$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.mft File: P9f1Vfx9b8I1OaOmIe8tBI1MfMc.mft (raw, json) Hash identifier: kDycEIzp3DGYympwkAqQGe5mEwszBkfAfOWmbXR079c= Subject key identifier: 9C:2C:E3:8C:F0:DF:A3:E6:70:AE:F9:0A:43:DE:AF:DE:36:18:C2:B1 Authority key identifier: 3F:D7:F5:55:FC:7D:6F:C2:35:39:A3:A6:21:EF:2D:04:8D:4C:7C:C7 Certificate issuer: /CN=A91C4A80/serialNumber=3FD7F555FC7D6FC23539A3A621EF2D048D4C7CC7 Certificate serial: 3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.mft Manifest number: 3B Signing time: Sat 31 May 2025 07:05:47 +0000 Manifest this update: Sat 31 May 2025 07:05:47 +0000 Manifest next update: Sat 07 Jun 2025 07:05:47 +0000 Files and hashes: 1: P9f1Vfx9b8I1OaOmIe8tBI1MfMc.crl (hash: +Bp4LsEpBWmsC7Vtdq9/TF1n8mXD23/9yRHwnVwVY7k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.crl rsync://rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:05:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4A80, serialNumber=3FD7F555FC7D6FC23539A3A621EF2D048D4C7CC7 Validity Not Before: May 31 07:05:47 2025 GMT Not After : Jun 7 07:05:47 2025 GMT Subject: CN=683aaa4b-2142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:86:0e:19:fb:35:0e:b8:ac:11:4e:06:c4:f3: 8e:57:0b:ee:28:f1:10:a0:49:42:1e:fa:c4:02:31: ad:44:2e:d3:5a:4d:f3:2b:9f:f7:af:af:36:5b:f7: da:55:63:54:91:72:f6:a5:ea:1e:33:cf:b4:0f:9a: c0:53:d9:d2:3e:c2:89:3c:0a:25:60:a4:e1:86:b1: 6a:b3:82:42:5b:19:bb:48:9b:77:2a:1d:94:ef:eb: 31:42:a9:7d:be:d9:04:0c:18:a8:83:c9:94:bf:69: e8:1d:7f:df:0d:85:2e:02:b4:bc:26:b4:7f:a4:7d: 86:bd:d5:35:25:cf:7d:d9:28:bc:69:20:59:dc:df: a6:79:fb:69:7e:a3:b0:2c:fa:2e:1c:4a:13:ca:a2: 50:b4:bc:58:8c:86:76:9f:af:3a:ca:49:83:4b:98: f2:d5:77:19:59:e9:57:d3:bb:27:bb:18:dc:2f:27: af:49:b2:76:3d:3e:67:6a:52:5b:12:be:07:a0:76: f5:f1:92:e1:39:dc:86:20:36:45:5e:7a:fc:0b:b8: fb:32:ab:eb:c6:35:5a:29:a1:8b:bc:8d:b5:1b:ec: 24:04:5f:ff:46:7d:7b:93:cd:3f:d3:1d:2a:fe:bf: 37:4b:98:4e:9d:41:69:e0:f6:24:7f:af:28:70:d4: fe:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:2C:E3:8C:F0:DF:A3:E6:70:AE:F9:0A:43:DE:AF:DE:36:18:C2:B1 X509v3 Authority Key Identifier: keyid:3F:D7:F5:55:FC:7D:6F:C2:35:39:A3:A6:21:EF:2D:04:8D:4C:7C:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:c8:38:8d:67:58:a9:5d:c4:bf:f1:7e:b0:45:73:4b:6d:9e: e3:b2:37:0b:3c:ac:c8:3a:2d:11:26:ba:ec:76:09:4c:d7:5a: 7b:2c:2e:3a:87:15:46:8e:59:9c:30:0b:d8:b3:d1:c8:17:71: bf:98:e4:ea:1a:45:80:e0:33:1a:14:c1:cc:2a:25:31:e7:cc: 38:45:ef:28:99:72:f1:77:79:45:ef:bd:8d:d0:ac:f8:78:25: 1e:c2:ab:36:59:43:df:2f:21:35:59:d6:42:77:5c:92:eb:fd: 3f:81:b2:a3:84:33:fa:07:c1:c1:64:ba:cf:2f:78:cb:42:34: 67:89:57:e9:2f:4b:d3:2f:b6:70:fa:89:82:40:66:eb:63:c6: 98:40:2a:77:85:39:b0:23:30:80:bf:f2:56:af:a4:c2:b8:48: 8a:01:de:1e:21:9f:0a:a8:1c:96:21:a4:3f:25:55:44:7b:e9: a1:f4:3b:00:47:9c:a5:5c:68:74:a3:86:05:72:9a:a4:c6:6a: 6b:86:3a:e3:f6:59:05:7e:b3:b5:14:52:5c:f1:96:44:ad:f6: e9:79:72:f9:53:56:be:94:31:82:d1:04:1c:80:3c:90:30:19: 81:f8:17:9a:cb:80:36:67:42:f5:b4:74:54:a7:90:a5:b6:1a: dd:de:14:a5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NEE4MDExMC8GA1UEBRMoM0ZEN0Y1NTVGQzdENkZDMjM1MzlBM0E2MjFFRjJEMDQ4 RDRDN0NDNzAeFw0yNTA1MzEwNzA1NDdaFw0yNTA2MDcwNzA1NDdaMBgxFjAUBgNV BAMTDTY4M2FhYTRiLTIxNDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCuhg4Z+zUOuKwRTgbE845XC+4o8RCgSUIe+sQCMa1ELtNaTfMrn/evrzZb99pV Y1SRcval6h4zz7QPmsBT2dI+wok8CiVgpOGGsWqzgkJbGbtIm3cqHZTv6zFCqX2+ 2QQMGKiDyZS/aegdf98NhS4CtLwmtH+kfYa91TUlz33ZKLxpIFnc36Z5+2l+o7As +i4cShPKolC0vFiMhnafrzrKSYNLmPLVdxlZ6VfTuye7GNwvJ69JsnY9PmdqUlsS vgegdvXxkuE53IYgNkVeevwLuPsyq+vGNVopoYu8jbUb7CQEX/9GfXuTzT/THSr+ vzdLmE6dQWng9iR/ryhw1P6xAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUnCzjjPDf o+ZwrvkKQ96v3jYYwrEwHwYDVR0jBBgwFoAUP9f1Vfx9b8I1OaOmIe8tBI1MfMcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM0QTgwLzI5RUM3M0JBRTRF RjExRUZCNzE0RTU2Q0M0RjlBRTAyL1A5ZjFWZng5YjhJMU9hT21JZTh0QkkxTWZN Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUDlmMVZmeDliOEkxT2FPbUllOHRCSTFNZk1jLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM0 QTgwLzI5RUM3M0JBRTRFRjExRUZCNzE0RTU2Q0M0RjlBRTAyL1A5ZjFWZng5YjhJ MU9hT21JZTh0QkkxTWZNYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAHIOI1nWKldxL/xfrBFc0ttnuOyNws8rMg6LREmuux2CUzXWnssLjqH FUaOWZwwC9iz0cgXcb+Y5OoaRYDgMxoUwcwqJTHnzDhF7yiZcvF3eUXvvY3QrPh4 JR7CqzZZQ98vITVZ1kJ3XJLr/T+BsqOEM/oHwcFkus8veMtCNGeJV+kvS9MvtnD6 iYJAZutjxphAKneFObAjMIC/8lavpMK4SIoB3h4hnwqoHJYhpD8lVUR76aH0OwBH nKVcaHSjhgVymqTGamuGOuP2WQV+s7UUUlzxlkSt9ul5cvlTVr6UMYLRBByAPJAw GYH4F5rLgDZnQvW0dFSnkKW2Gt3eFKU= -----END CERTIFICATE-----Generated at Sat May 31 16:42:10 2025 by rpki-client