$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9019/28AE43D8347611ED867E9512C4F9AE02/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.mft File: 0AKr6qWyzcSP6gmDsEqOwoYM-Sk.mft (raw, json) Hash identifier: mkD5C3ZEGK45k7tO+Rhc8VwGx4DQYZXHVlQMsnu6n1g= Subject key identifier: 66:B5:75:B7:0E:9C:2F:14:00:EE:AC:20:B0:E7:F6:1F:F1:37:64:ED Authority key identifier: D0:02:AB:EA:A5:B2:CD:C4:8F:EA:09:83:B0:4A:8E:C2:86:0C:F9:29 Certificate issuer: /CN=A91C9019/serialNumber=D002ABEAA5B2CDC48FEA0983B04A8EC2860CF929 Certificate serial: 0210 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9019/28AE43D8347611ED867E9512C4F9AE02/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.mft Manifest number: 0210 Signing time: Sat 31 May 2025 02:10:29 +0000 Manifest this update: Sat 31 May 2025 02:10:29 +0000 Manifest next update: Sat 07 Jun 2025 02:10:29 +0000 Files and hashes: 1: 0AKr6qWyzcSP6gmDsEqOwoYM-Sk.crl (hash: MoPudqF3W9+4lC3TOTSnMdB8czuuN0jbvH+jCdH+I6Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9019/28AE43D8347611ED867E9512C4F9AE02/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.crl rsync://rpki.apnic.net/member_repository/A91C9019/28AE43D8347611ED867E9512C4F9AE02/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 528 (0x210) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9019, serialNumber=D002ABEAA5B2CDC48FEA0983B04A8EC2860CF929 Validity Not Before: May 31 02:10:29 2025 GMT Not After : Jun 7 02:10:29 2025 GMT Subject: CN=683a6515-0b02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e6:15:2d:1f:15:68:7e:6a:ec:10:53:06:1c: 70:db:bc:81:d6:20:76:d0:33:e1:a4:c7:6a:3f:06: f7:67:0b:cf:68:d7:01:df:54:ff:71:65:ff:b5:13: 93:24:43:53:0a:6b:77:93:aa:b1:a2:93:8e:ae:e8: cb:81:ba:3c:b0:74:a8:47:b3:0f:47:d1:2c:d7:da: 2a:08:c8:78:70:aa:fa:e8:64:5c:b8:b8:f0:07:a9: fb:41:5c:82:0a:c3:82:be:3c:87:00:80:e1:b6:42: 46:5e:75:7f:a9:0b:b0:10:2f:e7:cc:81:73:a9:fb: 8c:89:02:9c:90:e3:08:95:af:ba:66:2f:e0:ac:f4: 4c:04:bd:bb:16:5d:16:a6:81:35:4a:e1:5d:b4:5c: 24:75:dc:13:04:51:73:94:9a:08:f4:2b:f0:e7:d1: 63:c0:2a:c5:99:43:c2:88:4a:78:89:91:a1:9c:bb: c7:2c:57:a9:3b:b2:e0:7f:1d:f6:7c:5d:26:57:48: 01:c9:30:9f:4c:b2:96:f5:48:01:6a:a2:ef:38:3f: 0f:a2:e6:5e:30:ea:99:fa:fc:3d:70:ea:08:c8:d3: fd:4a:dd:1d:98:5c:59:a3:63:7a:ff:ac:c3:cb:67: 5f:b0:cc:cc:59:29:53:a6:82:b8:0a:90:60:49:50: 41:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:B5:75:B7:0E:9C:2F:14:00:EE:AC:20:B0:E7:F6:1F:F1:37:64:ED X509v3 Authority Key Identifier: keyid:D0:02:AB:EA:A5:B2:CD:C4:8F:EA:09:83:B0:4A:8E:C2:86:0C:F9:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9019/28AE43D8347611ED867E9512C4F9AE02/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9019/28AE43D8347611ED867E9512C4F9AE02/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:05:76:6a:f6:e1:6e:c0:db:f6:0f:bf:61:1d:b4:b7:7b:e4: 88:16:a2:9e:ce:73:09:5a:3e:c6:74:78:f2:6e:4e:3c:e8:53: cc:69:ae:d6:d7:5a:fc:57:56:17:0c:45:f7:bd:ba:1c:55:d8: 80:6b:ab:16:9e:d7:a8:68:26:4a:70:12:89:79:45:c9:14:e6: 06:8c:a4:ea:b6:c4:5b:10:1e:29:bc:de:f4:cf:c6:ce:1c:49: 29:cc:f9:4e:94:b1:ec:86:6e:b9:31:97:3e:25:00:3f:9b:45: 4d:de:f2:07:5b:0f:46:ec:55:dd:39:53:3c:7d:2c:63:b5:1a: 0f:df:67:aa:3f:c8:84:58:25:8a:52:7c:88:28:f8:95:31:80: ab:60:01:a4:b9:d0:d5:96:68:c6:80:77:6f:3e:b9:8b:d3:16: 9b:9e:8f:29:4e:ec:1e:30:40:15:32:d1:a5:bf:98:5a:05:48: e0:95:af:c5:70:d1:5f:be:11:c9:f6:37:2c:85:de:92:64:9e: 9a:2f:42:32:aa:4d:7d:3f:73:94:e2:b5:4f:ce:3f:a3:04:35: f1:fe:f7:8f:49:ee:3f:ce:cc:0c:79:80:41:c2:3e:77:9e:63: c3:5b:f0:61:37:c2:87:33:c7:f6:bf:e2:bd:ad:28:0b:15:16: 11:42:9d:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkwMTkxMTAvBgNVBAUTKEQwMDJBQkVBQTVCMkNEQzQ4RkVBMDk4M0IwNEE4RUMy ODYwQ0Y5MjkwHhcNMjUwNTMxMDIxMDI5WhcNMjUwNjA3MDIxMDI5WjAYMRYwFAYD VQQDEw02ODNhNjUxNS0wYjAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzeYVLR8VaH5q7BBTBhxw27yB1iB20DPhpMdqPwb3ZwvPaNcB31T/cWX/tROT JENTCmt3k6qxopOOrujLgbo8sHSoR7MPR9Es19oqCMh4cKr66GRcuLjwB6n7QVyC CsOCvjyHAIDhtkJGXnV/qQuwEC/nzIFzqfuMiQKckOMIla+6Zi/grPRMBL27Fl0W poE1SuFdtFwkddwTBFFzlJoI9Cvw59FjwCrFmUPCiEp4iZGhnLvHLFepO7Lgfx32 fF0mV0gByTCfTLKW9UgBaqLvOD8PouZeMOqZ+vw9cOoIyNP9St0dmFxZo2N6/6zD y2dfsMzMWSlTpoK4CpBgSVBB1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGa1dbcO nC8UAO6sILDn9h/xN2TtMB8GA1UdIwQYMBaAFNACq+qlss3Ej+oJg7BKjsKGDPkp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTAxOS8yOEFFNDNEODM0 NzYxMUVEODY3RTk1MTJDNEY5QUUwMi8wQUtyNnFXeXpjU1A2Z21Ec0VxT3dvWU0t U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBBS3I2cVd5emNTUDZnbURzRXFPd29ZTS1Tay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTAxOS8yOEFFNDNEODM0NzYxMUVEODY3RTk1MTJDNEY5QUUwMi8wQUtyNnFXeXpj U1A2Z21Ec0VxT3dvWU0tU2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHBXZq9uFuwNv2D79hHbS3e+SIFqKeznMJWj7GdHjybk486FPMaa7W 11r8V1YXDEX3vbocVdiAa6sWnteoaCZKcBKJeUXJFOYGjKTqtsRbEB4pvN70z8bO HEkpzPlOlLHshm65MZc+JQA/m0VN3vIHWw9G7FXdOVM8fSxjtRoP32eqP8iEWCWK UnyIKPiVMYCrYAGkudDVlmjGgHdvPrmL0xabno8pTuweMEAVMtGlv5haBUjgla/F cNFfvhHJ9jcshd6SZJ6aL0Iyqk19P3OU4rVPzj+jBDXx/vePSe4/zswMeYBBwj53 nmPDW/BhN8KHM8f2v+K9rSgLFRYRQp2G -----END CERTIFICATE-----Generated at Sat May 31 17:49:40 2025 by rpki-client