$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8C13/6FA95B581DAA11E285C21CA608B02CD2/Iin2usLWDFC9Hk9Y9CwMobD4m28.mft File: Iin2usLWDFC9Hk9Y9CwMobD4m28.mft (raw, json) Hash identifier: mjEFra0w/NhzaxJX8pqxfp2/VPdReAscgaHn4Xx5fM4= Subject key identifier: D8:19:73:80:2E:95:2E:B1:FB:58:9E:2F:62:0C:7E:CD:8E:0D:72:64 Authority key identifier: 22:29:F6:BA:C2:D6:0C:50:BD:1E:4F:58:F4:2C:0C:A1:B0:F8:9B:6F Certificate issuer: /CN=A91B8C13/serialNumber=2229F6BAC2D60C50BD1E4F58F42C0CA1B0F89B6F Certificate serial: 3492 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iin2usLWDFC9Hk9Y9CwMobD4m28.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8C13/6FA95B581DAA11E285C21CA608B02CD2/Iin2usLWDFC9Hk9Y9CwMobD4m28.mft Manifest number: 3492 Signing time: Fri 30 May 2025 15:23:37 +0000 Manifest this update: Fri 30 May 2025 15:23:36 +0000 Manifest next update: Fri 06 Jun 2025 15:23:36 +0000 Files and hashes: 1: Iin2usLWDFC9Hk9Y9CwMobD4m28.crl (hash: JkMTgACsIdz71F34z2efY/ON+QMhj5mSe/jx6di/2wA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8C13/6FA95B581DAA11E285C21CA608B02CD2/Iin2usLWDFC9Hk9Y9CwMobD4m28.crl rsync://rpki.apnic.net/member_repository/A91B8C13/6FA95B581DAA11E285C21CA608B02CD2/Iin2usLWDFC9Hk9Y9CwMobD4m28.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iin2usLWDFC9Hk9Y9CwMobD4m28.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 15:23:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13458 (0x3492) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8C13, serialNumber=2229F6BAC2D60C50BD1E4F58F42C0CA1B0F89B6F Validity Not Before: May 30 15:23:36 2025 GMT Not After : Jun 6 15:23:36 2025 GMT Subject: CN=6839cd78-602f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:52:ca:38:c1:c6:15:c5:d4:de:48:9e:fb:76: 56:ff:b2:c8:41:b6:7e:4c:5e:90:de:0c:f8:1f:75: a0:4e:ee:21:ab:ff:72:4c:39:1f:4e:4c:e2:d3:d4: 2c:08:09:c5:58:86:ab:61:76:1d:8d:3d:7b:1b:4b: 47:12:fb:84:ff:2b:ae:c1:c5:50:97:b3:1f:4d:8d: 78:6b:6b:22:a8:91:c4:ea:71:61:24:50:c0:31:f3: 5c:c0:9c:2e:32:71:d7:fe:12:de:3e:12:35:d0:05: 17:bc:17:2b:e7:5c:be:35:e7:73:4e:7f:99:fe:6e: f3:26:75:8f:df:6a:8c:2f:31:b0:7e:42:93:40:5e: 6d:b5:d3:31:42:43:da:b0:c6:68:20:a8:16:28:fa: c4:af:3a:9e:cf:e6:90:84:ed:22:8b:09:7c:1b:19: 1a:c4:24:fc:41:31:65:cc:70:0d:6b:70:9e:15:62: d9:e4:61:fe:6e:81:09:2c:c7:c3:87:0c:42:fc:74: 78:f9:97:40:61:fc:12:34:a2:c7:07:20:af:b5:b3: f6:4a:8e:80:39:36:ca:88:9d:15:e5:56:63:36:95: c7:7d:d1:67:be:bb:33:be:aa:dd:c9:77:4e:88:25: 98:f5:31:ff:ce:f8:dc:6f:6b:44:9b:25:b5:bb:09: 7f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:19:73:80:2E:95:2E:B1:FB:58:9E:2F:62:0C:7E:CD:8E:0D:72:64 X509v3 Authority Key Identifier: keyid:22:29:F6:BA:C2:D6:0C:50:BD:1E:4F:58:F4:2C:0C:A1:B0:F8:9B:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8C13/6FA95B581DAA11E285C21CA608B02CD2/Iin2usLWDFC9Hk9Y9CwMobD4m28.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iin2usLWDFC9Hk9Y9CwMobD4m28.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8C13/6FA95B581DAA11E285C21CA608B02CD2/Iin2usLWDFC9Hk9Y9CwMobD4m28.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:c6:ad:65:fc:29:39:58:44:06:f5:1c:8b:6b:b2:89:94:2e: ff:4d:b8:98:b3:c6:37:55:d3:44:b2:a9:b3:b7:4a:47:6b:7f: 86:a1:a8:5f:7f:ac:3e:60:8f:0a:46:3f:2b:2a:2b:f2:17:8a: 95:2c:29:5d:e6:7e:71:3e:12:41:ad:de:df:6a:fb:35:6b:8b: 79:83:e2:e3:64:54:61:b9:a7:26:4e:75:09:66:b9:56:9e:45: 75:d3:21:14:c8:dc:5d:71:0a:3d:91:8e:ee:8f:e3:a2:1e:09: 6d:66:91:e4:a2:43:dc:a3:66:0f:e0:3e:5c:1f:65:9e:a6:74: cc:9e:7f:25:af:48:9a:90:7d:26:e2:6f:e0:6e:06:1b:45:18: e3:7d:b5:52:8c:d4:1a:83:1c:49:39:6e:10:0d:d2:24:20:ce: 83:01:a4:20:1b:8a:bc:51:05:e4:35:17:b8:a0:6a:45:c9:40: a3:d1:af:6d:c9:96:82:b2:85:94:a7:6f:45:cc:92:82:d8:56: 0a:40:e2:2f:e6:3f:21:fd:0e:09:74:11:3d:b4:db:15:39:be: 9c:9b:0a:f1:5d:a9:6c:41:da:a0:27:9d:c7:fa:76:2e:aa:02: d7:1c:8f:d4:00:3b:ca:34:62:3f:cc:6a:02:a6:83:42:9e:46: 26:24:7a:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhDMTMxMTAvBgNVBAUTKDIyMjlGNkJBQzJENjBDNTBCRDFFNEY1OEY0MkMwQ0Ex QjBGODlCNkYwHhcNMjUwNTMwMTUyMzM2WhcNMjUwNjA2MTUyMzM2WjAYMRYwFAYD VQQDEw02ODM5Y2Q3OC02MDJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxVLKOMHGFcXU3kie+3ZW/7LIQbZ+TF6Q3gz4H3WgTu4hq/9yTDkfTkzi09Qs CAnFWIarYXYdjT17G0tHEvuE/yuuwcVQl7MfTY14a2siqJHE6nFhJFDAMfNcwJwu MnHX/hLePhI10AUXvBcr51y+NedzTn+Z/m7zJnWP32qMLzGwfkKTQF5ttdMxQkPa sMZoIKgWKPrErzqez+aQhO0iiwl8GxkaxCT8QTFlzHANa3CeFWLZ5GH+boEJLMfD hwxC/HR4+ZdAYfwSNKLHByCvtbP2So6AOTbKiJ0V5VZjNpXHfdFnvrszvqrdyXdO iCWY9TH/zvjcb2tEmyW1uwl/2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNgZc4Au lS6x+1ieL2IMfs2ODXJkMB8GA1UdIwQYMBaAFCIp9rrC1gxQvR5PWPQsDKGw+Jtv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEMxMy82RkE5NUI1ODFE QUExMUUyODVDMjFDQTYwOEIwMkNEMi9JaW4ydXNMV0RGQzlIazlZOUN3TW9iRDRt MjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lpbjJ1c0xXREZDOUhrOVk5Q3dNb2JENG0yOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEMxMy82RkE5NUI1ODFEQUExMUUyODVDMjFDQTYwOEIwMkNEMi9JaW4ydXNMV0RG QzlIazlZOUN3TW9iRDRtMjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8xq1l/Ck5WEQG9RyLa7KJlC7/TbiYs8Y3VdNEsqmzt0pHa3+Goahf f6w+YI8KRj8rKivyF4qVLCld5n5xPhJBrd7favs1a4t5g+LjZFRhuacmTnUJZrlW nkV10yEUyNxdcQo9kY7uj+OiHgltZpHkokPco2YP4D5cH2WepnTMnn8lr0iakH0m 4m/gbgYbRRjjfbVSjNQagxxJOW4QDdIkIM6DAaQgG4q8UQXkNRe4oGpFyUCj0a9t yZaCsoWUp29FzJKC2FYKQOIv5j8h/Q4JdBE9tNsVOb6cmwrxXalsQdqgJ53H+nYu qgLXHI/UADvKNGI/zGoCpoNCnkYmJHp6 -----END CERTIFICATE-----Generated at Sat May 31 14:38:09 2025 by rpki-client