$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA5AD/366C442E1D7111E2AB54E2B508B02CD2/e9ZuQtUwkEC0dRqcKySR1818FLg.mft File: e9ZuQtUwkEC0dRqcKySR1818FLg.mft (raw, json) Hash identifier: GOqbvX47gXqdo/xgma35RT610UcMaftYhzu8SkWTOZg= Subject key identifier: E3:2D:24:56:8E:72:7A:E4:B5:9D:4D:1D:C2:08:04:90:8F:58:49:25 Authority key identifier: 7B:D6:6E:42:D5:30:90:40:B4:75:1A:9C:2B:24:91:D7:CD:7C:14:B8 Certificate issuer: /CN=A91CA5AD/serialNumber=7BD66E42D5309040B4751A9C2B2491D7CD7C14B8 Certificate serial: 3492 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9ZuQtUwkEC0dRqcKySR1818FLg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA5AD/366C442E1D7111E2AB54E2B508B02CD2/e9ZuQtUwkEC0dRqcKySR1818FLg.mft Manifest number: 3491 Signing time: Fri 06 Jun 2025 14:19:37 +0000 Manifest this update: Fri 06 Jun 2025 14:19:37 +0000 Manifest next update: Fri 13 Jun 2025 14:19:37 +0000 Files and hashes: 1: e9ZuQtUwkEC0dRqcKySR1818FLg.crl (hash: NLr1K4rP3zwUElDUiTILiTZzrRBCn6orZQHXz4HRRss=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA5AD/366C442E1D7111E2AB54E2B508B02CD2/e9ZuQtUwkEC0dRqcKySR1818FLg.crl rsync://rpki.apnic.net/member_repository/A91CA5AD/366C442E1D7111E2AB54E2B508B02CD2/e9ZuQtUwkEC0dRqcKySR1818FLg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9ZuQtUwkEC0dRqcKySR1818FLg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Jun 2025 14:15:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13458 (0x3492) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA5AD, serialNumber=7BD66E42D5309040B4751A9C2B2491D7CD7C14B8 Validity Not Before: Jun 6 14:19:37 2025 GMT Not After : Jun 13 14:19:37 2025 GMT Subject: CN=6842f8f9-278c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:03:4f:49:b2:f1:14:26:34:9e:24:65:ab:ec: 58:d1:91:32:5d:cf:03:7c:e7:45:6e:ea:2d:e5:9c: fe:70:b3:46:b0:69:18:ec:26:2c:88:c3:e6:55:2f: bb:dc:8f:39:03:5b:57:c7:e5:f4:4a:17:d8:d7:0e: 37:dd:e6:4a:f6:f3:fe:bd:45:4f:f7:e3:1f:5b:22: 98:e9:ba:2f:d1:50:8e:c0:23:2c:52:c8:e0:2a:92: e1:10:de:d8:cf:4b:9f:1c:02:ae:10:3d:82:8c:31: 5a:93:b6:fe:08:75:72:f1:bb:64:93:c1:a1:e0:f6: e8:e1:2e:53:89:5f:9f:08:8d:0f:4a:c9:e3:7a:1b: 85:97:b3:66:dd:c0:99:f7:e9:bd:44:62:7b:bb:79: 7d:94:1f:62:a1:f7:5c:e6:03:d0:49:ab:60:b7:95: 17:fe:3a:f7:57:cf:fa:a2:1f:2e:e6:d0:9f:ae:5e: 82:53:f0:ff:d8:5f:b1:9a:07:8e:5c:13:59:9c:82: c2:42:76:73:2d:3a:46:26:8c:1d:b1:7f:af:a4:77: ef:4c:4a:f9:82:37:0f:20:5b:21:d4:1c:d7:9c:c3: 42:88:ee:05:f8:c9:48:0c:8b:f4:fd:90:47:bd:1a: 19:7f:a8:e9:4f:33:ea:f3:fb:87:aa:e7:c5:37:78: cd:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:2D:24:56:8E:72:7A:E4:B5:9D:4D:1D:C2:08:04:90:8F:58:49:25 X509v3 Authority Key Identifier: keyid:7B:D6:6E:42:D5:30:90:40:B4:75:1A:9C:2B:24:91:D7:CD:7C:14:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA5AD/366C442E1D7111E2AB54E2B508B02CD2/e9ZuQtUwkEC0dRqcKySR1818FLg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9ZuQtUwkEC0dRqcKySR1818FLg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA5AD/366C442E1D7111E2AB54E2B508B02CD2/e9ZuQtUwkEC0dRqcKySR1818FLg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:77:6a:73:19:4b:02:af:3b:06:97:03:e4:a6:2b:80:9c:47: b6:14:5d:55:16:4f:a3:bd:f1:9e:88:66:7e:3d:80:94:11:99: 36:b8:20:7c:04:00:0b:2b:10:c0:5a:57:17:a0:52:84:ff:58: 0f:c8:70:4b:20:be:4e:55:53:2c:7d:d1:77:6b:79:8c:99:a0: 36:9d:95:2e:e8:05:23:c6:4b:1f:fb:c2:d9:21:9c:ad:4d:e3: 70:f5:80:70:c5:99:8d:e8:ea:7c:7b:27:dd:73:e7:d0:15:05: 80:26:af:7c:2a:38:49:ce:41:59:5e:28:6b:92:99:4a:a8:af: e4:5a:f5:00:78:a4:00:e3:df:3b:e2:da:c0:7f:bd:a2:43:c8: 71:ef:b0:21:ef:2c:63:7f:57:de:51:34:f3:f9:a8:71:32:02: 13:a1:70:8d:21:6c:04:eb:71:97:1d:b7:c5:ce:cf:b0:a4:f3: 1d:1b:f6:2b:f5:b9:e7:3a:cb:dc:95:5b:c9:95:07:50:fe:96: bc:3c:d6:41:d4:4b:96:cf:64:f0:a8:24:55:bf:16:4d:8c:4f: 70:1b:20:e9:8e:20:ca:09:70:7c:41:bc:60:54:f0:c8:11:86: 66:6c:27:71:95:45:81:da:04:52:4b:d9:2d:d1:63:b1:26:e3: 1c:79:ee:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0E1QUQxMTAvBgNVBAUTKDdCRDY2RTQyRDUzMDkwNDBCNDc1MUE5QzJCMjQ5MUQ3 Q0Q3QzE0QjgwHhcNMjUwNjA2MTQxOTM3WhcNMjUwNjEzMTQxOTM3WjAYMRYwFAYD VQQDEw02ODQyZjhmOS0yNzhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwwNPSbLxFCY0niRlq+xY0ZEyXc8DfOdFbuot5Zz+cLNGsGkY7CYsiMPmVS+7 3I85A1tXx+X0ShfY1w433eZK9vP+vUVP9+MfWyKY6bov0VCOwCMsUsjgKpLhEN7Y z0ufHAKuED2CjDFak7b+CHVy8btkk8Gh4Pbo4S5TiV+fCI0PSsnjehuFl7Nm3cCZ 9+m9RGJ7u3l9lB9iofdc5gPQSatgt5UX/jr3V8/6oh8u5tCfrl6CU/D/2F+xmgeO XBNZnILCQnZzLTpGJowdsX+vpHfvTEr5gjcPIFsh1BzXnMNCiO4F+MlIDIv0/ZBH vRoZf6jpTzPq8/uHqufFN3jNdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOMtJFaO cnrktZ1NHcIIBJCPWEklMB8GA1UdIwQYMBaAFHvWbkLVMJBAtHUanCskkdfNfBS4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTVBRC8zNjZDNDQyRTFE NzExMUUyQUI1NEUyQjUwOEIwMkNEMi9lOVp1UXRVd2tFQzBkUnFjS3lTUjE4MThG TGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2U5WnVRdFV3a0VDMGRScWNLeVNSMTgxOEZMZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTVBRC8zNjZDNDQyRTFENzExMUUyQUI1NEUyQjUwOEIwMkNEMi9lOVp1UXRVd2tF QzBkUnFjS3lTUjE4MThGTGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+d2pzGUsCrzsGlwPkpiuAnEe2FF1VFk+jvfGeiGZ+PYCUEZk2uCB8 BAALKxDAWlcXoFKE/1gPyHBLIL5OVVMsfdF3a3mMmaA2nZUu6AUjxksf+8LZIZyt TeNw9YBwxZmN6Op8eyfdc+fQFQWAJq98KjhJzkFZXihrkplKqK/kWvUAeKQA4987 4trAf72iQ8hx77Ah7yxjf1feUTTz+ahxMgIToXCNIWwE63GXHbfFzs+wpPMdG/Yr 9bnnOsvclVvJlQdQ/pa8PNZB1EuWz2TwqCRVvxZNjE9wGyDpjiDKCXB8QbxgVPDI EYZmbCdxlUWB2gRSS9kt0WOxJuMcee4T -----END CERTIFICATE-----Generated at Fri Jun 6 16:48:29 2025 by rpki-client