$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEE1D/9ADADADEC70E11EF8067C466C4F9AE02/itYQrIti8qb8qCWJVdXxJJJ7OgA.mft File: itYQrIti8qb8qCWJVdXxJJJ7OgA.mft (raw, json) Hash identifier: U192i5UPkvNaJrcFB1bdPiOViO16HAWyw6jwIaK9iFE= Subject key identifier: BA:64:DF:42:52:B2:6F:D6:6E:05:2F:38:F1:08:29:7F:D8:A0:C5:EB Authority key identifier: 8A:D6:10:AC:8B:62:F2:A6:FC:A8:25:89:55:D5:F1:24:92:7B:3A:00 Certificate issuer: /CN=A91BEE1D/serialNumber=8AD610AC8B62F2A6FCA8258955D5F124927B3A00 Certificate serial: 4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/itYQrIti8qb8qCWJVdXxJJJ7OgA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEE1D/9ADADADEC70E11EF8067C466C4F9AE02/itYQrIti8qb8qCWJVdXxJJJ7OgA.mft Manifest number: 4E Signing time: Sat 31 May 2025 06:50:51 +0000 Manifest this update: Sat 31 May 2025 06:50:50 +0000 Manifest next update: Sat 07 Jun 2025 06:50:50 +0000 Files and hashes: 1: itYQrIti8qb8qCWJVdXxJJJ7OgA.crl (hash: N56Mp088qNJYyQgMHXssLL6T4IO+Rpi92vlokZLTvVA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEE1D/9ADADADEC70E11EF8067C466C4F9AE02/itYQrIti8qb8qCWJVdXxJJJ7OgA.crl rsync://rpki.apnic.net/member_repository/A91BEE1D/9ADADADEC70E11EF8067C466C4F9AE02/itYQrIti8qb8qCWJVdXxJJJ7OgA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/itYQrIti8qb8qCWJVdXxJJJ7OgA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:50:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78 (0x4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEE1D, serialNumber=8AD610AC8B62F2A6FCA8258955D5F124927B3A00 Validity Not Before: May 31 06:50:50 2025 GMT Not After : Jun 7 06:50:50 2025 GMT Subject: CN=683aa6ca-1e6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:7b:9f:ba:7c:96:9a:6d:28:91:88:de:76:09: 05:56:ef:5d:46:dd:2b:5f:0d:f2:74:07:77:48:1e: 09:77:e4:00:bd:f7:8e:69:d6:d9:3f:8f:42:36:a7: b0:95:52:4f:37:c1:71:4d:b8:7b:8a:4e:20:1a:46: d6:48:44:a6:ec:19:0c:b3:e0:0d:49:43:f8:26:5b: 90:bf:f8:b2:f1:12:77:2b:5e:a0:6e:fa:72:2b:99: 03:0e:25:8d:ec:26:db:e7:ef:85:dc:62:0d:70:c2: a6:b5:0a:02:97:c3:35:47:0e:e8:be:60:04:e4:ce: 4a:ef:98:c6:41:09:c7:b6:6a:64:70:34:a4:2f:87: ff:80:1d:09:1e:f9:3c:9f:7c:33:04:6c:d2:a3:a8: 11:55:0f:2c:e7:cd:f8:be:d9:ba:3b:4d:a9:5b:f3: ea:4f:d9:e7:bd:a1:fc:9c:75:0f:6d:1b:ad:81:53: c7:1e:a5:5b:6e:32:0b:a2:0e:21:d0:a3:1e:d7:57: 4a:97:ec:64:c3:5c:57:33:dd:14:49:71:ff:0c:1d: 57:f0:4a:4c:78:b7:75:16:1d:30:bb:ef:b4:01:7c: da:22:8b:bf:ed:d7:50:6d:35:6c:7d:d3:16:0e:4f: c0:c6:f0:d8:d7:12:73:b9:21:ce:24:23:61:34:ac: f2:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:64:DF:42:52:B2:6F:D6:6E:05:2F:38:F1:08:29:7F:D8:A0:C5:EB X509v3 Authority Key Identifier: keyid:8A:D6:10:AC:8B:62:F2:A6:FC:A8:25:89:55:D5:F1:24:92:7B:3A:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEE1D/9ADADADEC70E11EF8067C466C4F9AE02/itYQrIti8qb8qCWJVdXxJJJ7OgA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/itYQrIti8qb8qCWJVdXxJJJ7OgA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEE1D/9ADADADEC70E11EF8067C466C4F9AE02/itYQrIti8qb8qCWJVdXxJJJ7OgA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:19:c8:32:d7:5f:02:44:ba:70:0d:2c:44:a3:8c:48:84:85: 23:cc:c6:9d:fe:54:3a:0c:91:33:94:ea:84:e1:4c:dd:8c:23: 5e:4a:f3:bd:ae:a4:34:8c:2e:78:a0:73:4f:31:fe:da:66:b0: 9c:a9:40:ca:35:7b:4d:e4:03:d2:7c:34:f3:15:b8:c6:ec:19: ef:40:56:d6:5b:ed:50:e2:23:77:bf:8f:2a:6f:ac:e3:fa:37: 70:83:8c:39:1d:0c:f4:be:32:d8:e1:31:5e:7a:e4:d6:2e:4e: 36:a5:c0:a2:20:d3:f8:f7:7a:04:f8:ce:0e:25:8c:5d:4a:ce: 58:7d:31:30:a6:89:89:7e:81:3a:e0:76:0a:16:46:c6:34:29: a8:3e:93:36:72:13:b6:38:a7:79:00:56:05:a0:4f:ca:ff:82: f4:3e:0c:64:e9:20:dd:b2:ec:e9:f5:8d:1f:20:a4:92:ef:60: 5c:0e:65:21:d1:30:55:61:81:d7:9e:78:1f:e9:94:50:52:b8: d5:36:05:37:ed:54:5c:f8:87:80:6e:63:ef:cb:50:b4:08:15: 78:fb:e8:1b:a0:a1:74:80:65:01:b7:43:36:27:0f:5a:0b:26: b3:f2:63:02:b9:27:67:96:e8:04:7c:9c:9e:e9:10:6f:55:90: 58:44:25:35 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC RUUxRDExMC8GA1UEBRMoOEFENjEwQUM4QjYyRjJBNkZDQTgyNTg5NTVENUYxMjQ5 MjdCM0EwMDAeFw0yNTA1MzEwNjUwNTBaFw0yNTA2MDcwNjUwNTBaMBgxFjAUBgNV BAMTDTY4M2FhNmNhLTFlNmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCte5+6fJaabSiRiN52CQVW711G3StfDfJ0B3dIHgl35AC9945p1tk/j0I2p7CV Uk83wXFNuHuKTiAaRtZIRKbsGQyz4A1JQ/gmW5C/+LLxEncrXqBu+nIrmQMOJY3s Jtvn74XcYg1wwqa1CgKXwzVHDui+YATkzkrvmMZBCce2amRwNKQvh/+AHQke+Tyf fDMEbNKjqBFVDyznzfi+2bo7Talb8+pP2ee9ofycdQ9tG62BU8cepVtuMguiDiHQ ox7XV0qX7GTDXFcz3RRJcf8MHVfwSkx4t3UWHTC777QBfNoii7/t11BtNWx90xYO T8DG8NjXEnO5Ic4kI2E0rPLxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUumTfQlKy b9ZuBS848Qgpf9igxeswHwYDVR0jBBgwFoAUitYQrIti8qb8qCWJVdXxJJJ7OgAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJFRTFELzlBREFEQURFQzcw RTExRUY4MDY3QzQ2NkM0RjlBRTAyL2l0WVFySXRpOHFiOHFDV0pWZFh4SkpKN09n QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaXRZUXJJdGk4cWI4cUNXSlZkWHhKSko3T2dBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJF RTFELzlBREFEQURFQzcwRTExRUY4MDY3QzQ2NkM0RjlBRTAyL2l0WVFySXRpOHFi OHFDV0pWZFh4SkpKN09nQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH0ZyDLXXwJEunANLESjjEiEhSPMxp3+VDoMkTOU6oThTN2MI15K872u pDSMLnigc08x/tpmsJypQMo1e03kA9J8NPMVuMbsGe9AVtZb7VDiI3e/jypvrOP6 N3CDjDkdDPS+MtjhMV565NYuTjalwKIg0/j3egT4zg4ljF1Kzlh9MTCmiYl+gTrg dgoWRsY0Kag+kzZyE7Y4p3kAVgWgT8r/gvQ+DGTpIN2y7On1jR8gpJLvYFwOZSHR MFVhgdeeeB/plFBSuNU2BTftVFz4h4BuY+/LULQIFXj76BugoXSAZQG3QzYnD1oL JrPyYwK5J2eW6AR8nJ7pEG9VkFhEJTU= -----END CERTIFICATE-----Generated at Sat May 31 16:45:48 2025 by rpki-client