$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEA8B/C27E37964B8111F08F65507EC4F9AE02/sVtAV6tQlrMkq8scfwJ7b6NmyNU.mft File: sVtAV6tQlrMkq8scfwJ7b6NmyNU.mft (raw, json) Hash identifier: gHT8XJZ1jFYPnCChSGL24Xw2x11lDmlcTIpMTz//m/Y= Subject key identifier: 0A:6E:38:82:0F:89:B1:08:6B:51:07:E1:0A:D7:BA:47:E8:AC:A2:08 Authority key identifier: B1:5B:40:57:AB:50:96:B3:24:AB:CB:1C:7F:02:7B:6F:A3:66:C8:D5 Certificate issuer: /CN=A91BEA8B/serialNumber=B15B4057AB5096B324ABCB1C7F027B6FA366C8D5 Certificate serial: 09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sVtAV6tQlrMkq8scfwJ7b6NmyNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEA8B/C27E37964B8111F08F65507EC4F9AE02/sVtAV6tQlrMkq8scfwJ7b6NmyNU.mft Manifest number: 09 Signing time: Tue 01 Jul 2025 08:57:20 +0000 Manifest this update: Tue 01 Jul 2025 08:57:19 +0000 Manifest next update: Tue 08 Jul 2025 08:57:19 +0000 Files and hashes: 1: sVtAV6tQlrMkq8scfwJ7b6NmyNU.crl (hash: xlrTZLUXIlJSQKKUTNnoqk69hoqRCTRDb3aJ8Q4DK9U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEA8B/C27E37964B8111F08F65507EC4F9AE02/sVtAV6tQlrMkq8scfwJ7b6NmyNU.crl rsync://rpki.apnic.net/member_repository/A91BEA8B/C27E37964B8111F08F65507EC4F9AE02/sVtAV6tQlrMkq8scfwJ7b6NmyNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sVtAV6tQlrMkq8scfwJ7b6NmyNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:57:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEA8B, serialNumber=B15B4057AB5096B324ABCB1C7F027B6FA366C8D5 Validity Not Before: Jul 1 08:57:19 2025 GMT Not After : Jul 8 08:57:19 2025 GMT Subject: CN=6863a2f0-dce4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:5a:5c:7b:20:4a:fa:9e:01:4a:60:85:70:7b: c6:fe:e4:9b:b5:82:80:24:db:69:04:f1:9e:6d:77: 2f:7a:24:df:44:1e:af:54:65:0d:e9:9a:ff:36:02: 6e:64:d0:10:86:4f:fd:0d:af:5c:6a:54:39:d7:04: dc:62:c4:92:c1:36:29:b0:0b:e5:ae:07:8b:87:c4: 7a:fa:32:d5:2e:21:6e:07:ae:1c:28:9c:6c:78:b0: eb:f6:b1:46:fb:a4:b1:7a:32:24:88:fc:a2:8e:7c: 07:23:2a:6a:1f:39:c8:21:be:dc:9d:5f:77:8f:13: ad:58:71:bd:24:54:ee:3f:97:12:b9:1b:2e:a2:b7: e9:89:25:af:23:ba:d6:15:a9:1f:11:62:f3:33:01: fb:97:d8:ce:f0:5c:f9:2d:20:bd:0c:d8:ec:98:ef: 3e:87:25:3e:56:5f:ce:1e:32:ae:d2:fe:9c:7f:d9: 9a:86:5a:30:c2:c4:6f:c6:06:5f:3c:10:7b:e2:84: 75:b2:2f:6e:65:27:91:e9:56:ae:1f:8f:4e:01:41: 7d:b5:98:71:04:42:ca:dc:b0:46:80:be:8d:29:09: 25:68:a4:5a:ee:d4:c4:0a:a4:17:1f:c2:c0:22:3c: 2c:0a:03:89:5c:43:02:9b:68:71:a5:a6:58:42:52: d8:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:6E:38:82:0F:89:B1:08:6B:51:07:E1:0A:D7:BA:47:E8:AC:A2:08 X509v3 Authority Key Identifier: keyid:B1:5B:40:57:AB:50:96:B3:24:AB:CB:1C:7F:02:7B:6F:A3:66:C8:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEA8B/C27E37964B8111F08F65507EC4F9AE02/sVtAV6tQlrMkq8scfwJ7b6NmyNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sVtAV6tQlrMkq8scfwJ7b6NmyNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEA8B/C27E37964B8111F08F65507EC4F9AE02/sVtAV6tQlrMkq8scfwJ7b6NmyNU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:9c:e5:2a:58:5d:26:92:5c:57:ad:07:3c:1f:5c:d2:5b:a8: 07:35:4e:23:c5:2a:d0:6f:44:b9:df:b1:98:eb:44:36:91:39: 9d:dc:c0:12:ac:84:86:f4:69:37:c8:bc:3c:fe:33:c5:7f:2e: f4:b6:7d:59:c5:24:d4:38:bc:6a:c5:92:a8:37:0e:fa:dc:d8: 80:63:c9:20:80:40:49:79:c7:ba:d9:74:33:f6:7a:c4:64:75: 87:62:09:8b:3c:bf:5e:64:65:90:76:ba:23:92:2b:66:cf:1f: db:48:44:ff:19:c6:ce:36:28:cc:c0:bb:31:52:fc:4b:4e:11: 05:f6:74:1e:bc:e8:56:29:f9:8c:ba:56:5b:5f:29:ec:e2:bd: df:2a:b7:10:d8:d4:2a:32:bc:21:c1:90:0b:f9:18:00:81:ee: 18:a4:67:8a:de:e0:6a:39:cf:cc:33:d9:24:80:6f:2a:cd:87: 84:8e:12:bd:be:10:be:15:15:9d:7b:80:8f:90:dd:f0:e1:bb: 75:6c:fc:28:82:fc:9c:0a:ac:a9:8e:5d:0f:6b:c9:9f:33:6e: cd:91:3e:a2:1c:2a:59:6e:64:6a:05:12:1c:05:c3:a9:7d:8d: 3c:e4:43:b3:8a:b5:29:05:96:11:24:ea:40:b5:8f:60:74:a1: 59:ab:e5:27 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC RUE4QjExMC8GA1UEBRMoQjE1QjQwNTdBQjUwOTZCMzI0QUJDQjFDN0YwMjdCNkZB MzY2QzhENTAeFw0yNTA3MDEwODU3MTlaFw0yNTA3MDgwODU3MTlaMBgxFjAUBgNV BAMTDTY4NjNhMmYwLWRjZTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCnWlx7IEr6ngFKYIVwe8b+5Ju1goAk22kE8Z5tdy96JN9EHq9UZQ3pmv82Am5k 0BCGT/0Nr1xqVDnXBNxixJLBNimwC+WuB4uHxHr6MtUuIW4HrhwonGx4sOv2sUb7 pLF6MiSI/KKOfAcjKmofOcghvtydX3ePE61Ycb0kVO4/lxK5Gy6it+mJJa8jutYV qR8RYvMzAfuX2M7wXPktIL0M2OyY7z6HJT5WX84eMq7S/px/2ZqGWjDCxG/GBl88 EHvihHWyL25lJ5HpVq4fj04BQX21mHEEQsrcsEaAvo0pCSVopFru1MQKpBcfwsAi PCwKA4lcQwKbaHGlplhCUtjVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUCm44gg+J sQhrUQfhCte6R+isoggwHwYDVR0jBBgwFoAUsVtAV6tQlrMkq8scfwJ7b6NmyNUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJFQThCL0MyN0UzNzk2NEI4 MTExRjA4RjY1NTA3RUM0RjlBRTAyL3NWdEFWNnRRbHJNa3E4c2Nmd0o3YjZObXlO VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvc1Z0QVY2dFFsck1rcThzY2Z3SjdiNk5teU5VLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJF QThCL0MyN0UzNzk2NEI4MTExRjA4RjY1NTA3RUM0RjlBRTAyL3NWdEFWNnRRbHJN a3E4c2Nmd0o3YjZObXlOVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACqc5SpYXSaSXFetBzwfXNJbqAc1TiPFKtBvRLnfsZjrRDaROZ3cwBKs hIb0aTfIvDz+M8V/LvS2fVnFJNQ4vGrFkqg3Dvrc2IBjySCAQEl5x7rZdDP2esRk dYdiCYs8v15kZZB2uiOSK2bPH9tIRP8Zxs42KMzAuzFS/EtOEQX2dB686FYp+Yy6 VltfKezivd8qtxDY1CoyvCHBkAv5GACB7hikZ4re4Go5z8wz2SSAbyrNh4SOEr2+ EL4VFZ17gI+Q3fDhu3Vs/CiC/JwKrKmOXQ9ryZ8zbs2RPqIcKlluZGoFEhwFw6l9 jTzkQ7OKtSkFlhEk6kC1j2B0oVmr5Sc= -----END CERTIFICATE-----Generated at Wed Jul 2 03:27:06 2025 by rpki-client