$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.mft File: nDt48kQmDsRjG6DfYZRgi3Gof0g.mft (raw, json) Hash identifier: kNujRWuHGRH/lud5iJbYnonUgwEafnrjIQ7V6/yz2ME= Subject key identifier: FF:83:BC:16:B7:55:F4:98:AE:0C:DC:51:DD:54:FA:47:50:8E:91:FF Authority key identifier: 9C:3B:78:F2:44:26:0E:C4:63:1B:A0:DF:61:94:60:8B:71:A8:7F:48 Certificate issuer: /CN=A91BA0F9/serialNumber=9C3B78F244260EC4631BA0DF6194608B71A87F48 Certificate serial: 3483 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nDt48kQmDsRjG6DfYZRgi3Gof0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.mft Manifest number: 50DB Signing time: Mon 02 Jun 2025 15:17:59 +0000 Manifest this update: Mon 02 Jun 2025 15:17:59 +0000 Manifest next update: Mon 09 Jun 2025 15:17:59 +0000 Files and hashes: 1: nDt48kQmDsRjG6DfYZRgi3Gof0g.crl (hash: zXr7dikF7pniAFEWt3GIvB2dEOREZQCrj62MdvUmRbA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.crl rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nDt48kQmDsRjG6DfYZRgi3Gof0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 15:17:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13443 (0x3483) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA0F9, serialNumber=9C3B78F244260EC4631BA0DF6194608B71A87F48 Validity Not Before: Jun 2 15:17:59 2025 GMT Not After : Jun 9 15:17:59 2025 GMT Subject: CN=683dc0a7-1bd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:66:57:c7:4e:0c:18:5a:1e:6c:df:39:45:c5: 9b:08:7e:0b:c7:a1:4b:fc:1d:11:1a:e2:70:9b:b2: b6:44:b8:74:12:46:e4:25:0c:82:8b:b1:d3:ad:1f: ca:1f:e9:66:64:49:a0:60:08:f0:a8:62:09:bb:58: 58:78:50:bd:ed:fb:74:bd:60:ea:16:7a:44:f9:f3: 12:67:17:31:55:b3:cc:41:ff:09:67:7c:96:51:4c: 00:74:23:36:17:49:a9:fb:a2:6f:23:60:a8:06:46: 92:cd:2c:b7:ec:89:74:45:b5:30:1f:a6:fd:96:22: d8:30:fd:69:4a:71:89:df:ec:f1:10:20:85:06:93: ad:cb:62:d9:8f:63:8c:bb:8b:2f:8d:87:b5:9b:9e: c7:65:db:4a:2a:e2:31:d1:dc:d9:0c:98:32:4a:1d: 63:98:65:3b:d9:b2:3e:07:41:68:c9:34:c9:49:2b: 08:b0:8f:2a:08:3a:dc:90:54:2f:4c:6b:11:4a:df: 97:28:98:84:fd:66:97:8c:a3:dc:ab:94:72:ee:d3: 38:10:20:ef:73:42:3a:7b:16:56:5b:81:c4:1e:6d: 8f:55:c7:03:22:e9:6a:a9:a9:8c:6b:fb:de:30:37: d7:8f:54:cf:a6:58:d0:c7:86:9e:69:66:c8:cb:fb: bd:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:83:BC:16:B7:55:F4:98:AE:0C:DC:51:DD:54:FA:47:50:8E:91:FF X509v3 Authority Key Identifier: keyid:9C:3B:78:F2:44:26:0E:C4:63:1B:A0:DF:61:94:60:8B:71:A8:7F:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nDt48kQmDsRjG6DfYZRgi3Gof0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:87:e7:1d:e5:7f:b8:80:83:40:0c:52:31:8c:49:3f:90:64: b9:ee:48:e5:86:53:45:b4:5d:37:14:a0:df:47:c0:f2:3f:6d: 99:42:85:3c:61:97:85:a7:1a:32:59:5d:20:d8:53:94:d9:f2: 2b:0a:73:e2:20:78:6d:21:ef:6d:00:2f:bb:1f:66:5e:95:a4: f8:4a:19:0c:d0:79:c7:b9:86:1a:8a:08:74:97:e0:e2:58:5c: 39:f5:e3:17:dc:b3:5b:0a:20:a9:f0:f0:55:21:4b:3c:cd:d9: 28:ef:a6:24:9e:cd:3f:7c:b3:33:13:1e:f2:88:d0:bc:18:01: a2:a0:60:7b:be:2e:35:21:30:22:7b:f5:6b:01:fe:a2:e1:f9: 82:79:50:4c:6f:21:40:7f:75:80:17:9f:63:9a:11:5d:8d:f1: 65:72:e1:d6:36:db:63:fe:08:6d:66:91:8d:ef:45:6b:7a:f4: c9:cd:d8:ef:84:16:2e:b1:6b:b8:35:76:62:89:5a:a0:8f:32: e9:d3:72:dd:13:2d:38:f0:17:a6:4c:d2:eb:a9:f0:62:ed:74: 8c:38:51:03:a1:39:11:cf:4b:16:64:38:83:60:0e:57:f0:2e: 03:a1:f4:64:e9:40:6d:da:e8:5f:e0:fc:26:ca:c3:13:ea:e5: db:bd:8b:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkEwRjkxMTAvBgNVBAUTKDlDM0I3OEYyNDQyNjBFQzQ2MzFCQTBERjYxOTQ2MDhC NzFBODdGNDgwHhcNMjUwNjAyMTUxNzU5WhcNMjUwNjA5MTUxNzU5WjAYMRYwFAYD VQQDEw02ODNkYzBhNy0xYmQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1mZXx04MGFoebN85RcWbCH4Lx6FL/B0RGuJwm7K2RLh0EkbkJQyCi7HTrR/K H+lmZEmgYAjwqGIJu1hYeFC97ft0vWDqFnpE+fMSZxcxVbPMQf8JZ3yWUUwAdCM2 F0mp+6JvI2CoBkaSzSy37Il0RbUwH6b9liLYMP1pSnGJ3+zxECCFBpOty2LZj2OM u4svjYe1m57HZdtKKuIx0dzZDJgySh1jmGU72bI+B0FoyTTJSSsIsI8qCDrckFQv TGsRSt+XKJiE/WaXjKPcq5Ry7tM4ECDvc0I6exZWW4HEHm2PVccDIulqqamMa/ve MDfXj1TPpljQx4aeaWbIy/u9HwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP+DvBa3 VfSYrgzcUd1U+kdQjpH/MB8GA1UdIwQYMBaAFJw7ePJEJg7EYxug32GUYItxqH9I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTBGOS9GQ0FBMkMwMDFE QTgxMUUyQjBFMkNBQTMwOEIwMkNEMi9uRHQ0OGtRbURzUmpHNkRmWVpSZ2kzR29m MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25EdDQ4a1FtRHNSakc2RGZZWlJnaTNHb2YwZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTBGOS9GQ0FBMkMwMDFEQTgxMUUyQjBFMkNBQTMwOEIwMkNEMi9uRHQ0OGtRbURz UmpHNkRmWVpSZ2kzR29mMGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEh+cd5X+4gINADFIxjEk/kGS57kjlhlNFtF03FKDfR8DyP22ZQoU8 YZeFpxoyWV0g2FOU2fIrCnPiIHhtIe9tAC+7H2ZelaT4ShkM0HnHuYYaigh0l+Di WFw59eMX3LNbCiCp8PBVIUs8zdko76Ykns0/fLMzEx7yiNC8GAGioGB7vi41ITAi e/VrAf6i4fmCeVBMbyFAf3WAF59jmhFdjfFlcuHWNttj/ghtZpGN70VrevTJzdjv hBYusWu4NXZiiVqgjzLp03LdEy048BemTNLrqfBi7XSMOFEDoTkRz0sWZDiDYA5X 8C4DofRk6UBt2uhf4PwmysMT6uXbvYsy -----END CERTIFICATE-----Generated at Tue Jun 3 23:45:50 2025 by rpki-client