$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft File: nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft (raw, json) Hash identifier: EASuTNZdVLKA61d5xFdcEfmyESqYi8pJorhcE5QPStI= Subject key identifier: 23:AE:47:02:28:50:F6:F8:0B:9D:E4:E3:69:D6:61:8B:92:AF:C6:B7 Authority key identifier: 9D:1E:C6:5F:DC:C0:59:D9:6D:F5:D3:99:92:FB:14:79:77:B7:57:74 Certificate issuer: /CN=A91CB14D/serialNumber=9D1EC65FDCC059D96DF5D39992FB147977B75774 Certificate serial: 0879 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft Manifest number: 0963 Signing time: Fri 30 May 2025 20:53:55 +0000 Manifest this update: Fri 30 May 2025 20:53:55 +0000 Manifest next update: Fri 06 Jun 2025 20:53:55 +0000 Files and hashes: 1: nR7GX9zAWdlt9dOZkvsUeXe3V3Q.crl (hash: YqaNFHgBCCRu6B5YGijQ6xTOaLqb+KmHU1mLpqvnT2Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.crl rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2169 (0x879) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB14D, serialNumber=9D1EC65FDCC059D96DF5D39992FB147977B75774 Validity Not Before: May 30 20:53:55 2025 GMT Not After : Jun 6 20:53:55 2025 GMT Subject: CN=683a1ae3-d65e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:22:a2:8c:08:0e:18:d6:1f:7b:eb:ef:f2:92: f1:01:58:a7:b1:7b:11:c2:98:79:22:4e:7d:38:d0: b8:25:09:9e:e5:cd:2a:0a:03:5e:e0:69:18:56:c9: a2:3c:60:92:65:0f:07:c2:3d:1d:71:e8:bd:b5:99: 29:08:85:5d:15:28:9b:09:74:08:e4:f7:9e:e0:95: dc:c9:d9:26:c1:4b:53:43:f2:ad:fc:09:ce:4d:b8: b3:90:98:87:ff:04:ce:91:e6:bc:af:08:3c:69:96: 6d:25:46:c5:dc:f5:b9:50:58:31:e2:d4:f0:d5:73: 46:0b:57:8d:d2:4e:59:d7:0e:93:03:7a:6d:d8:f0: 5b:3a:1e:55:c4:ee:5d:3a:30:22:e3:c8:10:83:b8: a6:b9:33:29:6e:89:7d:de:94:6f:02:45:37:4a:dd: c2:9b:53:68:82:fe:60:32:6e:1c:8c:5d:c7:c1:ce: 18:b0:35:87:84:d8:f1:f0:0d:ca:64:6b:01:58:3c: 1f:d3:f8:1f:cd:ed:86:65:45:03:08:2a:b2:45:fd: 52:79:d1:22:2c:86:5b:c1:ac:0a:4e:3e:19:b4:e7: 65:f7:66:bf:76:5c:bf:5f:58:d9:9e:9f:b9:e0:01: 04:ad:dd:40:f5:e0:f9:8d:d0:07:83:72:b1:ed:ad: f8:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:AE:47:02:28:50:F6:F8:0B:9D:E4:E3:69:D6:61:8B:92:AF:C6:B7 X509v3 Authority Key Identifier: keyid:9D:1E:C6:5F:DC:C0:59:D9:6D:F5:D3:99:92:FB:14:79:77:B7:57:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:b5:ea:f9:82:bb:c0:52:e9:7a:c2:25:97:51:fa:f9:48:dc: e9:17:79:0e:f6:e0:af:61:8e:19:19:b3:12:4e:e5:c2:de:3e: 7a:8b:68:cc:6c:5f:3e:10:19:ef:5f:a0:f5:a2:b2:b8:ad:94: a0:49:f2:25:c4:c8:05:b7:a7:69:25:e6:01:c9:9e:15:d6:0d: 82:b7:7f:20:cc:3e:54:38:87:fe:98:12:77:35:3a:9c:da:d0: 10:39:b0:cd:e1:be:8f:6d:03:7a:35:9d:75:e6:7e:61:bb:ba: 36:fd:86:c5:f1:06:6d:1c:5c:9f:4a:e5:7a:cb:f6:c1:ff:c3: 60:aa:27:7f:7d:7c:f2:63:9d:5b:2e:51:ea:9f:20:f5:f7:c7: 2f:63:53:f0:6b:e5:0c:3b:65:e6:8b:aa:33:a7:6d:16:ee:bf: c4:c5:bc:49:fb:c7:ac:e5:e7:f6:f1:56:b9:96:af:30:fe:91: 2b:92:34:1e:c0:cf:7a:7b:fe:66:7b:8d:8f:14:6d:ca:48:31: 0b:7d:51:4c:17:4d:f3:cb:6f:de:66:73:64:69:99:14:ea:c9: 64:c6:a7:ca:f6:5c:e1:1b:3e:2a:37:47:eb:9f:9f:26:46:34: 23:ed:bc:ca:c2:5f:ef:0a:b2:84:c9:ad:07:4e:cd:7c:7f:ce: f6:32:3e:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCHkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0IxNEQxMTAvBgNVBAUTKDlEMUVDNjVGRENDMDU5RDk2REY1RDM5OTkyRkIxNDc5 NzdCNzU3NzQwHhcNMjUwNTMwMjA1MzU1WhcNMjUwNjA2MjA1MzU1WjAYMRYwFAYD VQQDEw02ODNhMWFlMy1kNjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAySKijAgOGNYfe+vv8pLxAVinsXsRwph5Ik59ONC4JQme5c0qCgNe4GkYVsmi PGCSZQ8Hwj0dcei9tZkpCIVdFSibCXQI5Pee4JXcydkmwUtTQ/Kt/AnOTbizkJiH /wTOkea8rwg8aZZtJUbF3PW5UFgx4tTw1XNGC1eN0k5Z1w6TA3pt2PBbOh5VxO5d OjAi48gQg7imuTMpbol93pRvAkU3St3Cm1Nogv5gMm4cjF3Hwc4YsDWHhNjx8A3K ZGsBWDwf0/gfze2GZUUDCCqyRf1SedEiLIZbwawKTj4ZtOdl92a/dly/X1jZnp+5 4AEErd1A9eD5jdAHg3Kx7a34xQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCOuRwIo UPb4C53k42nWYYuSr8a3MB8GA1UdIwQYMBaAFJ0exl/cwFnZbfXTmZL7FHl3t1d0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjE0RC8zMEZFMEFGRUM0 QzYxMUVBQThENUJFNjZDNEY5QUUwMi9uUjdHWDl6QVdkbHQ5ZE9aa3ZzVWVYZTNW M1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25SN0dYOXpBV2RsdDlkT1prdnNVZVhlM1YzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjE0RC8zMEZFMEFGRUM0QzYxMUVBQThENUJFNjZDNEY5QUUwMi9uUjdHWDl6QVdk bHQ5ZE9aa3ZzVWVYZTNWM1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQActer5grvAUul6wiWXUfr5SNzpF3kO9uCvYY4ZGbMSTuXC3j56i2jM bF8+EBnvX6D1orK4rZSgSfIlxMgFt6dpJeYByZ4V1g2Ct38gzD5UOIf+mBJ3NTqc 2tAQObDN4b6PbQN6NZ115n5hu7o2/YbF8QZtHFyfSuV6y/bB/8Ngqid/fXzyY51b LlHqnyD198cvY1Pwa+UMO2Xmi6ozp20W7r/ExbxJ+8es5ef28Va5lq8w/pErkjQe wM96e/5me42PFG3KSDELfVFMF03zy2/eZnNkaZkU6slkxqfK9lzhGz4qN0frn58m RjQj7bzKwl/vCrKEya0HTs18f872Mj6Q -----END CERTIFICATE-----Generated at Sat May 31 16:53:44 2025 by rpki-client