:25:5b:be:67: d7:11:e3:46:d5:0d:6d:56:79:6c:1c:de:f9:4c:f7: d7:24:6d:8f:19:86:56:90:d5:e7:08:1e:e3:47:17: d8:84:b6:70:a8:75:2c:9a:05:03:51:c9:5f:1c:ae: 41:7a:95:5f:dc:f9:b5:1a:29:45:b9:f3:51:77:f7: b8:ce:59:49:34:77:d4:73:b9:be:09:cb:2e:82:29: dc:3d:ec:c1:8d:d3:01:c5:78:cf:bc:ba:a2:60:bd: ba:13:cf:36:cc:82:16:91:51:e1:92:61:15:99:45: f9:64:7a:b5:29:71:58:8d:15:a6:0c:b1:a7:03:aa: 75:11:d6:a4:84:9d:76:d7:35:9c:cf:43:49:6b:df: 05:f7:11:85:35:ba:e9:5f:39:ce:ec:c4:a4:f9:11: 96:24:d3:2b:d8:56:a9:02:be:be:7c:85:55:cf:78: ae:f5:a7:e5:04:1a:9f:d7:e3:ed:29:10:14:1b:a1: 28:e3:b5:ef:45:6d:dd:f4:5c:57:50:21:72:be:3d: 50:8a:90:10:a9:07:8c:cd:7d:27:91:8f:4b:cf:97: 0b:e8:7b:d0:93:6a:d2:ec:0e:16:59:59:d0:a6:5f: cf:43:06:4c:5c:9c:98:ed:71:02:cf:43:1f:cc:bf: ca:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:F9:43:36:B4:E1:A2:B2:18:0F:C5:F8:E1:F9:5C:9C:81:7C:69:2E X509v3 Authority Key Identifier: keyid:17:80:09:6C:C9:0A:B6:AE:AF:08:D7:9A:B1:8C:54:C7:B7:7A:53:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4AJbMkKtq6vCNeasYxUx7d6U6A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:05:d0:34:fb:e7:09:07:1e:c3:f9:ce:f2:d7:4e:84:2e:17: 96:e4:c5:80:88:fb:3b:24:4f:b5:99:57:dc:f1:51:86:c4:ee: e8:b0:fa:c5:14:6a:25:4d:85:0a:a3:ea:56:5d:74:2e:3e:04: 6a:af:ed:f7:f9:1d:db:b2:01:fa:72:20:54:fb:19:69:16:a9: 3d:d7:5b:71:29:45:07:fc:6b:a5:06:7f:00:dc:b9:c8:7b:bf: bd:4f:ee:3b:0d:de:d8:35:b2:2d:87:97:c6:d4:18:66:28:aa: 19:cd:81:6c:ad:c2:b3:7b:50:4e:59:3a:ae:53:c7:b6:4d:37: 87:86:1d:b9:a8:98:6d:6e:e1:9d:15:f0:cb:e0:e7:04:44:cf: d0:ae:de:94:60:4f:1a:e7:08:6f:d0:18:19:03:72:46:a9:16: 1b:62:f2:29:52:7f:54:4d:e7:0a:42:ed:c0:11:6a:29:b4:ae: 06:96:34:13:fc:10:7d:62:3c:45:ab:a1:8a:b4:a4:cb:77:5b: 2c:16:63:f1:a5:40:91:06:6c:3e:46:82:bb:7b:87:d8:cb:75: 20:8f:67:22:03:d6:ea:df:c9:39:bc:c0:1c:97:f7:e2:01:e6: a2:2b:37:39:90:b3:7c:60:54:87:c5:5d:55:ba:f6:23:9a:9f: b8:98:5a:96 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NDU0MzExMC8GA1UEBRMoMTc4MDA5NkNDOTBBQjZBRUFGMDhENzlBQjE4QzU0QzdC NzdBNTNBMDAeFw0yNTA2MDQyMDQ3MzdaFw0yNTA2MTEyMDQ3MzdaMBgxFjAUBgNV BAMTDTY4NDBiMGU5LTkwMDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7Xbgrvvz+CWarJVu+Z9cR40bVDW1WeWwc3vlM99ckbY8ZhlaQ1ecIHuNHF9iE tnCodSyaBQNRyV8crkF6lV/c+bUaKUW581F397jOWUk0d9Rzub4Jyy6CKdw97MGN 0wHFeM+8uqJgvboTzzbMghaRUeGSYRWZRflkerUpcViNFaYMsacDqnUR1qSEnXbX NZzPQ0lr3wX3EYU1uulfOc7sxKT5EZYk0yvYVqkCvr58hVXPeK71p+UEGp/X4+0p EBQboSjjte9Fbd30XFdQIXK+PVCKkBCpB4zNfSeRj0vPlwvoe9CTatLsDhZZWdCm X89DBkxcnJjtcQLPQx/Mv8qJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUnflDNrTh orIYD8X44flcnIF8aS4wHwYDVR0jBBgwFoAUF4AJbMkKtq6vCNeasYxUx7d6U6Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0NTQzL0FCNzE5RkNFM0I2 NTExRjA4NzQyREEzOUM0RjlBRTAyL0Y0QUpiTWtLdHE2dkNOZWFzWXhVeDdkNlU2 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRjRBSmJNa0t0cTZ2Q05lYXNZeFV4N2Q2VTZBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0 NTQzL0FCNzE5RkNFM0I2NTExRjA4NzQyREEzOUM0RjlBRTAyL0Y0QUpiTWtLdHE2 dkNOZWFzWXhVeDdkNlU2QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGcF0DT75wkHHsP5zvLXToQuF5bkxYCI+zskT7WZV9zxUYbE7uiw+sUU aiVNhQqj6lZddC4+BGqv7ff5HduyAfpyIFT7GWkWqT3XW3EpRQf8a6UGfwDcuch7 v71P7jsN3tg1si2Hl8bUGGYoqhnNgWytwrN7UE5ZOq5Tx7ZNN4eGHbmomG1u4Z0V 8Mvg5wREz9Cu3pRgTxrnCG/QGBkDckapFhti8ilSf1RN5wpC7cARaim0rgaWNBP8 EH1iPEWroYq0pMt3WywWY/GlQJEGbD5Ggrt7h9jLdSCPZyID1urfyTm8wByX9+IB 5qIrNzmQs3xgVIfFXVW69iOan7iYWpY= -----END CERTIFICATE-----Generated at Thu Jun 5 19:20:36 2025 by rpki-client