$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC4F3/CFC6DCB80C0411EA889F9955C4F9AE02/RmieTZ937kzGyKiOZ57P7zdS9Dc.mft File: RmieTZ937kzGyKiOZ57P7zdS9Dc.mft (raw, json) Hash identifier: 8QXJhCDZAUhtAM9ZrghrCPo68Q6BEjGui64tpmsv7eA= Subject key identifier: 35:0C:A0:92:7B:0C:61:29:0B:4A:F8:49:FF:ED:24:16:8C:1E:8C:3E Authority key identifier: 46:68:9E:4D:9F:77:EE:4C:C6:C8:A8:8E:67:9E:CF:EF:37:52:F4:37 Certificate issuer: /CN=A91AC4F3/serialNumber=46689E4D9F77EE4CC6C8A88E679ECFEF3752F437 Certificate serial: 0C15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RmieTZ937kzGyKiOZ57P7zdS9Dc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC4F3/CFC6DCB80C0411EA889F9955C4F9AE02/RmieTZ937kzGyKiOZ57P7zdS9Dc.mft Manifest number: 0C14 Signing time: Fri 30 May 2025 18:49:10 +0000 Manifest this update: Fri 30 May 2025 18:49:10 +0000 Manifest next update: Fri 06 Jun 2025 18:49:10 +0000 Files and hashes: 1: RmieTZ937kzGyKiOZ57P7zdS9Dc.crl (hash: 90/wOsWUtGS/QqcOnvj6gAaVtz1dujth+f1VgwYDWJc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC4F3/CFC6DCB80C0411EA889F9955C4F9AE02/RmieTZ937kzGyKiOZ57P7zdS9Dc.crl rsync://rpki.apnic.net/member_repository/A91AC4F3/CFC6DCB80C0411EA889F9955C4F9AE02/RmieTZ937kzGyKiOZ57P7zdS9Dc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RmieTZ937kzGyKiOZ57P7zdS9Dc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:49:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3093 (0xc15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC4F3, serialNumber=46689E4D9F77EE4CC6C8A88E679ECFEF3752F437 Validity Not Before: May 30 18:49:10 2025 GMT Not After : Jun 6 18:49:10 2025 GMT Subject: CN=6839fda6-b910 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4d:ea:3f:5a:b4:e5:fd:a0:54:0b:54:8d:8b: 24:a2:6d:07:59:5e:72:06:3a:1f:f0:83:b8:a0:4d: 69:cc:f2:4c:d0:58:4a:ee:26:80:e7:8e:ac:e5:ea: c3:60:00:7f:ae:7c:37:c2:e6:2e:23:44:a1:ae:bc: 64:e3:a2:c4:b9:a3:aa:74:a1:b1:c4:cc:d5:61:98: 71:0d:8b:f2:ec:a6:93:85:f5:2a:77:11:f7:e0:c6: 5e:e4:e8:9c:d0:e7:87:b8:c9:82:5a:3e:1d:b2:c6: 36:25:6b:85:88:1d:d9:b6:42:51:08:71:61:a5:35: 54:4c:d5:85:b0:9e:f9:65:6e:78:98:a4:ff:6d:d8: 4a:37:e5:51:72:b5:90:80:2c:e2:07:cd:5d:35:7e: e2:30:9e:4d:21:eb:90:c6:2f:1f:39:b7:ed:7f:c0: 23:bc:53:cd:16:7a:95:54:12:85:f3:a3:2d:17:c7: bc:dc:71:03:f4:10:17:65:9c:c3:36:63:39:39:ba: ed:c6:6f:54:ce:55:88:f6:f1:3a:2c:9d:04:91:ef: b3:c0:89:4d:b5:f6:fc:63:5e:3a:df:9c:23:f6:1e: 46:8f:41:f6:c0:2b:e1:67:8e:6f:ed:11:b9:4e:1d: 11:a0:77:16:79:2b:22:c0:79:22:14:02:f1:31:f1: 40:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:0C:A0:92:7B:0C:61:29:0B:4A:F8:49:FF:ED:24:16:8C:1E:8C:3E X509v3 Authority Key Identifier: keyid:46:68:9E:4D:9F:77:EE:4C:C6:C8:A8:8E:67:9E:CF:EF:37:52:F4:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC4F3/CFC6DCB80C0411EA889F9955C4F9AE02/RmieTZ937kzGyKiOZ57P7zdS9Dc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RmieTZ937kzGyKiOZ57P7zdS9Dc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC4F3/CFC6DCB80C0411EA889F9955C4F9AE02/RmieTZ937kzGyKiOZ57P7zdS9Dc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:f5:df:09:a2:6f:d3:ba:6c:0b:b7:f5:5a:17:34:5c:0a:b3: 08:f1:ea:ae:6c:95:0a:65:d0:c2:9a:77:13:07:bd:37:52:21: b6:38:68:e7:40:08:2e:8f:69:68:53:5a:39:ed:b4:78:9e:4f: 3c:77:db:c6:36:73:da:df:f0:5c:fb:46:7d:2e:e2:c5:24:b3: 1f:b3:fd:69:2c:63:c0:86:d6:a3:b4:ea:f7:da:5e:25:2d:a5: 0b:20:d2:c5:28:a2:81:f7:04:c9:c5:35:57:03:83:e6:27:0e: dc:1f:32:13:0c:30:b7:70:47:ce:ce:b5:bf:ea:f1:bc:b0:a7: 78:33:3e:c0:b0:5b:b1:69:8a:bd:b5:b7:a9:10:b6:3c:ea:1b: 47:04:9b:9a:1c:f1:ee:9d:28:b8:cd:a2:b7:b0:e2:d6:01:1b: 74:fd:55:c2:1c:3a:7e:22:72:1d:b7:4f:5d:b6:5f:88:59:cd: 66:fe:1d:4f:28:60:69:98:99:f1:41:a5:6a:9a:93:f1:33:14: e5:bf:1f:d6:d9:33:82:ca:da:7e:0e:f8:7c:9d:c5:51:df:3a: 1d:36:51:57:11:7e:d2:52:56:d9:5e:ce:a8:f9:48:3e:f3:9a: 89:6e:0d:ae:41:81:39:33:e8:69:5a:60:b1:fa:99:72:1a:10: 15:37:4e:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDBUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUM0RjMxMTAvBgNVBAUTKDQ2Njg5RTREOUY3N0VFNENDNkM4QTg4RTY3OUVDRkVG Mzc1MkY0MzcwHhcNMjUwNTMwMTg0OTEwWhcNMjUwNjA2MTg0OTEwWjAYMRYwFAYD VQQDEw02ODM5ZmRhNi1iOTEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt03qP1q05f2gVAtUjYskom0HWV5yBjof8IO4oE1pzPJM0FhK7iaA546s5erD YAB/rnw3wuYuI0Shrrxk46LEuaOqdKGxxMzVYZhxDYvy7KaThfUqdxH34MZe5Oic 0OeHuMmCWj4dssY2JWuFiB3ZtkJRCHFhpTVUTNWFsJ75ZW54mKT/bdhKN+VRcrWQ gCziB81dNX7iMJ5NIeuQxi8fObftf8AjvFPNFnqVVBKF86MtF8e83HED9BAXZZzD NmM5Obrtxm9UzlWI9vE6LJ0Eke+zwIlNtfb8Y14635wj9h5Gj0H2wCvhZ45v7RG5 Th0RoHcWeSsiwHkiFALxMfFAlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDUMoJJ7 DGEpC0r4Sf/tJBaMHow+MB8GA1UdIwQYMBaAFEZonk2fd+5Mxsiojmeez+83UvQ3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzRGMy9DRkM2RENCODBD MDQxMUVBODg5Rjk5NTVDNEY5QUUwMi9SbWllVFo5Mzdrekd5S2lPWjU3UDd6ZFM5 RGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JtaWVUWjkzN2t6R3lLaU9aNTdQN3pkUzlEYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QzRGMy9DRkM2RENCODBDMDQxMUVBODg5Rjk5NTVDNEY5QUUwMi9SbWllVFo5Mzdr ekd5S2lPWjU3UDd6ZFM5RGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC09d8Jom/TumwLt/VaFzRcCrMI8equbJUKZdDCmncTB703UiG2OGjn QAguj2loU1o57bR4nk88d9vGNnPa3/Bc+0Z9LuLFJLMfs/1pLGPAhtajtOr32l4l LaULINLFKKKB9wTJxTVXA4PmJw7cHzITDDC3cEfOzrW/6vG8sKd4Mz7AsFuxaYq9 tbepELY86htHBJuaHPHunSi4zaK3sOLWARt0/VXCHDp+InIdt09dtl+IWc1m/h1P KGBpmJnxQaVqmpPxMxTlvx/W2TOCytp+Dvh8ncVR3zodNlFXEX7SUlbZXs6o+Ug+ 85qJbg2uQYE5M+hpWmCx+plyGhAVN07m -----END CERTIFICATE-----Generated at Sat May 31 16:44:50 2025 by rpki-client