$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4F3C/8A55A6A41DA611E2B91CD29D08B02CD2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.mft File: MHrUXgG4R5-iKKEj3nr6pdGXwX0.mft (raw, json) Hash identifier: +Y+R/6d9BGGQyowH9VLYJMz4F2LQPdXdYs/StLEjgt4= Subject key identifier: 09:8E:E8:C2:AA:1B:58:B5:5A:29:1D:56:27:81:85:A4:C6:14:F0:40 Authority key identifier: 30:7A:D4:5E:01:B8:47:9F:A2:28:A1:23:DE:7A:FA:A5:D1:97:C1:7D Certificate issuer: /CN=A91B4F3C/serialNumber=307AD45E01B8479FA228A123DE7AFAA5D197C17D Certificate serial: 3489 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4F3C/8A55A6A41DA611E2B91CD29D08B02CD2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.mft Manifest number: 3489 Signing time: Wed 04 Jun 2025 15:13:05 +0000 Manifest this update: Wed 04 Jun 2025 15:13:04 +0000 Manifest next update: Wed 11 Jun 2025 15:13:04 +0000 Files and hashes: 1: MHrUXgG4R5-iKKEj3nr6pdGXwX0.crl (hash: Jx0BE7KlLAakiZaLWKn3phAZXj2tzPTBRcSNw9j8kpE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4F3C/8A55A6A41DA611E2B91CD29D08B02CD2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.crl rsync://rpki.apnic.net/member_repository/A91B4F3C/8A55A6A41DA611E2B91CD29D08B02CD2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 15:13:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13449 (0x3489) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4F3C, serialNumber=307AD45E01B8479FA228A123DE7AFAA5D197C17D Validity Not Before: Jun 4 15:13:04 2025 GMT Not After : Jun 11 15:13:04 2025 GMT Subject: CN=68406281-a466 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:59:d0:9a:7d:a8:2c:0e:6e:61:59:c2:2f:c2: f8:c7:f6:1f:ff:f7:0a:fa:72:0f:98:55:a6:aa:16: e4:0e:b4:c5:cb:80:db:41:41:f2:cf:f8:3f:cb:44: 5e:d1:df:cd:4a:96:c6:4c:b0:f8:a4:97:e3:24:4b: 29:7f:3b:58:09:3f:2a:db:7d:cf:92:96:13:b5:b5: a4:cc:ca:57:88:0f:42:32:a7:bb:70:37:81:79:73: ec:3a:c0:6b:ce:33:eb:7e:91:8f:3a:67:2c:b6:e3: e2:ae:ec:4c:b6:cc:13:15:a9:92:a2:27:e2:99:72: 3a:26:c6:96:30:2d:fb:44:de:f0:9e:b1:bd:72:dd: 33:cb:ba:c3:f5:4b:dd:ce:e5:e6:79:65:ff:84:8b: 99:8d:1f:19:d0:92:5a:4b:af:b0:f6:35:12:93:26: fa:41:f2:a7:2c:94:51:aa:21:20:f8:ad:32:17:47: e4:12:b9:ed:9d:14:49:af:87:77:84:7c:15:1d:e4: 56:73:bb:12:9d:94:1f:76:5f:46:38:44:77:b1:6e: 9e:83:fe:26:cf:1e:42:34:69:f7:ab:7d:75:5d:2b: 94:08:17:b3:82:91:25:bb:4c:bd:cb:d9:ff:a2:08: 73:70:fd:0a:0e:ce:90:58:f1:7f:be:c3:c4:3d:c7: 9d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:8E:E8:C2:AA:1B:58:B5:5A:29:1D:56:27:81:85:A4:C6:14:F0:40 X509v3 Authority Key Identifier: keyid:30:7A:D4:5E:01:B8:47:9F:A2:28:A1:23:DE:7A:FA:A5:D1:97:C1:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4F3C/8A55A6A41DA611E2B91CD29D08B02CD2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4F3C/8A55A6A41DA611E2B91CD29D08B02CD2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:c1:7a:c1:77:8f:35:75:b1:57:c3:ed:17:f8:ff:7e:b5:48: 89:c6:68:b6:50:5a:1d:ef:d9:6b:78:d6:2f:cd:da:d0:ee:c7: 68:90:38:7d:cd:ad:f4:26:bd:8e:4f:e7:f3:88:56:43:b0:be: 43:65:db:f3:77:8b:15:59:f4:01:28:ab:e0:ac:a7:e5:be:86: 85:6c:07:1f:a4:50:6e:75:85:7b:7d:79:18:0e:8f:f4:76:32: 98:a3:ad:b9:15:d5:b3:3b:53:a3:43:a6:70:91:97:42:a3:eb: 49:30:45:6a:ff:4a:3a:11:a4:09:44:56:fa:28:5e:e4:ae:84: ea:cb:d4:e9:72:af:5a:18:20:64:2d:8c:7c:bc:c6:fb:a2:0e: 1b:28:08:25:88:65:60:99:54:bb:82:1c:6e:58:7a:b6:34:1c: 78:7d:04:ba:1a:af:39:4b:22:ca:d1:8b:92:2b:fa:6f:ca:91: fa:a5:7a:9e:cf:c3:4b:17:d3:c9:0c:be:93:2b:93:ec:96:c2: c7:d1:3a:28:25:09:fa:d1:d4:5b:04:74:1e:02:d2:1b:26:7e: 69:85:9a:c9:7b:8e:02:77:6d:dc:24:0d:f9:46:e1:91:1c:d3: cd:c3:dd:d7:fa:93:5b:db:83:73:a5:80:f0:a4:2e:77:a8:af: 57:5f:5e:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjRGM0MxMTAvBgNVBAUTKDMwN0FENDVFMDFCODQ3OUZBMjI4QTEyM0RFN0FGQUE1 RDE5N0MxN0QwHhcNMjUwNjA0MTUxMzA0WhcNMjUwNjExMTUxMzA0WjAYMRYwFAYD VQQDEw02ODQwNjI4MS1hNDY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0VnQmn2oLA5uYVnCL8L4x/Yf//cK+nIPmFWmqhbkDrTFy4DbQUHyz/g/y0Re 0d/NSpbGTLD4pJfjJEspfztYCT8q233PkpYTtbWkzMpXiA9CMqe7cDeBeXPsOsBr zjPrfpGPOmcstuPiruxMtswTFamSoifimXI6JsaWMC37RN7wnrG9ct0zy7rD9Uvd zuXmeWX/hIuZjR8Z0JJaS6+w9jUSkyb6QfKnLJRRqiEg+K0yF0fkErntnRRJr4d3 hHwVHeRWc7sSnZQfdl9GOER3sW6eg/4mzx5CNGn3q311XSuUCBezgpElu0y9y9n/ oghzcP0KDs6QWPF/vsPEPcedUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAmO6MKq G1i1WikdVieBhaTGFPBAMB8GA1UdIwQYMBaAFDB61F4BuEefoiihI956+qXRl8F9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEYzQy84QTU1QTZBNDFE QTYxMUUyQjkxQ0QyOUQwOEIwMkNEMi9NSHJVWGdHNFI1LWlLS0VqM25yNnBkR1h3 WDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01IclVYZ0c0UjUtaUtLRWozbnI2cGRHWHdYMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEYzQy84QTU1QTZBNDFEQTYxMUUyQjkxQ0QyOUQwOEIwMkNEMi9NSHJVWGdHNFI1 LWlLS0VqM25yNnBkR1h3WDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0wXrBd481dbFXw+0X+P9+tUiJxmi2UFod79lreNYvzdrQ7sdokDh9 za30Jr2OT+fziFZDsL5DZdvzd4sVWfQBKKvgrKflvoaFbAcfpFBudYV7fXkYDo/0 djKYo625FdWzO1OjQ6ZwkZdCo+tJMEVq/0o6EaQJRFb6KF7kroTqy9Tpcq9aGCBk LYx8vMb7og4bKAgliGVgmVS7ghxuWHq2NBx4fQS6Gq85SyLK0YuSK/pvypH6pXqe z8NLF9PJDL6TK5PslsLH0TooJQn60dRbBHQeAtIbJn5phZrJe44Cd23cJA35RuGR HNPNw93X+pNb24NzpYDwpC53qK9XX16q -----END CERTIFICATE-----Generated at Thu Jun 5 18:38:25 2025 by rpki-client