$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.mft File: datLjbMBU71ybPn5YlC-BATYixo.mft (raw, json) Hash identifier: j0mb710vz0Ldk4Qgg9je0jcA8Jzbtikpn5llHlMgsWE= Subject key identifier: 68:BA:8F:3D:35:68:E3:3A:AB:B3:1B:B4:CD:FA:32:BB:2F:BE:71:27 Authority key identifier: 75:AB:4B:8D:B3:01:53:BD:72:6C:F9:F9:62:50:BE:04:04:D8:8B:1A Certificate issuer: /CN=A91C0CD3/serialNumber=75AB4B8DB30153BD726CF9F96250BE0404D88B1A Certificate serial: 016E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/datLjbMBU71ybPn5YlC-BATYixo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.mft Manifest number: 016E Signing time: Sat 31 May 2025 03:28:51 +0000 Manifest this update: Sat 31 May 2025 03:28:50 +0000 Manifest next update: Sat 07 Jun 2025 03:28:50 +0000 Files and hashes: 1: datLjbMBU71ybPn5YlC-BATYixo.crl (hash: fNchyKydGvvvxBg9C0QkJgc2Fms0UCJpI33oa5QMwc8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.crl rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/datLjbMBU71ybPn5YlC-BATYixo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:28:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 366 (0x16e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0CD3, serialNumber=75AB4B8DB30153BD726CF9F96250BE0404D88B1A Validity Not Before: May 31 03:28:50 2025 GMT Not After : Jun 7 03:28:50 2025 GMT Subject: CN=683a7773-0cb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:02:a6:7f:a3:db:35:c0:e2:26:3a:53:e9:a2: b8:50:dd:ef:ac:47:aa:f3:fb:18:9f:30:d1:f5:54: 4e:94:d6:c2:98:a0:9a:a9:0e:55:ee:92:a1:11:96: b0:93:1f:c4:76:9a:e9:2f:da:96:3c:df:fb:bc:b5: b6:b3:bc:7c:1a:b0:6e:e8:5c:b8:a5:5b:46:e6:b9: a3:7d:e2:da:b1:81:8c:06:47:35:fc:72:d3:4c:17: d8:6d:8d:18:ac:76:11:b3:6c:c1:20:9a:d7:61:8d: bf:3d:d3:ae:d2:41:9e:d5:cb:c1:56:16:ff:25:10: 76:b2:8b:3e:80:78:ad:ce:92:a4:f8:a2:dc:e6:7a: f0:f1:61:f2:79:30:96:22:2c:be:b5:4a:70:10:fd: f2:4b:bd:6a:51:cd:fa:73:92:e8:32:95:f9:c3:1f: 9a:26:eb:c2:28:5f:12:61:e9:11:44:55:31:7b:2b: c6:5a:96:13:9f:00:a2:dd:76:26:9d:28:83:5f:ac: 6e:09:b6:33:c6:9f:0d:64:91:79:13:57:2a:e0:c4: 44:cd:0d:8c:81:d3:c4:51:57:05:9a:6a:23:03:30: 28:98:8b:82:13:53:13:8e:72:8f:36:cc:e1:a6:34: 64:a2:24:39:04:14:91:5b:74:2c:69:1e:8e:e3:5e: 7d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:BA:8F:3D:35:68:E3:3A:AB:B3:1B:B4:CD:FA:32:BB:2F:BE:71:27 X509v3 Authority Key Identifier: keyid:75:AB:4B:8D:B3:01:53:BD:72:6C:F9:F9:62:50:BE:04:04:D8:8B:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/datLjbMBU71ybPn5YlC-BATYixo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:da:6c:70:56:08:72:ef:fb:81:92:de:dc:e9:ac:3f:ab:59: df:0e:58:4b:e0:ca:4a:f7:01:ad:ef:3b:63:71:84:5b:44:ed: 2a:c7:7f:da:d5:7c:01:df:70:0c:1f:2e:8d:45:1d:61:30:cd: 83:80:5f:4f:68:40:d4:19:ee:0f:4c:00:22:00:7e:ae:31:fd: d9:74:e9:91:49:01:69:a8:e0:2c:29:c9:86:0d:51:eb:df:fb: 05:e2:a1:4f:8a:8c:3f:fd:a7:14:47:38:36:3f:da:78:54:21: 60:e6:01:f0:15:3a:59:4d:8e:9a:d8:6c:b0:a4:75:1f:fa:bf: 8a:65:1d:91:e9:fc:ad:d6:dc:07:9c:8b:46:db:8e:2c:ee:71: 0a:11:6a:d7:0f:1c:ff:1d:2a:40:f0:19:44:9b:7c:26:9b:4e: 86:5e:94:0d:72:e5:f0:8d:de:7d:6a:98:c5:b1:86:8c:cf:bf: 63:c6:23:d2:5c:43:6f:48:90:25:e0:ba:26:f8:46:ce:8d:fc: c1:f1:76:fd:83:39:3b:de:bd:d0:97:13:4c:57:4a:82:46:d6: 9f:5e:60:6a:b2:7d:41:5d:09:82:e2:ab:52:83:7f:fd:04:af: e6:bb:dd:e5:d3:d2:e8:5e:13:7a:02:c0:fe:7f:f5:28:32:f4: 77:8a:a5:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBDRDMxMTAvBgNVBAUTKDc1QUI0QjhEQjMwMTUzQkQ3MjZDRjlGOTYyNTBCRTA0 MDREODhCMUEwHhcNMjUwNTMxMDMyODUwWhcNMjUwNjA3MDMyODUwWjAYMRYwFAYD VQQDEw02ODNhNzc3My0wY2IzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwwKmf6PbNcDiJjpT6aK4UN3vrEeq8/sYnzDR9VROlNbCmKCaqQ5V7pKhEZaw kx/EdprpL9qWPN/7vLW2s7x8GrBu6Fy4pVtG5rmjfeLasYGMBkc1/HLTTBfYbY0Y rHYRs2zBIJrXYY2/PdOu0kGe1cvBVhb/JRB2sos+gHitzpKk+KLc5nrw8WHyeTCW Iiy+tUpwEP3yS71qUc36c5LoMpX5wx+aJuvCKF8SYekRRFUxeyvGWpYTnwCi3XYm nSiDX6xuCbYzxp8NZJF5E1cq4MREzQ2MgdPEUVcFmmojAzAomIuCE1MTjnKPNszh pjRkoiQ5BBSRW3QsaR6O4159rQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGi6jz01 aOM6q7MbtM36MrsvvnEnMB8GA1UdIwQYMBaAFHWrS42zAVO9cmz5+WJQvgQE2Isa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMENEMy83RjYwMEVDQTA4 RUYxMUVFQkM5QjVEMERDNEY5QUUwMi9kYXRMamJNQlU3MXliUG41WWxDLUJBVFlp eG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RhdExqYk1CVTcxeWJQbjVZbEMtQkFUWWl4by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MENEMy83RjYwMEVDQTA4RUYxMUVFQkM5QjVEMERDNEY5QUUwMi9kYXRMamJNQlU3 MXliUG41WWxDLUJBVFlpeG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBg2mxwVghy7/uBkt7c6aw/q1nfDlhL4MpK9wGt7ztjcYRbRO0qx3/a 1XwB33AMHy6NRR1hMM2DgF9PaEDUGe4PTAAiAH6uMf3ZdOmRSQFpqOAsKcmGDVHr 3/sF4qFPiow//acURzg2P9p4VCFg5gHwFTpZTY6a2GywpHUf+r+KZR2R6fyt1twH nItG244s7nEKEWrXDxz/HSpA8BlEm3wmm06GXpQNcuXwjd59apjFsYaMz79jxiPS XENvSJAl4Lom+EbOjfzB8Xb9gzk73r3QlxNMV0qCRtafXmBqsn1BXQmC4qtSg3/9 BK/mu93l09LoXhN6AsD+f/UoMvR3iqU8 -----END CERTIFICATE-----Generated at Sat May 31 16:25:57 2025 by rpki-client