$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9916/239DC426618B11ED88ABBC22C4F9AE02/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.mft File: 8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.mft (raw, json) Hash identifier: 1OPgEDVw312zR9YeEzrvS4725y3s8bvjy/cmmrhSyGs= Subject key identifier: 31:99:6F:6F:60:F6:99:0C:82:5F:68:A1:C9:92:FA:B4:1E:F5:7A:F3 Authority key identifier: F2:E4:65:7F:B0:B1:51:42:73:C5:0E:EB:F9:0F:44:16:FD:A5:4B:07 Certificate issuer: /CN=A91C9916/serialNumber=F2E4657FB0B1514273C50EEBF90F4416FDA54B07 Certificate serial: 01D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9916/239DC426618B11ED88ABBC22C4F9AE02/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.mft Manifest number: 01D9 Signing time: Sat 31 May 2025 02:25:07 +0000 Manifest this update: Sat 31 May 2025 02:25:07 +0000 Manifest next update: Sat 07 Jun 2025 02:25:07 +0000 Files and hashes: 1: 8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.crl (hash: nk+PLSHnt+CYibO0hQZQyoBc5maAzHN+yWbwzEqr5Is=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9916/239DC426618B11ED88ABBC22C4F9AE02/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.crl rsync://rpki.apnic.net/member_repository/A91C9916/239DC426618B11ED88ABBC22C4F9AE02/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:25:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 473 (0x1d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9916, serialNumber=F2E4657FB0B1514273C50EEBF90F4416FDA54B07 Validity Not Before: May 31 02:25:07 2025 GMT Not After : Jun 7 02:25:07 2025 GMT Subject: CN=683a6883-8e92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:19:ca:48:70:49:51:51:e0:a7:04:fe:d6:f7: 41:d8:65:20:be:d5:8c:3f:76:f1:e7:81:2a:44:74: 20:60:a9:80:69:1d:25:0e:1c:f9:7d:04:b5:65:b7: 67:91:87:2e:09:2f:51:01:7a:f9:79:0f:7a:e8:15: 9b:aa:5d:fd:05:c6:09:1f:36:52:8f:ca:c5:6f:a9: 37:e1:78:c1:58:24:52:5d:8e:6d:d4:0a:d5:cd:70: 5a:91:eb:76:ba:fd:ff:80:36:5d:26:e6:40:98:27: c6:5c:f3:3c:99:92:36:44:1b:39:72:7c:0f:1b:0c: 4d:ef:a8:1c:47:ab:f6:08:b0:51:0a:fd:30:68:77: 4b:0c:c0:2b:d9:c1:14:15:c1:3b:ed:01:37:3f:9b: 53:ef:71:17:c4:cb:13:65:dd:f6:52:ac:e9:48:4b: 80:f1:3f:bd:c7:73:0a:7c:fd:22:56:a2:5a:74:2a: 9e:59:97:f0:94:1e:67:6d:85:42:95:b6:2b:f8:42: 85:9b:53:ff:aa:b0:3d:d9:59:41:e9:fe:df:dd:8b: b5:5f:76:62:7b:7a:32:81:56:ed:2e:00:67:6b:36: a5:19:ad:70:b4:52:e3:17:a5:87:f2:62:a1:15:5f: e1:d6:20:29:c6:75:74:62:7c:2e:d8:4b:28:03:25: a7:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:99:6F:6F:60:F6:99:0C:82:5F:68:A1:C9:92:FA:B4:1E:F5:7A:F3 X509v3 Authority Key Identifier: keyid:F2:E4:65:7F:B0:B1:51:42:73:C5:0E:EB:F9:0F:44:16:FD:A5:4B:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9916/239DC426618B11ED88ABBC22C4F9AE02/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9916/239DC426618B11ED88ABBC22C4F9AE02/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:5c:33:86:f1:c4:40:a8:60:39:aa:41:07:73:f8:56:08:16: ba:d6:a2:13:41:7c:8b:b1:4d:92:bb:97:bb:85:3c:29:55:83: 39:2b:11:30:a5:fe:e6:41:7e:e9:a9:ba:10:7a:6b:c6:6e:a1: 10:0e:62:a8:55:71:d3:5f:25:e7:2c:4c:2b:6a:cd:9e:71:36: 06:5c:7f:ff:f1:46:c1:52:b4:43:11:fd:6b:29:0a:02:b3:11: 4e:f3:6d:5a:af:2f:0e:aa:55:14:9c:8d:4e:ea:23:ee:6f:18: 62:eb:80:4b:a4:82:9e:52:9a:7f:1a:42:ee:1b:b2:a6:79:77: ac:e7:11:9d:83:f6:f9:2f:ac:2c:51:4f:4a:c5:f9:c4:7d:58: 30:dc:d9:83:a6:28:b3:b8:67:8b:85:31:86:d4:a2:ac:7b:05: 96:aa:86:d3:3d:73:38:41:66:58:ea:e8:b7:3a:88:06:4d:bf: b7:11:33:09:14:b0:5b:35:55:b7:99:f7:96:6d:e7:11:8a:32: 1e:f9:9a:15:96:0b:f2:8f:d1:e9:80:f1:dc:94:c0:40:28:7b: a6:c7:51:dd:5a:2e:78:be:d5:a9:35:bd:54:08:d8:bb:16:b4: bc:35:5e:54:c9:6a:34:49:cb:85:96:dc:b1:db:51:ee:f3:8e: fb:69:8c:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk5MTYxMTAvBgNVBAUTKEYyRTQ2NTdGQjBCMTUxNDI3M0M1MEVFQkY5MEY0NDE2 RkRBNTRCMDcwHhcNMjUwNTMxMDIyNTA3WhcNMjUwNjA3MDIyNTA3WjAYMRYwFAYD VQQDEw02ODNhNjg4My04ZTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApBnKSHBJUVHgpwT+1vdB2GUgvtWMP3bx54EqRHQgYKmAaR0lDhz5fQS1Zbdn kYcuCS9RAXr5eQ966BWbql39BcYJHzZSj8rFb6k34XjBWCRSXY5t1ArVzXBaket2 uv3/gDZdJuZAmCfGXPM8mZI2RBs5cnwPGwxN76gcR6v2CLBRCv0waHdLDMAr2cEU FcE77QE3P5tT73EXxMsTZd32UqzpSEuA8T+9x3MKfP0iVqJadCqeWZfwlB5nbYVC lbYr+EKFm1P/qrA92VlB6f7f3Yu1X3Zie3oygVbtLgBnazalGa1wtFLjF6WH8mKh FV/h1iApxnV0Ynwu2EsoAyWnswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDGZb29g 9pkMgl9oocmS+rQe9XrzMB8GA1UdIwQYMBaAFPLkZX+wsVFCc8UO6/kPRBb9pUsH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTkxNi8yMzlEQzQyNjYx OEIxMUVEODhBQkJDMjJDNEY5QUUwMi84dVJsZjdDeFVVSnp4UTdyLVE5RUZ2MmxT d2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzh1UmxmN0N4VVVKenhRN3ItUTlFRnYybFN3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTkxNi8yMzlEQzQyNjYxOEIxMUVEODhBQkJDMjJDNEY5QUUwMi84dVJsZjdDeFVV Snp4UTdyLVE5RUZ2MmxTd2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiXDOG8cRAqGA5qkEHc/hWCBa61qITQXyLsU2Su5e7hTwpVYM5KxEw pf7mQX7pqboQemvGbqEQDmKoVXHTXyXnLEwras2ecTYGXH//8UbBUrRDEf1rKQoC sxFO821ary8OqlUUnI1O6iPubxhi64BLpIKeUpp/GkLuG7KmeXes5xGdg/b5L6ws UU9KxfnEfVgw3NmDpiizuGeLhTGG1KKsewWWqobTPXM4QWZY6ui3OogGTb+3ETMJ FLBbNVW3mfeWbecRijIe+ZoVlgvyj9HpgPHclMBAKHumx1HdWi54vtWpNb1UCNi7 FrS8NV5UyWo0ScuFltyx21Hu8477aYyR -----END CERTIFICATE-----Generated at Sat May 31 17:41:03 2025 by rpki-client