$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7175/F22B9CCA68FD11EFA9500187C4F9AE02/iS3iAjP9DGSOLnuflZUPOpaBfL8.mft File: iS3iAjP9DGSOLnuflZUPOpaBfL8.mft (raw, json) Hash identifier: Sh7t6LqLMc7CjbbTAhZSc8hZFwFNZ4/dVkPksKK81BI= Subject key identifier: 5B:F8:CA:BF:00:7E:E3:B3:E2:BC:BE:1A:A5:BD:38:F0:0D:C7:4C:AD Authority key identifier: 89:2D:E2:02:33:FD:0C:64:8E:2E:7B:9F:95:95:0F:3A:96:81:7C:BF Certificate issuer: /CN=A91C7175/serialNumber=892DE20233FD0C648E2E7B9F95950F3A96817CBF Certificate serial: 8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iS3iAjP9DGSOLnuflZUPOpaBfL8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7175/F22B9CCA68FD11EFA9500187C4F9AE02/iS3iAjP9DGSOLnuflZUPOpaBfL8.mft Manifest number: 8B Signing time: Sat 31 May 2025 06:04:13 +0000 Manifest this update: Sat 31 May 2025 06:04:12 +0000 Manifest next update: Sat 07 Jun 2025 06:04:12 +0000 Files and hashes: 1: iS3iAjP9DGSOLnuflZUPOpaBfL8.crl (hash: 4iIVnYcLQW502KB86DysYgr+1wQtdqF+qV04Kd3fR+4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7175/F22B9CCA68FD11EFA9500187C4F9AE02/iS3iAjP9DGSOLnuflZUPOpaBfL8.crl rsync://rpki.apnic.net/member_repository/A91C7175/F22B9CCA68FD11EFA9500187C4F9AE02/iS3iAjP9DGSOLnuflZUPOpaBfL8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iS3iAjP9DGSOLnuflZUPOpaBfL8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:04:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 139 (0x8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7175, serialNumber=892DE20233FD0C648E2E7B9F95950F3A96817CBF Validity Not Before: May 31 06:04:12 2025 GMT Not After : Jun 7 06:04:12 2025 GMT Subject: CN=683a9bdd-4030 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a1:57:71:07:eb:73:d4:b4:01:f9:9b:78:53: c7:00:33:e4:fc:4d:15:b3:21:d7:10:3c:dc:f7:a2: be:2f:0f:dc:4c:f8:3d:47:54:6f:4e:51:c7:47:4e: f3:32:81:e0:03:04:02:54:42:65:8f:ef:e5:53:ee: db:f3:7c:3a:65:d6:aa:14:46:ef:5e:a3:d7:fb:28: 72:9e:e8:4a:ce:db:ee:8a:24:96:2b:f1:d9:eb:c7: 62:87:34:5d:10:a4:9a:7c:66:ec:48:31:e3:f9:8d: 0d:a1:2e:37:1e:71:9b:47:7a:64:b0:3f:11:a3:5d: b3:62:ed:0d:ef:27:8c:ad:3c:8a:a4:c2:61:10:c4: eb:08:f3:4b:a7:cb:b9:75:64:85:99:04:b0:ce:a2: 7f:69:2d:71:3a:3d:1d:06:fc:42:9c:5b:a3:00:5a: b5:df:d4:96:3b:d2:1c:bb:63:e4:86:51:39:b1:a6: 29:80:46:cc:e8:94:c2:00:03:90:1f:37:2d:43:20: c3:6e:4e:a7:01:78:12:29:ef:e7:bb:75:8a:a2:fc: a9:8d:86:c3:5f:d9:16:4d:c9:6f:c9:1f:63:b9:27: 99:12:80:d6:8b:22:34:dc:cc:b6:50:ae:d1:01:ed: ce:5b:86:7f:11:86:88:5c:27:9f:0e:b1:0a:a6:94: f6:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:F8:CA:BF:00:7E:E3:B3:E2:BC:BE:1A:A5:BD:38:F0:0D:C7:4C:AD X509v3 Authority Key Identifier: keyid:89:2D:E2:02:33:FD:0C:64:8E:2E:7B:9F:95:95:0F:3A:96:81:7C:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7175/F22B9CCA68FD11EFA9500187C4F9AE02/iS3iAjP9DGSOLnuflZUPOpaBfL8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iS3iAjP9DGSOLnuflZUPOpaBfL8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7175/F22B9CCA68FD11EFA9500187C4F9AE02/iS3iAjP9DGSOLnuflZUPOpaBfL8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:24:c6:2e:6e:ae:a5:74:2e:50:2f:9c:94:ee:ef:4f:3a:ef: 5f:82:37:3b:83:cc:d5:48:f4:76:5e:d4:3f:7a:5c:48:2a:30: 2a:42:bb:8a:92:48:15:7f:e6:66:0c:cf:c5:4d:3d:5b:32:6b: eb:b2:c7:37:47:87:2d:d9:f7:38:1e:f7:86:13:6b:cc:50:e4: 07:5b:75:08:dd:b0:cf:57:d9:56:d4:e3:29:f6:98:dc:3c:e5: 8b:85:30:1b:3c:a5:21:ed:64:bc:4c:5e:00:32:c0:d7:d1:73: 7b:ae:40:ef:65:cb:2c:37:96:69:69:77:59:f0:1a:02:82:ce: fe:0e:40:3c:01:4b:88:9d:af:19:4c:86:cd:21:8a:a9:bd:2f: 6d:d9:21:43:43:33:b5:dd:22:18:a7:74:c2:51:52:12:d8:0a: ae:4c:ef:e3:05:a9:7c:6e:fa:fd:e7:a0:04:b9:24:62:b7:16: b8:78:fe:37:3c:a0:1e:98:fb:f8:bf:77:55:10:6a:50:22:23: 85:e7:67:f1:73:71:da:3e:d4:81:14:17:1b:98:f3:2e:58:49: b9:f3:b7:f8:b7:5c:18:cf:ab:20:95:0f:f5:02:4f:2a:5b:7d: 0d:13:9e:d6:f9:6f:e7:99:7b:63:3a:3b:6e:9f:78:ec:3e:fa: c0:bc:bd:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzcxNzUxMTAvBgNVBAUTKDg5MkRFMjAyMzNGRDBDNjQ4RTJFN0I5Rjk1OTUwRjNB OTY4MTdDQkYwHhcNMjUwNTMxMDYwNDEyWhcNMjUwNjA3MDYwNDEyWjAYMRYwFAYD VQQDEw02ODNhOWJkZC00MDMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3KFXcQfrc9S0AfmbeFPHADPk/E0VsyHXEDzc96K+Lw/cTPg9R1RvTlHHR07z MoHgAwQCVEJlj+/lU+7b83w6ZdaqFEbvXqPX+yhynuhKztvuiiSWK/HZ68dihzRd EKSafGbsSDHj+Y0NoS43HnGbR3pksD8Ro12zYu0N7yeMrTyKpMJhEMTrCPNLp8u5 dWSFmQSwzqJ/aS1xOj0dBvxCnFujAFq139SWO9Icu2PkhlE5saYpgEbM6JTCAAOQ HzctQyDDbk6nAXgSKe/nu3WKovypjYbDX9kWTclvyR9juSeZEoDWiyI03My2UK7R Ae3OW4Z/EYaIXCefDrEKppT2nwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFv4yr8A fuOz4ry+GqW9OPANx0ytMB8GA1UdIwQYMBaAFIkt4gIz/Qxkji57n5WVDzqWgXy/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzE3NS9GMjJCOUNDQTY4 RkQxMUVGQTk1MDAxODdDNEY5QUUwMi9pUzNpQWpQOURHU09MbnVmbFpVUE9wYUJm TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lTM2lBalA5REdTT0xudWZsWlVQT3BhQmZMOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzE3NS9GMjJCOUNDQTY4RkQxMUVGQTk1MDAxODdDNEY5QUUwMi9pUzNpQWpQOURH U09MbnVmbFpVUE9wYUJmTDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGJMYubq6ldC5QL5yU7u9POu9fgjc7g8zVSPR2XtQ/elxIKjAqQruK kkgVf+ZmDM/FTT1bMmvrssc3R4ct2fc4HveGE2vMUOQHW3UI3bDPV9lW1OMp9pjc POWLhTAbPKUh7WS8TF4AMsDX0XN7rkDvZcssN5ZpaXdZ8BoCgs7+DkA8AUuIna8Z TIbNIYqpvS9t2SFDQzO13SIYp3TCUVIS2AquTO/jBal8bvr956AEuSRitxa4eP43 PKAemPv4v3dVEGpQIiOF52fxc3HaPtSBFBcbmPMuWEm587f4t1wYz6sglQ/1Ak8q W30NE57W+W/nmXtjOjtun3jsPvrAvL0y -----END CERTIFICATE-----Generated at Sat May 31 15:26:38 2025 by rpki-client