$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.mft File: -sRVX74xo4CWkO4YeF16u-KnJ6M.mft (raw, json) Hash identifier: NGtFMGzs5IIxojPnN/FyY0d+iN0qXE2J0pmvNBrB37Q= Subject key identifier: DC:E2:16:5F:74:C2:06:7C:DE:CC:D6:97:C1:B4:C5:5F:78:EC:DD:87 Authority key identifier: FA:C4:55:5F:BE:31:A3:80:96:90:EE:18:78:5D:7A:BB:E2:A7:27:A3 Certificate issuer: /CN=A91C4204/serialNumber=FAC4555FBE31A3809690EE18785D7ABBE2A727A3 Certificate serial: 09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sRVX74xo4CWkO4YeF16u-KnJ6M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.mft Manifest number: 09 Signing time: Sat 31 May 2025 07:40:55 +0000 Manifest this update: Sat 31 May 2025 07:40:54 +0000 Manifest next update: Sat 07 Jun 2025 07:40:54 +0000 Files and hashes: 1: -sRVX74xo4CWkO4YeF16u-KnJ6M.crl (hash: hLCbofktqt/YdwMDFzdwuP440OiwhXmSepwDBY7cVwU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.crl rsync://rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sRVX74xo4CWkO4YeF16u-KnJ6M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:40:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4204, serialNumber=FAC4555FBE31A3809690EE18785D7ABBE2A727A3 Validity Not Before: May 31 07:40:54 2025 GMT Not After : Jun 7 07:40:54 2025 GMT Subject: CN=683ab287-3865 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e6:fb:b2:a3:07:37:33:6c:19:6c:58:8a:16: 93:12:dc:8f:56:cd:68:3a:a4:e4:64:b2:fe:51:bb: c7:ef:c6:c1:5b:05:bb:b1:ae:0f:e4:26:5f:6a:b2: ae:09:d9:51:04:07:dc:f2:c7:27:6d:b9:a1:6d:17: 09:60:53:2e:c5:5d:80:d9:a6:e5:09:ca:34:85:03: b5:ea:36:7f:14:82:d5:10:2b:45:69:7d:ff:71:b8: ce:6c:b6:03:f4:34:d3:79:25:6e:6d:18:d0:58:d6: 0b:97:6a:00:92:82:54:b8:f9:9c:f2:41:f5:e2:ad: 47:5b:94:45:69:06:7e:56:86:ac:b4:de:8e:01:f7: 35:aa:72:b1:61:7d:97:1b:70:aa:02:2a:93:23:27: 27:3c:ad:c8:f1:b8:b1:9e:35:23:59:c5:3e:bf:d4: 55:d4:97:f3:99:73:cb:c5:be:c5:c1:9d:97:44:bd: 42:d3:2e:d0:9b:cc:f8:ac:03:d9:10:17:46:83:ee: d6:93:5c:7d:93:b8:e6:a0:17:e2:2b:95:aa:41:de: de:4e:93:b2:44:b5:25:da:49:ec:fb:51:50:0b:69: 5d:06:7c:57:7a:48:ca:e4:7d:68:d8:1d:f4:43:ff: f1:42:47:d8:40:7f:24:a7:a6:0f:6f:04:1b:64:d1: aa:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:E2:16:5F:74:C2:06:7C:DE:CC:D6:97:C1:B4:C5:5F:78:EC:DD:87 X509v3 Authority Key Identifier: keyid:FA:C4:55:5F:BE:31:A3:80:96:90:EE:18:78:5D:7A:BB:E2:A7:27:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sRVX74xo4CWkO4YeF16u-KnJ6M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:b8:26:79:ad:8a:4e:08:6c:70:d4:4e:9b:01:18:85:d3:19: 5c:68:b6:4b:c1:15:27:93:e3:01:83:25:28:77:cc:d8:82:8c: 3e:cc:42:d6:a1:0b:69:bd:f6:89:99:23:c5:37:da:47:92:21: 4b:b7:33:f3:65:10:e7:d9:f3:35:45:30:81:56:03:a0:fa:53: 3e:5d:86:c4:1a:c9:1e:d9:19:eb:90:a0:9d:d1:4b:cd:22:da: ca:d7:37:dd:ec:72:7e:c3:6f:fc:c7:5f:43:15:47:d7:60:d1: 9f:18:bb:01:89:4b:76:5a:7d:c5:61:ae:d4:64:26:fe:5c:90: 00:e7:f2:c5:54:6a:ad:90:cd:a8:49:b6:31:20:88:e2:26:54: 60:b2:b6:6a:fb:96:d8:88:57:0c:4a:0d:98:51:e0:8b:2d:0a: 3e:4c:a6:0f:4c:cf:f2:94:f4:fd:70:92:66:58:67:2c:48:cd: 74:45:cd:a4:35:50:60:ab:b2:49:23:d4:a5:c2:b7:27:21:9a: 20:4f:2e:e2:73:b6:3d:64:96:46:52:81:16:0c:9d:99:44:96: d9:ca:5b:23:0e:99:9a:97:4c:6d:39:24:5f:31:10:51:32:38: 75:8f:9e:d6:5e:3d:0d:95:f0:fe:2a:36:6e:fc:39:f8:cd:63: ee:cf:c6:75 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NDIwNDExMC8GA1UEBRMoRkFDNDU1NUZCRTMxQTM4MDk2OTBFRTE4Nzg1RDdBQkJF MkE3MjdBMzAeFw0yNTA1MzEwNzQwNTRaFw0yNTA2MDcwNzQwNTRaMBgxFjAUBgNV BAMTDTY4M2FiMjg3LTM4NjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDa5vuyowc3M2wZbFiKFpMS3I9WzWg6pORksv5Ru8fvxsFbBbuxrg/kJl9qsq4J 2VEEB9zyxydtuaFtFwlgUy7FXYDZpuUJyjSFA7XqNn8UgtUQK0Vpff9xuM5stgP0 NNN5JW5tGNBY1guXagCSglS4+ZzyQfXirUdblEVpBn5Whqy03o4B9zWqcrFhfZcb cKoCKpMjJyc8rcjxuLGeNSNZxT6/1FXUl/OZc8vFvsXBnZdEvULTLtCbzPisA9kQ F0aD7taTXH2TuOagF+IrlapB3t5Ok7JEtSXaSez7UVALaV0GfFd6SMrkfWjYHfRD //FCR9hAfySnpg9vBBtk0ao9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU3OIWX3TC BnzezNaXwbTFX3js3YcwHwYDVR0jBBgwFoAU+sRVX74xo4CWkO4YeF16u+KnJ6Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM0MjA0LzRDNUQyRURFMzAw OTExRjBBMEFBN0QzREM0RjlBRTAyLy1zUlZYNzR4bzRDV2tPNFllRjE2dS1Lbko2 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLXNSVlg3NHhvNENXa080WWVGMTZ1LUtuSjZNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM0 MjA0LzRDNUQyRURFMzAwOTExRjBBMEFBN0QzREM0RjlBRTAyLy1zUlZYNzR4bzRD V2tPNFllRjE2dS1Lbko2TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADS4Jnmtik4IbHDUTpsBGIXTGVxotkvBFSeT4wGDJSh3zNiCjD7MQtah C2m99omZI8U32keSIUu3M/NlEOfZ8zVFMIFWA6D6Uz5dhsQayR7ZGeuQoJ3RS80i 2srXN93scn7Db/zHX0MVR9dg0Z8YuwGJS3ZafcVhrtRkJv5ckADn8sVUaq2QzahJ tjEgiOImVGCytmr7ltiIVwxKDZhR4IstCj5Mpg9Mz/KU9P1wkmZYZyxIzXRFzaQ1 UGCrskkj1KXCtychmiBPLuJztj1klkZSgRYMnZlEltnKWyMOmZqXTG05JF8xEFEy OHWPntZePQ2V8P4qNm78OfjNY+7PxnU= -----END CERTIFICATE-----Generated at Sat May 31 17:37:49 2025 by rpki-client