$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF979/1B465AA69EED11EC9381DF0CC4F9AE02/MRUQtiC24M1CLhwrbpUrYEil8eI.mft File: MRUQtiC24M1CLhwrbpUrYEil8eI.mft (raw, json) Hash identifier: /JPyKnZz3n/siS8r0j7qEbvqRQ/KysBCLCjc85WPNGw= Subject key identifier: 78:3A:E7:31:79:20:D3:D4:20:5D:91:87:1E:2E:D3:AE:C6:EE:85:DA Authority key identifier: 31:15:10:B6:20:B6:E0:CD:42:2E:1C:2B:6E:95:2B:60:48:A5:F1:E2 Certificate issuer: /CN=A91BF979/serialNumber=311510B620B6E0CD422E1C2B6E952B6048A5F1E2 Certificate serial: 0391 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MRUQtiC24M1CLhwrbpUrYEil8eI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF979/1B465AA69EED11EC9381DF0CC4F9AE02/MRUQtiC24M1CLhwrbpUrYEil8eI.mft Manifest number: 0390 Signing time: Sat 31 May 2025 01:00:13 +0000 Manifest this update: Sat 31 May 2025 01:00:12 +0000 Manifest next update: Sat 07 Jun 2025 01:00:12 +0000 Files and hashes: 1: MRUQtiC24M1CLhwrbpUrYEil8eI.crl (hash: pNt3vTuJI8k2wJniY9mYJZabUnZ2Oi4DV3t6zgoN+oo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF979/1B465AA69EED11EC9381DF0CC4F9AE02/MRUQtiC24M1CLhwrbpUrYEil8eI.crl rsync://rpki.apnic.net/member_repository/A91BF979/1B465AA69EED11EC9381DF0CC4F9AE02/MRUQtiC24M1CLhwrbpUrYEil8eI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MRUQtiC24M1CLhwrbpUrYEil8eI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 913 (0x391) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF979, serialNumber=311510B620B6E0CD422E1C2B6E952B6048A5F1E2 Validity Not Before: May 31 01:00:12 2025 GMT Not After : Jun 7 01:00:12 2025 GMT Subject: CN=683a549c-89a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6a:f7:5a:e3:1b:02:24:c7:fb:a7:0b:c9:80: 46:48:3a:85:a7:d9:8a:97:a4:bd:df:a3:3e:69:26: 39:26:c5:dc:f9:3f:03:fb:bd:98:95:ab:00:3e:99: 5c:01:82:80:f6:81:ec:86:24:a9:cc:5a:bb:5c:d8: 5e:3b:26:6e:00:fc:e2:49:8d:b1:92:73:ac:dd:d6: 7f:00:5a:c4:39:7c:9f:44:cb:a0:5f:9b:16:57:70: 4d:64:33:ca:d6:31:e5:26:bb:03:c8:8f:57:66:6a: 1f:8a:42:0d:9f:fb:e2:61:1d:88:84:83:88:62:32: ac:66:4d:e7:ec:7a:d1:ef:6c:df:29:81:e9:dd:0e: 5e:d6:88:53:50:a7:66:43:0c:70:5b:40:89:d1:0c: 9c:23:33:0f:b3:ee:26:90:e5:a2:21:3b:1e:1f:2a: 46:0b:90:9c:5e:83:73:38:a0:88:3b:eb:e3:b5:5b: a6:72:82:41:a3:86:66:38:96:27:03:9f:1e:eb:95: 70:f7:d2:05:3c:49:46:2f:34:a9:c0:b2:b4:de:2f: e8:6c:59:0f:10:8a:0c:53:1a:c8:4a:c0:ef:bb:93: d9:ea:d2:fe:b3:e3:62:c9:d9:0b:a3:20:e8:96:4d: 27:b2:10:4e:ae:cc:72:8c:5c:57:20:ec:b1:9c:ad: 30:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:3A:E7:31:79:20:D3:D4:20:5D:91:87:1E:2E:D3:AE:C6:EE:85:DA X509v3 Authority Key Identifier: keyid:31:15:10:B6:20:B6:E0:CD:42:2E:1C:2B:6E:95:2B:60:48:A5:F1:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF979/1B465AA69EED11EC9381DF0CC4F9AE02/MRUQtiC24M1CLhwrbpUrYEil8eI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MRUQtiC24M1CLhwrbpUrYEil8eI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF979/1B465AA69EED11EC9381DF0CC4F9AE02/MRUQtiC24M1CLhwrbpUrYEil8eI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:24:7e:17:da:7b:0e:13:3b:d5:39:b8:47:40:03:f5:b1:28: fa:2d:12:1e:98:2d:88:94:b7:68:75:e9:47:cf:2f:ab:ac:71: 50:c8:fc:2a:d3:dc:d2:99:73:a6:92:80:11:94:e2:cd:d6:cc: ca:dc:9b:e6:2a:ae:b3:33:e1:97:25:9f:e3:bc:ee:00:e4:d9: d6:66:0c:19:7e:f4:19:0c:2b:ca:52:9b:06:82:43:56:f4:e5: 02:6f:f7:c5:79:74:4f:de:71:12:7a:6b:ab:56:c0:3b:9e:2e: ed:ef:80:bb:04:81:0f:87:d9:19:a0:a8:f2:6d:6d:0b:05:58: d5:ba:54:c6:28:05:5f:d6:29:65:f1:34:c1:6d:4d:e8:ae:4f: b1:35:31:e4:f3:f0:d5:54:a1:00:41:6f:a0:1d:b3:77:c5:7e: 50:71:e7:95:6b:1d:fa:58:bb:ad:ad:30:63:53:9c:af:a4:99: 31:ae:bb:f5:ff:88:7a:cc:54:4f:f1:93:82:ba:53:9c:47:d1: 89:c3:e8:a3:37:db:6c:6f:0d:39:c9:c7:85:72:ee:1d:a5:d0: 31:f9:8f:29:4c:05:3f:fa:ad:81:96:1d:9b:b0:6d:d3:31:68: 17:fc:81:bd:33:b5:cd:02:e9:7b:7e:25:59:65:f7:e1:82:c7: 2b:4d:16:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY5NzkxMTAvBgNVBAUTKDMxMTUxMEI2MjBCNkUwQ0Q0MjJFMUMyQjZFOTUyQjYw NDhBNUYxRTIwHhcNMjUwNTMxMDEwMDEyWhcNMjUwNjA3MDEwMDEyWjAYMRYwFAYD VQQDEw02ODNhNTQ5Yy04OWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt2r3WuMbAiTH+6cLyYBGSDqFp9mKl6S936M+aSY5JsXc+T8D+72YlasAPplc AYKA9oHshiSpzFq7XNheOyZuAPziSY2xknOs3dZ/AFrEOXyfRMugX5sWV3BNZDPK 1jHlJrsDyI9XZmofikINn/viYR2IhIOIYjKsZk3n7HrR72zfKYHp3Q5e1ohTUKdm QwxwW0CJ0QycIzMPs+4mkOWiITseHypGC5CcXoNzOKCIO+vjtVumcoJBo4ZmOJYn A58e65Vw99IFPElGLzSpwLK03i/obFkPEIoMUxrISsDvu5PZ6tL+s+NiydkLoyDo lk0nshBOrsxyjFxXIOyxnK0w3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHg65zF5 INPUIF2Rhx4u067G7oXaMB8GA1UdIwQYMBaAFDEVELYgtuDNQi4cK26VK2BIpfHi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjk3OS8xQjQ2NUFBNjlF RUQxMUVDOTM4MURGMENDNEY5QUUwMi9NUlVRdGlDMjRNMUNMaHdyYnBVcllFaWw4 ZUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01SVVF0aUMyNE0xQ0xod3JicFVyWUVpbDhlSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Rjk3OS8xQjQ2NUFBNjlFRUQxMUVDOTM4MURGMENDNEY5QUUwMi9NUlVRdGlDMjRN MUNMaHdyYnBVcllFaWw4ZUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOJH4X2nsOEzvVObhHQAP1sSj6LRIemC2IlLdodelHzy+rrHFQyPwq 09zSmXOmkoARlOLN1szK3JvmKq6zM+GXJZ/jvO4A5NnWZgwZfvQZDCvKUpsGgkNW 9OUCb/fFeXRP3nESemurVsA7ni7t74C7BIEPh9kZoKjybW0LBVjVulTGKAVf1ill 8TTBbU3ork+xNTHk8/DVVKEAQW+gHbN3xX5QceeVax36WLutrTBjU5yvpJkxrrv1 /4h6zFRP8ZOCulOcR9GJw+ijN9tsbw05yceFcu4dpdAx+Y8pTAU/+q2Blh2bsG3T MWgX/IG9M7XNAul7fiVZZffhgscrTRbL -----END CERTIFICATE-----Generated at Sat May 31 16:44:47 2025 by rpki-client